Function at 0x1400994f0
Capabilities:
Get graphical window text
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4a0]
sub rsp, 0x5a0
movzx eax, byte [r9 + 8]
mov r13, r9
sub al, 2
mov r12, r8
mov rbx, rdx
mov r15, rcx
test al, 0xf7
je 0x14009953b
lea rcx, [r9 + 0x20]
mov qword [rsp + 0x40], rcx
jmp 0x140099544
lea rax, [r8 + 0x70]
mov qword [rsp + 0x40], rax
movzx eax, word [rdx]
lea rsi, [0x140000000]
mov qword [rsp + 0x598], rdi
mov r14d, 1
movaps xmmword [rsp + 0x580], xmm6
movaps xmmword [rsp + 0x570], xmm7
mov byte [rsp + 0x30], 0
test ax, ax
je 0x14009bca1
xorps xmm7, xmm7
nop dword [rax]
cmp ax, 0x2d
jne 0x14009958b
xor dil, dil
jmp 0x140099594
mov dil, 1
cmp ax, 0x2b
jne 0x14009959c
movzx eax, word [rbx + 2]
add rbx, 2
mov rsi, rbx
mov r14, rbx
test ax, ax
je 0x14009bc94
lea rdx, [0x1400f16e0]
mov rcx, rbx
call fcn.1400074d0
mov qword [rsp + 0x38], rax
test rax, rax
jne 0x1400995e5
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
cmp word [rbx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x1400995d0
lea rax, [rbx + rax*2]
mov qword [rsp + 0x38], rax
cmp rax, rbx
je 0x14009bc73
movzx ecx, word [rax]
lea rdx, str.Section
mov word [rbp + 0x4e8], cx
xor ecx, ecx
mov word [rax], cx
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009961f
mov byte [r12 + 0x1a6], 1
jmp case.0x14009acd9.2
lea rdx, str.AltSubmit
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009964c
cmp byte [r13 + 8], 0xc
je 0x14009964c
movzx ecx, byte [r13 + 9]
movzx eax, cl
and al, 0xfd
or cl, 2
jmp 0x14009a4c2
mov r8d, 7
lea rdx, str.Checked
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x1400996f9
lea rdx, str.Gray
lea rcx, [rbx + 0xe]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099692
movzx eax, dil
add eax, eax
mov dword [r12 + 0x80], eax
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0xa
jne 0x1400996b6
mov ecx, dword [r12 + 0x10]
mov eax, ecx
and eax, 0xfffffffb
or ecx, 4
test dil, dil
cmove ecx, eax
mov dword [r12 + 0x10], ecx
jmp case.0x14009acd9.2
cmp word [rbx + 0xe], 0
je 0x1400996e8
lea rcx, [rbx + 0xe]
call fcn.14001c140
mov dword [r12 + 0x80], eax
cmp eax, 0xffffffff
jne case.0x14009acd9.2
mov dword [r12 + 0x80], 2
jmp case.0x14009acd9.2
movzx eax, dil
mov dword [r12 + 0x80], eax
jmp case.0x14009acd9.2
mov r8d, 6
lea rdx, str.Choose
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x1400997cb
test dil, dil
je case.0x14009acd9.2
movzx ecx, byte [r13 + 8]
add rbx, 0xc
sub ecx, 0xd
je 0x14009977f
cmp ecx, 1
mov rcx, rbx
je 0x140099757
call fcn.14001c140
mov dword [r12 + 0x3c], eax
cmp eax, 1
jge case.0x14009acd9.2
mov dword [r12 + 0x3c], 0
jmp case.0x14009acd9.2
lea rdx, [r12 + 0x154]
call fcn.1400b9c60
mov dword [r12 + 0x194], eax
cmp eax, 3
jne case.0x14009acd9.2
or dword [r12], 2
jmp case.0x14009acd9.2
lea rdx, str.None
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400997a1
mov dword [r12 + 0x3c], 2
jmp case.0x14009acd9.2
lea rdx, [r12 + 0x154]
mov r8b, 1
mov rcx, rbx
call fcn.1400b9d20
test eax, eax
je case.0x14009acd9.2
mov eax, 1
mov dword [r12 + 0x3c], eax
jmp case.0x14009acd9.2
lea rdx, str.Border
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400997ff
test dil, dil
je 0x1400997f1
or dword [r12], 0x800000
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x800000
jmp case.0x14009acd9.2
lea rdx, str.VScroll
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099833
test dil, dil
je 0x140099825
or dword [r12], 0x200000
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x200000
jmp case.0x14009acd9.2
mov r8d, 7
lea rdx, str.HScroll
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x1400998af
cmp byte [r13 + 8], 0xb
jne 0x14009986b
test dil, dil
je 0x140099eb4
or dword [r12 + 4], 0x8000
jmp case.0x14009acd9.2
test dil, dil
je 0x1400998a1
or dword [r12], 0x100000
cmp word [rbx + 0xe], 0
je 0x140099892
lea rcx, [rbx + 0xe]
call fcn.14001c140
mov dword [r12 + 0x7c], eax
jmp case.0x14009acd9.2
mov eax, 0xffffffff
mov dword [r12 + 0x7c], eax
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x100000
jmp case.0x14009acd9.2
lea rdx, str.Tabstop
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400998d5
test dil, dil
je 0x1400998ee
or dword [r12], 0x10000
jmp case.0x14009acd9.2
lea rdx, str.NoTab
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400998fc
test dil, dil
je 0x1400998c8
or dword [r12 + 4], 0x10000
jmp case.0x14009acd9.2
lea rdx, str.Group
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099926
test dil, dil
je 0x140099c1b
or dword [r12], 0x20000
jmp case.0x14009acd9.2
lea rdx, str.Redraw
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099951
movzx eax, dil
xor eax, 1
add eax, 3
mov dword [r12 + 0x19c], eax
jmp case.0x14009acd9.2
mov r8d, 8
lea rdx, str.Disabled
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x1400999e5
cmp word [rbx + 0x10], ax
lea rcx, [rbx + 0x10]
je 0x140099982
call fcn.14001c140
test eax, eax
jne 0x140099982
xor dil, 1
mov rcx, qword [r13]
test rcx, rcx
je 0x1400999ab
xor edx, edx
test dil, dil
sete dl
call qword [sym.imp.USER32.dll_EnableWindow]
movzx ecx, byte [r13 + 9]
movzx eax, cl
and al, 0xef
or cl, 0x10
jmp 0x14009a4c2
test dil, dil
je 0x1400999ca
or dword [r12], 0x8000000
movzx ecx, byte [r13 + 9]
movzx eax, cl
and al, 0xef
or cl, 0x10
jmp 0x14009a4c2
or dword [r12 + 4], 0x8000000
movzx ecx, byte [r13 + 9]
movzx eax, cl
and al, 0xef
or cl, 0x10
jmp 0x14009a4c2
mov r8d, 6
lea rdx, str.Hidden
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140099a85
cmp word [rbx + 0xc], ax
lea rcx, [rbx + 0xc]
je 0x140099a1a
call fcn.14001c140
test eax, eax
jne 0x140099a1a
xor dil, 1
mov rcx, qword [r13]
test rcx, rcx
je 0x140099a4b
mov edx, 4
mov eax, 0
test dil, dil
cmovne edx, eax
call qword [sym.imp.USER32.dll_ShowWindow]
movzx ecx, byte [r13 + 9]
movzx eax, cl
and al, 0xf7
or cl, 8
jmp 0x14009a4c2
test dil, dil
je 0x140099a6b
or dword [r12 + 4], 0x10000000
movzx ecx, byte [r13 + 9]
movzx eax, cl
and al, 0xf7
or cl, 8
jmp 0x14009a4c2
or dword [r12], 0x10000000
movzx ecx, byte [r13 + 9]
movzx eax, cl
and al, 0xf7
or cl, 8
jmp 0x14009a4c2
lea rdx, str.Wrap
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099b13
movzx eax, byte [r13 + 8]
dec eax
cmp eax, 0x12
ja case.0x14009acd9.2
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x9c394]
add rcx, rdx
jmp rcx
