Function at 0x180064b10
Capabilities:
Get graphical window text

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7b8]
sub rsp, 0x8b8
mov rax, qword [0x1801044f8]
xor rax, rsp
mov qword [rbp + 0x7a0], rax
mov r15d, dword [rbp + 0x820]
mov rdi, rdx
mov rdx, qword [rbp + 0x830]
xor r12b, r12b
mov rbx, qword [rbp + 0x828]
mov r13, r9
mov qword [rsp + 0x50], rdx
mov rsi, rcx
mov qword [rsp + 0x40], r8
test rdi, rdi
jne 0x180064b7b
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rdx, qword [rsp + 0x50]
mov rdi, rax
cmp r15d, 0x20
lea r14d, [r15 - 0x20]
cmovle r14d, r15d
xor r15d, r15d
mov dword [rsp + 0x58], r15d
test rdx, rdx
je 0x180064be8
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], r15w
jne 0x180064ba0
cmp rax, 1
jb case.default.0x180064c0f
lea rcx, [rsi + 0xc]
xor edx, edx
mov r8d, 0x104
call fcn.180095d50
mov r8, qword [rsp + 0x50]
xor r9d, r9d
xor edx, edx
mov dword [rsi + 8], r15d
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je case.default.0x180064c0f
mov rdx, qword [rsp + 0x50]
mov dword [rsp + 0x48], r15d
mov dword [rsi], r15d
cmp r14d, 0x1f
ja case.default.0x180064c0f
lea r8, [0x180000000]
movsxd rax, r14d
mov ecx, dword [r8 + rax*4 + 0x69850]
add rcx, r8
jmp rcx
test rdx, rdx
jne case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
mov r12b, 1
nop dword [rax + rax]
mov ecx, dword [rsi]
test ecx, ecx
jne 0x180064c6c
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp word [rbx + rcx*2], r15w
jne 0x180064c60
mov dword [rsi], ecx
cmp ecx, 1
mov rcx, rbx
jle 0x180064c88
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180064c97
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180064ccf
mov qword [rsp + 0x38], r15
xor r9d, r9d
mov byte [rsp + 0x30], r15b
xor r8d, r8d
mov byte [rsp + 0x28], r15b
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180064c50
movzx eax, r12b
jmp 0x18006982c
mov r14, qword [rsp + 0x40]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [r14 + rax*2], r15w
jne 0x180064d00
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop dword [rax]
nop word [rax + rax]
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x380]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180064d90
cmp rax, 1
jbe 0x180064ed8
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180096278
test rax, rax
je 0x180064ed8
mov r15, qword [rsp + 0x50]
test r15, r15
je 0x180064e55
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r15
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180064ed8
mov eax, dword [rsi]
test eax, eax
jne 0x180064e1c
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180064e10
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180064e3e
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
mov r12b, 1
jmp 0x180064ed8
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
jmp 0x180064ed8
mov eax, dword [rsi]
test eax, eax
jne 0x180064e6e
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180064e62
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180064e8a
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180064e99
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180064ed8
mov qword [rsp + 0x38], 0
xor r9d, r9d
mov byte [rsp + 0x30], 0
mov r8, r14
mov byte [rsp + 0x28], 0
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180064d50
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180064f02
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x380]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], r15w
jne 0x180064f90
cmp rax, 1
jbe 0x1800650c4
mov rdx, r13
lea rcx, [rbp + 0x380]
call fcn.180096278
test rax, rax
je 0x1800650c4
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x180065045
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], r15d
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x1800650c4
mov eax, dword [rsi]
test eax, eax
jne 0x18006500c
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180065000
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006502e
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
mov r12b, 1
jmp 0x1800650c4
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
jmp 0x1800650c4
mov eax, dword [rsi]
test eax, eax
jne 0x18006505e
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180065052
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006507a
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180065089
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800650c4
mov qword [rsp + 0x38], r15
mov r9, r13
mov byte [rsp + 0x30], r15b
xor r8d, r8d
mov byte [rsp + 0x28], r15b
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180064f50
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [r13 + rax*2], r15w
jne 0x1800650f0
mov r15, qword [rsp + 0x40]
cmp rax, 1
jae 0x180065125
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180065110
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
je 0x180069824
nop dword [rax]
nop word [rax + rax]
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x590]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x590]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x380]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800651c2
cmp rax, 1
jbe 0x180065346
lea rcx, [rbp + 0x590]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800651e4
cmp rax, 1
jbe 0x180065346
mov rdx, r13
lea rcx, [rbp + 0x380]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x590]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x180065346
test rax, rax
je 0x180065346
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x1800652bb
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, rdi
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180065346
mov eax, dword [rsi]
test eax, eax
jne 0x180065282
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180065276
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800652a4
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
mov r12b, 1
jmp 0x180065346
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
jmp 0x180065346
mov eax, dword [rsi]
test eax, eax
jne 0x1800652dc
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800652d0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800652f8
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180065307
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, r14
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180065346
mov qword [rsp + 0x38], 0
mov r9, r13
mov byte [rsp + 0x30], 0
mov r8, r15
mov byte [rsp + 0x28], 0
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
mov edx, 2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
jne 0x180065160
movzx eax, r12b
jmp 0x18006982c
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
mov r14, qword [rsp + 0x50]
mov r13d, r15d
nop
test r14, r14
je 0x180065494
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x1800654db
mov eax, dword [rsp + 0x40]
cmp r13d, eax
je 0x18006540b
cmp r15d, dword [rsi + 8]
jae 0x1800654db
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov r13d, dword [rsp + 0x48]
