Function at 0x1400502b0
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x2d8
mov rax, qword [0x1400710c0]
xor rax, rsp
mov qword [rsp + 0x2c0], rax
mov eax, dword [rsp + 0x2e8]
mov dword [rsp + 0x2a4], eax
cmp dword [rsp + 0x2a4], 0x8fe
jg 0x14005035d
cmp dword [rsp + 0x2a4], 0x8fe
je 0x140050db2
cmp dword [rsp + 0x2a4], 0x7df
je 0x14005042c
cmp dword [rsp + 0x2a4], 0x7e1
je 0x140050445
cmp dword [rsp + 0x2a4], 0x7e3
je 0x14005045e
cmp dword [rsp + 0x2a4], 0x83c
je 0x140050477
cmp dword [rsp + 0x2a4], 0x842
je 0x140050490
jmp case.0x140050425.2609
cmp dword [rsp + 0x2a4], 0xa2a
jg 0x1400503c2
cmp dword [rsp + 0x2a4], 0xa2a
je 0x140050ce7
mov eax, dword [rsp + 0x2a4]
sub eax, 0x903
mov dword [rsp + 0x2a4], eax
cmp dword [rsp + 0x2a4], 0xd6
ja case.0x140050425.2609
movsxd rax, dword [rsp + 0x2a4]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x512c4]
mov eax, dword [rcx + rax*4 + 0x5127c]
add rax, rcx
jmp rax
cmp dword [rsp + 0x2a4], 0xc82
jg 0x140050427
cmp dword [rsp + 0x2a4], 0xc82
je 0x140050d19
mov eax, dword [rsp + 0x2a4]
sub eax, 0xa30
mov dword [rsp + 0x2a4], eax
cmp dword [rsp + 0x2a4], 0xd4
ja case.0x140050425.2609
movsxd rax, dword [rsp + 0x2a4]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x513c8]
mov eax, dword [rcx + rax*4 + 0x5139c]
add rax, rcx
jmp rax
jmp case.0x140050425.2609
lea rdx, str.InertialMotion.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.InertialMovement.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.InertialMovement_Dragging.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.DragLock_AutoRelease.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.DragLock_TapRelease.avi_DragLock_ButtonRelease.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
movzx eax, byte [0x14007db4e]
test eax, eax
je 0x14005053f
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x1400504e4
movzx eax, byte [0x14007da62]
test eax, eax
je 0x1400504e4
lea rdx, [0x14006bc30]
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x14005053a
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x140050505
lea rdx, str.PadScrollV_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x14005053a
movzx eax, byte [0x14007da62]
test eax, eax
je 0x140050526
lea rdx, str.PadScrollH_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x14005053a
lea rdx, str.PadScrollV_I.avi_PadScrollH_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400505c1
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x14005056b
movzx eax, byte [0x14007da62]
test eax, eax
je 0x14005056b
lea rdx, [0x14006bd18]
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400505c1
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x14005058c
lea rdx, str.PadScrollV.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400505c1
movzx eax, byte [0x14007da62]
test eax, eax
je 0x1400505ad
lea rdx, str.PadScrollH.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400505c1
lea rdx, str.PadScrollV.avi_PadScrollH.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
movzx eax, byte [0x14007db4e]
test eax, eax
je 0x14005065c
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x140050601
movzx eax, byte [0x14007da62]
test eax, eax
je 0x140050601
lea rdx, [0x14006bde0]
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050657
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x140050622
lea rdx, str.CircularScrollV_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050657
movzx eax, byte [0x14007da62]
test eax, eax
je 0x140050643
lea rdx, str.CircularScrollH_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050657
lea rdx, str.CircularScrollV_I.avi_CircularScrollH_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400506de
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x140050688
movzx eax, byte [0x14007da62]
test eax, eax
je 0x140050688
lea rdx, [0x14006bf20]
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400506de
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x1400506a9
lea rdx, str.CircularScrollV.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400506de
movzx eax, byte [0x14007da62]
test eax, eax
je 0x1400506ca
lea rdx, str.CircularScrollH.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400506de
lea rdx, str.CircularScrollV.avi_CircularScrollH.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
movzx eax, byte [0x14007db4e]
test eax, eax
je 0x140050779
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x14005071e
movzx eax, byte [0x14007da62]
test eax, eax
je 0x14005071e
lea rdx, [0x14006c010]
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050774
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x14005073f
lea rdx, str.InertialScrollV_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050774
movzx eax, byte [0x14007da62]
test eax, eax
je 0x140050760
lea rdx, str.InertialScrollH_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050774
lea rdx, str.InertialScrollV_I.avi_InertialScrollH_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400507fb
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x1400507a5
movzx eax, byte [0x14007da62]