test dil, dil
je 0x140099ace
or dword [r12 + 4], 0x1f
jmp case.0x14009acd9.2
and dword [r12], 0xffffffec
or dword [r12], 0xc
jmp case.0x14009acd9.2
test dil, dil
je 0x140099af0
or dword [r12 + 4], 0x100080
jmp case.0x14009acd9.2
or dword [r12], 0x80
jmp case.0x14009acd9.2
test dil, dil
je 0x14009a0b7
or dword [r12], 0x200
jmp case.0x14009acd9.2
mov r8d, 0xa
lea rdx, str.Background
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140099be2
movzx eax, byte [r13 + 8]
add rbx, 0x14
cmp al, 0x19
ja 0x140099b94
movzx eax, al
mov ecx, 0x2040c00
bt ecx, eax
jae 0x140099b94
test dil, dil
je 0x140099b86
mov rcx, rbx
call fcn.1400bb820
mov dword [r12 + 0x74], eax
cmp eax, 0xffffffff
jne case.0x14009acd9.2
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
mov ecx, eax
call fcn.140059420
mov dword [r12 + 0x74], eax
jmp case.0x14009acd9.2
mov dword [r12 + 0x74], 0xff000000
jmp case.0x14009acd9.2
movzx eax, byte [r13 + 9]
test dil, dil
je 0x140099bd5
and al, 0xdf
lea rdx, str.Trans
mov rcx, rbx
mov byte [r13 + 9], al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [r13 + 9]
test eax, eax
jne 0x140099bc9
or cl, 0x40
mov byte [r13 + 9], cl
jmp case.0x14009acd9.2
and cl, 0xbf
mov byte [r13 + 9], cl
jmp case.0x14009acd9.2
and al, 0xbf
or al, 0x20
mov byte [r13 + 9], al
jmp case.0x14009acd9.2
lea rdx, str.Group
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140099910
lea rdx, str.Theme
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099c29
mov byte [r12 + 0x1a7], dil
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x20000
jmp case.0x14009acd9.2
mov r8d, 4
lea rdx, str.Hwnd
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140099d6a
mov rcx, qword [r15 + 0x128]
lea rdi, [rbx + 8]
test rcx, rcx
je 0x140099d48
xor esi, esi
mov qword [rsp + 0x48], rdi
lea rax, [rsp + 0x68]
mov dword [rsp + 0x78], esi
mov qword [rbp - 0x70], rax
lea rdx, [rbp - 0x70]
lea rax, [rsp + 0x48]
mov dword [rsp + 0x58], esi
mov qword [rbp - 0x68], rax
lea r9d, [rsi + 2]
lea rax, str.HasKey
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x68], rax
lea r8, [rbp]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x20]
call qword [rax + reloc.WSOCK32.dll_getservbyport]
cmp qword [rbp - 0x20], rsi
jne 0x14009bcef
mov rcx, qword [r15 + 0x128]
lea rax, [0x1400da7a4]
mov dword [rsp + 0x78], esi
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x68], rdi
lea r9d, [rsi + 1]
mov dword [rsp + 0x58], esi
lea r8, [rbp]
mov qword [rsp + 0x48], rax
mov rax, qword [rcx]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x20]
call qword [rax + reloc.WSOCK32.dll_getservbyport]
mov rcx, 0xffffffffffffffff
nop
cmp word [rdi + rcx*2 + 2], si
lea rcx, [rcx + 1]
jne 0x140099d00
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
mov qword [r12 + 0x1c8], rax
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rdi]
add rdi, 2
mov word [rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140099d30
jmp case.0x14009acd9.2
mov r9d, 3
lea rcx, [0x140116fb0]
xor r8d, r8d
mov rdx, rdi
call fcn.140048640
mov qword [r12 + 0x20], rax
jmp case.0x14009acd9.2
mov r8d, 4
lea rdx, str.Icon
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140099dd4
cmp byte [r13 + 8], 0xa
jne 0x140099db5
lea rdx, str.Small
lea rcx, [rbx + 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
mov ecx, 2
mov eax, 0
cmovne ecx, eax
mov dword [r12 + 0x14], ecx
jmp case.0x14009acd9.2
test dil, dil
je case.0x14009acd9.2
lea rcx, [rbx + 8]
call fcn.14001c140
mov dword [r12 + 0x84], eax
jmp case.0x14009acd9.2
lea rdx, str.Report
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099df7
mov eax, 1
mov dword [r12 + 0x14], eax
jmp case.0x14009acd9.2
lea rdx, str.List
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099e19
mov dword [r12 + 0x14], 3
jmp case.0x14009acd9.2
lea rdx, str.Tile
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099e3b
mov dword [r12 + 0x14], 4
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0xa
jne 0x140099f06
lea rdx, [0x1400fb8c0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099e71
test dil, dil
je 0x14009a25c
or dword [r12 + 4], 0x4000
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0xa
jne 0x140099f06
mov r8d, 6
lea rdx, str.NoSort
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140099ece
lea rcx, [rbx + 0xc]
lea rdx, [0x1400fb8c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099ec1
test dil, dil
je 0x14009985d
or dword [r12], 0x8000
jmp case.0x14009acd9.2
mov byte [r12 + 0x1a8], dil
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0xa
jne 0x140099f06
lea rdx, str.Grid
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099f06
mov ecx, dword [r12 + 0x10]
mov eax, ecx
and eax, 0xfffffffe
or ecx, 1
test dil, dil
cmove ecx, eax
mov dword [r12 + 0x10], ecx
jmp case.0x14009acd9.2
mov r8d, 5
lea rdx, [0x1400f2ee0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140099f33
lea rcx, [rbx + 0xa]
call fcn.14001c140
mov dword [r12 + 0x78], eax
jmp case.0x14009acd9.2
mov r8d, 2
lea rdx, [0x1400fca04]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140099f97
xor r9d, r9d
mov dword [rsp + 0x20], eax
xor r8d, r8d
lea rcx, [rbx + 4]
xor edx, edx
call fcn.1400ba160
test eax, eax
je case.0x14009acd9.2
lea rcx, [rbx + 4]
call fcn.140005710
mov ecx, dword [r12 + 0x10]
test dil, dil
je 0x140099f89
or ecx, eax
mov dword [r12 + 0x10], ecx
jmp case.0x14009acd9.2
not eax
and eax, ecx
mov dword [r12 + 0x10], eax
jmp case.0x14009acd9.2
mov r8d, 9
lea rdx, str.ImageList
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140099fcf
test dil, dil
je case.0x14009acd9.2
lea rcx, [rbx + 0x12]
call fcn.140005710
mov ecx, eax
mov qword [r12 + 0x18], rcx
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 4
jne 0x140099ffd
lea rdx, str.Default
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140099ffd
test dil, dil
je 0x14009abde
or dword [r12], 1
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 5
jne 0x14009a02b
lea rdx, str.Check3
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a02b
test dil, dil
je 0x14009a5e6
or dword [r12], 6
jmp case.0x14009acd9.2
lea rdx, str.ReadOnly
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a0c5
movzx ecx, byte [r13 + 8]
sub ecx, 9
je 0x14009a253
sub ecx, 1
je 0x14009a0ae
sub ecx, 1
je 0x14009a09a
cmp ecx, 1
jne case.0x14009acd9.2
