Function at 0x140066e00
Capabilities:
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
movzx eax, byte [r9 + 8]
mov r13, r9
sub al, 2
mov r12, r8
test al, 0xf7
mov rbx, rdx
lea rax, [r9 + 0x20]
mov rbp, rcx
jne 0x140066e36
lea rax, [r8 + 0x70]
xor r15d, r15d
mov qword [rsp + 0xe8], rax
lea rdi, [0x140000000]
mov qword [rsp + 0xf0], rsi
lea r14d, [r15 + 1]
cmp word [rdx], r15w
je 0x140068dc0
nop
movzx eax, word [rbx]
cmp ax, 0x2d
jne 0x140066e6e
xor dil, dil
jmp 0x140066e77
mov dil, 1
cmp ax, 0x2b
jne 0x140066e7b
add rbx, 2
movzx edx, word [rbx]
test dx, dx
je 0x140068db3
mov r14, rbx
nop word [rax + rax]
lea rcx, [0x1400d18a0]
mov eax, SafeArrayAllocDescriptor
nop dword [rax]
cmp dx, ax
je 0x140066ed2
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x140066ea0
movzx edx, word [r14 + 2]
add r14, 2
test dx, dx
jne 0x140066e90
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x140066ec4
lea r14, [rbx + rax*2]
cmp r14, rbx
je 0x140068d91
movzx esi, word [r14]
lea rdx, [0x1400da988]
mov rcx, rbx
mov word [r14], r15w
call fcn.140099630
test eax, eax
jne 0x140066f04
mov byte [r12 + 0x1a4], 1
jmp case.0x1400683cf.2
lea rdx, [0x1400da998]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140066f31
cmp byte [r13 + 8], 0xc
je 0x140066f31
test dil, dil
je 0x14006791f
or byte [r13 + 9], 2
jmp case.0x1400683cf.2
mov r8d, 7
lea rdx, [0x1400d9a60]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140066fdc
lea rdx, [0x1400da9b0]
lea rcx, [rbx + 0xe]
call fcn.140099630
test eax, eax
jne 0x140066f77
neg dil
sbb eax, eax
and eax, 2
mov dword [r12 + 0x80], eax
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0xa
jne 0x140066f99
test dil, dil
je 0x140066f8e
or dword [r12 + 0x10], 4
jmp case.0x1400683cf.2
and dword [r12 + 0x10], 0xfffffffb
jmp case.0x1400683cf.2
cmp word [rbx + 0xe], r15w
je 0x140066fcb
lea rcx, [rbx + 0xe]
call fcn.14000e350
mov dword [r12 + 0x80], eax
cmp eax, 0xffffffff
jne case.0x1400683cf.2
mov dword [r12 + 0x80], 2
jmp case.0x1400683cf.2
movzx eax, dil
mov dword [r12 + 0x80], eax
jmp case.0x1400683cf.2
mov r8d, 6
lea rdx, [0x1400d9990]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x1400670a7
test dil, dil
je case.0x1400683cf.2
movzx ecx, byte [r13 + 8]
add rbx, 0xc
sub ecx, 0xd
je 0x14006705d
cmp ecx, 1
mov rcx, rbx
je 0x140067035
call fcn.14000e350
mov dword [r12 + 0x3c], eax
cmp eax, 1
jge case.0x1400683cf.2
mov dword [r12 + 0x3c], r15d
jmp case.0x1400683cf.2
lea rdx, [r12 + 0x154]
call fcn.1400798c0
mov dword [r12 + 0x194], eax
cmp eax, 3
jne case.0x1400683cf.2
or dword [r12], 2
jmp case.0x1400683cf.2
lea rdx, [0x1400da9c0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x14006707e
mov dword [r12 + 0x3c], 2
jmp case.0x1400683cf.2
lea rdx, [r12 + 0x154]
mov r8b, 1
mov rcx, rbx
call fcn.140079990
test eax, eax
je case.0x1400683cf.2
mov dword [r12 + 0x3c], 1
jmp case.0x1400683cf.2
lea rdx, [0x1400da830]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400670da
test dil, dil
je 0x1400670cc
or dword [r12], 0x800000
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x800000
jmp case.0x1400683cf.2
lea rdx, [0x1400da9d0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x14006710d
test dil, dil
je 0x1400670ff
or dword [r12], 0x200000
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x200000
jmp case.0x1400683cf.2
mov r8d, 7
lea rdx, [0x1400da9e0]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067186
cmp byte [r13 + 8], 0xb
jne 0x140067144
test dil, dil
je 0x14006762c
or dword [r12 + 4], 0x8000
jmp case.0x1400683cf.2
test dil, dil
je 0x140067178
or dword [r12], 0x100000
cmp word [rbx + 0xe], r15w
je 0x14006716b
lea rcx, [rbx + 0xe]
call fcn.14000e350
mov dword [r12 + 0x7c], eax
jmp case.0x1400683cf.2
or eax, 0xffffffff
mov dword [r12 + 0x7c], eax
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x100000
jmp case.0x1400683cf.2
lea rdx, [0x1400da9f0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400671ab
test dil, dil
je 0x1400671c3
or dword [r12], 0x10000
jmp case.0x1400683cf.2
lea rdx, [0x1400daa00]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400671d1
test dil, dil
je 0x14006719e
or dword [r12 + 4], 0x10000
jmp case.0x1400683cf.2
lea rdx, [0x1400daa10]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400671fa
test dil, dil
je 0x1400674a7
or dword [r12], 0x20000
jmp case.0x1400683cf.2
lea rdx, [0x1400d8138]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067222
neg dil
sbb eax, eax
add eax, 4
mov dword [r12 + 0x19c], eax
jmp case.0x1400683cf.2
mov r8d, 8
lea rdx, [0x1400da868]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067293
cmp word [rbx + 0x10], r15w
lea rcx, [rbx + 0x10]
je 0x140067256
call fcn.14000e350
test eax, eax
jne 0x140067256
test dil, dil
sete dil
mov rcx, qword [r13]
test rcx, rcx
je 0x140067273
test dil, dil
mov edx, r15d
sete dl
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.0x1400683cf.2
test dil, dil
je 0x140067285
or dword [r12], 0x8000000
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x8000000
jmp case.0x1400683cf.2
mov r8d, 6
lea rdx, [0x1400daa20]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067307
cmp word [rbx + 0xc], r15w
lea rcx, [rbx + 0xc]
je 0x1400672c7
call fcn.14000e350
test eax, eax
jne 0x1400672c7
test dil, dil
sete dil
mov rcx, qword [r13]
test rcx, rcx
je 0x1400672e7
test dil, dil
mov edx, 4
cmovne edx, r15d
call qword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x1400683cf.2