test eax, eax
je 0x1400507a5
lea rdx, [0x14006c150]
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400507fb
movzx eax, byte [0x14007db4c]
test eax, eax
je 0x1400507c6
lea rdx, str.InertialScrollV.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400507fb
movzx eax, byte [0x14007da62]
test eax, eax
je 0x1400507e7
lea rdx, str.InertialScrollH.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400507fb
lea rdx, str.InertialScrollV.avi_InertialScrollH.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
movzx eax, byte [0x14007da7e]
test eax, eax
je 0x140050821
lea rdx, str.PanScroll_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050835
lea rdx, str.PanScroll.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
movzx eax, byte [0x14007da7e]
test eax, eax
je 0x14005085b
lea rdx, str.2InertialScroll_I.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x14005086f
lea rdx, str.2InertialScroll.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.PadZoom.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.WebAssist.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.CornerRotate.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.IMECapture.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.PinchZoom.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
mov eax, dword [0x14007d984]
and eax, 2
test eax, eax
jne 0x140050925
mov eax, dword [0x14007d984]
and eax, 4
test eax, eax
jne 0x140050925
mov eax, dword [0x14007d984]
and eax, 8
test eax, eax
jne 0x140050925
mov eax, dword [0x14007d984]
and eax, 0x20
test eax, eax
je 0x14005093b
lea rdx, str.PivotRotate.avi_TwistRotate.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x14005094f
lea rdx, str.PivotRotate.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.Flick.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
cmp dword [0x140072270], 1
jne 0x14005098c
lea rdx, str.3FlickH.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400509a0
lea rdx, str.3FlickH.avi_3FlickV.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
cmp dword [0x140072278], 1
jne 0x1400509c4
lea rdx, str.4FlickH.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400509d8
lea rdx, str.4FlickH.avi_4FlickV.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
movzx eax, byte [0x14007da3c]
test eax, eax
je 0x140050a79
mov eax, dword [0x14007dae8]
mov dword [rsp + 0x2a8], eax
cmp dword [rsp + 0x2a8], 6
je 0x140050a65
cmp dword [rsp + 0x2a8], 7
je 0x140050a4f
cmp dword [rsp + 0x2a8], 8
je 0x140050a23
cmp dword [rsp + 0x2a8], 9
je 0x140050a39
jmp 0x140050a79
lea rdx, str.3Press_BlackOut.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050a79
lea rdx, str.3Press_PCLock.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050a79
lea rdx, str.3Press_WinAllMin.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050a79
lea rdx, str.3Press_Browser.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
movzx eax, byte [0x14007da3f]
test eax, eax
je 0x140050b17
mov eax, dword [0x140072274]
mov dword [rsp + 0x2ac], eax
cmp dword [rsp + 0x2ac], 1
je 0x140050aba
cmp dword [rsp + 0x2ac], 2
je 0x140050ad0
cmp dword [rsp + 0x2ac], 3
je 0x140050ae6
jmp 0x140050afa
lea rdx, str.3PanH.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050afa
lea rdx, str.3PanV.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050afa
lea rdx, str.3PanH.avi_3PanV.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [0x14007d9ec], 3
jne 0x140050b17
lea rdx, str.3Pan_Vol.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
mov eax, dword [0x14007db48]
mov dword [rsp + 0x2b0], eax
cmp dword [rsp + 0x2b0], 0
je 0x140050b49
cmp dword [rsp + 0x2b0], 1
je 0x140050b5f
cmp dword [rsp + 0x2b0], 2
je 0x140050b75
jmp 0x140050b89
lea rdx, str.Cover_BlackOut.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050b89
lea rdx, str.Cover_PCLock.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050b89
lea rdx, str.Cover_WinAllMin.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movzx eax, ax
cmp eax, 0x556
jl 0x140050bf9
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movzx eax, ax
cmp eax, 0x300
jl 0x140050bf9
cmp dword [0x14007562c], 0x401
je 0x140050bcd
cmp dword [0x14007562c], 0x40d
jne 0x140050be3
lea rdx, str.EdgeAction_UL_App_RTL.avi_EdgeAction_UL_Discard_RTL.avi_EdgeAction_UL_Snap_RTL.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050bf7
lea rdx, str.EdgeAction_UL_App.avi_EdgeAction_UL_Discard.avi_EdgeAction_UL_Snap.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050c3b
cmp dword [0x14007562c], 0x401
je 0x140050c11
cmp dword [0x14007562c], 0x40d
jne 0x140050c27
lea rdx, str.EdgeAction_UL_App_RTL.avi_EdgeAction_UL_Discard_RTL.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050c3b
lea rdx, str.EdgeAction_UL_App.avi_EdgeAction_UL_Discard.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
cmp dword [0x14007562c], 0x401
je 0x140050c58
cmp dword [0x14007562c], 0x40d
jne 0x140050c6e
lea rdx, str.EdgeAction_L_RTL.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050c82