mov rcx, qword [r13]
test rcx, rcx
je 0x14009a084
movzx r8d, dil
xor r9d, r9d
mov edx, 0xcf
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x14009acd9.2
test dil, dil
je 0x14009a124
or dword [r12], 0x800
jmp case.0x14009acd9.2
test dil, dil
je 0x14009a290
or dword [r12 + 4], 8
jmp case.0x14009acd9.2
test dil, dil
je 0x140099b06
or dword [r12 + 4], 0x200
jmp case.0x14009acd9.2
lea rdx, str.Multi
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [r13 + 8]
test eax, eax
jne 0x14009a132
movzx ecx, cl
sub ecx, 9
je 0x14009a084
sub ecx, 1
je 0x14009a110
sub ecx, 2
je 0x14009a839
cmp ecx, 2
jne case.0x14009acd9.2
test dil, dil
je case.0x14009ac12.11
or dword [r12], 2
jmp case.0x14009acd9.2
test dil, dil
je 0x14009a842
or dword [r12 + 4], 4
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x800
jmp case.0x14009acd9.2
cmp cl, 0xc
jne 0x14009a16b
lea rdx, str.WantReturn
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a16b
test dil, dil
je 0x14009a15d
or dword [r12], 0x1000
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x1000
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0xc
jne 0x14009a1b7
lea rdx, str.WantTab
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14009a4b5
cmp byte [r13 + 8], 0xc
jne 0x14009a1b7
lea rdx, str.WantCtrlA
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a1b7
movzx ecx, byte [r13 + 9]
movzx eax, cl
or al, 2
and cl, 0xfd
jmp 0x14009a4c2
movzx eax, byte [r13 + 8]
sub al, 0xa
cmp al, 1
ja 0x14009a1e8
lea rdx, str.WantF2
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a1e8
movzx ecx, byte [r13 + 9]
movzx eax, cl
or al, 0x80
and cl, 0x7f
jmp 0x14009a4c2
cmp byte [r13 + 8], 0xc
jne 0x14009a219
lea rdx, str.Number
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a219
test dil, dil
je 0x14009a2ab
or dword [r12], 0x2000
jmp case.0x14009acd9.2
lea rdx, str.Lowercase
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a269
movzx eax, byte [r13 + 8]
cmp al, 0xc
jne 0x14009a249
test dil, dil
je 0x14009a505
or dword [r12], 0x10
jmp case.0x14009acd9.2
sub al, 7
cmp al, 1
ja case.0x14009acd9.2
test dil, dil
je 0x140099e63
or dword [r12], 0x4000
jmp case.0x14009acd9.2
lea rdx, str.Uppercase
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [r13 + 8]
test eax, eax
jne 0x14009a2b9
cmp cl, 0xc
jne 0x14009a29a
test dil, dil
je 0x14009a0a3
or dword [r12], 8
jmp case.0x14009acd9.2
sub cl, 7
cmp cl, 1
ja case.0x14009acd9.2
jmp case.0x140099abc.3
or dword [r12 + 4], 0x2000
jmp case.0x14009acd9.2
cmp cl, 0xc
jne 0x14009a361
mov r8d, 8
lea rdx, str.Password
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a361
movzx eax, word [rbx + 0x10]
mov word [r12 + 0x1a0], ax
test dil, dil
je 0x14009a337
or dword [r12], 0x20
mov rcx, qword [r13]
test rcx, rcx
je 0x14009a357
xor r9d, r9d
mov edx, 0xcc
test ax, ax
jne 0x14009a323
mov r8d, 0x25cf
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14009acd9.2
movzx r8d, ax
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x20
mov rcx, qword [r13]
test rcx, rcx
je 0x14009a357
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcc
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14009acd9.2
mov r8d, 5
lea rdx, str.Limit
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a3b7
test dil, dil
je 0x14009a3a8
cmp word [rbx + 0xa], ax
je 0x14009a399
lea rcx, [rbx + 0xa]
call fcn.14001c140
mov dword [r12 + 0x78], eax
jmp case.0x14009acd9.2
mov eax, 0xffffffff
mov dword [r12 + 0x78], eax
jmp case.0x14009acd9.2
mov eax, 0x80000000
mov dword [r12 + 0x78], eax
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 8
jne 0x14009a3e5
lea rdx, str.Simple
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a3e5
test dil, dil
je 0x14009abde
or dword [r12], 1
jmp case.0x14009acd9.2
mov r8d, 4
lea rdx, str.Sort
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
movzx ecx, byte [r13 + 8]
test eax, eax
jne 0x14009a461
cmp cl, 7
jb case.0x14009acd9.2
cmp cl, 8
jbe 0x14009a966
cmp cl, 9
je 0x14009a0fd
cmp cl, 0xa
jne case.0x14009acd9.2
test dil, dil
je 0x14009a456
lea rcx, [rbx + 8]
lea rdx, str.Desc
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
mov ecx, SafeArrayAllocDescriptor
mov eax, reloc.WSOCK32.dll_recv
cmovne ecx, eax
or dword [r12], ecx
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x30
jmp case.0x14009acd9.2
cmp cl, 0x10
jne 0x14009a496
lea rdx, str.Horz
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a496
test dil, dil
je 0x14009a66a
mov eax, dword [r12]
and eax, 0xffffffef
or eax, 0x40
mov dword [r12], eax
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0x11
jne 0x14009a57b
lea rdx, str.Invert
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a4d7
movzx ecx, byte [r13 + 9]
movzx eax, cl
and al, 0x7f
or cl, 0x80
test dil, dil
movzx ecx, cl
movzx eax, al
cmove ecx, eax
mov byte [r13 + 9], cl
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0x11
jne 0x14009a57b
lea rdx, str.NoTicks
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a510
test dil, dil
je 0x14009a505
or dword [r12], 0x10
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x10
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0x11
jne 0x14009a57b
mov r8d, reloc.WSOCK32.dll_ioctlsocket
lea rdx, str.TickInterval
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a57b
mov byte [r12 + 0x1a4], 1
test dil, dil
je 0x14009a566
or dword [r12], 1
lea rcx, [rbx + 0x18]
cmp word [rbx + 0x18], ax
setne al
mov byte [r12 + 0x1a5], al
call fcn.14001c140
mov dword [r12 + 0x48], eax
jmp case.0x14009acd9.2
or dword [r12 + 4], 1
mov eax, 0xffffffff
mov dword [r12 + 0x48], eax
jmp case.0x14009acd9.2
mov r8d, 4
lea rdx, str.Line
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
movzx ecx, byte [r13 + 8]
test eax, eax
jne 0x14009a5f1
cmp cl, 0x11
jne 0x14009a5bb
test dil, dil
je case.0x14009acd9.2
lea rcx, [rbx + 8]
call fcn.14001c140
mov dword [r12 + 0x4c], eax
jmp case.0x14009acd9.2
cmp cl, 0xb
jne case.0x14009acd9.2
movzx ecx, word [rbx + 8]
call fcn.140016470
cmp ax, 0x53
jne case.0x14009acd9.2
test dil, dil
je 0x14009a5e6
or dword [r12], 6
jmp case.0x14009acd9.2
or dword [r12 + 4], 6
jmp case.0x14009acd9.2
cmp cl, 0x11
jne 0x14009a62c
mov r8d, 4
lea rdx, str.Page
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a62c
test dil, dil
je case.0x14009acd9.2
lea rcx, [rbx + 8]
call fcn.14001c140
