Function at 0x1400c8af0
Capabilities:
Check for unmoving mouse cursor
Check if file exists
Create process on windows
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x9e0
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x1402a6808]
xor rax, rsp
mov qword [rsp + 0x9d0], rax
mov r15, rdx
mov rdi, rcx
mov r8, qword [rcx + 0x708]
mov rbx, qword [rdx]
cmp r8, rbx
je 0x1400c8b72
cmp qword [rcx + 0x4a8], rbx
je 0x1400c8b72
xor r14d, r14d
mov byte [rsp + 0x41], r14b
cmp qword [rcx + 0x668], rbx
je 0x1400c8b67
cmp qword [rcx + 0x580], rbx
je 0x1400c8b67
xor dl, dl
xor esi, esi
mov r13d, esi
jmp 0x1400c8b85
mov dl, 1
lea r13, [rcx + 0x650]
jmp 0x1400c8b83
mov r14b, 1
mov byte [rsp + 0x41], r14b
xor dl, dl
lea r13, [rcx + 0x6f0]
xor esi, esi
mov byte [rsp + 0x40], dl
mov eax, 0x490
mov ecx, 0x568
test r14b, r14b
cmove eax, ecx
lea rcx, [rax + rdi]
mov qword [rsp + 0x50], rcx
mov r12d, dword [r15 + 0x10]
mov eax, r12d
cmp r12d, 0xfffffcb7
ja 0x1400c9cd9
je 0x1400c9c1c
add eax, 0xfffff82f
cmp eax, 0x50
ja case.0x1400c8be5.2004
lea r9, [0x140000000]
movzx eax, byte [r9 + rax + 0xcb99c]
mov ecx, dword [r9 + rax*4 + 0xcb968]
add rcx, r9
jmp rcx
test r13, r13
je case.0x1400c8be5.2004
mov eax, dword [r15 + 0x28]
test al, 3
je 0x1400c8c33
and al, 1
mov r9, qword [r15 + 0x38]
mov r8, qword [r15 + 0x18]
movzx edx, al
mov rcx, qword [rdi + 0x8d0]
call fcn.14011ac00
mov byte [0x1402bc1a0], 1
mov byte [rdi + 0x97a88], 1
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, qword [r13 + 0x18]
call qword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [r15 + 0x28]
test al, 0x63
je 0x1400c8c4d
mov rax, qword [rdi + 0x8d0]
mov rcx, qword [rax + 0x40]
mov byte [rcx + 0x100], 1
mov eax, dword [r15 + 0x28]
test al, 8
je 0x1400c8c74
cmp byte [0x1402bc1a0], 0
je 0x1400c8c7f
mov r9d, dword [r15 + 0x6c]
mov r8d, dword [r15 + 0x68]
mov rdx, qword [r15 + 0x60]
mov rcx, r13
call fcn.140110a50
mov eax, dword [r15 + 0x28]
jmp 0x1400c8c78
test al, 3
jne 0x1400c8c7f
mov byte [0x1402bc1a0], 0
bt eax, 0xe
jae case.0x1400c8be5.2004
xor r8d, r8d
xor edx, edx
mov rcx, qword [r13 + 0x18]
call qword [sym.imp.USER32.dll_InvalidateRect]
jmp case.0x1400c8be5.2004
test r14b, r14b
je 0x1400c8cab
mov rbx, qword [rdi + 0x730]
jmp 0x1400c8d16
test dl, dl
je 0x1400c8cb8
mov rbx, qword [rdi + 0x690]
jmp 0x1400c8d16
cmp rbx, qword [rdi + 0x7a8]
jne 0x1400c8cca
lea rcx, [rdi + 0x790]
jmp 0x1400c8cde
cmp rbx, qword [rdi + 0x848]
jne case.0x1400c8be5.2004
lea rcx, [rdi + 0x830]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x935
call fcn.14000fa00
mov rbx, rax
call fcn.14004a480
mov rdx, rbx
mov rcx, rax
call fcn.14001eec0
mov rbx, rax
test rax, rax
je case.0x1400c8be5.2004
call fcn.14004a480
mov r12d, dword [r15 + 0x10]
cmp r12d, 0x7d3
sete sil
call fcn.14000c980
cmp byte [rax + 0x835], 0
je 0x1400c8d82
cmp byte [rax + 0xd6], 0
je 0x1400c8d82
cmp byte [rax + 0xd7], 0
jne 0x1400c8d82
cmp r12d, 0x7d3
je 0x1400c8d82
xor r9d, r9d
xor r8d, r8d
mov edx, 0x87e
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
cmp rax, 1
je 0x1400c8d82
cmp byte [rbx + 0x101], 0
je 0x1400c8d82
movzx esi, sil
mov r12d, 1
cmp byte [rbx + 0x48], 0
cmovne esi, r12d
movzx edx, sil
mov rcx, rbx
call fcn.140020b40
jmp case.0x1400c8be5.2004
cmp rbx, r8
jne 0x1400c8d9c
xor edx, edx
jmp 0x1400c8daa
cmp rbx, qword [rdi + 0x668]
jne 0x1400c8db2
mov edx, 1
mov rcx, rdi
call fcn.140099fa0
xor r9d, r9d
mov r8, qword [r15 + 0x18]
mov edx, 0x876
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
mov rsi, rax
mov eax, dword [r15 + 0x70]
cmp eax, dword [0x14022ccd8]
jne 0x1400c8e54
mov r8d, dword [r15 + 0x24]
mov rdx, qword [r15 + 0x18]
mov rcx, qword [rdi + 0x8d0]
call fcn.140113510
cmp qword [rdi + 0x983e0], 0
je 0x1400c8e27
movsxd rbx, esi
xor r9d, r9d
mov r8, rbx
mov edx, 0x8b6
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
test rax, rax
setne r8b
mov rdx, rbx
mov rcx, qword [rdi + 0x983e0]
call fcn.14004a880
mov eax, 0x6f0
mov r8d, 0x650
test r14b, r14b
cmove r8d, eax
add r8, rdi
lea rcx, [rdi + 0x470]
mov rdx, qword [rdi + 0x8d0]
call fcn.1401273f0
jmp case.0x1400c8be5.2004
cmp eax, dword [0x14022ccd4]
jne case.0x1400c8be5.2004
cmp dword [r15 + 0x24], 0
jne case.0x1400c8be5.2004
mov edx, esi
mov rcx, qword [rdi + 0x8d0]
call fcn.140114450
test al, al
jne case.0x1400c8be5.2004
cmp esi, 0xffffffff
jne 0x1400c8eb5
mov rbx, qword [rdi + 0x8d0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, rbx
call fcn.14000fa00
mov r8, rax
xor r9d, r9d
mov edx, 0x876
mov rcx, rbx
call fcn.14000fa00
mov esi, eax
mov edx, esi
mov rcx, rdi
call fcn.140084430
test al, al
je 0x1400c8f73
cmp esi, 0xffffffff
jne 0x1400c8f00
mov rbx, qword [rdi + 0x8d0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, rbx
call fcn.14000fa00
mov r8, rax
xor r9d, r9d
mov edx, 0x876
mov rcx, rbx
call fcn.14000fa00
mov esi, eax
nop dword [rax + rax]
mov eax, esi
cmp esi, 0xffffffff
jne 0x1400c8f34
mov rbx, qword [rdi + 0x8d0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, rbx
call fcn.14000fa00
mov r8, rax
xor r9d, r9d
mov edx, 0x876
mov rcx, rbx
call fcn.14000fa00
movsxd r8, eax
xor r9d, r9d
mov edx, 0x7fe
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
shr rax, 0x18
test al, 1
je case.0x1400c8be5.2004
movsxd r8, esi
mov edx, 0x7fc
mov r9d, 0x18
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
jmp 0x1400c8f00
cmp esi, 0xffffffff
jne 0x1400c8fa7