lea rdx, str.EdgeAction_L.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.EdgeAction_U.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
cmp dword [0x14007562c], 0x401
je 0x140050cb8
cmp dword [0x14007562c], 0x40d
jne 0x140050cce
lea rdx, str.EdgeAction_R_RTL.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x140050ce2
lea rdx, str.EdgeAction_R.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.GP_Typing.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.PalmRejection.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.SP_Typing.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.GP_LeftClick.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.GP_RightClick.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
cmp dword [0x14007dab0], 0xe
jne 0x140050d7b
lea rdx, str.2Click_Shortcut.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
cmp dword [0x14007db80], 0x10
jne 0x140050d9a
lea rdx, str.3Click_Vol_mute.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.GP_CursorAreaClick.avi
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp case.0x140050425.2609
lea rdx, str.Scroll_Test.txt
lea rcx, [0x140080af0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, [0x140080af0]
lea rcx, [0x1400808e0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, [0x140062eac]
lea rcx, [0x1400808e0]
call fcn.140001000
mov qword [0x1400808d8], rax
mov rax, qword [0x1400808d8]
add rax, 8
mov qword [0x1400808d8], rax
mov rax, qword [0x1400808d8]
mov word [rax], 0
lea rdx, [0x1400808e0]
lea rcx, [0x1400806d0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov r8d, 0x208
lea rdx, [0x1400804c0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [0x1400804c0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [0x1400630ec]
lea rcx, [0x1400804c0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rdx, [0x1400804c0]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, [0x1400806d0]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rdx, [rsp + 0x40]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x290], rax
cmp qword [rsp + 0x290], 0xffffffffffffffff
jne 0x140050fcb
lea rdx, str.Data_
lea rcx, [0x1400804c0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rdx, [0x1400804c0]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, [0x1400806d0]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rdx, [rsp + 0x40]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x290], rax
cmp qword [rsp + 0x290], 0xffffffffffffffff
jne 0x140050fcb
lea rdx, str.Avi_
lea rcx, [0x1400804c0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rdx, [0x1400804c0]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, [0x1400806d0]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rdx, [rsp + 0x40]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x290], rax
cmp qword [rsp + 0x290], 0xffffffffffffffff
jne 0x140050fcb
cmp dword [rsp + 0x2f0], 0
jne 0x140050fc6
cmp dword [0x1400756fc], 0
jne 0x140050fc6
mov edx, dword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x140051263
mov edx, dword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 1
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [rsp + 0x2f0]
mov dword [rsp + 0x2b4], eax
cmp dword [rsp + 0x2b4], 0
je 0x140051066
cmp dword [rsp + 0x2b4], 1
je 0x140051168
cmp dword [rsp + 0x2b4], 2
je 0x1400511a0
cmp dword [rsp + 0x2b4], 3
je 0x1400511dc
jmp 0x140051263
mov eax, dword [rsp + 0x2e8]
mov dword [rsp + 0x2b8], eax
cmp dword [rsp + 0x2b8], 0x8fe
je 0x140051083
jmp 0x140051088
jmp 0x140051163
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0x139
mov rcx, qword [0x140075700]
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0xf7
mov edx, dword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp dword [0x14007562c], 0x401
je 0x1400510fb
cmp dword [0x14007562c], 0x40d
jne 0x140051163
mov edx, dword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [rsp + 0x2a0], eax
mov eax, dword [rsp + 0x2a0]
and eax, 0xffbfffff
mov dword [rsp + 0x2a0], eax
mov edx, dword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r8d, dword [rsp + 0x2a0]
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x140051263
mov dword [rsp + 0x28], 5
lea rax, [0x1400804c0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [0x140080af0]
lea rdx, [0x14006ca30]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x140051263
mov dword [rsp + 0x28], 5
lea rax, [0x1400804c0]
mov qword [rsp + 0x20], rax
lea r9, [0x140080af0]
lea r8, [0x14006ca40]
lea rdx, [0x14006ca58]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x140051263
lea rdx, str.__r
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, [0x140080af0]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rdx, [0x1400631ac]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rdx, [0x140080af0]
lea rcx, [0x1400802b0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov dword [rsp + 0x28], 5
lea rax, [0x1400804c0]
mov qword [rsp + 0x20], rax
lea r9, [0x1400802b0]
lea r8, [0x14006ca78]
lea rdx, [0x14006ca90]
mov rcx, qword [rsp + 0x2e0]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rcx, qword [rsp + 0x2c0]
xor rcx, rsp
call fcn.140002580
add rsp, 0x2d8
ret