mov dword [rsi], 0
mov eax, dword [rsi]
test eax, eax
jne 0x18006542c
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180065420
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180065448
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180065457
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800654db
mov qword [rsp + 0x38], r14
xor r9d, r9d
mov byte [rsp + 0x30], 0
xor r8d, r8d
mov byte [rsp + 0x28], 0
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x1800654db
mov eax, dword [rsi]
test eax, eax
jne 0x1800654ad
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800654a1
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800654c9
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800654d8
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x1800653a0
movzx eax, r12b
jmp 0x18006982c
mov r14, qword [rsp + 0x40]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [r14 + rax*2], r15w
jne 0x180065510
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
mov r13d, r15d
nop word [rax + rax]
cmp qword [rsp + 0x50], 0
je 0x1800656c1
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8, qword [rsp + 0x50]
xor r9d, r9d
mov edx, dword [rsp + 0x40]
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x18006576b
mov eax, dword [rsp + 0x40]
cmp r13d, eax
je 0x1800655d0
cmp r15d, dword [rsi + 8]
jae 0x18006576b
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov r13d, dword [rsp + 0x48]
mov dword [rsi], 0
xor edx, edx
lea rcx, [rbp + 0x590]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x590]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x590]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180065610
cmp rax, 1
jbe 0x18006567b
mov rdx, r14
lea rcx, [rbp + 0x590]
call fcn.180096278
test rax, rax
je 0x18006567b
mov eax, dword [rsi]
test eax, eax
jne 0x18006564d
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180065641
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180065669
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180065678
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x18006576b
mov rcx, qword [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x38], rcx
mov r8, r14
mov byte [rsp + 0x30], 0
mov rdx, rax
mov byte [rsp + 0x28], 0
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x18006576b
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x380]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180065700
cmp rax, 1
jbe 0x18006576b
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180096278
test rax, rax
je 0x18006576b
mov eax, dword [rsi]
test eax, eax
jne 0x18006573d
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180065731
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180065759
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180065768
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180065560
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180065795
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
mov r14, qword [rsp + 0x50]
nop dword [rax]
test r14, r14
je 0x18006592d
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x58], 0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x58]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x18006583b
cmp r15d, dword [rsi + 8]
jae 0x18006583b
mov eax, dword [rsp + 0x58]
inc r15d
movsxd r8, dword [rsi]
xor edx, edx
mov rcx, rbx
mov dword [rsp + 0x48], eax
call fcn.180095d50
mov dword [rsi], 0
jmp 0x180065849
mov eax, dword [rsp + 0x48]
cmp eax, dword [rsp + 0x58]
jne 0x1800659d0
xor edx, edx
lea rcx, [rbp + 0x590]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x590]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x590]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180065881
cmp rax, 1
jbe 0x1800658ec
mov rdx, r13
lea rcx, [rbp + 0x590]
call fcn.180096278
test rax, rax
je 0x1800658ec
mov eax, dword [rsi]
test eax, eax
jne 0x1800658be
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800658b2
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800658da
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800658e9
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800659d0
mov qword [rsp + 0x38], r14
mov r9, r13
mov byte [rsp + 0x30], 0
xor r8d, r8d
mov byte [rsp + 0x28], 0
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x1800659d0
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x380]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180065965
cmp rax, 1
jbe 0x1800659d0
mov rdx, r13
lea rcx, [rbp + 0x380]
call fcn.180096278
test rax, rax
je 0x1800659d0
mov eax, dword [rsi]
test eax, eax
jne 0x1800659a2
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180065996
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800659be
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800659cd
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x1800657e0
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180065a00
mov r15, qword [rsp + 0x40]
cmp rax, 1
jae 0x180065a35
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180065a20
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
je 0x180069824
nop dword [rax]
nop word [rax + rax]
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x180065c40
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, rdi
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180065ad6
mov eax, dword [rsp + 0x58]
cmp eax, dword [rsi + 8]
jae 0x180065ad6
movsxd r8, dword [rsi]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov eax, dword [rsp + 0x40]
mov rcx, rbx
mov dword [rsp + 0x48], eax
call fcn.180095d50
mov dword [rsi], 0
jmp 0x180065ae4
mov eax, dword [rsp + 0x48]
cmp eax, dword [rsp + 0x40]
jne 0x180065d40
xor edx, edx
lea rcx, [rbp + 0x590]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x590]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x590]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180065b46
cmp rax, 1
jbe 0x180065bff
lea rcx, [rbp + 0x380]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180065b70
cmp rax, 1
jbe 0x180065bff
mov rdx, r13
lea rcx, [rbp + 0x590]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x380]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x180065bfa
test rax, rax
je 0x180065bfa
mov eax, dword [rsi]
test eax, eax
jne 0x180065bcc
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180065bc0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180065be8
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180065bf7
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov rdi, qword [rsp + 0x50]
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180065d40
mov qword [rsp + 0x38], rdi
mov r9, r13
mov byte [rsp + 0x30], 0
mov r8, r15
mov byte [rsp + 0x28], 0
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x180065d40
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x180065ca0
cmp rax, 1
jbe 0x180065d40
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180065cc0
cmp rax, 1
jbe 0x180065d40
mov rdx, r13
lea rcx, [rbp + 0x170]
call fcn.180096278
mov rdx, r15