mov rbx, qword [rdi + 0x8d0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, rbx
call fcn.14000fa00
mov r8, rax
xor r9d, r9d
mov edx, 0x876
mov rcx, rbx
call fcn.14000fa00
mov esi, eax
mov edx, esi
mov rcx, rdi
call fcn.140084430
test al, al
jne case.0x1400c8be5.2004
movsxd r8, esi
mov edx, 0x7fb
mov r9d, 0x18
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
jmp case.0x1400c8be5.2004
cmp rbx, r8
jne 0x1400c8fe1
xor edx, edx
jmp 0x1400c8fef
cmp rbx, qword [rdi + 0x668]
jne 0x1400c8ff7
mov edx, 1
mov rcx, rdi
call fcn.140099fa0
mov eax, dword [0x14022ccd4]
cmp dword [r15 + 0x70], eax
jne case.0x1400c8be5.2004
cmp dword [r15 + 0x24], 0
jne case.0x1400c8be5.2004
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [0x14021a9b8]
call fcn.14007a560
mov rbx, rax
mov edx, dword [rax]
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
test rax, rax
je case.0x1400c8be5.2004
mov edx, dword [rbx + 4]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
test rax, rax
je case.0x1400c8be5.2004
mov rcx, qword [rdi]
mov qword [rsp + 0x30], rsi
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x4c]
mov r8d, dword [rsp + 0x48]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_TrackPopupMenu]
jmp case.0x1400c8be5.2004
cmp rbx, r8
je 0x1400c909a
cmp rbx, qword [rdi + 0x668]
jne 0x1400cb1c3
mov rbx, qword [r15 + 0x60]
cmp byte [rdi + 0x97a89], 0
jne 0x1400c90b1
xor edx, edx
mov rcx, rdi
call fcn.140082d10
cmp qword [rdi + 0x983e0], 0
je 0x1400cb1c3
xor r9d, r9d
mov r8, rbx
mov edx, 0x8b6
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
test rax, rax
setne r8b
mov rdx, rbx
mov rcx, qword [rdi + 0x983e0]
call fcn.14004a880
mov eax, 1
jmp 0x1400cb911
cmp byte [rdi + 0x97a38], 0
jne case.0x1400c8be5.2004
cmp byte [rdi + 0x97a39], 0
jne case.0x1400c8be5.2004
call fcn.14000c980
mov rbx, rax
cmp byte [rax + 0xdb], 0
je 0x1400c912e
movzx edx, word [r15 + 0x20]
mov rcx, rdi
call fcn.140093250
mov esi, 0x1e0
mov edx, 0x328
test r14b, r14b
cmove esi, edx
add rsi, rdi
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa0a
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
cmp rax, 1
setg cl
lea r8, [rbx + 0x340]
mov rax, qword [r8 + 8]
sub rax, qword [r8]
test rax, 0xfffffffffffffffe
jne 0x1400c919f
cmp byte [r8 + 0x31], 0
jne 0x1400c919f
cmp byte [r8 + 0x32], 0
jne 0x1400c919f
cmp byte [r8 + 0x33], 0
jne 0x1400c919f
cmp byte [r8 + 0x34], 0
jne 0x1400c919f
cmp byte [r8 + 0x35], 0
jne 0x1400c919f
cmp byte [r8 + 0x30], 0
je 0x1400c91af
test cl, cl
jne 0x1400c91af
mov edx, dword [r15 + 0x20]
mov rcx, rsi
call fcn.1400128b0
mov edx, dword [r15 + 0x20]
mov rcx, rsi
call fcn.140014830
jmp case.0x1400c8be5.2004
test r13, r13
je case.0x1400c8be5.2004
cmp dword [r15 + 0x24], 2
jne 0x1400c9731
call fcn.14000c980
mov r12, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], InitCommonControls
mov byte [rsp + 0xf0], 0
mov r15, qword [r15 + 0x18]
cmp r15, 0xffffffffffffffff
jne 0x1400c9231
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
mov r15, rax
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
cmp byte [r12 + 0xe8], r8b
je 0x1400c9272
mov edx, 0x7d6
call fcn.14000fa00
lea rbx, [rax + 1]
mov rcx, rbx
call fcn.14017f5ec
mov rdi, rax
mov r9, rax
mov r8, rbx
mov edx, 0x886
mov rcx, r13
call fcn.14000fa00
jmp 0x1400c92bc
mov edx, 0x7eb
call fcn.14000fa00
mov rbx, rax
lea rcx, [rax + 1]
call fcn.14017f5ec
mov rdi, rax
mov r9, rax
mov r8, rbx
mov edx, 0x7eb
mov rcx, r13
call fcn.14000fa00
mov rcx, r13
call fcn.1400a2470
mov r8, rax
xor r9d, r9d
mov edx, 0x877
mov rcx, r13
call fcn.14000fa00
sub r15, rax
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rdi + r8], 0
jne 0x1400c92c6
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.140006c10
mov rcx, rdi
call fcn.14017f5e4
mov eax, r14d
mov qword [rsp + 0x50], rax
movzx ebx, byte [r12 + 0xe6]
cmp byte [r12 + 0xe7], bl
jne 0x1400c9403
movsxd r11, r15d
test r15d, r15d
js 0x1400c971f
mov rcx, r11
lea r8, [r11 - 1]
mov r9, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x100]
mov r10, qword [rsp + 0xf0]
cmp rdx, rcx
jbe 0x1400cb950
lea rax, [rsp + 0xf0]
cmp r9, 0x10
cmovae rax, r10
cmp byte [rax + rcx], bl
jne 0x1400c937a
cmp bl, 0x22
jne 0x1400c938c
test rcx, rcx
jle 0x1400c938c
cmp rdx, r8
jbe 0x1400cb93e
lea rax, [rsp + 0xf0]
cmp r9, 0x10
cmovae rax, r10
cmp byte [r8 + rax], 0x5c
jne 0x1400c938c
dec r11d
dec r8
sub rcx, 1
js 0x1400c971f
jmp 0x1400c9332
cmp r11d, r14d
je 0x1400c971f
cmp r15, rdx
jae 0x1400c971f
mov rdi, r15
cmp rdx, r15
jbe 0x1400cb94a
lea rax, [rsp + 0xf0]
cmp r9, 0x10
cmovae rax, r10
movzx ecx, byte [r12 + 0xe7]
cmp byte [r15 + rax], cl
jne 0x1400c93f6
cmp cl, 0x22
jne 0x1400c93fb
test r15, r15
je 0x1400c93fb
lea rcx, [r15 - 1]
cmp rdx, rcx
jbe 0x1400cb944
lea rax, [rsp + 0xf0]
cmp r9, 0x10
cmovae rax, r10
cmp byte [rcx + rax], 0x5c
jne 0x1400c93fb
inc r15
jmp 0x1400c9395
mov r14d, r11d
jmp 0x1400c96a2
lea rax, [rsp + 0x150]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], rsi
mov qword [rsp + 0x170], rsi
mov ecx, InitCommonControls
call fcn.14017f5a8
mov qword [rsp + 0x150], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x150]
mov rax, qword [rsp + 0x150]
mov qword [rax], rcx
mov ebx, esi
mov rdi, qword [rsp + 0x100]
test rdi, rdi
je 0x1400c9690
mov r9, rsi
mov r12d, 1
mov r11, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x168]
cmp rdi, rsi
jbe 0x1400cb95c
lea rcx, [rsp + 0xf0]
cmp r11, 0x10