test dil, dil
je 0x1400672fa
or dword [r12 + 4], 0x10000000
jmp case.0x1400683cf.2
or dword [r12], 0x10000000
jmp case.0x1400683cf.2
lea rdx, [0x1400daa30]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067395
movzx eax, byte [r13 + 8]
dec eax
cmp eax, 0x12
ja case.0x1400683cf.2
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x69440]
add rcx, r8
jmp rcx
test dil, dil
je 0x140067350
or dword [r12 + 4], 0x1f
jmp case.0x1400683cf.2
and dword [r12], 0xffffffec
or dword [r12], 0xc
jmp case.0x1400683cf.2
test dil, dil
je 0x140067372
or dword [r12 + 4], 0x100080
jmp case.0x1400683cf.2
or dword [r12], 0x80
jmp case.0x1400683cf.2
test dil, dil
je 0x14006781e
or dword [r12], 0x200
jmp case.0x1400683cf.2
mov r8d, 0xa
lea rdx, [0x1400daa40]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067470
movzx eax, byte [r13 + 8]
add rbx, 0x14
cmp al, 0x18
ja 0x140067430
movzx eax, al
mov ecx, 0x1040c00
bt ecx, eax
jae 0x140067430
test dil, dil
je 0x140067422
mov rcx, rbx
call fcn.14007b420
mov dword [r12 + 0x74], eax
cmp eax, 0xffffffff
jne case.0x1400683cf.2
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 0x10]
call fcn.14009d670
movzx ecx, ax
shr cx, 8
movzx r8d, cl
mov ecx, eax
shr ecx, 0x10
shl r8d, 8
movzx edx, cl
movzx eax, al
or r8d, edx
shl eax, 0x10
or r8d, eax
mov dword [r12 + 0x74], r8d
jmp case.0x1400683cf.2
mov dword [r12 + 0x74], 0xff000000
jmp case.0x1400683cf.2
test dil, dil
je 0x140067461
and byte [r13 + 9], 0xdf
lea rdx, [0x1400d80b8]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067457
or byte [r13 + 9], 0x40
jmp case.0x1400683cf.2
and byte [r13 + 9], 0xbf
jmp case.0x1400683cf.2
and byte [r13 + 9], 0xbf
or byte [r13 + 9], 0x20
jmp case.0x1400683cf.2
lea rdx, [0x1400daa10]
mov rcx, rbx
call fcn.140099630
test eax, eax
je 0x1400671e4
lea rdx, [0x1400da928]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400674b5
mov byte [r12 + 0x1a5], dil
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x20000
jmp case.0x1400683cf.2
mov r8d, 4
lea rdx, [0x1400d7f58]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x1400674ef
lea rdx, [rbx + 8]
xor r8d, r8d
lea r9d, [rax + 3]
lea rcx, [0x1400f59d0]
call fcn.140022860
mov qword [r12 + 0x20], rax
jmp case.0x1400683cf.2
mov r8d, 4
lea rdx, [0x1400d7f10]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067553
cmp byte [r13 + 8], 0xa
jne 0x140067534
lea rdx, [0x1400daa58]
lea rcx, [rbx + 8]
call fcn.140099630
test eax, eax
mov ecx, 2
cmovne ecx, r15d
mov dword [r12 + 0x14], ecx
jmp case.0x1400683cf.2
test dil, dil
je case.0x1400683cf.2
lea rcx, [rbx + 8]
call fcn.14000e350
mov dword [r12 + 0x84], eax
jmp case.0x1400683cf.2
lea rdx, [0x1400daa68]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067574
mov dword [r12 + 0x14], 1
jmp case.0x1400683cf.2
lea rdx, [0x1400d7fc0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067595
mov dword [r12 + 0x14], 3
jmp case.0x1400683cf.2
lea rdx, [0x1400daa78]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400675b6
mov dword [r12 + 0x14], 4
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0xa
jne 0x14006767b
lea rdx, [0x1400d7528]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400675eb
test dil, dil
je 0x1400679c8
or dword [r12 + 4], 0x4000
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0xa
jne 0x14006767b
mov r8d, 6
lea rdx, [0x1400d7508]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067646
lea rcx, [rbx + 0xc]
lea rdx, [0x1400d7528]
call fcn.140099630
test eax, eax
jne 0x140067639
test dil, dil
je 0x140067136
or dword [r12], 0x8000
jmp case.0x1400683cf.2
mov byte [r12 + 0x1a6], dil
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0xa
jne 0x14006767b
lea rdx, [0x1400daa88]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x14006767b
test dil, dil
je 0x140067670
or dword [r12 + 0x10], 1
jmp case.0x1400683cf.2
and dword [r12 + 0x10], 0xfffffffe
jmp case.0x1400683cf.2
mov r8d, 5
lea rdx, [0x1400d81a8]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x1400676a7
lea rcx, [rbx + 0xa]
call fcn.14000e350
mov dword [r12 + 0x78], eax
jmp case.0x1400683cf.2
mov r8d, 2
lea rdx, [0x1400daa94]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067702
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, [rbx + 4]
xor edx, edx
call fcn.140079dc0
test eax, eax
je case.0x1400683cf.2
lea rcx, [rbx + 4]
call fcn.140014270
test dil, dil
je 0x1400676f6
or dword [r12 + 0x10], eax
jmp case.0x1400683cf.2
not eax
and dword [r12 + 0x10], eax
jmp case.0x1400683cf.2
mov r8d, 9
lea rdx, [0x1400daaa0]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067739
test dil, dil
je case.0x1400683cf.2
lea rcx, [rbx + 0x12]
call fcn.140014270
mov ecx, eax
mov qword [r12 + 0x18], rcx
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 4
jne 0x140067766
lea rdx, [0x1400d1fe0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067766
test dil, dil
je 0x1400682da
or dword [r12], 1
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 5
jne 0x140067793
lea rdx, [0x1400daab8]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067793
test dil, dil
je 0x140067d0c
or dword [r12], 6
jmp case.0x1400683cf.2
lea rdx, [0x1400d9308]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x14006782c
movzx ecx, byte [r13 + 8]
sub ecx, 9
je 0x1400679bf
sub ecx, 1
je 0x140067815
sub ecx, 1
je 0x140067801
cmp ecx, 1
jne case.0x1400683cf.2
mov rcx, qword [r13]
test rcx, rcx