lea rcx, [rsp + 0x60]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x180065d40
test rax, rax
je 0x180065d40
mov eax, dword [rsi]
test eax, eax
jne 0x180065d12
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180065d06
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180065d2e
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180065d3d
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
jne 0x180065a70
movzx eax, r12b
jmp 0x18006982c
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x180065ec7
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x180065e48
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], r15d
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180065ec7
mov eax, dword [rsi]
test eax, eax
jne 0x180065dfc
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180065df0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180065e18
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180065e27
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180065ec7
mov qword [rsp + 0x38], r14
jmp 0x180065ea7
mov eax, dword [rsi]
test eax, eax
jne 0x180065e61
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180065e55
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180065e7d
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180065e8c
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180065ec7
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], r15b
xor r9d, r9d
mov byte [rsp + 0x28], r12b
xor r8d, r8d
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180065d91
movzx eax, r12b
jmp 0x18006982c
mov r14, qword [rsp + 0x40]
mov rax, 0xffffffffffffffff
inc rax
cmp word [r14 + rax*2], r15w
jne 0x180065ef6
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop dword [rax + rax]
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x180066126
mov r15, qword [rsp + 0x50]
test r15, r15
je 0x18006604d
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r15
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180066126
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180065fc3
cmp rax, 1
jbe 0x18006602c
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x18006602c
mov eax, dword [rsi]
test eax, eax
jne 0x180065ffe
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180065ff2
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006601a
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180066029
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180066126
mov qword [rsp + 0x38], r15
jmp 0x180066106
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x180066080
cmp rax, 1
jbe 0x1800660ea
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x1800660ea
mov eax, dword [rsi]
test eax, eax
jne 0x1800660bc
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800660b0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800660d8
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800660e7
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180066126
mov qword [rsp + 0x38], 0
mov byte [rsp + 0x30], 0
xor r9d, r9d
mov byte [rsp + 0x28], 1
mov r8, r14
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180065f40
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180066150
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop dword [rax]
nop word [rax + rax]
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x180066382
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x1800662ae
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], r15d
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180066382
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r15w
jne 0x180066224
cmp rax, 1
jbe 0x18006628d
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x18006628d
mov eax, dword [rsi]
test eax, eax
jne 0x18006625f
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180066253
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006627b
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x18006628a
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180066382
mov qword [rsp + 0x38], r14
jmp 0x180066362
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r15w
jne 0x1800662e0
cmp rax, 1
jbe 0x18006634a
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x18006634a
mov eax, dword [rsi]
test eax, eax
jne 0x18006631c
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180066310
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180066338
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180066347
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180066382
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], r15b
mov r9, r13
mov byte [rsp + 0x28], 1
xor r8d, r8d
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x1800661a0
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r13 + rax*2], r15w
jne 0x1800663b0
mov r15, qword [rsp + 0x40]
cmp rax, 1
jae 0x1800663e5
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x1800663d0
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je case.default.0x180064c0f
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
je 0x180069824
nop dword [rax]
nop word [rax + rax]
mov edx, 4
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x1800666e6
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x1800665a0
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, rdi
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x1800666e6
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800664d0
cmp rax, 1
jbe 0x18006657f
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800664f2
cmp rax, 1
jbe 0x18006657f
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x170]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x18006657a
test rax, rax
je 0x18006657a
mov eax, dword [rsi]
test eax, eax
jne 0x18006654c
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180066540
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180066568
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180066577
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov rdi, qword [rsp + 0x50]
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800666e6
mov qword [rsp + 0x38], rdi
jmp 0x1800666c6
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180066600
cmp rax, 1
jbe 0x1800666aa
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180066622
cmp rax, 1
jbe 0x1800666aa
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x170]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x1800666aa
test rax, rax
je 0x1800666aa
mov eax, dword [rsi]
test eax, eax
jne 0x18006667c
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180066670
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180066698
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800666a7
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800666e6
mov qword [rsp + 0x38], 0
mov byte [rsp + 0x30], 0
mov r9, r13
mov byte [rsp + 0x28], 1
mov r8, r15
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
jne 0x180066420
movzx eax, r12b
jmp 0x18006982c
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
mov r13d, r15d