cmovae rcx, qword [rsp + 0xf0]
mov r10, qword [rsp + 0x58]
movzx eax, byte [r10 + 0xe6]
cmp byte [rcx + r9], al
jne 0x1400c95a5
lea eax, [rdx + r8]
mov rcx, qword [rsp + 0x160]
test al, 3
jne 0x1400c950d
lea rax, [rdx + 4]
shr rax, 2
cmp rcx, rax
ja 0x1400c950d
mov rdx, r12
lea rcx, [rsp + 0x150]
call fcn.1400c8910
mov rdx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x160]
lea rax, [rcx*4 - 1]
and r8, rax
mov qword [rsp + 0x168], r8
lea rdi, [r8 + rdx]
dec rcx
mov rax, rdi
shr rax, 2
and rcx, rax
lea rax, [rcx*8]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x158]
cmp qword [rax + rcx], 0
jne 0x1400c9573
mov ecx, InitCommonControls
call fcn.14017f5a8
mov rcx, qword [rsp + 0x158]
mov rdx, qword [rsp + 0x48]
mov qword [rdx + rcx], rax
mov rcx, qword [rsp + 0x158]
mov rax, rdx
and edi, 3
mov rax, qword [rax + rcx]
mov dword [rax + rdi*4], ebx
mov rdx, qword [rsp + 0x170]
inc rdx
mov qword [rsp + 0x170], rdx
mov r8, qword [rsp + 0x168]
mov rdi, qword [rsp + 0x100]
jmp 0x1400c9675
cmp rdi, r9
jbe 0x1400cb956
lea rcx, [rsp + 0xf0]
cmp r11, 0x10
cmovae rcx, qword [rsp + 0xf0]
movzx eax, byte [r10 + 0xe7]
cmp byte [rcx + r9], al
jne 0x1400c967d
test rdx, rdx
je 0x1400c967d
mov rax, rsi
mov rcx, qword [rsp + 0x150]
test rcx, rcx
je 0x1400c95f9
mov r10, qword [rcx]
test r10, r10
je 0x1400c95f9
mov rax, qword [r10]
lea r10, [rdx - 1]
add r10, r8
mov rcx, rsi
test rax, rax
je 0x1400c9613
mov r11, qword [rax]
test r11, r11
je 0x1400c9613
mov rcx, qword [r11]
test rcx, rcx
mov r11, rsi
je 0x1400c961e
mov r11, qword [rcx]
mov rcx, qword [r11 + 0x10]
dec rcx
mov rax, r10
shr rax, 2
and rcx, rax
and r10d, 3
mov rax, qword [r11 + 8]
mov rcx, qword [rax + rcx*8]
mov r11d, dword [rcx + r10*4]
sub rdx, r12
mov qword [rsp + 0x170], rdx
cmove r8, rsi
mov qword [rsp + 0x168], r8
cmp r11, r15
ja 0x1400c9675
cmp r9, r15
jb 0x1400c9675
cmp r14d, 0xffffffff
je 0x1400c966b
cmp r11d, r14d
jbe 0x1400c9675
mov r14d, r11d
mov eax, ebx
mov qword [rsp + 0x50], rax
mov r11, qword [rsp + 0x108]
inc ebx
mov r9d, ebx
cmp rdi, r9
ja 0x1400c949c
mov r12, qword [rsp + 0x58]
lea rcx, [rsp + 0x150]
call fcn.1400c8810
mov rdi, qword [rsp + 0x50]
cmp edi, 0xffffffff
je 0x1400c971f
cmp r14d, 0xffffffff
je 0x1400c971f
mov rcx, r13
cmp byte [r12 + 0xe8], 0
je 0x1400c96d4
movsxd r8, edi
xor r9d, r9d
mov edx, 0x85d
call fcn.14000fa00
lea eax, [r14 + 1]
movsxd r8, eax
jmp 0x1400c970e
call fcn.1400a2470
mov r8, rax
xor r9d, r9d
mov edx, 0x877
mov rcx, r13
call fcn.14000fa00
mov rbx, rax
movsxd r8, edi
add r8, rax
xor r9d, r9d
mov edx, 0x85d
mov rcx, r13
call fcn.14000fa00
movsxd r8, r14d
inc r8
add r8, rbx
xor r9d, r9d
mov edx, 0x7ea
mov rcx, r13
call fcn.14000fa00
nop
lea rcx, [rsp + 0xf0]
call fcn.1400045b0
jmp case.0x1400c8be5.2004
xor r9d, r9d
mov r8, qword [r15 + 0x18]
mov edx, 0x9ca
mov rcx, r13
call fcn.14000fa00
bt rax, 8
jae case.0x1400c8be5.2004
mov r9, qword [r15 + 0x18]
mov edx, 0x9cc
mov r8d, 8
mov rcx, r13
call fcn.14000fa00
mov r14, rax
mov r9, qword [r15 + 0x18]
mov edx, 0x9cd
mov r8d, 8
mov rcx, r13
call fcn.14000fa00
mov rbx, rax
mov rcx, qword [r15 + 0x18]
cmp rcx, r14
jl case.0x1400c8be5.2004
cmp rcx, rax
jg case.0x1400c8be5.2004
xor r9d, r9d
xor r8d, r8d
mov edx, 0x202
mov rcx, qword [r13 + 0x18]
call qword [sym.imp.USER32.dll_PostMessageW]
mov r8, qword [r15 + 0x18]
mov r9, r8
mov edx, 0x870
mov rcx, r13
call fcn.14000fa00
mov r9, rbx
mov r8, r14
lea rdx, [rsp + 0x128]
mov rcx, r13
call fcn.1401116d0
nop
lea r8, [rsp + 0x128]
cmp qword [rsp + 0x140], 8
cmovae r8, qword [rsp + 0x128]
mov rax, qword [rdi]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.open
mov rcx, qword [rax + 0x18]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
mov r8, qword [rsp + 0x140]
cmp r8, 8
jb 0x1400c983f
inc r8
mov rdx, qword [rsp + 0x128]
lea rcx, [rsp + 0x128]
call fcn.140007270
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x138], xmm0
mov word [rsp + 0x128], si
jmp case.0x1400c8be5.2004
test r13, r13
je case.0x1400c8be5.2004
call fcn.14000c980
mov rbx, rax
test byte [r15 + 0x90], 4
je 0x1400c9883
mov rdx, r13
mov rcx, rdi
call fcn.140082d10
cmp byte [rbx + 8], 0
jne case.0x1400c8be5.2004
mov rcx, qword [rdi + 0x8d0]
mov rax, qword [rcx + 0x18]
cmp qword [r15], rax
je 0x1400c9941
cmp byte [rbx + 0xe0], 0
je case.0x1400c8be5.2004
xor r9d, r9d
mov r8d, 0x400
lea rdx, [rsp + 0x1d0]
call fcn.1401113b0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x138], xmm0
movdqa xmm1, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x138], xmm1
mov word [rsp + 0x128], si
lea rax, [rsp + 0x1d0]
mov r14, 0xffffffffffffffff
nop dword [rax + rax]
inc r14
cmp word [rax + r14*2], 0
jne 0x1400c9900
mov r8, r14
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x128]
call fcn.140006d60
nop
lea rcx, [rdi + 0x470]
lea r8, [rsp + 0x128]
mov rdx, r13
call fcn.140127850
nop
jmp 0x1400c9819
mov rcx, rdi
call fcn.1400844a0
cmp byte [rbx + 0xe2], 0
je 0x1400c996f
mov rax, qword [rdi + 0x8d0]
mov qword [rsp + 0x50], rax
movzx edx, byte [rbx + 0xe3]
lea rcx, [rsp + 0x50]
call fcn.140153ee0
cmp byte [rbx + 0xdc], 0
je 0x1400c99ae
cmp byte [rbx + 0xe1], 0
je 0x1400c998a
mov byte [rbx + 0xe1], 0
jmp 0x1400c99ae
mov eax, 0x6f0
mov r8d, 0x650
test r14b, r14b
cmove r8d, eax
add r8, rdi
lea rcx, [rdi + 0x470]
mov rdx, r13
call fcn.1401273f0
test byte [r15 + 0x90], 3
je 0x1400c99c0
mov rcx, rdi
call fcn.14009c170
mov rcx, qword [rdi + 0x983e8]
test rcx, rcx
je 0x1400c99eb
cmp byte [rcx + 0x80], 0
jne 0x1400c99eb
mov rax, qword [rcx]
call qword [rax + 0x58]
test al, al
je 0x1400c99eb
mov rcx, qword [rdi + 0x983e8]
call fcn.14006a590
mov ecx, 0x1e0
mov edx, 0x328
test r14b, r14b
cmove ecx, edx
add rcx, rdi
xor edx, edx
call fcn.140014830
jmp case.0x1400c8be5.2004
test r13, r13
je case.0x1400c8be5.2004
mov eax, 0x6f0
mov r8d, 0x650
test r14b, r14b
cmove r8d, eax
add r8, rdi
lea rcx, [rdi + 0x470]
mov rdx, r13
call fcn.1401273f0
jmp case.0x1400c8be5.2004
xor r9d, r9d
xor r8d, r8d
mov edx, 0x859
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
mov dword [rsp + 0x20], eax
mov r9, qword [r15 + 0x58]
mov r8, qword [r15 + 0x50]
mov edx, dword [r15 + 0x48]
lea rcx, [rsp + 0x150]
call fcn.14011b750
mov r8, rax
mov rdx, qword [rdi + 0x97a28]
cmp qword [rdi + 0x97a30], rdx
je 0x1400c9ad8
mov qword [rsp + 0x50], rdx
mov ecx, dword [rax]
mov dword [rdx], ecx
mov rcx, qword [rax + 8]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 0x10]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x28], rsi
mov qword [rdx + 0x30], rsi
movups xmm0, xmmword [r8 + 0x18]
movups xmmword [rdx + 0x18], xmm0
movups xmm1, xmmword [r8 + 0x28]
movups xmmword [rdx + 0x28], xmm1
mov qword [r8 + 0x28], rsi
mov qword [r8 + 0x30], 7
mov word [r8 + 0x18], si
mov eax, dword [r8 + 0x38]
mov dword [rdx + 0x38], eax
add qword [rdi + 0x97a28], 0x40
jmp 0x1400c9ae5
lea rcx, [rdi + 0x97a20]
call fcn.14009f260
nop
lea rcx, [rsp + 0x168]
call fcn.1400068c0
jmp case.0x1400c8be5.2004
test r13, r13
je case.0x1400c8be5.2004
lea rcx, [rdi + 0x6f0]
call fcn.140115270
lea rcx, [rdi + 0x650]
call fcn.140115270
cmp byte [rdi + 0x73c], 0
je 0x1400c9b34
lea rcx, [rdi + 0x6f0]
call fcn.140115350
mov byte [rdi + 0x73c], 0
cmp byte [rdi + 0x69c], 0
je 0x1400c9b50
lea rcx, [rdi + 0x650]
call fcn.140115350
mov byte [rdi + 0x69c], 0
mov rcx, r13
call fcn.14011ac40
cmp byte [rdi + 0x97a9c], 0
jne 0x1400c9b6a
cmp byte [rdi + 0x97a9d], 0
je 0x1400c9b75
mov rdx, qword [r15]
mov rcx, rdi
call fcn.140087e80
call fcn.14000c980
cmp byte [rdi + 0x97a88], 0
je 0x1400c9b89
cmp byte [rax + 8], 0
je 0x1400c9b93
cmp qword [r15 + 0x50], 0x62b
jne 0x1400c9ba4
xor edx, edx
mov rcx, rdi
call fcn.140082d10
mov byte [rdi + 0x97a88], 0
mov rcx, qword [rdi + 0x983e0]
test rcx, rcx
je case.0x1400c8be5.2004
cmp byte [rcx + 0x80], 0
jne case.0x1400c8be5.2004
mov rax, qword [rcx]
call qword [rax + 0x58]
test al, al
je case.0x1400c8be5.2004
mov rcx, qword [rdi + 0x983e0]
cmp byte [rcx + 0xe8], 0
jne case.0x1400c8be5.2004
xor edx, edx
call fcn.14004b6e0
mov rcx, qword [rdi + 0x983e0]
call fcn.14004b210
jmp case.0x1400c8be5.2004
mov ecx, 0x1e0
mov edx, 0x328
test r14b, r14b
cmove ecx, edx
add rcx, rdi
mov rdx, qword [r15 + 0x18]
call fcn.1400119b0
jmp case.0x1400c8be5.2004
mov rsi, qword [rdi + 0xc58]
cmp dword [r15 + 0x1c], 0
jne 0x1400c9c74
mov eax, dword [r15 + 0x28]
mov dword [rsp + 0x48], eax
mov eax, dword [r15 + 0x34]
mov dword [rsp + 0x4c], eax
mov ecx, 0xc58
mov eax, 0xc20
cmp rsi, rbx
cmovne ecx, eax
lea rdx, [rsp + 0x48]
mov rcx, qword [rcx + rdi]
call qword [sym.imp.USER32.dll_ClientToScreen]
lea rcx, [rdi + 0xa18]
mov rdx, qword [rsp + 0x48]
call fcn.140139ab0
mov eax, 1
jmp 0x1400cb911
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x78]
call fcn.14019e060
mov dword [rsp + 0x70], 0x80
mov dword [rsp + 0x74], InitCommonControls
mov r8d, dword [r15 + 0x18]
mov ecx, 0xc58
mov eax, 0xc20
cmp rsi, rbx
cmovne ecx, eax
lea r9, [rsp + 0x70]
mov edx, 0x41c
mov rcx, qword [rcx + rdi]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, r15
xor r8d, r8d
lea edx, [r8 + 0x4e]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400c8be5.2004
cmp eax, 0xfffffdd0
ja 0x1400ca593
cmp eax, 0xfffffdcf
jae 0x1400c9fc5
cmp eax, 0xfffffcc1
je 0x1400c9fa9
cmp eax, 0xfffffdcb
je 0x1400c9df5
cmp eax, 0xfffffdcc
je 0x1400c9d71
cmp eax, 0xfffffdcd
je 0x1400c9df5
cmp eax, 0xfffffdce
jne case.0x1400c8be5.2004
movsxd rdx, dword [r15 + 0x18]
call fcn.14004a3c0
mov rsi, rax
call fcn.14004a480
movzx ebx, r14b
xor ebx, 1
cmp byte [rsi + 0x48], 0
je 0x1400c9d4e
mov r8d, ebx
mov rdx, rsi
mov rcx, rdi
call fcn.140082600
mov r8d, ebx
mov rdx, rsi
mov rcx, rdi
call fcn.1400c2740
test al, al
je case.0x1400c8be5.2004
mov rcx, rdi
call fcn.140084a30
jmp case.0x1400c8be5.2004
call fcn.14000c980
movzx ebx, byte [rax + 0x88a]
cmp byte [rax + 0x889], 0
je 0x1400c9d97
lea rcx, [rdi + 0x97900]
xor r8d, r8d
xor edx, edx
call fcn.1401297a0
test bl, bl
je case.0x1400c8be5.2004
mov rcx, qword [rdi + 0x983e0]
test rcx, rcx
je case.0x1400c8be5.2004
cmp byte [rcx + 0x80], 0
jne case.0x1400c8be5.2004
mov rax, qword [rcx]
call qword [rax + 0x58]
test al, al
je case.0x1400c8be5.2004
mov rcx, qword [rdi + 0x983e0]
call fcn.14004aab0
mov rcx, qword [rdi + 0x983e0]
call fcn.14004b5a0
mov rax, qword [rdi + 0x983e0]
mov byte [rax + 0xe8], 0
jmp case.0x1400c8be5.2004
call fcn.14000c980
movzx esi, byte [rax + 0x88a]
mov byte [rsp + 0x41], sil
movzx esi, byte [rsp + 0x40]
cmp byte [rax + 0x889], 0
je 0x1400c9eea
test r14b, r14b
je 0x1400c9e24
mov eax, 0x490
jmp 0x1400c9e32
test sil, sil
je 0x1400c9eea
mov eax, 0x568
lea r12, [rdi + rax]
test r12, r12
je 0x1400c9eea
movsxd rdx, dword [r15 + 0x18]
mov rcx, r12
call fcn.14004a3c0
mov qword [rsp + 0x50], rax
call fcn.14004a480
mov rbx, qword [rdi + 0x730]
mov rax, qword [rdi + 0x690]
mov qword [rsp + 0x58], rax
movsxd r8, dword [r15 + 0x18]
lea r9, [rsp + 0x110]
mov edx, 0x130a
mov rcx, qword [r12 + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [rsp + 0x110]
mov dword [rsp + 0x48], ecx
mov ecx, dword [rsp + 0x11c]
mov dword [rsp + 0x4c], ecx
lea rdx, [rsp + 0x48]
mov rcx, qword [r12 + 0x18]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rax, qword [rsp + 0x50]
cmp rax, rbx
je 0x1400c9ed9
cmp rax, qword [rsp + 0x58]
je 0x1400c9ed9
lea rcx, [rdi + 0x97900]
mov r9, qword [r12 + 0xb0]
mov r8, rax
mov rdx, qword [rsp + 0x48]
call fcn.140016430
jmp 0x1400c9eea
lea rcx, [rdi + 0x97900]
xor r8d, r8d
xor edx, edx
call fcn.1401297a0
cmp byte [rsp + 0x41], 0
je case.0x1400c8be5.2004
mov rcx, qword [rdi + 0x983e0]
test rcx, rcx
je case.0x1400c8be5.2004
cmp byte [rcx + 0x80], 0
jne case.0x1400c8be5.2004
mov rax, qword [rcx]
call qword [rax + 0x58]
test al, al
je case.0x1400c8be5.2004
test r14b, r14b
je 0x1400c9f2c
mov eax, 0x490
jmp 0x1400c9f3a
test sil, sil
je case.0x1400c8be5.2004
mov eax, 0x568
lea rcx, [rdi + rax]
test rcx, rcx
je case.0x1400c8be5.2004
movsxd rdx, dword [r15 + 0x18]
call fcn.14004a3c0
mov rbx, rax
call fcn.14004a480
cmp rbx, qword [rdi + 0x730]
je 0x1400c9f7e
cmp rbx, qword [rdi + 0x690]
je 0x1400c9f7e
mov r8, r13
mov rdx, rbx
mov rcx, qword [rdi + 0x983e0]
call fcn.14004b5e0
jmp 0x1400c9f8a
mov rcx, qword [rdi + 0x983e0]
call fcn.14004aab0
mov rcx, qword [rdi + 0x983e0]
call fcn.14004b5a0
mov rax, qword [rdi + 0x983e0]
mov byte [rax + 0xe8], 1
jmp case.0x1400c8be5.2004
mov rcx, qword [rdi]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 5]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400c8be5.2004
mov r12, qword [r15 + 8]
mov qword [rsp + 0x58], r12
mov ecx, SHCreateDirectory
call qword [sym.imp.USER32.dll_GetKeyState]
movsx r13d, ax
shr r13d, 0x1f
cmp dword [r15 + 0x10], 0xfffffdcf
jne 0x1400ca578
mov rbx, qword [r12 + 0x70]
mov qword [rsp + 0x48], rbx
mov r14, rbx
shr r14, 0x20
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov r15, rax
mov rcx, qword [rdi + 0x8d0]
cmp rax, qword [rcx + 0x18]
jne 0x1400ca1e3
cmp qword [rdi + 0x9d0], 0
jne 0x1400ca1b2
movups xmm0, xmmword [0x14021a4f0]
movaps xmmword [rsp + 0x150], xmm0
movups xmm1, xmmword [0x14021a500]
movaps xmmword [rsp + 0x160], xmm1
mov eax, dword [0x14021a510]
mov dword [rsp + 0x170], eax
movzx eax, word [0x14021a514]
mov word [rsp + 0x174], ax
xor eax, eax
mov qword [rsp + 0x176], rax
mov qword [rsp + 0x17e], rax
mov qword [rsp + 0x186], rax
mov word [rsp + 0x18e], ax
movups xmm0, xmmword [0x14021a518]
movaps xmmword [rsp + 0x190], xmm0
movups xmm1, xmmword [0x14021a528]
movaps xmmword [rsp + 0x1a0], xmm1
movsd xmm0, qword [0x14021a538]
movsd qword [rsp + 0x1b0], xmm0
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x1c8], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rsi
xor r9d, r9d
lea r8, [rsp + 0x150]
mov edx, 0x2711
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [rsp + 0x190]
mov edx, 0x2712
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
mov rax, qword [rdi]
lea rcx, [rdi + 0x9c8]
mov byte [rsp + 0x20], 0
mov r9, qword [rdi + 0x979d0]
lea r8, [rsp + 0x110]
mov rdx, qword [rax + 0x18]
call fcn.14002c680
lea rcx, [rdi + 0x478]
mov rdx, qword [rdi + 0x9d0]
call fcn.140078160
nop
lea rcx, [rsp + 0x110]
call fcn.14004dc70
mov qword [rsp + 0x30], rsi
mov rax, qword [rdi + 0x9c8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x4c]
mov r8d, ebx
xor edx, edx
mov rcx, qword [rdi + 0x9d0]
call qword [sym.imp.USER32.dll_TrackPopupMenu]
jmp 0x1400ca578
mov rax, qword [rdi + 0x648]
cmp r15, qword [rax + 0x18]
je 0x1400ca567
mov rax, qword [rdi + 0x8d8]
cmp r15, qword [rax + 0x18]
je 0x1400ca567
mov rax, qword [rdi]
lea rdx, [rsp + 0x110]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp ebx, dword [rsp + 0x110]
jl 0x1400ca247
cmp ebx, dword [rsp + 0x118]
jg 0x1400ca247
cmp r14d, dword [rsp + 0x114]
jl 0x1400ca247
mov eax, dword [rsp + 0x4c]
cmp eax, dword [rsp + 0x11c]
jle 0x1400cb1c3
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x140], 7
mov word [rsp + 0x128], si
mov r12d, 1
mov r8d, r12d
lea rdx, [0x1401f2c5c]
lea rcx, [rsp + 0x128]
call fcn.140006d60
nop
mov rax, qword [rdi + 0x8d0]
mov rdx, qword [rax + 0x40]
add rdx, 0xb0
cmp qword [rdx + 0x18], 8
jb 0x1400ca2ad
mov rdx, qword [rdx]
mov r14, 0xffffffffffffffff
inc r14
cmp word [rdx + r14*2], 0
jne 0x1400ca2b4
mov r8, r14
lea rcx, [rsp + 0x128]
call fcn.140006a90
mov r8, r12
lea rdx, [0x1401f2c5c]
lea rcx, [rsp + 0x128]
call fcn.140006a90
mov qword [rsp + 0xf0], 2
lea rax, [rsp + 0x128]
cmp qword [rsp + 0x140], 8
cmovae rax, qword [rsp + 0x128]
mov qword [rsp + 0x100], rax
mov eax, dword [rsp + 0x138]
lea eax, [rax*2 + 2]
mov dword [rsp + 0xf8], eax
mov rcx, r15
call qword [sym.imp.USER32.dll_GetParent]
mov r14, rax
mov r8d, 0x104
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, [0x140214f10]
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x1400ca4d4
mov rcx, qword [rdi]
cmp r14, qword [rcx + 0x18]
je 0x1400ca4d4
mov rcx, qword [rdi + 0x640]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x130b
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rdx, eax
mov rcx, qword [rsp + 0x50]
call fcn.14004a3c0
mov qword [rsp + 0x50], rax
call fcn.14004a480
movzx ebx, byte [rsp + 0x41]
xor ebx, 1
mov rax, qword [rsp + 0x50]
cmp byte [rax + 0x48], 0