mov dword [r12 + 0x50], eax
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0x11
jne 0x14009a675
mov r8d, 5
lea rdx, str.Thick
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a675
test dil, dil
je 0x14009a66a
or dword [r12], 0x40
lea rcx, [rbx + 0xa]
call fcn.14001c140
mov dword [r12 + 0x54], eax
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x40
jmp case.0x14009acd9.2
mov r8d, 7
lea rdx, str.ToolTip
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
movzx ecx, byte [r13 + 8]
test eax, eax
jne 0x14009a72d
cmp cl, 0x11
jne case.0x14009acd9.2
test dil, dil
je 0x14009ad89
mov dword [r12 + 0x58], 0xffffffff
movzx ecx, word [rbx + 0xe]
call fcn.140016470
movzx eax, ax
xor esi, esi
cmp eax, 0x42
je 0x14009a6f3
cmp eax, 0x4c
je 0x14009a6e7
cmp eax, 0x52
je 0x14009a6dc
cmp eax, 0x54
jne 0x14009a6fc
mov dword [r12 + 0x58], esi
jmp 0x14009a6fc
mov dword [r12 + 0x58], 3
jmp 0x14009a6fc
mov eax, 1
mov dword [r12 + 0x58], eax
jmp 0x14009a6fc
mov dword [r12 + 0x58], 2
mov eax, dword [r12 + 0x58]
test eax, eax
jns 0x14009a719
mov eax, esi
mov dword [r12 + 0x58], eax
or dword [r12], 0x100
jmp case.0x14009acd9.2
inc eax
mov dword [r12 + 0x58], eax
or dword [r12], 0x100
jmp case.0x14009acd9.2
cmp cl, 0x11
jne 0x14009a801
mov r8d, 5
lea rdx, str.Buddy
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a801
test dil, dil
je case.0x14009acd9.2
movzx edi, word [rbx + 0xa]
test di, di
je case.0x14009acd9.2
mov eax, 1
mov qword [rsp + 0x28], 0
lea rdx, [rbx + 0xc]
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea rcx, [0x140116fb0]
xor r8d, r8d
call fcn.1400486d0
mov r9, rax
test rax, rax
je case.0x14009acd9.2
cmp byte [rax + 0x23], 0
jne 0x14009a7a8
mov r9, qword [rax + 0x10]
test byte [r9 + 0x22], 2
jne case.0x14009acd9.2
mov eax, dword [r15 + 0x20]
lea r8d, [rax - 1]
cmp r8d, eax
jae case.0x14009acd9.2
nop dword [rax]
nop dword [rax + rax]
mov eax, r8d
imul rdx, rax, 0x58
add rdx, qword [r15 + 0x28]
cmp qword [rdx + 0x10], r9
jne 0x14009a7f3
cmp di, 0x31
jne 0x14009a7ee
mov qword [r12 + 0x60], rdx
jmp 0x14009a7f3
mov qword [r12 + 0x68], rdx
dec r8d
cmp r8d, dword [r15 + 0x20]
jb 0x14009a7d0
jmp case.0x14009acd9.2
lea rdx, str.Vertical
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a84c
movzx eax, byte [r13 + 8]
cmp al, 0x11
jne 0x14009a831
test dil, dil
je case.0x14009ac12.11
or dword [r12], 2
jmp case.0x14009acd9.2
cmp al, 0x12
jne case.0x14009acd9.2
test dil, dil
je 0x14009a119
or dword [r12], 4
jmp case.0x14009acd9.2
mov r8d, 5
lea rdx, str.Range
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a91a
test dil, dil
je case.0x14009acd9.2
cmp word [rbx + 0xa], ax
je case.0x14009acd9.2
movzx eax, byte [r13 + 8]
lea rcx, [rbx + 0xa]
sub al, 0xd
cmp al, 1
jbe 0x14009a8ca
mov byte [r12 + reloc.OLEAUT32.dll_OleCreatePictureIndirect], 1
call fcn.14001c140
mov edx, 0x2d
mov dword [r12 + 0x40], eax
lea rcx, [rbx + 0xc]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je case.0x14009acd9.2
lea rcx, [rax + 2]
call fcn.14001c140
mov dword [r12 + 0x44], eax
jmp case.0x14009acd9.2
lea rdi, [r12 + 0x174]
mov rdx, rdi
call fcn.1400b9c60
mov dword [r12 + 0x198], eax
test eax, eax
je case.0x14009acd9.2
mov rcx, qword [r13]
test rcx, rcx
je case.0x14009acd9.2
cmp byte [r13 + 8], 0xd
mov edx, 0x1012
mov r8d, eax
mov r9, rdi
mov eax, 0x1004
cmove edx, eax
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0x12
jne 0x14009a948
lea rdx, str.Smooth
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a948
test dil, dil
je 0x14009abde
or dword [r12], 1
jmp case.0x14009acd9.2
lea rdx, str.Buttons
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [r13 + 8]
test eax, eax
jne 0x14009a998
cmp cl, 0x13
jne 0x14009a97c
test dil, dil
je 0x14009ad89
or dword [r12], 0x100
jmp case.0x14009acd9.2
cmp cl, 0xb
jne case.0x14009acd9.2
test dil, dil
je 0x14009abde
or dword [r12], 1
jmp case.0x14009acd9.2
cmp cl, 0x13
jne 0x14009a9d9
lea rdx, str.Bottom
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a9d9
test dil, dil
je 0x14009a9ca
or dword [r12], 2
mov eax, 0x80
or dword [r12 + 4], eax
jmp case.0x14009acd9.2
mov eax, 2
or dword [r12 + 4], eax
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 0x18
jne 0x14009aa31
mov r8d, 5
lea rdx, str.Class
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009aa31
mov rcx, qword [0x140113af8]
lea r8, [rbp + 0x20]
lea rdx, [rbx + 0xa]
call qword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [r12 + 0x1ac], ax
test ax, ax
jne case.0x14009acd9.2
lea r8, [rbx + 0xa]
lea rdx, str.Unregistered_window_class.
jmp 0x14009bd78
lea rdx, str.Center
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ab2e
movzx eax, byte [r13 + 8]
test dil, dil
je 0x14009aaac
cmp al, 1
je 0x14009aa9c
cmp al, 2
jbe case.0x14009acd9.2
cmp al, 6
jbe 0x14009aa8f
cmp al, 0xc
je 0x14009aa7f
cmp al, 0x11
jne case.0x14009acd9.2
or dword [r12], 8
or dword [r12 + 4], 4
jmp case.0x14009acd9.2
or dword [r12], 1
or dword [r12 + 4], 2
jmp case.0x14009acd9.2
or dword [r12], 0x300
jmp case.0x14009acd9.2
or dword [r12], 1
or dword [r12 + 4], 0x1e
jmp case.0x14009acd9.2
cmp al, 1
je case.0x14009acd9.1
cmp al, 2
jbe case.0x14009acd9.2
cmp al, 6
jbe 0x14009aadb
cmp al, 0xc
je 0x14009abde
cmp al, 0x11
jne case.0x14009acd9.2
or dword [r12 + 4], 8
jmp case.0x14009acd9.2
mov rcx, qword [r13]
test rcx, rcx
je 0x14009ab09
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
jne case.0x14009acd9.2
or dword [r12 + 4], eax
jmp case.0x14009acd9.2
mov ecx, dword [r12]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
jne case.0x14009acd9.2
and ecx, 0xfffffcff
mov dword [r12], ecx
jmp case.0x14009acd9.2
lea rdx, str.Right
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ac92
movzx eax, byte [r13 + 8]
dec eax
test dil, dil
je 0x14009abf6
cmp eax, 0x16
ja case.0x14009acd9.2
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x9c3e0]
add rcx, rdx
jmp rcx
or dword [r12 + 4], 8
or dword [r12], 4
jmp case.0x14009acd9.2
or dword [r12], 0x20
jmp case.0x14009acd9.2
or dword [r12 + 4], 0xc
jmp case.0x14009acd9.2
or dword [r12], 2
or dword [r12 + 4], 0x1d
jmp case.0x14009acd9.2
mov ecx, dword [r12]
or dword [r12 + 4], 0x100
bts ecx, 9
mov dword [r12], ecx
movzx eax, byte [r13 + 8]
sub al, 5
cmp al, 1
ja case.0x14009acd9.2
or ecx, 0x20
mov dword [r12], ecx
jmp case.0x14009acd9.2