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x18006687c
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x180066835
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x18006687c
mov eax, dword [rsp + 0x40]
cmp r13d, eax
je 0x1800667b4
cmp r15d, dword [rsi + 8]
jae 0x18006687c
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov r13d, dword [rsp + 0x48]
mov dword [rsi], 0
mov eax, dword [rsi]
test eax, eax
jne 0x1800667cd
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800667c1
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800667e9
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800667f8
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x18006687c
mov qword [rsp + 0x38], r14
xor r9d, r9d
mov byte [rsp + 0x30], 0
xor r8d, r8d
mov byte [rsp + 0x28], r12b
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x18006687c
mov eax, dword [rsi]
test eax, eax
jne 0x18006684e
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180066842
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006686a
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180066879
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180066731
movzx eax, r12b
jmp 0x18006982c
mov r14, qword [rsp + 0x40]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [r14 + rax*2], r15w
jne 0x1800668b0
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
mov r13d, r15d
nop dword [rax]
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x180066afb
cmp qword [rsp + 0x50], rax
je 0x180066a53
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8, qword [rsp + 0x50]
xor r9d, r9d
mov edx, dword [rsp + 0x40]
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180066afb
mov eax, dword [rsp + 0x40]
cmp r13d, eax
je 0x180066972
cmp r15d, dword [rsi + 8]
jae 0x180066afb
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov r13d, dword [rsp + 0x48]
mov dword [rsi], 0
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800669a4
cmp rax, 1
jbe 0x180066a0d
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x180066a0d
mov eax, dword [rsi]
test eax, eax
jne 0x1800669df
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800669d3
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800669fb
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180066a0a
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180066afb
mov rcx, qword [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x38], rcx
mov r8, r14
mov byte [rsp + 0x30], 0
mov rdx, rax
mov byte [rsp + 0x28], 1
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x180066afb
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180066a90
cmp rax, 1
jbe 0x180066afb
mov rdx, r14
lea rcx, [rbp + 0x170]
call fcn.180096278
test rax, rax
je 0x180066afb
mov eax, dword [rsi]
test eax, eax
jne 0x180066acd
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180066ac1
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180066ae9
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180066af8
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x1800668f0
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180066b25
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x180066d5e
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x180066cbb
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180066d5e
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x180066bdf
cmp r15d, dword [rsi + 8]
jae 0x180066d5e
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov dword [rsi], 0
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180066c11
cmp rax, 1
jbe 0x180066c7a
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x180066c7a
mov eax, dword [rsi]
test eax, eax
jne 0x180066c4c
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180066c40
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180066c68
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180066c77
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180066d5e
mov qword [rsp + 0x38], r14
mov r9, r13
mov byte [rsp + 0x30], 0
xor r8d, r8d
mov byte [rsp + 0x28], 1
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x180066d5e
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180066cf3
cmp rax, 1
jbe 0x180066d5e
mov rdx, r13
lea rcx, [rbp + 0x170]
call fcn.180096278
test rax, rax
je 0x180066d5e
mov eax, dword [rsi]
test eax, eax
jne 0x180066d30
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180066d24
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180066d4c
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180066d5b
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180066b60
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180066d90
mov r15, qword [rsp + 0x40]
cmp rax, 1
jae 0x180066dc5
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180066db0
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov edx, 4
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x1800670ca
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x180066fc0
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, rdi
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x1800670ca
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x180066e75
mov ecx, dword [rsp + 0x58]
cmp ecx, dword [rsi + 8]
jae 0x1800670ca
movsxd r8, dword [rsi]
inc ecx
mov dword [rsp + 0x58], ecx
xor edx, edx
mov rcx, rbx
mov dword [rsp + 0x48], eax
call fcn.180095d50
mov dword [rsi], 0
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180066ed1
cmp rax, 1
jbe 0x180066f7f
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180066ef3
cmp rax, 1
jbe 0x180066f7f
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x170]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x180066f7a
test rax, rax
je 0x180066f7a
mov eax, dword [rsi]
test eax, eax
jne 0x180066f4c
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180066f40
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180066f68
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180066f77
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov rdi, qword [rsp + 0x50]
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800670ca
mov qword [rsp + 0x38], rdi
mov r9, r13
mov byte [rsp + 0x30], 0
mov r8, r15
mov byte [rsp + 0x28], 1
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x1800670ca
xor edx, edx
lea rcx, [rbp + 0x590]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x590]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x590]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067022
cmp rax, 1
jbe 0x1800670ca
lea rcx, [rbp + 0x380]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067044
cmp rax, 1
jbe 0x1800670ca
mov rdx, r13
lea rcx, [rbp + 0x590]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x380]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x1800670ca
test rax, rax
je 0x1800670ca
mov eax, dword [rsi]
test eax, eax
jne 0x18006709c
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180067090
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800670b8
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800670c7