je 0x1400ca469
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x160], xmm0
movdqa xmm1, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x160], xmm1
mov word [rsp + 0x150], si
movdqu xmmword [rsp + 0x1a0], xmm0
movdqu xmmword [rsp + 0x1a0], xmm1
mov word [rsp + 0x190], si
mov rax, qword [rdi]
lea rcx, [rdi + 0x478]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
lea rdx, str.Move_to_new_Notepad_Instance
mov qword [rsp + 0x20], rdx
lea r9, str.Document_is_modified__save_it_then_try_again.
mov r8, qword [rax + 0x18]
lea rdx, str.CannotMoveDoc
call fcn.14007aff0
nop
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x1a0], xmm0
mov word [rsp + 0x190], si
movdqu xmmword [rsp + 0x160], xmm0
mov word [rsp + 0x150], si
jmp 0x1400ca4ee
mov r9, r15
xor r8d, r8d
mov edx, 0x416
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rdi]
lea r9, [rsp + 0xf0]
mov r8, qword [rax + 8]
mov edx, 0x4a
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
test r13b, r13b
jne 0x1400ca4ee
mov r8d, ebx
mov rdx, qword [rsp + 0x50]
mov rcx, rdi
call fcn.1400c2740
mov rcx, rdi
call fcn.140093f80
test al, al
je 0x1400ca4ee
mov rax, qword [rdi]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400ca4ee
movzx edx, r13b
xor edx, 1
inc edx
mov r9d, dword [rsp + 0x4c]
mov r8d, ebx
mov rcx, rdi
call fcn.140088440
nop
mov rdx, qword [rsp + 0x140]
cmp rdx, 8
jb 0x1400ca536
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ca531
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cb962
call fcn.14017f5e4
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x140], 7
mov word [rsp + 0x128], si
mov rax, qword [rsp + 0x58]
mov qword [rax + 0x70], 0
mov eax, r12d
jmp 0x1400cb911
movzx edx, r13b
xor edx, 1
inc edx
mov rcx, rdi
call fcn.1400881f0
mov r12d, 1
mov rax, qword [rsp + 0x58]
mov qword [rax + 0x70], 0
mov eax, r12d
jmp 0x1400cb911
cmp eax, 0xfffffdd9
je 0x1400cb87e
cmp eax, 0xfffffdee
je 0x1400cb45d
cmp eax, 0xfffffffb
je 0x1400ca876
cmp eax, 0xfffffffd
je 0x1400ca6fb
cmp eax, 0xfffffffe
jne case.0x1400c8be5.2004
cmp rbx, qword [rdi + 0xbb8]
jne 0x1400ca654
cmp qword [r15 + 0x18], 5
jne case.0x1400c8be5.2004
xor r9d, r9d
xor r8d, r8d
mov edx, 0x88b
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
test rax, rax
sete sil
xor r9d, r9d
mov r8, rsi
mov edx, 0x88a
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
xor r9d, r9d
xor r8d, r8d
mov edx, 0x88b
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa00
lea rcx, [0x140214780]
lea rdx, [0x140214788]
test rax, rax
cmovne rdx, rcx
lea rcx, [rdi + 0xba0]
mov r8d, 5
call fcn.14012a330
jmp case.0x1400c8be5.2004
cmp rbx, qword [rdi + 0x4a8]
jne 0x1400ca6a2
cmp dword [rdi + 0x9840c], 1
jne 0x1400ca6a2
call fcn.14000c980
cmp byte [rax + 0x835], 0
je 0x1400ca693
cmp byte [rax + 0xd6], 0
je 0x1400ca693
cmp byte [rax + 0xd7], 0
jne 0x1400ca693
call fcn.14004a480
mov rcx, rax
call fcn.14001d2a0
xor edx, edx
mov rcx, rdi
call fcn.140099fa0
jmp case.0x1400c8be5.2004
cmp rbx, qword [rdi + 0x580]
jne case.0x1400c8be5.2004
cmp dword [rdi + 0x9840c], 0
jne case.0x1400c8be5.2004
call fcn.14000c980
cmp byte [rax + 0x835], 0
je 0x1400ca6e9
cmp byte [rax + 0xd6], 0
je 0x1400ca6e9
cmp byte [rax + 0xd7], 0
jne 0x1400ca6e9
call fcn.14004a480
mov rcx, rax
call fcn.14001d2a0
mov edx, 1
mov rcx, rdi
call fcn.140099fa0
jmp case.0x1400c8be5.2004
cmp rbx, qword [rdi + 0xbb8]
jne case.0x1400c8be5.2004
mov rax, qword [r15 + 0x18]
cmp rax, 2
jne 0x1400ca78d
lea rbx, [rdi + 0x1bc0]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x68]
test al, al
sete r14b
movzx r15d, byte [rdi + 0x484]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x68]
test al, al
jne 0x1400ca752
mov rax, qword [rbx]
mov r9b, 1
movzx r8d, r15b
mov edx, 0x7d0
mov rcx, rbx
call qword [rax + 0x60]
mov rax, qword [rbx]
mov dl, 1
mov rcx, rbx
call qword [rax + 0x18]
test r14b, r14b
je case.0x1400c8be5.2004
lea rcx, [rdi + 0x478]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.GoToLine
mov rdx, qword [rdi + 0x1bd8]
call fcn.140077590
jmp case.0x1400c8be5.2004
cmp rax, 1
jne 0x1400ca7a5
mov edx, 0xac11
mov rcx, rdi
call fcn.1400b5110
jmp case.0x1400c8be5.2004
test rax, rax
jne 0x1400ca7f6
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 5
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, qword [rdi]
mov qword [rsp + 0x30], rsi
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x54]
mov r8d, dword [rsp + 0x50]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_TrackPopupMenu]
jmp case.0x1400c8be5.2004
cmp rax, 3
jne case.0x1400c8be5.2004
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [0x14021a5f0]
call fcn.14007a560
mov rbx, rax
mov edx, dword [rax]
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
test rax, rax
je 0x1400cb1c3
mov edx, dword [rbx + 4]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, rax
test rax, rax
je 0x1400cb1c3
mov rax, qword [rdi]
mov qword [rsp + 0x30], rsi
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x54]
mov r8d, dword [rsp + 0x50]
xor edx, edx
call qword [sym.imp.USER32.dll_TrackPopupMenu]
jmp case.0x1400c8be5.2004
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rax, qword [r15]
cmp rax, qword [rdi + 0x4a8]
jne 0x1400cb104
xor edx, edx
mov rcx, rdi
call fcn.140099fa0
mov r12d, 1
cmp qword [rdi + 0x9a8], 0
jne 0x1400cb07b
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rsi
xor r9d, r9d
lea r8, [0x1401f4178]
mov edx, 0xa02b
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, str.Close_All_BUT_This
mov edx, 0xa02d
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a688]
mov edx, 0xa031
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a6b8]
mov edx, 0xa03a
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a6e8]
mov edx, 0xa040
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x140214058]
mov edx, 0xa02e
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a710]
mov edx, 0xa030
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a728]
mov edx, 0xa039
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a738]
mov edx, 0xa038
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, str.Reload
mov edx, 0xa036
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, str.Print
mov edx, 0xa032
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a760]
mov edx, 0xa03b
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, str.Open_Containing_Folder_in_cmd
mov edx, 0xa03c
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, str.Open_Containing_Folder_as_Workspace
mov edx, 0xa041
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a838]
mov edx, 0xa03f
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, str.Read_Only
mov edx, 0xa42c
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a880]
mov edx, 0xa431
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, str.Full_File_Path_to_Clipboard
mov edx, 0xa42d
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, str.Filename_to_Clipboard
mov edx, 0xa42e
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a918]
mov edx, 0xa42f
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a4f0]
mov edx, 0x2711
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a518]
mov edx, 0x2712
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a958]
mov edx, 0x2713
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, [0x14021a988]
mov edx, 0x2714
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
mov rax, qword [rdi]
lea rcx, [rdi + 0x9a0]
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x110]
mov rdx, qword [rax + 0x18]
call fcn.14002c680
lea rcx, [rdi + 0x478]
mov rdx, qword [rdi + 0x9a8]
call fcn.140077ff0
nop
lea rcx, [rsp + 0x110]
call fcn.14004dc70
xor r8d, r8d
mov edx, 0xa02e
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetMenuState]
shr eax, 1
not al
test al, 1
mov r14d, 3
mov r8d, r14d
cmovne r8d, esi
mov edx, 0xa02e
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov rax, qword [rdi + 0x8d0]
mov r13, qword [rax + 0x40]
movzx eax, byte [r13 + 0x54]
neg al
sbb r8d, r8d
and r8d, 8
mov edx, 0xa42c
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_CheckMenuItem]
movzx ebx, byte [r13 + 0xac]
test bl, bl
jne 0x1400cb2ff
cmp byte [r13 + 0x110], bl
jne 0x1400cb2ff
mov al, 1
jmp 0x1400cb301
cmp rax, qword [rdi + 0x580]
jne 0x1400cb123
mov r12d, 1
mov edx, r12d
mov rcx, rdi
call fcn.140099fa0
jmp 0x1400ca8a1
cmp rax, qword [rdi + 0xbb8]
jne 0x1400cb1cd
mov rax, qword [r15 + 0x18]
test rax, rax
jne 0x1400cb15f
lea edx, [rax + 5]
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, qword [rdi]
mov qword [rsp + 0x30], rsi
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x28], rcx
mov rcx, rax
jmp 0x1400cb1ad
cmp rax, 3
jne 0x1400cb1c3
lea rcx, [0x14021a5f0]
call fcn.14007a560
mov rbx, rax
mov edx, dword [rax]
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
test rax, rax
je 0x1400cb1c3
mov edx, dword [rbx + 4]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, rax
test rax, rax
je 0x1400cb1c3
mov rax, qword [rdi]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
xor edx, edx
mov r8d, dword [rsp + 0x48]
mov r9d, dword [rsp + 0x4c]
mov dword [rsp + 0x20], esi
call qword [sym.imp.USER32.dll_TrackPopupMenu]
mov eax, 1
jmp 0x1400cb911
mov rcx, qword [rdi + 0x983b8]
test rcx, rcx
je 0x1400cb1c3
cmp rax, qword [rcx + 0x18]
jne 0x1400cb1c3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1032
mov rcx, qword [rcx + 0xa8]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jle 0x1400ca89b
cmp qword [rdi + 0x9f8], 0
jne 0x1400cb2ec
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rsi
xor r9d, r9d
lea r8, str.Close_Selected_files
mov edx, 0xa9ed
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
xor r9d, r9d
lea r8, str.Close_others_files
mov edx, 0xa9ee
lea rcx, [rsp + 0x70]
call fcn.14002c4e0
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005b070
nop
lea rcx, [rsp + 0x98]
call fcn.1400068c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068c0
mov rax, qword [rdi]
lea rcx, [rdi + 0x9f0]
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x110]
mov rdx, qword [rax + 0x18]
call fcn.14002c680
lea rcx, [rdi + 0x478]
mov rdx, qword [rdi + 0x9f8]
call fcn.140077ff0
nop
lea rcx, [rsp + 0x110]
call fcn.14004dc70
mov rax, qword [rdi + 0x9f0]
mov rcx, qword [rdi + 0x9f8]
jmp 0x1400cb1a3
xor al, al
mov r8d, r14d
test al, al
cmovne r8d, esi
mov edx, 0xa42c
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov r8d, r14d
test bl, bl
cmovne r8d, esi
mov edx, 0xa431
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
lea r15, [r13 + 0xb0]
mov rcx, r15
cmp qword [r15 + 0x18], 8
jb 0x1400cb34b
mov rcx, qword [r15]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ebx, r14d
test eax, eax
cmovne ebx, esi
mov r8d, ebx
mov edx, 0xa038
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov r8d, ebx