je 0x1400677eb
movzx r8d, dil
xor r9d, r9d
mov edx, 0xcf
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400683cf.2
test dil, dil
je 0x140067887
or dword [r12], 0x800
jmp case.0x1400683cf.2
test dil, dil
je 0x1400679fa
or dword [r12 + 4], 8
jmp case.0x1400683cf.2
test dil, dil
je 0x140067388
or dword [r12 + 4], 0x200
jmp case.0x1400683cf.2
lea rdx, [0x1400daac8]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067895
movzx ecx, byte [r13 + 8]
sub ecx, 9
je 0x1400677eb
sub ecx, 1
je 0x140067873
sub ecx, 2
je 0x140067f4a
cmp ecx, 2
jne case.0x1400683cf.2
test dil, dil
je case.0x14006830f.11
or dword [r12], 2
jmp case.0x1400683cf.2
test dil, dil
je 0x140067f53
or dword [r12 + 4], 4
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x800
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0xc
jne 0x140067929
lea rdx, [0x1400daad8]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400678d3
test dil, dil
je 0x1400678c5
or dword [r12], 0x1000
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x1000
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0xc
jne 0x140067929
lea rdx, [0x1400daaf0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400678fc
test dil, dil
je 0x14006794c
or byte [r13 + 9], 0x80
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0xc
jne 0x140067929
lea rdx, [0x1400dab00]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067929
test dil, dil
je 0x140066f27
and byte [r13 + 9], 0xfd
jmp case.0x1400683cf.2
movzx eax, byte [r13 + 8]
sub al, 0xa
cmp al, 1
ja 0x140067956
lea rdx, [0x1400dab18]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067956
test dil, dil
je 0x1400678f2
and byte [r13 + 9], 0x7f
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0xc
jne 0x140067986
lea rdx, [0x1400d2430]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067986
test dil, dil
je 0x140067a13
or dword [r12], 0x2000
jmp case.0x1400683cf.2
lea rdx, [0x1400dab28]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400679d5
movzx eax, byte [r13 + 8]
cmp al, 0xc
jne 0x1400679b5
test dil, dil
je 0x140067c48
or dword [r12], 0x10
jmp case.0x1400683cf.2
sub al, 7
cmp al, 1
ja case.0x1400683cf.2
test dil, dil
je 0x1400675dd
or dword [r12], 0x4000
jmp case.0x1400683cf.2
lea rdx, [0x1400dab40]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067a21
movzx eax, byte [r13 + 8]
cmp al, 0xc
jne 0x140067a04
test dil, dil
je 0x14006780a
or dword [r12], 8
jmp case.0x1400683cf.2
sub al, 7
cmp al, 1
ja case.0x1400683cf.2
jmp case.0x14006733e.3
or dword [r12 + 4], 0x2000
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0xc
jne 0x140067ac2
mov r8d, 8
lea rdx, [0x1400dab58]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067ac2
movzx eax, word [rbx + 0x10]
mov word [r12 + 0x1a0], ax
test dil, dil
je 0x140067a99
or dword [r12], 0x20
cmp qword [r13], r15
je case.0x1400683cf.2
test ax, ax
jne 0x140067a79
mov eax, 0x2a
mov word [r12 + 0x1a0], ax
movzx r8d, word [r12 + 0x1a0]
xor r9d, r9d
mov rcx, qword [r13]
mov edx, 0xcc
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x20
mov rcx, qword [r13]
test rcx, rcx
je case.0x1400683cf.2
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcc
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400683cf.2
mov r8d, 5
lea rdx, [0x1400dab70]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067b15
test dil, dil
je 0x140067b07
cmp word [rbx + 0xa], r15w
je 0x140067afa
lea rcx, [rbx + 0xa]
call fcn.14000e350
mov dword [r12 + 0x78], eax
jmp case.0x1400683cf.2
or eax, 0xffffffff
mov dword [r12 + 0x78], eax
jmp case.0x1400683cf.2
mov dword [r12 + 0x78], 0x80000000
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 8
jne 0x140067b42
lea rdx, [0x1400dab80]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067b42
test dil, dil
je 0x1400682da
or dword [r12], 1
jmp case.0x1400683cf.2
mov r8d, 4
lea rdx, [0x1400be978]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067bb8
movzx eax, byte [r13 + 8]
cmp al, 7
jb case.0x1400683cf.2
cmp al, 8
jbe 0x140068073
cmp al, 9
je 0x140067860
cmp al, 0xa
jne case.0x1400683cf.2
test dil, dil
je 0x140067bad
lea rcx, [rbx + 8]
lea rdx, [0x1400d74d8]
call fcn.140099630
test eax, eax
mov ecx, SafeArrayAllocDescriptor
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmovne ecx, eax
or dword [r12], ecx
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x30
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x10
jne 0x140067bee
lea rdx, [0x1400dab90]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067bee
test dil, dil
je 0x140067d90
mov eax, dword [r12]
and eax, 0xffffffef
or eax, 0x40
mov dword [r12], eax
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x11
jne 0x140067ca4
lea rdx, [0x1400daba0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067c1f
test dil, dil
je 0x14006794c
or byte [r13 + 9], 0x80
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x11
jne 0x140067ca4
lea rdx, [0x1400dabb0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067c53
test dil, dil
je 0x140067c48
or dword [r12], 0x10
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x10
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x11
jne 0x140067ca4
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rdx, [0x1400dabc0]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067ca4
test dil, dil
je 0x140067c90
or dword [r12], 1
lea rcx, [rbx + 0x18]
call fcn.14000e350
mov dword [r12 + 0x48], eax
jmp case.0x1400683cf.2