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
jne 0x180066df0
movzx eax, r12b
jmp 0x18006982c
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop dword [rax + rax]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x180067257
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x1800671d8
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], r15d
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180067257
mov eax, dword [rsi]
test eax, eax
jne 0x18006718c
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180067180
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800671a8
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800671b7
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180067257
mov qword [rsp + 0x38], r14
jmp 0x180067237
mov eax, dword [rsi]
test eax, eax
jne 0x1800671f1
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x1800671e5
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006720d
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x18006721c
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180067257
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], r12b
xor r9d, r9d
mov byte [rsp + 0x28], r15b
xor r8d, r8d
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180067120
movzx eax, r12b
jmp 0x18006982c
mov r14, qword [rsp + 0x40]
mov rax, 0xffffffffffffffff
inc rax
cmp word [r14 + rax*2], r15w
jne 0x180067286
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1800674a6
mov r15, qword [rsp + 0x50]
test r15, r15
je 0x1800673cb
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r15
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x1800674a6
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067341
cmp rax, 1
jbe 0x1800673aa
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x1800673aa
mov eax, dword [rsi]
test eax, eax
jne 0x18006737c
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180067370
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180067398
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800673a7
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800674a6
mov qword [rsp + 0x38], r15
jmp 0x180067486
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067400
cmp rax, 1
jbe 0x18006746a
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x18006746a
mov eax, dword [rsi]
test eax, eax
jne 0x18006743c
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], 0
jne 0x180067430
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180067458
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180067467
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800674a6
mov qword [rsp + 0x38], 0
mov byte [rsp + 0x30], 1
xor r9d, r9d
mov byte [rsp + 0x28], 0
mov r8, r14
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x1800672c0
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
inc rax
cmp word [r13 + rax*2], r15w
jne 0x1800674d0
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1800676f2
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x18006761b
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], r15d
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x1800676f2
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], r15w
jne 0x180067590
cmp rax, 1
jbe 0x1800675fa
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x1800675fa
mov eax, dword [rsi]
test eax, eax
jne 0x1800675cc
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], r15w
jne 0x1800675c0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800675e8
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800675f7
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800676f2
mov qword [rsp + 0x38], r14
jmp 0x1800676d2
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], r15w
jne 0x180067650
cmp rax, 1
jbe 0x1800676ba
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x1800676ba
mov eax, dword [rsi]
test eax, eax
jne 0x18006768c
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180067680
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800676a8
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800676b7
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800676f2
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], 1
mov r9, r13
mov byte [rsp + 0x28], r15b
xor r8d, r8d
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180067510
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180067720
mov r15, qword [rsp + 0x40]
cmp rax, 1
jae 0x180067755
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180067740
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x180067a46
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x180067900
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, rdi
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180067a46
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067830
cmp rax, 1
jbe 0x1800678df
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067852
cmp rax, 1
jbe 0x1800678df
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x170]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x1800678da
test rax, rax
je 0x1800678da
mov eax, dword [rsi]
test eax, eax
jne 0x1800678ac
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800678a0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800678c8
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800678d7
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov rdi, qword [rsp + 0x50]
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180067a46
mov qword [rsp + 0x38], rdi
jmp 0x180067a26
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067960
cmp rax, 1
jbe 0x180067a0a
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067982
cmp rax, 1
jbe 0x180067a0a
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x170]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x180067a0a
test rax, rax
je 0x180067a0a
mov eax, dword [rsi]
test eax, eax
jne 0x1800679dc
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800679d0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800679f8
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180067a07
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180067a46
mov qword [rsp + 0x38], 0
mov byte [rsp + 0x30], 1
mov r9, r13
mov byte [rsp + 0x28], 0
mov r8, r15
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
jne 0x180067780
movzx eax, r12b
jmp 0x18006982c
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x180067bdb
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x180067b94
xor r13d, r13d
lea rdx, [rsp + 0x40]
mov rcx, rdi
mov dword [rsp + 0x40], r13d
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180067bdb
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x180067b0a
cmp r15d, dword [rsi + 8]
jae 0x180067bdb
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov dword [rsi], r13d
mov eax, dword [rsi]
test eax, eax
jne 0x180067b2c
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rbx + rax*2], r13w
jne 0x180067b20
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180067b48