or dword [r12], 2
or dword [r12 + 4], 1
jmp case.0x14009acd9.2
or dword [r12], 0x282
jmp case.0x14009acd9.2
cmp eax, 0x12
ja case.0x14009acd9.2
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x9c43c]
add rcx, rdx
jmp rcx
or dword [r12 + 4], 0x20
jmp case.0x14009acd9.2
or dword [r12], 4
or dword [r12 + 4], 8
jmp case.0x14009acd9.2
mov rcx, qword [r13]
test rcx, rcx
je 0x14009ac61
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x14009acd9.2
or dword [r12 + 4], 0x200
jmp case.0x14009acd9.2
mov ecx, dword [r12]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je case.0x14009acd9.2
btr ecx, 9
mov dword [r12], ecx
jmp case.0x14009acd9.2
or dword [r12 + 4], 0x82
jmp case.0x14009acd9.2
lea rdx, str.Left
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009adba
movzx eax, byte [r13 + 8]
test dil, dil
je 0x14009ad3b
movzx eax, al
dec eax
cmp eax, 0x12
ja case.0x14009acd9.2
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x9c488]
add rcx, rdx
jmp rcx
or dword [r12 + 4], 4
or dword [r12], 8
jmp case.0x14009acd9.2
mov ecx, dword [r12 + 4]
or dword [r12], 0x100
bts ecx, 9
mov dword [r12 + 4], ecx
movzx eax, byte [r13 + 8]
sub al, 5
cmp al, 1
ja case.0x14009acd9.2
or ecx, 0x20
mov dword [r12 + 4], ecx
jmp case.0x14009acd9.2
or dword [r12 + 4], 3
jmp case.0x14009acd9.2
or dword [r12], 0x280
or dword [r12 + 4], 2
jmp case.0x14009acd9.2
cmp al, 3
jb case.0x14009acd9.2
cmp al, 6
jbe 0x14009ad65
cmp al, 0x11
je case.0x14009ab72.16
cmp al, 0x13
jne case.0x14009acd9.2
or dword [r12 + 4], 0x80
jmp case.0x14009acd9.2
mov rcx, qword [r13]
test rcx, rcx
je 0x14009ad97
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x14009acd9.2
or dword [r12 + 4], 0x100
jmp case.0x14009acd9.2
mov ecx, dword [r12]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je case.0x14009acd9.2
btr ecx, 8
mov dword [r12], ecx
jmp case.0x14009acd9.2
xor r9d, r9d
mov dword [rsp + 0x20], 0
xor edx, edx
mov rcx, rbx
lea r8d, [r9 + 1]
call fcn.1400ba160
test eax, eax
je 0x14009adf1
mov rcx, rbx
call fcn.140005710
test dil, dil
je 0x14009a9cf
or dword [r12], eax
jmp case.0x14009acd9.2
add rbx, 2
cmp word [rbx], 0
jne 0x14009aea4
test dil, dil
je 0x14009ae24
mov rax, qword [rbp + 0x508]
test rax, rax
je 0x14009ae24
cmp byte [rax + 0x23], 0
jne 0x14009ae1a
mov rax, qword [rax + 0x10]
test byte [rax + 0x21], 2
jne 0x14009aea4
movzx ecx, word [rsi]
call fcn.140016470
movzx eax, ax
cmp eax, 0x43
je 0x14009ae6b
cmp eax, 0x47
je 0x14009ae4f
cmp eax, 0x56
jne 0x14009bd6e
mov qword [r13 + 0x10], 0
jmp case.0x14009acd9.2
mov rcx, qword [r13 + 0x18]
test rcx, rcx
je 0x14009ae5e
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [r13 + 0x18], 0
jmp case.0x14009acd9.2
test dil, dil
jne case.0x14009acd9.2
cmp byte [r13 + 8], 2
je case.0x14009acd9.2
mov rax, qword [rsp + 0x40]
cmp dword [rax], 0xff000000
je case.0x14009acd9.2
mov dword [rax], 0xff000000
mov byte [r12 + 0x1a3], 1
jmp case.0x14009acd9.2
movzx ecx, word [rsi]
call fcn.140016470
movzx eax, ax
add eax, 0xffffffbf
cmp eax, 0x18
ja case.0x14009aece.66
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x9c4d4]
add rcx, rdx
jmp rcx
movzx eax, byte [r13 + 8]
cmp al, 3
je 0x14009bd14
cmp al, 0x12
je 0x14009bd14
mov rcx, qword [r15 + 0x128]
test rcx, rcx
je 0x14009af4d
lea rax, [rsp + 0x68]
mov dword [rsp + 0x78], 0
mov qword [rbp - 0x78], rax
lea rdx, [rbp - 0x78]
lea rax, [rbp + 0x70]
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x50], rax
lea r8, [rbp]
mov qword [rsp + 0x70], 0xffffffffffffffff
xor r9d, r9d
mov rax, qword [rcx]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdx
lea rdx, [rsp + 0x48]
call qword [rax + reloc.WSOCK32.dll_getservbyport]
cmp dword [rsp + 0x58], 6
jne 0x14009af4d
mov rdi, qword [rsp + 0x48]
test rdi, rdi
jne 0x14009af8e
mov r8, qword [rbp + 0x508]
lea rcx, [0x140116fb0]
mov r9d, 4
mov rdx, rbx
call fcn.14003d4f0
mov rdi, rax
test rax, rax
jne 0x14009af8e
lea rdx, [0x1400f2850]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009bd0b
or byte [r13 + 9], 1
movzx eax, byte [r13 + 8]
dec al
cmp al, 1
ja 0x14009afa1
or dword [r12], 0x100
test rdi, rdi
je 0x14009afaf
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.WSOCK32.dll_htonl]
mov rcx, qword [r13 + 0x18]
test rcx, rcx
je 0x14009afbe
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [r13 + 0x18], rdi
jmp case.0x14009acd9.2
cmp dword [r12 + 0x150], 0x32
jae case.0x14009acd9.2
mov rcx, rbx
call fcn.140005710
mov rcx, rax
mov eax, dword [r12 + 0x150]
mov dword [r12 + rax*4 + 0x88], ecx
inc dword [r12 + 0x150]
jmp case.0x14009acd9.2
mov rcx, qword [r15 + 0x128]
test rcx, rcx
je 0x14009b108
xor esi, esi
mov qword [rsp + 0x70], 0xffffffffffffffff
lea rax, [rsp + 0x48]
mov qword [rsp + 0x50], 0xffffffffffffffff
mov qword [rbp - 0x60], rax
lea rdx, [rbp - 0x60]
lea rax, [rsp + 0x68]
mov dword [rsp + 0x58], esi
mov qword [rbp - 0x58], rax
lea r9d, [rsi + 2]
lea rax, str.HasKey
mov dword [rsp + 0x78], esi
mov qword [rsp + 0x48], rax
lea r8, [rbp]
mov qword [rsp + 0x68], rbx
mov rax, qword [rcx]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x20]
call qword [rax + reloc.WSOCK32.dll_getservbyport]
cmp qword [rbp - 0x20], rsi
jne 0x14009bd1d
mov rcx, qword [r15 + 0x128]
lea rax, [0x1400da7a4]
mov dword [rsp + 0x58], esi
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x48], rbx
lea r9d, [rsi + 1]
mov dword [rsp + 0x78], esi
lea r8, [rbp]
mov qword [rsp + 0x68], rax
mov rax, qword [rcx]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x20]
call qword [rax + reloc.WSOCK32.dll_getservbyport]
mov rcx, 0xffffffffffffffff
cmp word [rbx + rcx*2 + 2], si
lea rcx, [rcx + 1]
jne 0x14009b0c4
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
mov qword [r13 + 0x50], rax
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbx]
lea rbx, [rbx + 2]
mov word [rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14009b0f0
jmp case.0x14009acd9.2
mov r9d, 3
lea rcx, [0x140116fb0]
xor r8d, r8d
mov rdx, rbx
call fcn.140048640
mov r8, rax
test rax, rax
je 0x14009bd84
cmp byte [rax + 0x23], 0
jne 0x14009b136
mov r8, qword [rax + 0x10]
movzx eax, byte [r8 + 0x22]
and al, 0x22
cmp al, 2
je 0x14009bd65
mov r9d, dword [r15 + 0x20]
xor edx, edx
test r9d, r9d
je 0x14009b16c
mov r10, qword [r15 + 0x28]
mov eax, edx
imul rcx, rax, 0x58
cmp qword [rcx + r10 + 0x10], r8
je 0x14009bd34