or dword [r12 + 4], 1
mov dword [r12 + 0x48], 0xffffffff
jmp case.0x1400683cf.2
mov r8d, 4
lea rdx, [0x1400d2000]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067d17
movzx eax, byte [r13 + 8]
cmp al, 0x11
jne 0x140067ce2
test dil, dil
je case.0x1400683cf.2
lea rcx, [rbx + 8]
call fcn.14000e350
mov dword [r12 + 0x4c], eax
jmp case.0x1400683cf.2
cmp al, 0xb
jne case.0x1400683cf.2
movzx ecx, word [rbx + 8]
call fcn.14000a640
cmp ax, 0x53
jne case.0x1400683cf.2
test dil, dil
je 0x140067d0c
or dword [r12], 6
jmp case.0x1400683cf.2
or dword [r12 + 4], 6
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x11
jne 0x140067d9b
mov r8d, 4
lea rdx, [0x1400dabe0]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067d53
test dil, dil
je case.0x1400683cf.2
lea rcx, [rbx + 8]
call fcn.14000e350
mov dword [r12 + 0x50], eax
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x11
jne 0x140067d9b
mov r8d, 5
lea rdx, [0x1400dabf0]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067d9b
test dil, dil
je 0x140067d90
or dword [r12], 0x40
lea rcx, [rbx + 0xa]
call fcn.14000e350
mov dword [r12 + 0x54], eax
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x40
jmp case.0x1400683cf.2
mov r8d, 7
lea rdx, [0x1400be590]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067e4a
cmp byte [r13 + 8], 0x11
jne case.0x1400683cf.2
test dil, dil
je 0x14006847d
mov dword [r12 + 0x58], 0xffffffff
movzx ecx, word [rbx + 0xe]
call fcn.14000a640
movzx eax, ax
cmp eax, 0x42
je 0x140067e12
cmp eax, 0x4c
je 0x140067e07
cmp eax, 0x52
je 0x140067dfc
cmp eax, 0x54
jne 0x140067e1b
mov dword [r12 + 0x58], r15d
jmp 0x140067e1b
mov dword [r12 + 0x58], 3
jmp 0x140067e1b
mov dword [r12 + 0x58], 1
jmp 0x140067e1b
mov dword [r12 + 0x58], 2
mov eax, dword [r12 + 0x58]
test eax, eax
jns 0x140067e36
or dword [r12], 0x100
mov dword [r12 + 0x58], r15d
jmp case.0x1400683cf.2
inc eax
or dword [r12], 0x100
mov dword [r12 + 0x58], eax
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x11
jne 0x140067f13
mov r8d, 5
lea rdx, [0x1400dac00]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x140067f13
test dil, dil
je case.0x1400683cf.2
movzx edi, word [rbx + 0xa]
test di, di
je case.0x1400683cf.2
lea rdx, [rbx + 0xc]
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [0x1400f59d0]
call fcn.1400228f0
mov r9, rax
test rax, rax
je case.0x1400683cf.2
cmp byte [rax + 0x23], r15b
jne 0x140067ec1
mov r9, qword [rax + 0x10]
test byte [r9 + 0x22], 2
jne case.0x1400683cf.2
mov eax, dword [rbp + 0x20]
lea r8d, [rax - 1]
cmp r8d, eax
jae case.0x1400683cf.2
nop dword [rax]
mov rax, qword [rbp + 0x28]
lea rcx, [r8 + r8*4]
cmp qword [rax + rcx*8 + 0x10], r9
lea rdx, [rax + rcx*8]
jne 0x140067f05
cmp di, 0x31
jne 0x140067f00
mov qword [r12 + 0x60], rdx
jmp 0x140067f05
mov qword [r12 + 0x68], rdx
dec r8d
cmp r8d, dword [rbp + 0x20]
jb 0x140067ee0
jmp case.0x1400683cf.2
lea rdx, [0x1400dac10]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140067f5d
movzx eax, byte [r13 + 8]
cmp al, 0x11
jne 0x140067f42
test dil, dil
je case.0x14006830f.11
or dword [r12], 2
jmp case.0x1400683cf.2
cmp al, 0x12
jne case.0x1400683cf.2
test dil, dil
je 0x14006787c
or dword [r12], 4
jmp case.0x1400683cf.2
mov r8d, 5
lea rdx, [0x1400dac28]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x14006802a
test dil, dil
je case.0x1400683cf.2
cmp word [rbx + 0xa], r15w
je case.0x1400683cf.2
movzx eax, byte [r13 + 8]
lea rcx, [rbx + 0xa]
sub al, 0xd
cmp al, 1
jbe 0x140067fda
mov byte [r12 + reloc.OLEAUT32.dll_OleCreatePictureIndirect], 1
call fcn.14000e350
mov edx, 0x2d
mov dword [r12 + 0x40], eax
lea rcx, [rbx + 0xc]
call fcn.1400977e8
test rax, rax
je case.0x1400683cf.2
lea rcx, [rax + 2]
call fcn.14000e350
mov dword [r12 + 0x44], eax
jmp case.0x1400683cf.2
lea rdi, [r12 + 0x174]
mov rdx, rdi
call fcn.1400798c0
mov dword [r12 + 0x198], eax
test eax, eax
je case.0x1400683cf.2
mov rcx, qword [r13]
test rcx, rcx
je case.0x1400683cf.2
cmp byte [r13 + 8], 0xd
mov edx, 0x1012
mov r8d, eax
mov r9, rdi
mov eax, 0x1004
cmove edx, eax
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x12
jne 0x140068057
lea rdx, [0x1400dac38]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140068057
test dil, dil
je 0x1400682da
or dword [r12], 1
jmp case.0x1400683cf.2
lea rdx, [0x1400dac48]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400680a4
movzx eax, byte [r13 + 8]
cmp al, 0x13
jne 0x140068089
test dil, dil
je 0x14006847d
or dword [r12], 0x100
jmp case.0x1400683cf.2
cmp al, 0xb
jne case.0x1400683cf.2
test dil, dil
je 0x1400682da
or dword [r12], 1
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x13
jne 0x1400680da
lea rdx, [0x1400d8120]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400680da
test dil, dil
je case.0x14006830f.11
or dword [r12], 2
or dword [r12 + 4], 0x80
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 0x17
jne 0x14006813e
mov r8d, 5
lea rdx, [0x1400d2770]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x14006813e
mov rcx, qword [0x1400f15a0]
lea r8, [rsp + 0x50]
lea rdx, [rbx + 0xa]
call qword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [r12 + 0x1a8], ax
test ax, ax
jne case.0x1400683cf.2
lea r8, [rbx + 0xa]
lea rdx, [0x1400dac58]
lea rcx, [0x1400f59d0]
call fcn.140031460
jmp 0x140069423
lea rdx, [0x1400d74c0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x14006823a
movzx eax, byte [r13 + 8]
test dil, dil
je 0x1400681b8
cmp al, 1