mov edx, 0xa03b
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov r8d, ebx
mov edx, 0xa03c
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
cmp qword [r15 + 0x18], 8
jb 0x1400cb3a2
mov r15, qword [r15]
mov rcx, r15
call fcn.14002a380
mov r8d, r14d
test al, al
cmovne r8d, esi
mov edx, 0xa03f
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
movzx r15d, byte [r13 + 0x48]
mov ebx, dword [r13 + 0xa0]
test r15b, r15b
jne 0x1400cb3df
cmp ebx, 2
je 0x1400cb3df
mov al, 1
jmp 0x1400cb3e1
xor al, al
mov r8d, r14d
test al, al
cmovne r8d, esi
mov edx, 0x2713
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
test r15b, r15b
jne 0x1400cb40a
cmp ebx, 2
je 0x1400cb40a
mov al, 1
jmp 0x1400cb40c
xor al, al
test al, al
cmovne r14d, esi
mov r8d, r14d
mov edx, 0x2714
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov qword [rsp + 0x30], rsi
mov rax, qword [rdi + 0x9a0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x4c]
mov r8d, dword [rsp + 0x48]
xor edx, edx
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_TrackPopupMenu]
mov eax, r12d
jmp 0x1400cb911
mov qword [r15 + 0xc0], rsi
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rax, qword [rdi]
lea rdx, [rsp + 0x50]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rax, qword [rdi]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_RealChildWindowFromPoint]
mov rbx, rax
mov word [0x1402bc1b0], si
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor r8d, r8d
lea rdx, [0x1401e4278]
lea rcx, [rsp + 0xf0]
call fcn.140006d60
nop
movsxd rax, dword [r15 + 8]
cmp rbx, qword [rdi + 0xc20]
jne 0x1400cb5ca
lea rdx, [rsp + 0xf0]
mov ecx, eax
call fcn.14011c370
cmp qword [rsp + 0x100], 0x50
jb 0x1400cb555
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400cb532
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007270
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor eax, eax
jmp 0x1400cb911
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r8, qword [rsp + 0xf0]
lea rcx, [r15 + 0x20]
mov edx, 0x50
call fcn.1401a66e0
nop
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400cb5a4
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007270
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
mov eax, 1
jmp 0x1400cb911
cmp rbx, qword [rdi + 0x4a8]
jne 0x1400cb700
mov rdx, rax
lea rcx, [rdi + 0x490]
call fcn.14004a3c0
mov rbx, rax
call fcn.14004a480
lea rdx, [rbx + 0xb0]
cmp qword [rdx + 0x18], 8
jb 0x1400cb5ff
mov rdx, qword [rdx]
mov r14, 0xffffffffffffffff
nop word [rax + rax]
inc r14
cmp word [rdx + r14*2], 0
jne 0x1400cb610
mov r8, r14
lea rcx, [rsp + 0xf0]
call fcn.140006d60
cmp qword [rsp + 0x100], 0x400
jb 0x1400cb682
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400cb65f
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007270
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor eax, eax
jmp 0x1400cb911
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r8, qword [rsp + 0xf0]
mov edx, 0x400
lea rbx, [0x1402bc1b0]
mov rcx, rbx
call fcn.1401a66e0
mov qword [r15 + 0x18], rbx
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400cb6da
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007270
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
mov eax, 1
jmp 0x1400cb911
cmp rbx, qword [rdi + 0x580]
jne 0x1400cb830
mov rdx, rax
lea rcx, [rdi + 0x568]
call fcn.14004a3c0
mov rbx, rax
call fcn.14004a480
lea rdx, [rbx + 0xb0]
cmp qword [rdx + 0x18], 8
jb 0x1400cb735
mov rdx, qword [rdx]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp word [rdx + r14*2], 0
jne 0x1400cb740
mov r8, r14
lea rcx, [rsp + 0xf0]
call fcn.140006d60
cmp qword [rsp + 0x100], 0x400
jb 0x1400cb7b2
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400cb78f
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007270
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor eax, eax
jmp 0x1400cb911
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r8, qword [rsp + 0xf0]
mov edx, 0x400
lea rbx, [0x1402bc1b0]
mov rcx, rbx
call fcn.1401a66e0
mov qword [r15 + 0x18], rbx
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400cb80a
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007270
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
mov eax, 1
jmp 0x1400cb911
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400cb856
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007270
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor eax, eax
jmp 0x1400cb911
cmp rbx, qword [rdi + 0x4a8]
je 0x1400cb895
cmp rbx, qword [rdi + 0x580]
jne case.0x1400c8be5.2004
mov esi, 1
mov rdx, qword [rdi + 0x8d0]
lea rcx, [rdi + 0x97900]
call fcn.1400165a0
mov edx, esi
mov rcx, rdi
call fcn.140099fa0
mov rcx, qword [rdi + 0x640]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x130b
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rdx, eax
mov rcx, qword [rdi + 0x640]
call fcn.14004a3c0
test rax, rax
je 0x1400cb8fe
mov byte [rdi + 0x97a89], 1
mov r8d, esi
mov rdx, rax
mov rcx, rdi
call fcn.140082600
mov byte [rdi + 0x97a89], 0
xor r8d, r8d
xor edx, edx
lea rcx, [rdi + 0x97900]
call fcn.1401297a0
xor eax, eax
mov rcx, qword [rsp + 0x9d0]
xor rcx, rsp
call fcn.14017f700
lea r11, [rsp + 0x9e0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140006970
int3
call fcn.140006970
int3
call fcn.140006970
int3
call fcn.140006970
nop
call fcn.140006970
int3
call fcn.140006970
nop
call fcn.1401a10ac
int3