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180067b57
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180067bdb
mov qword [rsp + 0x38], r14
xor r9d, r9d
mov byte [rsp + 0x30], r12b
xor r8d, r8d
mov byte [rsp + 0x28], r13b
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x180067bdb
mov eax, dword [rsi]
test eax, eax
jne 0x180067bad
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180067ba1
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180067bc9
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180067bd8
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180067a90
movzx eax, r12b
jmp 0x18006982c
mov r14, qword [rsp + 0x40]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [r14 + rax*2], r15w
jne 0x180067c10
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop dword [rax]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x180067e4e
mov r13, qword [rsp + 0x50]
test r13, r13
je 0x180067dab
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r13
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180067e4e
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x180067ccd
cmp r15d, dword [rsi + 8]
jae 0x180067e4e
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov dword [rsi], 0
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067d00
cmp rax, 1
jbe 0x180067d6a
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x180067d6a
mov eax, dword [rsi]
test eax, eax
jne 0x180067d3c
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], 0
jne 0x180067d30
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180067d58
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180067d67
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180067e4e
mov qword [rsp + 0x38], r13
xor r9d, r9d
mov byte [rsp + 0x30], 1
mov r8, r14
mov byte [rsp + 0x28], 0
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x180067e4e
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067de3
cmp rax, 1
jbe 0x180067e4e
mov rdx, r14
lea rcx, [rbp + 0x170]
call fcn.180096278
test rax, rax
je 0x180067e4e
mov eax, dword [rsi]
test eax, eax
jne 0x180067e20
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180067e14
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180067e3c
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180067e4b
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180067c50
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180067e80
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1800680be
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x18006801b
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x1800680be
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x180067f3d
cmp r15d, dword [rsi + 8]
jae 0x1800680be
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov dword [rsi], 0
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x180067f70
cmp rax, 1
jbe 0x180067fda
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x180067fda
mov eax, dword [rsi]
test eax, eax
jne 0x180067fac
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], 0
jne 0x180067fa0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180067fc8
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180067fd7
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800680be
mov qword [rsp + 0x38], r14
mov r9, r13
mov byte [rsp + 0x30], 1
xor r8d, r8d
mov byte [rsp + 0x28], 0
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x1800680be
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180068053
cmp rax, 1
jbe 0x1800680be
mov rdx, r13
lea rcx, [rbp + 0x170]
call fcn.180096278
test rax, rax
je 0x1800680be
mov eax, dword [rsi]
test eax, eax
jne 0x180068090
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180068084
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800680ac
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800680bb
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180067ec0
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [r13 + rax*2], r15w
jne 0x1800680f0
mov r15, qword [rsp + 0x40]
cmp rax, 1
jae 0x180068125
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180068110
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x18006842a
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x180068320
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, rdi
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x18006842a
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x1800681d3
mov ecx, dword [rsp + 0x58]
cmp ecx, dword [rsi + 8]
jae 0x18006842a
movsxd r8, dword [rsi]
inc ecx
mov dword [rsp + 0x58], ecx
xor edx, edx
mov rcx, rbx
mov dword [rsp + 0x48], eax
call fcn.180095d50
mov dword [rsi], 0
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x180068230
cmp rax, 1
jbe 0x1800682df
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180068252
cmp rax, 1
jbe 0x1800682df
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x170]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x1800682da
test rax, rax
je 0x1800682da
mov eax, dword [rsi]
test eax, eax
jne 0x1800682ac
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800682a0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800682c8
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800682d7
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov rdi, qword [rsp + 0x50]
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x18006842a
mov qword [rsp + 0x38], rdi
mov r9, r13
mov byte [rsp + 0x30], 1
mov r8, r15
mov byte [rsp + 0x28], 0
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x18006842a
xor edx, edx
lea rcx, [rbp + 0x590]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x590]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x590]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180068382
cmp rax, 1
jbe 0x18006842a
lea rcx, [rbp + 0x380]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800683a4
cmp rax, 1
jbe 0x18006842a
mov rdx, r13
lea rcx, [rbp + 0x590]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x380]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x18006842a
test rax, rax
je 0x18006842a
mov eax, dword [rsi]
test eax, eax
jne 0x1800683fc
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800683f0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180068418
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180068427
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
jne 0x180068150
movzx eax, r12b
jmp 0x18006982c
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1800685c2
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x1800685c2
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x18006853a
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], r15d
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x1800685c2
mov eax, dword [rsi]
test eax, eax
jne 0x1800684ee
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x1800684e2
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006850a
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180068519