inc edx
cmp edx, r9d
jb 0x14009b154
mov qword [r13 + 0x10], r8
jmp case.0x14009acd9.2
cmp byte [r13 + 8], 2
je case.0x14009acd9.2
mov rcx, rbx
call fcn.1400bb820
mov ecx, eax
cmp eax, 0xffffffff
jne 0x14009b1a7
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
mov ecx, eax
call fcn.140059420
mov ecx, eax
mov rdx, qword [rsp + 0x40]
cmp dword [rdx], ecx
jne 0x14009b1be
lea rax, [r12 + 0x70]
cmp rdx, rax
jne case.0x14009acd9.2
mov dword [rdx], ecx
mov byte [r12 + 0x1a3], 1
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x50
jne 0x14009b218
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov ecx, eax
je 0x14009b205
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [r15 + 0xd0]
add eax, ecx
mov dword [r12 + 0x30], eax
jmp case.0x14009acd9.2
mov rcx, rbx
call fcn.14001c140
cmp byte [r15 + 0x110], 0
je 0x14009b243
cmp eax, 0xffffffff
je 0x14009b243
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r12 + 0x30], eax
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x50
jne 0x14009b297
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov ecx, eax
je 0x14009b284
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [r15 + 0xd4]
add eax, ecx
mov dword [r12 + 0x34], eax
jmp case.0x14009acd9.2
mov rcx, rbx
call fcn.14001c140
cmp byte [r15 + 0x110], 0
je 0x14009b2c2
cmp eax, 0xffffffff
je 0x14009b2c2
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r12 + 0x34], eax
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
cmp cx, 0x2b
jne 0x14009b3b8
movzx ecx, word [rsi + 4]
call fcn.140016470
cmp ax, 0x4d
jne 0x14009b2f1
mov edi, dword [r15 + 0xc0]
jmp 0x14009b31c
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov edi, eax
je 0x14009b31c
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, eax
movzx edx, byte [r13 + 0xa]
mov rcx, r15
call fcn.1400a3260
mov rbx, rax
test rax, rax
je 0x14009b383
movzx r8d, byte [r13 + 0xb]
mov rcx, r15
movzx edx, byte [r13 + 0xa]
call fcn.1400a33e0
test eax, eax
jne 0x14009b383
mov rdx, qword [rbx]
lea r8, [rbp - 0x50]
mov rcx, r15
call fcn.1400a3410
mov ecx, dword [rbp - 0x50]
add ecx, edi
cmp dword [r12 + 0x2c], 0x80000000
mov dword [r12 + 0x28], ecx
jne case.0x14009acd9.2
mov ecx, dword [r15 + 0xc4]
add ecx, dword [rbp - 0x4c]
mov dword [r12 + 0x2c], ecx
jmp case.0x14009acd9.2
mov eax, dword [r15 + 0xd0]
add eax, dword [r15 + 0xc8]
add eax, edi
cmp dword [r12 + 0x2c], 0x80000000
mov dword [r12 + 0x28], eax
jne case.0x14009acd9.2
mov eax, dword [r15 + 0xcc]
mov dword [r12 + 0x2c], eax
jmp case.0x14009acd9.2
call fcn.140016470
cmp ax, 0x4d
jne 0x14009b3fd
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov ecx, eax
je 0x14009b3ec
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r15 + 0xc0]
mov dword [r12 + 0x28], ecx
jmp 0x14009b4f5
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x50
jne 0x14009b460
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov ecx, eax
je 0x14009b434
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r15 + 0xc8]
cmp dword [r12 + 0x2c], 0x80000000
mov dword [r12 + 0x28], ecx
jne case.0x14009acd9.2
mov eax, dword [r15 + 0xcc]
mov dword [r12 + 0x2c], eax
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x53
jne 0x14009b4ca
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov ecx, eax
je 0x14009b497
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r15 + 0xe0]
cmp dword [r12 + 0x2c], 0x80000000
mov dword [r12 + 0x28], ecx
jne case.0x14009acd9.2
mov eax, dword [r15 + 0xec]
add eax, dword [r15 + 0xc4]
mov dword [r12 + 0x2c], eax
jmp case.0x14009acd9.2
mov rcx, rbx
call fcn.14001c140
cmp byte [r15 + 0x110], 0
je 0x14009b4f0
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r12 + 0x28], eax
cmp dword [r12 + 0x2c], 0x80000000
jne case.0x14009acd9.2
mov eax, dword [r15 + 0xdc]
add eax, dword [r15 + 0xc4]
mov dword [r12 + 0x2c], eax
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
cmp cx, 0x2b
jne 0x14009b608
movzx ecx, word [rsi + 4]
call fcn.140016470
cmp ax, 0x4d
jne 0x14009b541
mov edi, dword [r15 + 0xc4]
jmp 0x14009b56c
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov edi, eax
je 0x14009b56c
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, eax
movzx edx, byte [r13 + 0xa]
mov rcx, r15
call fcn.1400a3260
mov rbx, rax
test rax, rax
je 0x14009b5d3
movzx r8d, byte [r13 + 0xb]
mov rcx, r15
movzx edx, byte [r13 + 0xa]
call fcn.1400a33e0
test eax, eax
jne 0x14009b5d3
mov rdx, qword [rbx]
lea r8, [rbp - 0x40]
mov rcx, r15
call fcn.1400a3410
mov ecx, dword [rbp - 0x3c]
add ecx, edi
cmp dword [r12 + 0x28], 0x80000000
mov dword [r12 + 0x2c], ecx
jne case.0x14009acd9.2
mov ecx, dword [r15 + 0xc0]
add ecx, dword [rbp - 0x40]
mov dword [r12 + 0x28], ecx
jmp case.0x14009acd9.2
mov eax, dword [r15 + 0xd4]
add eax, dword [r15 + 0xcc]
add eax, edi
cmp dword [r12 + 0x28], 0x80000000
mov dword [r12 + 0x2c], eax
jne case.0x14009acd9.2
mov eax, dword [r15 + 0xc8]
mov dword [r12 + 0x28], eax
jmp case.0x14009acd9.2
call fcn.140016470
cmp ax, 0x4d
jne 0x14009b64d
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov ecx, eax
je 0x14009b63c
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r15 + 0xc4]
mov dword [r12 + 0x2c], ecx
jmp 0x14009b745
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x50
jne 0x14009b6b0
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov ecx, eax
je 0x14009b684
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r15 + 0xcc]
cmp dword [r12 + 0x28], 0x80000000
mov dword [r12 + 0x2c], ecx
jne case.0x14009acd9.2
mov eax, dword [r15 + 0xc8]
mov dword [r12 + 0x28], eax
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x53
jne 0x14009b71a
lea rcx, [rsi + 4]
call fcn.14001c140
cmp byte [r15 + 0x110], 0
mov ecx, eax
je 0x14009b6e7
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r15 + 0xe4]
cmp dword [r12 + 0x28], 0x80000000
mov dword [r12 + 0x2c], ecx
jne case.0x14009acd9.2
mov eax, dword [r15 + 0xe8]
add eax, dword [r15 + 0xc0]
mov dword [r12 + 0x28], eax
jmp case.0x14009acd9.2
mov rcx, rbx
call fcn.14001c140
cmp byte [r15 + 0x110], 0
je 0x14009b740
mov edx, dword [0x140116f84]
mov r8d, WSAAsyncSelect
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r12 + 0x2c], eax
cmp dword [r12 + 0x28], 0x80000000
jne case.0x14009acd9.2
mov eax, dword [r15 + 0xd8]
add eax, dword [r15 + 0xc0]
mov dword [r12 + 0x28], eax
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x58
jne 0x14009b8a3
movzx ecx, word [rsi + 4]
lea rdi, [rsi + 4]
call fcn.140016470
cmp ax, 0x52
jne 0x14009b79f
mov byte [r12 + 0x1c0], 1
jmp case.0x14009acd9.2
movzx ecx, word [rdi]
call fcn.140016470
cmp ax, 0x41
jne 0x14009b7bb
mov byte [r12 + 0x1c2], 1
jmp case.0x14009acd9.2
movzx ecx, word [rdi]
call fcn.140016470
cmp ax, 0x50
jne 0x14009b7db
mov eax, 1
mov dword [r12 + 0x1b0], eax
jmp case.0x14009acd9.2
cmp word [rdi], 0
jne 0x14009b7f2
mov dword [r12 + 0x1b0], 0x3f800000
jmp case.0x14009acd9.2
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009b885
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009b885
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.14001c140
test eax, eax
je 0x14009b885
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
mov rcx, rdi
mov rbx, rax
call fcn.14001c140
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.14001c140
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [r12 + 0x1b0], xmm6
jp case.0x14009acd9.2
jne case.0x14009acd9.2
mov rcx, rdi
call fcn.14002f9b0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [r12 + 0x1b0], xmm1
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x59
jne 0x14009b9da
movzx ecx, word [rsi + 4]
lea rdi, [rsi + 4]
call fcn.140016470
cmp ax, 0x52
jne 0x14009b8d6
mov byte [r12 + 0x1c1], 1
jmp case.0x14009acd9.2
movzx ecx, word [rdi]
call fcn.140016470
cmp ax, 0x41
jne 0x14009b8f2
mov byte [r12 + 0x1c3], 1
jmp case.0x14009acd9.2
movzx ecx, word [rdi]
call fcn.140016470
cmp ax, 0x50
jne 0x14009b912
mov eax, 1
mov dword [r12 + 0x1b4], eax
jmp case.0x14009acd9.2
cmp word [rdi], 0
jne 0x14009b929
mov dword [r12 + 0x1b4], 0x3f800000
jmp case.0x14009acd9.2
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009b9bc
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009b9bc
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.14001c140
test eax, eax
je 0x14009b9bc
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
mov rcx, rdi
mov rbx, rax
call fcn.14001c140
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.14001c140
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [r12 + 0x1b4], xmm6
jp case.0x14009acd9.2
jne case.0x14009acd9.2
mov rcx, rdi
call fcn.14002f9b0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [r12 + 0x1b4], xmm1
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x57
jne 0x14009baf1
movzx ecx, word [rsi + 4]
lea rdi, [rsi + 4]
call fcn.140016470
cmp ax, 0x52
jne 0x14009ba0d
mov byte [r12 + 0x1c0], 1
jmp case.0x14009acd9.2
movzx ecx, word [rdi]
call fcn.140016470
cmp ax, 0x41
jne 0x14009ba29
mov byte [r12 + 0x1c4], 1
jmp case.0x14009acd9.2
cmp word [rdi], 0
jne 0x14009ba40
mov dword [r12 + 0x1b8], 0x3f800000
jmp case.0x14009acd9.2
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009bad3
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009bad3
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.14001c140
test eax, eax
je 0x14009bad3
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
mov rcx, rdi
mov rbx, rax
call fcn.14001c140
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.14001c140
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [r12 + 0x1b8], xmm6
jp case.0x14009acd9.2
jne case.0x14009acd9.2
mov rcx, rdi
call fcn.14002f9b0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [r12 + 0x1b8], xmm1
jmp case.0x14009acd9.2
movzx ecx, word [rbx]
call fcn.140016470
cmp ax, 0x48
jne case.0x14009acd9.2
movzx ecx, word [rsi + 4]
lea rdi, [rsi + 4]
call fcn.140016470
cmp ax, 0x52
jne 0x14009bb24
mov byte [r12 + 0x1c1], 1
jmp case.0x14009acd9.2
movzx ecx, word [rdi]
call fcn.140016470
cmp ax, 0x41
jne 0x14009bb40
mov byte [r12 + 0x1c5], 1
jmp case.0x14009acd9.2
cmp word [rdi], 0
jne 0x14009bb57
mov dword [r12 + 0x1bc], 0x3f800000
jmp case.0x14009acd9.2
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009bbe6
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009bbe6
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.14001c140
test eax, eax
je 0x14009bbe6
mov edx, gethostbyaddr
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
mov rcx, rdi
mov rbx, rax
call fcn.14001c140
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.14001c140
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [r12 + 0x1bc], xmm6
jp case.0x14009acd9.2
jne case.0x14009acd9.2
mov rcx, rdi
call fcn.14002f9b0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [r12 + 0x1bc], xmm1
jmp case.0x14009acd9.2
mov rcx, rbx
call fcn.14002f9b0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [r12 + 0x38], xmm1
jmp case.0x14009acd9.2
movzx ecx, word [rsi]
call fcn.140016470
cmp ax, 0x45
jne 0x14009bd6e
xor r9d, r9d
mov dword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400ba160
test eax, eax
je 0x14009bd6e
mov rcx, rbx
call fcn.140005710
test dil, dil
je 0x14009bc5f
or dword [r12 + 8], eax
jmp case.0x14009acd9.2
or dword [r12 + 0xc], eax
mov rax, qword [rsp + 0x38]
movzx ecx, word [rbp + 0x4e8]
mov word [rax], cx
mov rbx, rax
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14009bc85
cmp ax, 9
jne 0x14009bc8b
add rbx, 2
jmp 0x14009bc76
test ax, ax
jne 0x140099580
lea rsi, [0x140000000]
mov r14d, 1
mov rcx, qword [r13]
test rcx, rcx
je 0x14009c363
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r8d, dword [r12]
mov r15d, eax
mov edx, dword [r12 + 4]
mov edi, r8d
or edi, eax
mov eax, edx
not eax
and edi, eax
movzx eax, byte [r13 + 8]
add eax, 0xfffffffe
cmp eax, 8
ja case.0x14009bced.9
cdqe
mov ecx, dword [rsi + rax*4 + 0x9c538]
add rcx, rsi
jmp rcx
lea r8, [rbx - 2]
lea rdx, str.The_same_variable_cannot_be_used_for_more_than_one_control.
lea rcx, [0x140116fb0]
call fcn.140057630
jmp 0x14009c368
lea rdx, str.Target_label_does_not_exist.
jmp 0x14009bd3b
lea rdx, str.This_control_type_should_not_have_an_associated_subroutine.
jmp 0x14009bd3b
cmp qword [r13], rsi
je 0x14009bd2f
mov cl, 1
call fcn.140056ee0
jmp 0x14009c368
mov r8, r14
jmp 0x14009bcf3
lea rdx, str.The_same_variable_cannot_be_used_for_more_than_one_control.
mov rax, qword [rsp + 0x38]
movzx ecx, word [rbp + 0x4e8]
mov word [rax], cx
cmp qword [r13], 0
jne 0x14009bd23
mov r8, r14
lea rcx, [0x140116fb0]
call fcn.140057630
jmp 0x14009c368
lea rdx, str.A_controls_variable_must_be_global_or_static.
jmp 0x14009bd75
lea rdx, str.Invalid_option.