je 0x1400681a8
cmp al, 2
jbe case.0x1400683cf.2
cmp al, 6
jbe 0x14006819b
cmp al, 0xc
je 0x14006818b
cmp al, 0x11
jne case.0x1400683cf.2
or dword [r12], 8
or dword [r12 + 4], 4
jmp case.0x1400683cf.2
or dword [r12], 1
or dword [r12 + 4], 2
jmp case.0x1400683cf.2
or dword [r12], 0x300
jmp case.0x1400683cf.2
or dword [r12], 1
or dword [r12 + 4], 0x1e
jmp case.0x1400683cf.2
cmp al, 1
je case.0x1400683cf.1
cmp al, 2
jbe case.0x1400683cf.2
cmp al, 6
jbe 0x1400681e7
cmp al, 0xc
je 0x1400682da
cmp al, 0x11
jne case.0x1400683cf.2
or dword [r12 + 4], 8
jmp case.0x1400683cf.2
mov rcx, qword [r13]
test rcx, rcx
je 0x140068215
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
jne case.0x1400683cf.2
or dword [r12 + 4], eax
jmp case.0x1400683cf.2
mov ecx, dword [r12]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
jne case.0x1400683cf.2
and ecx, 0xfffffcff
mov dword [r12], ecx
jmp case.0x1400683cf.2
lea rdx, [0x1400c01e0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x14006838f
movzx eax, byte [r13 + 8]
dec eax
test dil, dil
je 0x1400682f2
cmp eax, 0x15
ja case.0x1400683cf.2
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x6948c]
add rcx, r8
jmp rcx
or dword [r12 + 4], 8
or dword [r12], 4
jmp case.0x1400683cf.2
or dword [r12 + 4], 0xc
jmp case.0x1400683cf.2
or dword [r12], 2
or dword [r12 + 4], 0x1d
jmp case.0x1400683cf.2
or dword [r12], 0x200
or dword [r12 + 4], 0x100
movzx eax, byte [r13 + 8]
sub al, 5
cmp al, 1
ja case.0x1400683cf.2
or dword [r12], 0x20
jmp case.0x1400683cf.2
or dword [r12], 2
or dword [r12 + 4], 1
jmp case.0x1400683cf.2
or dword [r12], 0x282
jmp case.0x1400683cf.2
cmp eax, 0x12
ja case.0x1400683cf.2
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x694e4]
add rcx, r8
jmp rcx
or dword [r12 + 4], 0x20
jmp case.0x1400683cf.2
or dword [r12], 4
or dword [r12 + 4], 8
jmp case.0x1400683cf.2
mov rcx, qword [r13]
test rcx, rcx
je 0x14006835e
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x1400683cf.2
or dword [r12 + 4], 0x200
jmp case.0x1400683cf.2
mov ecx, dword [r12]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je case.0x1400683cf.2
btr ecx, 9
mov dword [r12], ecx
jmp case.0x1400683cf.2
or dword [r12 + 4], 0x82
jmp case.0x1400683cf.2
lea rdx, [0x1400c01d0]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x1400684ae
test dil, dil
je 0x14006842a
movzx eax, byte [r13 + 8]
dec eax
cmp eax, 0x12
ja case.0x1400683cf.2
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x69530]
add rcx, r8
jmp rcx
or dword [r12 + 4], 4
or dword [r12], 8
jmp case.0x1400683cf.2
or dword [r12], 0x100
or dword [r12 + 4], 0x200
movzx eax, byte [r13 + 8]
sub al, 5
cmp al, 1
ja case.0x1400683cf.2
or dword [r12 + 4], 0x20
jmp case.0x1400683cf.2
or dword [r12 + 4], 3
jmp case.0x1400683cf.2
or dword [r12], 0x280
or dword [r12 + 4], 2
jmp case.0x1400683cf.2
movzx eax, byte [r13 + 8]
cmp al, 3
jb case.0x1400683cf.2
cmp al, 6
jbe 0x140068459
cmp al, 0x11
je case.0x14006827e.16
cmp al, 0x13
jne case.0x1400683cf.2
or dword [r12 + 4], 0x80
jmp case.0x1400683cf.2
mov rcx, qword [r13]
test rcx, rcx
je 0x14006848b
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x1400683cf.2
or dword [r12 + 4], 0x100
jmp case.0x1400683cf.2
mov ecx, dword [r12]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je case.0x1400683cf.2
btr ecx, 8
mov dword [r12], ecx
jmp case.0x1400683cf.2
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor edx, edx
mov rcx, rbx
lea r8d, [r9 + 1]
call fcn.140079dc0
test eax, eax
je 0x1400684e8
mov rcx, rbx
call fcn.140014270
test dil, dil
je 0x1400684de
or dword [r12], eax
jmp case.0x1400683cf.2
or dword [r12 + 4], eax
jmp case.0x1400683cf.2
add rbx, 2
cmp word [rbx], r15w
jne 0x14006858c
test dil, dil
je 0x140068518
mov rax, qword [rsp + 0x108]
test rax, rax
je 0x140068518
cmp byte [rax + 0x23], r15b
jne 0x140068512
mov rax, qword [rax + 0x10]
test byte [rax + 0x21], 2
jne 0x14006858c
movzx ecx, word [rbx - 2]
call fcn.14000a640
movzx eax, ax
cmp eax, 0x43
je 0x140068550
cmp eax, 0x47
je 0x140068540
cmp eax, 0x56
jne 0x140068e0e
mov qword [r13 + 0x10], r15
jmp case.0x1400683cf.2
lea rcx, [r13 + 0x18]
xor edx, edx
call fcn.14000a830
jmp case.0x1400683cf.2
test dil, dil
jne case.0x1400683cf.2
cmp byte [r13 + 8], 2
je case.0x1400683cf.2
mov rax, qword [rsp + 0xe8]
cmp dword [rax], 0xff000000
je case.0x1400683cf.2
mov dword [rax], 0xff000000
mov byte [r12 + 0x1a3], 1
jmp case.0x1400683cf.2
movzx ecx, word [rbx - 2]
call fcn.14000a640
movzx eax, ax
add eax, 0xffffffbd
cmp eax, 0x16
ja case.0x1400685b8.68
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x6957c]
add rcx, r8
jmp rcx
movzx eax, byte [r13 + 8]
cmp al, 3
je 0x140068e56
cmp al, 0x12
je 0x140068e56
mov r8, qword [rsp + 0x108]
lea rcx, [0x1400f59d0]
mov r9d, 4
mov rdx, rbx
call fcn.14001b650
mov rdi, rax
test rax, rax
jne 0x140068610
lea rdx, [0x1400da110]
mov rcx, rbx
call fcn.140099630
test eax, eax
jne 0x140068e2a
or byte [r13 + 9], 1
movzx eax, byte [r13 + 8]
dec al
cmp al, 1
ja 0x140068623
or dword [r12], 0x100
lea rcx, [r13 + 0x18]
mov rdx, rdi
call fcn.14000a830
jmp case.0x1400683cf.2
cmp dword [r12 + 0x150], 0x32
jae case.0x1400683cf.2
mov rcx, rbx
call fcn.140014270
mov ecx, dword [r12 + 0x150]
mov dword [r12 + rcx*4 + 0x88], eax
inc dword [r12 + 0x150]
jmp case.0x1400683cf.2
mov r9d, 3
lea rcx, [0x1400f59d0]
xor r8d, r8d
mov rdx, rbx
call fcn.140022860
mov r8, rax
test rax, rax
je 0x140068eb6
cmp byte [rax + 0x23], r15b
jne 0x140068696
mov r8, qword [rax + 0x10]
movzx ecx, byte [r8 + 0x22]
and cl, 0x22
cmp cl, 2
je 0x140068e9a
mov r9d, dword [rbp + 0x20]
mov edx, r15d
test r9d, r9d
je 0x1400686d8
mov r10, qword [rbp + 0x28]
nop word [rax + rax]
mov eax, edx
lea rcx, [rax + rax*4]
cmp qword [r10 + rcx*8 + 0x10], r8
je 0x140068e78
inc edx
cmp edx, r9d
jb 0x1400686c0
mov qword [r13 + 0x10], r8
jmp case.0x1400683cf.2
cmp byte [r13 + 8], 2
je case.0x1400683cf.2
mov rcx, rbx
call fcn.14007b420
mov r8d, eax
cmp eax, 0xffffffff
jne 0x14006872d
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 0x10]
call fcn.14009d670
movzx ecx, ax
shr cx, 8
movzx r8d, cl
mov ecx, eax
shr ecx, 0x10
shl r8d, 8
movzx edx, cl
movzx eax, al
or r8d, edx
shl eax, 0x10
or r8d, eax
mov rcx, qword [rsp + 0xe8]
cmp dword [rcx], r8d
jne 0x140068748
lea rax, [r12 + 0x70]
cmp rcx, rax
jne case.0x1400683cf.2
mov dword [rcx], r8d
mov byte [r12 + 0x1a3], 1
jmp case.0x1400683cf.2
movzx ecx, word [rbx]
call fcn.14000a640
cmp ax, 0x50
jne 0x1400687a1
lea rcx, [rbx + 2]
call fcn.14000e350
mov ecx, eax
cmp byte [rbp + 0x108], r15b
je 0x14006878f
mov edx, dword [0x1400f5954]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rbp + 0xd0]
add ecx, eax
mov dword [r12 + 0x30], ecx
jmp case.0x1400683cf.2
mov rcx, rbx
call fcn.14000e350
cmp byte [rbp + 0x108], r15b
je 0x1400687cb
cmp eax, 0xffffffff
je 0x1400687cb
mov edx, dword [0x1400f5954]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r12 + 0x30], eax
jmp case.0x1400683cf.2
movzx ecx, word [rbx]
call fcn.14000a640
cmp ax, 0x50
jne 0x14006881d
lea rcx, [rbx + 2]
call fcn.14000e350
mov ecx, eax
cmp byte [rbp + 0x108], r15b
je 0x14006880b
mov edx, dword [0x1400f5954]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rbp + 0xd4]
add ecx, eax
mov dword [r12 + 0x34], ecx
jmp case.0x1400683cf.2
mov rcx, rbx
call fcn.14000e350
cmp byte [rbp + 0x108], r15b
je 0x140068847
cmp eax, 0xffffffff
je 0x140068847
mov edx, dword [0x1400f5954]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r12 + 0x34], eax
jmp case.0x1400683cf.2
movzx ecx, word [rbx]
cmp cx, 0x2b
jne 0x140068964
movzx ecx, word [rbx + 2]
call fcn.14000a640
cmp ax, 0x4d
jne 0x140068875
mov ebx, dword [rbp + 0xc0]
jmp 0x14006889f
lea rcx, [rbx + 2]
call fcn.14000e350
mov ebx, eax
cmp byte [rbp + 0x108], r15b
je 0x14006889f
mov edx, dword [0x1400f5954]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ebx, eax
movzx edx, byte [r13 + 0xa]
mov rcx, rbp
call fcn.14006df80
mov r11, rax
test rax, rax
je 0x140068932
mov edx, dword [rbp + 0x20]
mov r9d, r15d
test edx, edx
je 0x1400688f1
mov rcx, qword [rbp + 0x28]
mov r8d, edx
movzx r10d, byte [r13 + 0xb]
add rcx, 0xa
nop
cmp byte [rcx + 1], r10b
jne 0x1400688e2
movzx eax, byte [r13 + 0xa]
cmp byte [rcx], al
jne 0x1400688e2
inc r9d
add rcx, 0x28
sub r8, 1
jne 0x1400688d0
test r9d, r9d
jne 0x140068932
mov r8, r11
lea rdx, [rsp + 0xf8]
mov rcx, rbp
call fcn.14006e120
cmp dword [r12 + 0x2c], 0x80000000
mov rax, qword [rax]
lea ecx, [rax + rbx]
mov dword [r12 + 0x28], ecx
jne case.0x1400683cf.2
shr rax, 0x20
add eax, dword [rbp + 0xc4]
mov dword [r12 + 0x2c], eax
jmp case.0x1400683cf.2
mov eax, dword [rbp + 0xd0]
add eax, dword [rbp + 0xc8]
add eax, ebx
cmp dword [r12 + 0x2c], 0x80000000
mov dword [r12 + 0x28], eax
jne case.0x1400683cf.2
mov eax, dword [rbp + 0xcc]
mov dword [r12 + 0x2c], eax
jmp case.0x1400683cf.2
call fcn.14000a640
cmp ax, 0x4d
jne 0x1400689a9
lea rcx, [rbx + 2]
call fcn.14000e350
mov ecx, eax
cmp byte [rbp + 0x108], r15b
je 0x140068997
mov edx, dword [0x1400f5954]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rbp + 0xc0]
add ecx, eax
mov dword [r12 + 0x28], ecx
jmp 0x140068a9d
movzx ecx, word [rbx]
call fcn.14000a640
cmp ax, 0x50
jne 0x140068a0b
lea rcx, [rbx + 2]
call fcn.14000e350
mov ecx, eax
cmp byte [rbp + 0x108], r15b
je 0x1400689df
mov edx, dword [0x1400f5954]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rbp + 0xc8]
add ecx, eax
cmp dword [r12 + 0x2c], 0x80000000
mov dword [r12 + 0x28], ecx
jne case.0x1400683cf.2
mov eax, dword [rbp + 0xcc]
mov dword [r12 + 0x2c], eax
jmp case.0x1400683cf.2
movzx ecx, word [rbx]
call fcn.14000a640
cmp ax, 0x53
jne 0x140068a73
lea rcx, [rbx + 2]
call fcn.14000e350
mov ecx, eax
cmp byte [rbp + 0x108], r15b
je 0x140068a41
mov edx, dword [0x1400f5954]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rbp + 0xe0]
add ecx, eax
cmp dword [r12 + 0x2c], 0x80000000
mov dword [r12 + 0x28], ecx
jne case.0x1400683cf.2
mov eax, dword [rbp + 0xec]
add eax, dword [rbp + 0xc4]
mov dword [r12 + 0x2c], eax
jmp case.0x1400683cf.2
mov rcx, rbx
call fcn.14000e350
cmp byte [rbp + 0x108], r15b
je 0x140068a98
mov edx, dword [0x1400f5954]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r12 + 0x28], eax
cmp dword [r12 + 0x2c], 0x80000000
jne case.0x1400683cf.2
mov eax, dword [rbp + 0xdc]
add eax, dword [rbp + 0xc4]
mov dword [r12 + 0x2c], eax
jmp case.0x1400683cf.2
movzx ecx, word [rbx]
cmp cx, 0x2b
jne 0x140068bd5
movzx ecx, word [rbx + 2]
call fcn.14000a640
cmp ax, 0x4d
jne 0x140068ae6
mov ebx, dword [rbp + 0xc4]
jmp 0x140068b10
lea rcx, [rbx + 2]
call fcn.14000e350
mov ebx, eax
cmp byte [rbp + 0x108], r15b
je 0x140068b10
mov edx, dword [0x1400f5954]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ebx, eax
movzx edx, byte [r13 + 0xa]
mov rcx, rbp
call fcn.14006df80
mov r11, rax
test rax, rax
je 0x140068ba3