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800685c2
mov qword [rsp + 0x38], r14
jmp 0x1800685a2
mov eax, dword [rsi]
test eax, eax
jne 0x18006855c
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180068550
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180068578
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180068587
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1800685c2
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], r12b
xor r9d, r9d
mov byte [rsp + 0x28], r12b
xor r8d, r8d
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180068472
movzx eax, r12b
jmp 0x18006982c
mov r14, qword [rsp + 0x40]
mov rax, 0xffffffffffffffff
inc rax
cmp word [r14 + rax*2], r15w
jne 0x1800685f1
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x180068826
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x180068826
mov r15, qword [rsp + 0x50]
test r15, r15
je 0x18006874e
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r15
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180068826
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800686c4
cmp rax, 1
jbe 0x18006872d
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x18006872d
mov eax, dword [rsi]
test eax, eax
jne 0x1800686ff
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800686f3
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006871b
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x18006872a
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180068826
mov qword [rsp + 0x38], r15
jmp 0x180068806
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180068780
cmp rax, 1
jbe 0x1800687ea
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x1800687ea
mov eax, dword [rsi]
test eax, eax
jne 0x1800687bc
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800687b0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800687d8
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800687e7
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180068826
mov qword [rsp + 0x38], 0
mov byte [rsp + 0x30], 1
xor r9d, r9d
mov byte [rsp + 0x28], 1
mov r8, r14
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180068630
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180068850
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x180068a82
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x180068a82
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x1800689af
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], r15d
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180068a82
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r15w
jne 0x180068925
cmp rax, 1
jbe 0x18006898e
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x18006898e
mov eax, dword [rsi]
test eax, eax
jne 0x180068960
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180068954
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006897c
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x18006898b
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180068a82
mov qword [rsp + 0x38], r14
jmp 0x180068a62
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r15w
jne 0x1800689e1
cmp rax, 1
jbe 0x180068a4a
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x180068a4a
mov eax, dword [rsi]
test eax, eax
jne 0x180068a1c
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x180068a10
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180068a38
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180068a47
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180068a82
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], 1
mov r9, r13
mov byte [rsp + 0x28], 1
xor r8d, r8d
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180068890
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180068ab0
mov r15, qword [rsp + 0x40]
cmp rax, 1
jae 0x180068ae5
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180068ad0
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x180068de6
mov edx, 4
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x180068de6
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x180068ca0
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, rdi
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180068de6
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x180068bd0
cmp rax, 1
jbe 0x180068c7f
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180068bf2
cmp rax, 1
jbe 0x180068c7f
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x170]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x180068c7a
test rax, rax
je 0x180068c7a
mov eax, dword [rsi]
test eax, eax
jne 0x180068c4c
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180068c40
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180068c68
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180068c77
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov rdi, qword [rsp + 0x50]
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180068de6
mov qword [rsp + 0x38], rdi
jmp 0x180068dc6
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x180068d00
cmp rax, 1
jbe 0x180068daa
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180068d22
cmp rax, 1
jbe 0x180068daa
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x170]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x180068daa
test rax, rax
je 0x180068daa
mov eax, dword [rsi]
test eax, eax
jne 0x180068d7c
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180068d70
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180068d98
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180068da7
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180068de6
mov qword [rsp + 0x38], 0
mov byte [rsp + 0x30], 1
mov r9, r13
mov byte [rsp + 0x28], 1
mov r8, r15
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov rcx, rsi
call fcn.1800698d0
mov edx, 2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
jne 0x180068b10
movzx eax, r12b
jmp 0x18006982c
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x180068f8b
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x180068f8b
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x180068f44
xor r13d, r13d
lea rdx, [rsp + 0x40]
mov rcx, rdi
mov dword [rsp + 0x40], r13d
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x180068f8b
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x180068ec1
cmp r15d, dword [rsi + 8]
jae 0x180068f8b
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov dword [rsi], r13d
mov eax, dword [rsi]
test eax, eax
jne 0x180068edc
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], r13w
jne 0x180068ed0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180068ef8
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180068f07
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov edx, 5
mov rcx, rdi
mov r12b, 1
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x180068f8b
mov qword [rsp + 0x38], r14
xor r9d, r9d
mov byte [rsp + 0x30], r12b
xor r8d, r8d
mov byte [rsp + 0x28], r12b
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x180068f8b
mov eax, dword [rsi]
test eax, eax