mov r8, r14
lea rcx, [0x140116fb0]
call fcn.140057630
mov rax, qword [rsp + 0x38]
movzx ecx, word [rbp + 0x4e8]
mov word [rax], cx
xor eax, eax
jmp 0x14009c368
mov eax, edi
xor eax, r15d
and eax, 0xf
xor edi, eax
jmp case.0x14009bced.9
and edi, 0xfffffff7
or edi, 7
jmp case.0x14009bced.9
test dil, 1
je 0x14009bdc2
and edi, 0xfffffff1
or edi, 1
jmp 0x14009bdc5
and edi, 0xfffffff0
mov rsi, qword [rbp + 0x4e0]
mov ebx, dword [rbp + 0x500]
mov eax, dword [rsi + 0x30]
cmp ebx, eax
jne 0x14009be07
test dl, 1
je case.0x14009bced.9
mov rcx, qword [rsi + 8]
xor r9d, r9d
mov r8, r14
mov dword [rsi + 0x30], 0xffffffff
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
or r15d, 1
jmp case.0x14009bced.9
test r8b, 1
je case.0x14009bced.9
cmp eax, dword [rsi + 0x20]
jae 0x14009be54
mov rcx, qword [rsi + 0x28]
mov edx, 0xfffffff0
imul r8, rax, 0x58
mov rcx, qword [r8 + rcx]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [rsi + 0x28]
mov r9, r14
mov r8d, eax
mov edx, 0xf4
mov eax, dword [rsi + 0x30]
and r8d, 0xfffe
imul r10, rax, 0x58
mov rcx, qword [r10 + rcx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsi + 8]
lea r8d, [rbx + 3]
xor r9d, r9d
mov dword [rsi + 0x30], ebx
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x14009bced.9
mov eax, edi
and eax, 6
cmp al, 6
jne 0x14009be80
and edi, 0xfffffff6
or edi, 6
jmp case.0x14009bced.9
and edi, 0xfffffff3
or edi, 3
jmp case.0x14009bced.9
and edi, 0xfffffff9
or edi, 9
jmp case.0x14009bced.9
test dil, 1
je 0x14009be9e
and edi, 0xfffffff1
or edi, 1
jmp case.0x14009bced.9
and edi, 0xfffffff2
or edi, 2
jmp case.0x14009bced.9
mov eax, dword [r12 + 0x14]
cmp eax, 0xffffffff
je case.0x14009bced.9
mov rcx, qword [r13]
mov r8d, eax
xor r9d, r9d
mov edx, 0x108e
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [r12 + 0x14]
cmp eax, 4
je case.0x14009bced.9
and edi, 0xfffffffc
or edi, eax
movsxd rax, dword [r12 + 0x78]
test eax, eax
je 0x14009bf42
movzx ecx, byte [r13 + 8]
cmp cl, 0xc
jne 0x14009bf19
mov rcx, qword [r13]
xor r9d, r9d
mov edx, 0xc5
test eax, eax
jns 0x14009bf39
xor r8d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [r12 + 0x78], 0x80000000
je 0x14009bf42
test dil, 4
jne 0x14009bf42
and edi, 0xffefff7f
jmp 0x14009bf42
cmp cl, 0xf
jne 0x14009bf42
mov rcx, qword [r13]
mov edx, 0x403
test eax, eax
jns 0x14009bf33
xor r9d, r9d
xor r8d, r8d
jmp 0x14009bf3c
mov r9d, 6
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
xor r14b, r14b
cmp r15d, edi
je 0x14009c04f
movzx eax, byte [r13 + 8]
xor sil, sil
mov r14b, 1
cmp al, 4
je 0x14009bff1
cmp al, 9
je 0x14009bf92
cmp al, 0x12
jne 0x14009bfea
mov rcx, qword [r13]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x4e8], eax
mov ebx, 1
jmp 0x14009c00c
mov eax, r15d
and eax, 0x100000
bt edi, 0x14
jae 0x14009bfd1
test eax, eax
jne 0x14009bfea
mov eax, dword [r12 + 0x7c]
test eax, eax
jns 0x14009bfc9
mov rcx, qword [r13]
lea rdx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp - 0x28]
sub eax, dword [rbp - 0x30]
lea eax, [rax + rax*2]
mov dword [r12 + 0x7c], eax
movsxd r8, eax
xor r9d, r9d
jmp 0x14009bfdb
test eax, eax
je 0x14009bfea
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [r13]
mov edx, 0x194
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, 1
jmp 0x14009c00c
mov rcx, qword [r13]
mov ebx, 1
mov r9d, ebx
movzx r8d, di
mov edx, 0xf4
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [r13]
mov r8d, edi
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x14009c034
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14009c056
mov rcx, qword [r13]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, r15d
movzx esi, sil
cmovne esi, ebx
jmp 0x14009c056
movzx esi, byte [rbp + 0x4f8]
mov rcx, qword [r13]
mov edx, 0xffffffec
movzx r12d, r14b
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r13d, eax
mov rax, qword [rbp + 0x4f0]
mov ebx, dword [rax + 8]
mov eax, dword [rax + 0xc]
or ebx, r13d
not eax
and ebx, eax
cmp r13d, ebx
je 0x14009c0ea
movzx eax, r14b
mov ecx, 1
test r14b, r14b
cmove eax, ecx
xor ecx, ecx
movzx r14d, al
and r12b, sil
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, ebx
mov edx, 0xffffffec
mov rbx, qword [rbp + 0x4f8]
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x14009c0cd
movzx esi, r12b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14009c0ea
mov rcx, qword [rbx]
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, r13d
movzx esi, r12b
mov eax, 1
cmovne esi, eax
mov r12, qword [rbp + 0x4f8]
movzx r13d, r14b
cmp byte [r12 + 8], 0xa
jne 0x14009c199
mov rcx, qword [r12]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, qword [rbp + 0x4f0]
mov r12, rax
mov ecx, dword [rbx + 0x10]
cmp eax, ecx
je 0x14009c1a8
mov r9d, ecx
movzx eax, r14b
mov rcx, qword [rbp + 0x4f8]
mov edx, 1
test r14b, r14b
cmove eax, edx
xor r8d, r8d
mov rcx, qword [rcx]
mov edx, 0x1036
movzx r14d, al
call qword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
movzx eax, sil
test r13b, r13b
mov edx, 0x1037
cmovne ebx, eax
mov rax, qword [rbp + 0x4f8]
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
movzx esi, bl
mov r13d, 1
mov rbx, qword [rbp + 0x4f0]
cmp eax, r12d
cmovne esi, r13d
jmp 0x14009c1ae
mov rbx, qword [rbp + 0x4f0]
mov r13d, 1
jmp 0x14009c1b5
mov r13d, 1
mov r12, qword [rbp + 0x4f8]
test r14b, r14b
je 0x14009c1cc
mov eax, dword [rsp + 0x30]
test sil, sil
movzx eax, al
cmovne eax, r13d
mov dword [rsp + 0x30], eax
movzx eax, byte [r12 + 8]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x14009c1f1.13
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x9c55c]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp + 0x4e0]
mov r8, rbx
mov rdx, r12
call fcn.1400a28c0
jmp case.0x14009c1f1.13
mov rcx, qword [rbp + 0x4e0]
mov r8, rbx
mov rdx, r12
call fcn.1400a29e0
test dword [rbx + 4], 0x100
je case.0x14009c1f1.13
xor r9d, r9d
mov edx, 0x41d
jmp 0x14009c2f3
mov rcx, qword [rbp + 0x4e0]
mov r8, rbx
mov rdx, r12
call fcn.1400a2b50
jmp case.0x14009c1f1.13
mov rcx, qword [rbp + 0x4e0]
mov r8, rbx
mov rdx, r12
call fcn.1400a2c30
jmp case.0x14009c1f1.13
mov rcx, qword [rbp + 0x4e0]
mov r9d, edi
mov r8, rbx
mov rdx, r12
call fcn.1400a2ca0
cmp r15d, edi
je case.0x14009c1f1.13
mov r8d, dword [rbp + 0x4e8]
xor r9d, r9d
mov edx, 0x402
jmp 0x14009c2f6
mov eax, dword [rbx + 0x150]
test eax, eax
je case.0x14009c1f1.13
mov rcx, qword [r12]
lea r9, [rbx + 0x88]
mov r8d, eax
mov edx, 0xcb
call qword [sym.imp.USER32.dll_SendMessageW]
mov dil, 1
jmp 0x14009c304
mov eax, dword [rbx + 0x150]
test eax, eax
je case.0x14009c1f1.13
mov rcx, qword [r12]
lea r9, [rbx + 0x88]
mov r8d, eax
mov edx, 0x192
call qword [sym.imp.USER32.dll_SendMessageW]
mov dil, 1
jmp 0x14009c304
mov eax, dword [rbx + 0x74]
cmp eax, 0xffffffff
je case.0x14009c1f1.13
mov r9d, eax
mov edx, 0x2001
xor r8d, r8d
mov rcx, qword [r12]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [rsp + 0x30]
mov eax, dword [rbx + 0x19c]
test eax, eax
je 0x14009c33e
mov rcx, qword [r12]
cmp eax, 3
mov eax, 0
sete al
xor r9d, r9d
mov r8, rax
lea edx, [r9 + 0xb]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rbx + 0x19c], 3
jne 0x14009c33e
cmp byte [r12 + 8], 0xb
jne 0x14009c343
test dil, dil
je 0x14009c352
mov rcx, qword [r12]
mov r8d, r13d
xor edx, edx
call qword [sym.imp.USER32.dll_InvalidateRect]
test r14b, r14b
je 0x14009c363
test sil, sil
jne 0x14009c363
mov cl, 1
call fcn.140056ee0
mov eax, 1
movaps xmm7, xmmword [rsp + 0x570]
movaps xmm6, xmmword [rsp + 0x580]
mov rdi, qword [rsp + 0x598]
add rsp, 0x5a0
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbx
pop rbp
ret