mov edx, dword [rbp + 0x20]
mov r9d, r15d
test edx, edx
je 0x140068b61
mov rcx, qword [rbp + 0x28]
mov r8d, edx
movzx r10d, byte [r13 + 0xb]
add rcx, 0xa
nop
cmp byte [rcx + 1], r10b
jne 0x140068b52
movzx eax, byte [r13 + 0xa]
cmp byte [rcx], al
jne 0x140068b52
inc r9d
add rcx, 0x28
sub r8, 1
jne 0x140068b40
test r9d, r9d
jne 0x140068ba3
mov r8, r11
lea rdx, [rsp + 0x30]
mov rcx, rbp
call fcn.14006e120
mov rax, qword [rax]
mov rcx, rax
shr rcx, 0x20
add ecx, ebx
cmp dword [r12 + 0x28], 0x80000000
mov dword [r12 + 0x2c], ecx
jne case.0x1400683cf.2
mov edx, dword [rbp + 0xc0]
add edx, eax
mov dword [r12 + 0x28], edx
jmp case.0x1400683cf.2
mov eax, dword [rbp + 0xd4]
add eax, dword [rbp + 0xcc]
add eax, ebx
cmp dword [r12 + 0x28], 0x80000000
mov dword [r12 + 0x2c], eax
jne case.0x1400683cf.2
mov eax, dword [rbp + 0xc8]
mov dword [r12 + 0x28], eax
jmp case.0x1400683cf.2
call fcn.14000a640
cmp ax, 0x4d
jne 0x140068c1a
lea rcx, [rbx + 2]
call fcn.14000e350
mov ecx, eax
cmp byte [rbp + 0x108], r15b
je 0x140068c08
mov edx, dword [0x1400f5954]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rbp + 0xc4]
add ecx, eax
mov dword [r12 + 0x2c], ecx
jmp 0x140068d0e
movzx ecx, word [rbx]
call fcn.14000a640
cmp ax, 0x50
jne 0x140068c7c
lea rcx, [rbx + 2]
call fcn.14000e350
mov ecx, eax
cmp byte [rbp + 0x108], r15b
je 0x140068c50
mov edx, dword [0x1400f5954]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rbp + 0xcc]
add ecx, eax
cmp dword [r12 + 0x28], 0x80000000
mov dword [r12 + 0x2c], ecx
jne case.0x1400683cf.2
mov eax, dword [rbp + 0xc8]
mov dword [r12 + 0x28], eax
jmp case.0x1400683cf.2
movzx ecx, word [rbx]
call fcn.14000a640
cmp ax, 0x53
jne 0x140068ce4
lea rcx, [rbx + 2]
call fcn.14000e350
mov ecx, eax
cmp byte [rbp + 0x108], r15b
je 0x140068cb2
mov edx, dword [0x1400f5954]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rbp + 0xe4]
add ecx, eax
cmp dword [r12 + 0x28], 0x80000000
mov dword [r12 + 0x2c], ecx
jne case.0x1400683cf.2
mov eax, dword [rbp + 0xe8]
add eax, dword [rbp + 0xc0]
mov dword [r12 + 0x28], eax
jmp case.0x1400683cf.2
mov rcx, rbx
call fcn.14000e350
cmp byte [rbp + 0x108], r15b
je 0x140068d09
mov edx, dword [0x1400f5954]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r12 + 0x2c], eax
cmp dword [r12 + 0x28], 0x80000000
jne case.0x1400683cf.2
mov eax, dword [rbp + 0xd8]
add eax, dword [rbp + 0xc0]
mov dword [r12 + 0x28], eax
jmp case.0x1400683cf.2
mov rcx, rbx
call fcn.1400142a0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [r12 + 0x38], xmm1
jmp case.0x1400683cf.2
movzx ecx, word [rbx - 2]
call fcn.14000a640
cmp ax, 0x45
jne 0x140068e0e
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140079dc0
test eax, eax
je 0x140068e0e
mov rcx, rbx
call fcn.140014270
test dil, dil
je 0x140068d88
or dword [r12 + 8], eax
jmp case.0x1400683cf.2
or dword [r12 + 0xc], eax
mov word [r14], si
mov rbx, r14
movzx eax, word [rbx]
cmp ax, 0x20
je 0x140068da3
cmp ax, 9
jne 0x140068da9
add rbx, 2
jmp 0x140068d94
cmp word [rbx], r15w
jne 0x140066e60
lea rdi, [0x140000000]
mov r14d, 1
mov rcx, qword [r13]
test rcx, rcx
je 0x14006941e
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r8d, dword [r12]
mov ebx, r8d
mov edx, dword [r12 + 4]
mov esi, eax
or ebx, eax
mov ecx, edx
not ecx
and ebx, ecx
movzx ecx, byte [r13 + 8]
add ecx, 0xfffffffe
cmp ecx, 8
ja case.0x140068e0c.9
movsxd rax, ecx
mov ecx, dword [rdi + rax*4 + 0x695d8]
add rcx, rdi
jmp rcx
lea r8, [rbx - 2]
lea rdx, [0x1400da968]
lea rcx, [0x1400f59d0]
call fcn.140031460
jmp 0x140069423
cmp qword [r13], r15
je 0x140068e3a
call fcn.14000a870
jmp 0x140069423
lea r8, [rbx - 2]
lea rdx, [0x1400d1688]
lea rcx, [0x1400f59d0]
call fcn.140031460
jmp 0x140069423
cmp qword [r13], r15
jne 0x140068e30
lea r8, [rbx - 2]
lea rdx, [0x1400dac90]
lea rcx, [0x1400f59d0]
call fcn.140031460
jmp 0x140069423
cmp qword [r13], r15
jne 0x140068e30
lea r8, [rbx - 2]
lea rdx, [0x1400dad70]
lea rcx, [0x1400f59d0]
call fcn.140031460
jmp 0x140069423
lea r8, [rbx - 2]
lea rdx, [0x1400dad10]
lea rcx, [0x1400f59d0]
call fcn.140031460
jmp 0x140069423
jmp 0x140069423
mov eax, ebx
xor eax, esi
and eax, 0xf
xor ebx, eax
jmp case.0x140068e0c.9
and ebx, 0xfffffff7
or ebx, 7
jmp case.0x140068e0c.9
test bl, 1
je 0x140068ee1
and ebx, 0xfffffff1
or ebx, 1
jmp 0x140068ee4
and ebx, 0xfffffff0
mov eax, dword [rbp + 0x30]
mov edi, dword [rsp + 0x100]
cmp edi, eax
jne 0x140068f1f
test dl, 1
je case.0x140068e0c.9
mov rcx, qword [rbp + 8]
xor r9d, r9d
mov r8, r14
mov dword [rbp + 0x30], 0xffffffff
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
or esi, 1
jmp case.0x140068e0c.9
test r8b, 1
je case.0x140068e0c.9
cmp eax, dword [rbp + 0x20]
jae 0x140068f6c
mov rcx, qword [rbp + 0x28]
lea r8, [rax + rax*4]
mov edx, 0xfffffff0
mov rcx, qword [rcx + r8*8]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [rbp + 0x30]
mov r9, r14
mov r8d, eax
mov edx, 0xf4
and r8d, 0xfffe
lea r10, [rcx + rcx*4]
mov rcx, qword [rbp + 0x28]
mov rcx, qword [rcx + r10*8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp + 8]
lea r8d, [rdi + 3]
xor r9d, r9d
mov dword [rbp + 0x30], edi
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x140068e0c.9
mov eax, ebx
and eax, 6
cmp al, 6
jne 0x140068f98
and ebx, 0xfffffff6
or ebx, 6
jmp case.0x140068e0c.9
and ebx, 0xfffffff3
or ebx, 3
jmp case.0x140068e0c.9
and ebx, 0xfffffff9
or ebx, 9
jmp case.0x140068e0c.9
test bl, 1
je 0x140068fb5
and ebx, 0xfffffff1
or ebx, 1
jmp case.0x140068e0c.9
and ebx, 0xfffffff2
or ebx, 2
jmp case.0x140068e0c.9
mov eax, dword [r12 + 0x14]
cmp eax, 0xffffffff
je case.0x140068e0c.9
mov rcx, qword [r13]
mov r8d, eax
xor r9d, r9d
mov edx, 0x108e
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [r12 + 0x14]
cmp eax, 4
je case.0x140068e0c.9
and ebx, 0xfffffffc
or ebx, eax
movsxd rax, dword [r12 + 0x78]
test eax, eax
je 0x140069058
movzx ecx, byte [r13 + 8]
cmp cl, 0xc
jne 0x14006902f
mov rcx, qword [r13]
xor r9d, r9d
mov edx, 0xc5
test eax, eax
jns 0x14006904f
xor r8d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [r12 + 0x78], 0x80000000
je 0x140069058
test bl, 4
jne 0x140069058
and ebx, 0xffefff7f
jmp 0x140069058
cmp cl, 0xf
jne 0x140069058
mov rcx, qword [r13]
mov edx, 0x403
test eax, eax
jns 0x140069049
xor r9d, r9d
xor r8d, r8d
jmp 0x140069052
mov r9d, 6
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
xor bpl, bpl
cmp esi, ebx
je 0x140069154
movzx eax, byte [r13 + 8]
xor dil, dil
mov bpl, 1
cmp al, 4
je 0x1400690fb
cmp al, 9
je 0x1400690a0
cmp al, 0x12
jne 0x140069111
mov rcx, qword [r13]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0xe8], eax
jmp 0x140069111
mov eax, ebx
and eax, 0x100000
je 0x1400690e4
bt esi, 0x14
jb 0x1400690e4
cmp dword [r12 + 0x7c], r15d
jge 0x1400690d5
mov rcx, qword [r13]
lea rdx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rsp + 0x40]
sub eax, dword [rsp + 0x38]
lea eax, [rax + rax*2]
mov dword [r12 + 0x7c], eax
movsxd r8, dword [r12 + 0x7c]
xor r9d, r9d
mov edx, 0x194
jmp 0x140069107
test eax, eax
jne 0x140069111
bt esi, 0x14
jae 0x140069111
xor r9d, r9d
mov edx, 0x194
xor r8d, r8d
jmp 0x140069107
movzx r8d, bx
mov r9, r14
mov edx, 0xf4
mov rcx, qword [r13]
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [r13]
mov r8d, ebx
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x140069139
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14006915c
mov rcx, qword [r13]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, esi
movzx edi, dil
cmovne edi, r14d
jmp 0x14006915c
movzx edi, byte [rsp + 0xe8]
mov rcx, qword [r13]
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [r12 + 0xc]
mov r15d, eax
mov r14d, dword [r12 + 8]
not ecx
or r14d, eax
and r14d, ecx
cmp eax, r14d
je 0x1400691da
test bpl, bpl
jne 0x140069190
mov bpl, 1
xor dil, dil
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [r13]
mov r8d, r14d
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x1400691b8
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400691da
mov rcx, qword [r13]
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, r15d
movzx edi, dil
mov r15d, 1
cmovne edi, r15d
jmp 0x1400691e0
mov r15d, 1
cmp byte [r13 + 8], 0xa
jne 0x140069249
mov rcx, qword [r13]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14, rax
mov eax, dword [r12 + 0x10]
cmp r14d, eax
je 0x140069249
test bpl, bpl
jne 0x140069214
mov bpl, 1
xor dil, dil
mov rcx, qword [r13]
mov r9, rax
xor r8d, r8d
mov edx, 0x1036
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r13]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, r14d
movzx edi, dil
cmovne edi, r15d
test bpl, bpl
je 0x140069258
test dil, dil
je 0x140069258
mov r14b, 1
jmp 0x14006925b
xor r14b, r14b
movzx eax, byte [r13 + 8]
add eax, 0xfffffff7
cmp eax, 0xf
ja case.0x14006927f.13
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x695fc]
add rcx, rdx
jmp rcx
mov r8, r12
mov rdx, r13
call fcn.14006d6d0
jmp case.0x14006927f.13
mov r8, r12
mov rdx, r13
call fcn.14006d7b0
test dword [r12 + 4], 0x100
je case.0x14006927f.13
xor r9d, r9d
mov edx, 0x41d
jmp 0x140069370
mov r8, r12
mov rdx, r13
call fcn.14006d8e0
jmp case.0x14006927f.13
mov r8, r12
mov rdx, r13
call fcn.14006d9c0
jmp case.0x14006927f.13
mov rcx, qword [rsp + 0xe0]
mov r9d, ebx
mov r8, r12
mov rdx, r13
call fcn.14006da30
cmp esi, ebx
je case.0x14006927f.13
mov r8d, dword [rsp + 0xe8]
xor r9d, r9d
mov edx, 0x402
jmp 0x140069373
mov eax, dword [r12 + 0x150]
test eax, eax
je case.0x14006927f.13
mov rcx, qword [r13]
lea r9, [r12 + 0x88]
mov r8d, eax
mov edx, 0xcb
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14b, 1
jmp case.0x14006927f.13
mov eax, dword [r12 + 0x150]
test eax, eax
je case.0x14006927f.13
mov rcx, qword [r13]
lea r9, [r12 + 0x88]
mov r8d, eax
mov edx, 0x192
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14b, 1
jmp case.0x14006927f.13
mov eax, dword [r12 + 0x74]
cmp eax, 0xffffffff
je case.0x14006927f.13
mov r9d, eax
mov edx, 0x2001
xor r8d, r8d
mov rcx, qword [r13]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [r12 + 0x19c]
test eax, eax
je 0x1400693b9
mov rcx, qword [r13]
cmp eax, 3
mov r8d, 0
sete r8b
xor r9d, r9d
lea edx, [r9 + 0xb]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [r12 + 0x19c], 3
jne 0x1400693b9
cmp byte [r13 + 8], 0xb
jne 0x1400693be
test r14b, r14b
je 0x1400693cd
mov rcx, qword [r13]
mov r8d, r15d
xor edx, edx
call qword [sym.imp.USER32.dll_InvalidateRect]
test bpl, bpl
je 0x14006941e
test dil, dil
jne 0x14006941e
mov rax, qword [0x1400edaa8]
lea rdx, [0x1400d1680]
cmp byte [rax + 0x148], dil
jne 0x140069408
mov rcx, qword [0x1400f1518]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.14007d4e0
jmp 0x14006941e
mov rcx, qword [0x1400f6068]
lea r9, [0x1400bdf7c]
xor r8d, r8d
call fcn.140030d60
mov eax, 1
mov rsi, qword [rsp + 0xf0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rbp
pop rbx
ret