jne 0x180068f5d
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180068f51
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180068f79
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180068f88
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180068e30
movzx eax, r12b
jmp 0x18006982c
mov r14, qword [rsp + 0x40]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [r14 + rax*2], r15w
jne 0x180068fc0
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop dword [rax]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x18006920f
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x18006920f
mov r13, qword [rsp + 0x50]
test r13, r13
je 0x18006916c
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r13
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x18006920f
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x180069090
cmp r15d, dword [rsi + 8]
jae 0x18006920f
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov dword [rsi], 0
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800690c2
cmp rax, 1
jbe 0x18006912b
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x18006912b
mov eax, dword [rsi]
test eax, eax
jne 0x1800690fd
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800690f1
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180069119
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180069128
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x18006920f
mov qword [rsp + 0x38], r13
xor r9d, r9d
mov byte [rsp + 0x30], 1
mov r8, r14
mov byte [rsp + 0x28], 1
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x18006920f
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800691a4
cmp rax, 1
jbe 0x18006920f
mov rdx, r14
lea rcx, [rbp + 0x170]
call fcn.180096278
test rax, rax
je 0x18006920f
mov eax, dword [rsi]
test eax, eax
jne 0x1800691e1
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800691d5
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800691fd
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x18006920c
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180069000
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r13 + rax*2], r15w
jne 0x180069240
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x18006948f
mov edx, 4
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x18006948f
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x1800693ec
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, r14
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x18006948f
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x180069310
cmp r15d, dword [rsi + 8]
jae 0x18006948f
movsxd r8, dword [rsi]
inc r15d
xor edx, edx
mov dword [rsp + 0x48], eax
mov rcx, rbx
call fcn.180095d50
mov dword [rsi], 0
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180069342
cmp rax, 1
jbe 0x1800693ab
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
test rax, rax
je 0x1800693ab
mov eax, dword [rsi]
test eax, eax
jne 0x18006937d
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180069371
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x180069399
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800693a8
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x18006948f
mov qword [rsp + 0x38], r14
mov r9, r13
mov byte [rsp + 0x30], 1
xor r8d, r8d
mov byte [rsp + 0x28], 1
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x18006948f
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180069424
cmp rax, 1
jbe 0x18006948f
mov rdx, r13
lea rcx, [rbp + 0x170]
call fcn.180096278
test rax, rax
je 0x18006948f
mov eax, dword [rsi]
test eax, eax
jne 0x180069461
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x180069455
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x18006947d
mov r9, rdi
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x18006948c
mov r8, rdi
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
jne 0x180069280
movzx eax, r12b
jmp 0x18006982c
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r13 + rax*2], r15w
jne 0x1800694c0
mov r15, qword [rsp + 0x40]
cmp rax, 1
jae 0x1800694f5
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x1800694e0
cmp rax, 1
jb case.default.0x180064c0f
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
je 0x180069824
nop word [rax + rax]
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x18006980a
mov edx, 4
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x18006980a
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x180069700
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0x40]
xor r9d, r9d
mov r8, rdi
mov rcx, rsi
call fcn.1800649f0
test eax, eax
je 0x18006980a
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x1800695b6
mov ecx, dword [rsp + 0x58]
cmp ecx, dword [rsi + 8]
jae 0x18006980a
movsxd r8, dword [rsi]
inc ecx
mov dword [rsp + 0x58], ecx
xor edx, edx
mov rcx, rbx
mov dword [rsp + 0x48], eax
call fcn.180095d50
mov dword [rsi], 0
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180069612
cmp rax, 1
jbe 0x1800696bf
lea rcx, [rbp + 0x170]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180069634
cmp rax, 1
jbe 0x1800696bf
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x170]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x1800696ba
test rax, rax
je 0x1800696ba
mov eax, dword [rsi]
test eax, eax
jne 0x18006968c
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180069680
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800696a8
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x1800696b7
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov rdi, qword [rsp + 0x50]
mov edx, 5
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x18006980a
mov qword [rsp + 0x38], rdi
mov r9, r13
mov byte [rsp + 0x30], 1
mov r8, r15
mov byte [rsp + 0x28], 1
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.1800698d0
jmp 0x18006980a
xor edx, edx
lea rcx, [rbp + 0x590]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x590]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180095d50
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0x590]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180069762
cmp rax, 1
jbe 0x18006980a
lea rcx, [rbp + 0x380]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180069784
cmp rax, 1
jbe 0x18006980a
mov rdx, r13
lea rcx, [rbp + 0x590]
call fcn.180096278
mov rdx, r15
lea rcx, [rbp + 0x380]
mov rdi, rax
call fcn.180096278
test rdi, rdi
je 0x18006980a
test rax, rax
je 0x18006980a
mov eax, dword [rsi]
test eax, eax
jne 0x1800697dc
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800697d0
mov dword [rsi], eax
mov rcx, rbx
cmp eax, 1
jle 0x1800697f8
mov r9, r14
lea rdx, str._s__d
mov r8, rbx
call fcn.18006b8d0
jmp 0x180069807
mov r8, r14
lea rdx, [0x1800d03a4]
call fcn.18006b8d0
mov r12b, 1
mov edx, 2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
jne 0x180069520
movzx eax, r12b
jmp 0x18006982c
xor al, al
mov rcx, qword [rbp + 0x7a0]
xor rcx, rsp
call fcn.180093c30
add rsp, 0x8b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret