Function at 0x1400731e0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x200]
sub rsp, 0x300
mov rax, qword [0x1401198e8]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
mov r15, rcx
xor edi, edi
mov dword [rsp + 0x60], edi
cmp byte [rcx + 0x5a4], dil
je 0x14007326c
call fcn.140088be0
test al, al
jne 0x14007326c
call fcn.140088de0
lea rax, [rdi - 1]
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.14009c570
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14006e460
mov r13, rax
mov qword [rsp + 0x78], rax
lea rdx, str.SOFTWARESysinternalsAutoruns
mov rcx, rax
call fcn.140089b30
test al, al
je 0x1400732d0
mov rcx, r13
call fcn.14007ecc0
test eax, eax
sete byte [0x14011a510]
mov rcx, r13
call fcn.140081720
test eax, eax
setne byte [0x14011a5a4]
mov rcx, r13
call fcn.140068220
test eax, eax
setne byte [0x1401358f2]
mov rcx, r13
call fcn.14007fb30
test eax, eax
setne byte [0x1401358f0]
lea r8, [0x1400d8b38]
lea rdx, [rbp + 0x20]
mov rcx, r13
call fcn.1400899d0
mov r12d, 4
mov dword [rsp + 0x60], r12d
lea r8, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae r8, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xa
jne 0x140073330
lea rcx, str.LightTheme
test rdx, rdx
je 0x140073329
sub r8, rcx
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140073330
add rcx, 2
sub rdx, 1
jne 0x140073315
mov esi, 0x8008
jmp 0x140073335
mov esi, 0x800a
mov dword [rsp + 0x68], esi
and r12d, 0xfffffffb
mov dword [rsp + 0x60], r12d
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x140073382
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007337d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140074473
call fcn.14009bfe4
movdqa xmm0, xmmword [0x1400f80d0]
movdqu xmmword [rbp + 0x30], xmm0
mov word [rbp + 0x20], di
xor ecx, ecx
call fcn.140099d10
cmp eax, 0x4563
jb 0x140073496
lea r8, [0x1400d8b38]
lea rdx, [rbp + 0x40]
mov rcx, r13
call fcn.1400899d0
or r12d, 8
mov dword [rsp + 0x60], r12d
lea r8, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae r8, qword [rbp + 0x40]
lea r14, str.DarkTheme
mov rdx, qword [rbp + 0x50]
cmp rdx, 9
jne 0x140073408
mov rcx, r14
test rdx, rdx
je 0x140073404
sub r8, r14
nop dword [rax + rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140073408
add rcx, 2
sub rdx, 1
jne 0x1400733f0
mov bl, 1
jmp 0x14007340a
xor bl, bl
and r12d, 0xfffffff7
mov dword [rsp + 0x60], r12d
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x140073453
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007344e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140074479
call fcn.14009bfe4
movdqa xmm0, xmmword [0x1400f80d0]
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], di
test bl, bl
je 0x140073472
mov dword [rsp + 0x68], 0x8009
jmp 0x140073483
cmp esi, 0x800a
jne 0x140073496
call fcn.14007f520
test al, al
je 0x140073496
call fcn.14004e320
xor r8d, r8d
mov rdx, r14
mov rcx, rax
call fcn.14004f530
call fcn.14004f480
test al, al
jne 0x1400734a4
call fcn.140052d60
mov rcx, qword [r15 + 8]
call qword [sym.imp.USER32.dll_GetMenu]
mov r14, rax
mov qword [rbp - 0x70], rax
call fcn.140088be0
test al, al
jne 0x140073543
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rbx, rax
mov qword [rbp - 0x78], rax
or r12d, 0x10
mov dword [rsp + 0x60], r12d
lea rax, str.Run_As_Administrator
mov qword [rsp + 0x20], rax
xor edx, edx
mov r9d, 0x801f
mov r8d, 0x400
mov rcx, rbx
call qword [sym.imp.USER32.dll_InsertMenuW]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea edx, [r9 + 1]
mov r8d, 0xc00
mov rcx, rbx
call qword [sym.imp.USER32.dll_InsertMenuW]
mov edx, 3
mov r8d, 0x400
mov rcx, r14
call qword [sym.imp.USER32.dll_DeleteMenu]
dec dword [0x1401191d0]
and r12d, 0xffffffef
mov dword [rsp + 0x60], r12d
jmp 0x140073711
call fcn.140008180
mov rcx, rax
test rax, rax
je 0x14007447f
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x70], rbx
mov rcx, qword [r15 + 8]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea esi, [rax + 1]
test esi, esi
js 0x140074468
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x14007359a
mov edx, esi
lea rcx, [rsp + 0x70]
call fcn.140006870
mov rbx, qword [rsp + 0x70]
mov r8d, esi
mov rdx, rbx
mov rcx, qword [r15 + 8]
call qword [sym.imp.USER32.dll_GetWindowTextW]
cmp eax, 0xffffffff
jne 0x1400735bb
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400b0c58
test eax, eax
js 0x140074468
cmp eax, dword [rbx - 0xc]
jg 0x140074468
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], di
lea rdx, str.__Administrator_
lea rcx, [rsp + 0x70]
call fcn.140012e60
call fcn.140008180
mov rcx, rax
test rax, rax
je 0x14007448a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rcx, [rbp + 0x70]
call fcn.140088900
nop
cmp qword [rax + 0x18], 8
jb 0x140073619
mov rax, qword [rax]
mov r9, rax
mov r8, qword [rsp + 0x70]
lea rdx, str._s___s_
lea rcx, [rbp - 0x78]
call fcn.14002af10
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x140073675
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073670
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140074495
call fcn.14009bfe4
movdqa xmm0, xmmword [0x1400f80d0]
movdqu xmmword [rbp + 0x80], xmm0
mov word [rbp + 0x70], di
mov rbx, qword [rbp - 0x78]
mov rdx, rbx
mov rcx, qword [r15 + 8]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov r8d, 2
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x70]
call fcn.14006ecc0
nop
xor edx, edx
mov r8d, 0x400
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.USER32.dll_DeleteMenu]
mov dl, 1
lea rcx, str.SeRestorePrivilege
call fcn.14002e730
nop
lea rdx, [rbx - 0x18]
mov rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400736f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x14007370c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov r12d, dword [rsp + 0x60]
mov dword [r15 + 0x2d8], 0x1a
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x5600184c
xor r9d, r9d
lea r8, [0x140119010]
mov rdx, qword [r15 + 8]
lea rcx, [r15 + 0x240]
call fcn.1400685c0
mov qword [rbp - 0x80], rax
mov rcx, qword [r15 + 0x2c0]
test rcx, rcx
je 0x14007377a
call qword [sym.imp.COMCTL32.dll_ImageList_GetImageCount]
test eax, eax
jne 0x140073782
mov rcx, qword [r15 + 0x2c0]
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
mov qword [r15 + 0x2c0], rdi
or byte [r15 + 0x331], 0x20
call fcn.14004e3d0
mov rcx, rax
call fcn.14004bf00
test al, al
jne 0x1400737ae
lea r8, [0x1400f1b38]
lea rdx, [0x1400eff9c]
mov rcx, qword [r15 + 0x248]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
call fcn.140088be0
test al, al
je 0x1400737c2
mov rdx, r14
mov rcx, r15
call fcn.140067360
mov rdx, r14
lea rcx, [r15 + 0x240]
call fcn.1400679c0
mov rcx, r15
call fcn.14006fb40
lea rcx, [r15 + 0x80]
xor r8d, r8d
mov rdx, r14
call fcn.140080080
xor edx, edx
mov rcx, qword [r15 + 8]
call qword [sym.imp.USER32.dll_SetMenu]
mov r9, qword [r15 + 8]
mov rcx, qword [0x140133ec8]
mov r10d, dword [0x140119014]
mov edx, dword [0x14011901c]
sub edx, r10d
mov r8d, dword [0x140119010]
mov eax, dword [0x140119018]
sub eax, r8d
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], 0xe800
mov qword [rsp + 0x40], r9
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r8d
mov r9d, 0x5600094c
xor r8d, r8d
lea rdx, str.ToolbarWindow32
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rsp + 0x70], rax
mov r8d, 0x18
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.140071230
lea rsi, [r15 + 0x498]
mov r14, qword [r15 + 8]
mov rax, qword [rsi + 0x28]
test rax, rax
jne 0x1400738ac
call fcn.14009a174
mov qword [rsi + 0x28], rax
test rax, rax
jne 0x1400738ac
lea ecx, [rax + 0xe]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x140073937
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.14009a2a4
lea rbx, [rsi + 0x10]
test rbx, rbx
je 0x140074458
test rsi, rsi
je 0x140074458
mov qword [rbx], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbx + 8], eax
lea rsi, [0x14011a898]
mov qword [rbp - 0x50], rsi
mov byte [rbp - 0x48], 0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rbp - 0x48], 1
mov rax, qword [0x14011a8c0]
mov qword [rbx + 0x10], rax
mov qword [0x14011a8c0], rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [rbp - 0x48], 0
mov qword [rsp + 0x20], rdi
lea r9, [0x14007f690]
mov r8, r14
mov edx, 0x67
mov rcx, qword [0x140133ed0]
call qword [sym.imp.USER32.dll_CreateDialogParamW]
mov rcx, qword [r15 + 8]
mov rax, qword [0x140133ec8]
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0xe800
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x64
mov dword [rsp + 0x30], 0x64
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
mov r9d, 0x56002640
xor r8d, r8d
lea rdx, str.ReBarWindow32
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rbx, rax
test rax, rax
je 0x1400739c3
mov qword [rbp - 0x40], 0x10
xor eax, eax
mov qword [rbp - 0x38], rax
lea r9, [rbp - 0x40]
xor r8d, r8d
mov edx, 0x404
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
jne 0x1400739c6
mov rcx, rbx
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rbx, rdi
mov qword [r15 + 0x48], rbx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp - 0x80]
mov rcx, rbx
call fcn.1400675f0
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [rsp + 0x70]
mov rdx, rsi
mov rcx, qword [r15 + 0x48]
call fcn.1400675f0
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [r15 + 0x4a0]
mov rcx, qword [r15 + 0x48]
call fcn.1400675f0
mov rbx, qword [r15 + 0x48]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40c
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x140073b61
mov r14, rdi
mov esi, eax
nop word [rax + rax]
mov r13d, 0x80
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 6]
call fcn.140071920
test al, al
je 0x140073a80
call fcn.140071800
test al, al
jne 0x140073a86
mov r13d, 0x6c
mov dword [rbp + 0xf0], r13d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xf4], xmm0
movups xmmword [rbp + 0x104], xmm0
movups xmmword [rbp + 0x114], xmm0
movups xmmword [rbp + 0x124], xmm0
movups xmmword [rbp + 0x134], xmm0
movups xmmword [rbp + 0x144], xmm0
movups xmmword [rbp + 0x154], xmm0
mov qword [rbp + 0x164], rax
mov dword [rbp + 0x16c], eax
mov dword [rbp + 0xf4], 1
lea r9, [rbp + 0xf0]
mov r8, r14
mov edx, 0x41c
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0xf8]
test al, al
js 0x140073b28
bts eax, 7
mov dword [rbp + 0xf8], eax
lea r9, [rbp + 0xf0]
mov r8, r14
mov edx, 0x40b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0xf8]
btr eax, 7
bts eax, 8
mov dword [rbp + 0xf8], eax
lea r9, [rbp + 0xf0]
mov r8, r14
mov edx, 0x40b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
inc r14
sub rsi, 1
jne 0x140073a60
mov rsi, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x60], xmm0
xor r9d, r9d
xor r8d, r8d
mov edx, 0x418
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
dec eax
movsxd r8, eax
lea r9, [rbp + 0x60]
mov edx, 0x41d
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x68]
add eax, 0xa
movsxd r9, eax
mov edx, 0x42c
mov r8d, 1
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0xf0]
call fcn.14009e880
mov r9d, 0x80
lea r8, [rbp + 0xf0]
mov edx, 0xe001
mov rcx, qword [0x140133ed0]
call qword [sym.imp.USER32.dll_LoadStringW]
mov r9d, 0xe801
mov r8, qword [r15 + 8]
lea rdx, [rbp + 0xf0]
mov ecx, 0x56000900
call qword [sym.imp.COMCTL32.dll_CreateStatusWindowW]
mov r14, rax
mov qword [r15 + 0x50], rax
lea rbx, [r15 + 0x380]
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x28]
test rax, rax
jne 0x140073c33
call fcn.14009a174
mov qword [rbx + 0x28], rax
test rax, rax
je 0x140073c6a
mov r8, rbx
mov rdx, qword [rsp + 0x78]
mov rcx, rax
call fcn.14009a2a4
mov rcx, qword [rbx + 0x28]
call fcn.14009a1f0
mov r8, rax
mov edx, 0xfffffffc
mov rcx, r14
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
test rax, rax
je 0x140073c6a
mov qword [rbx + 0x40], rax
mov qword [rbx + 8], r14
mov eax, 0x190
mov dword [rbp + 0x90], eax
mov r9d, 1
mov r8d, 0x60
lea rdx, [rbp + 0x9c]
nop dword [rax + rax]
lea ecx, [r8 - 0x48]
add eax, ecx
mov dword [rdx - 8], eax
mov eax, dword [rbp + 0x90]
add eax, 0x18
add ecx, eax
mov dword [rdx - 4], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0xffffffe8
add ecx, r8d
mov dword [rdx], ecx
mov ecx, dword [rbp + 0x90]
add ecx, r8d
mov dword [rdx + 4], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x18
add ecx, r8d
mov dword [rdx + 8], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x30
add ecx, r8d
mov dword [rdx + 0xc], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x48
add ecx, r8d
mov dword [rdx + 0x10], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x60
add ecx, r8d
mov dword [rdx + 0x14], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x78
add ecx, r8d
mov dword [rdx + 0x18], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x90
add ecx, r8d
mov dword [rdx + 0x1c], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0xa8
add ecx, r8d
mov dword [rdx + 0x20], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0xc0
add ecx, r8d
mov dword [rdx + 0x24], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0xd8
add ecx, r8d
mov dword [rdx + 0x28], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0xf0
add ecx, r8d
mov dword [rdx + 0x2c], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x108
add ecx, r8d
mov dword [rdx + 0x30], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x120
add ecx, r8d
mov dword [rdx + 0x34], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x138
add ecx, r8d
mov dword [rdx + 0x38], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x150
add ecx, r8d
mov dword [rdx + 0x3c], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x168
add ecx, r8d
mov dword [rdx + 0x40], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x180
add ecx, r8d
mov dword [rdx + 0x44], ecx
mov ecx, dword [rbp + 0x90]
add ecx, 0x198
add ecx, r8d
mov dword [rdx + 0x48], ecx
add r9d, 0x15
add r8d, 0x1f8
lea rdx, [rdx + 0x54]
cmp r9d, 0x16
jae 0x140073e04
mov eax, dword [rbp + 0x90]
jmp 0x140073c90
mov eax, dword [rbp + 0xe0]
add eax, 0x12c
mov dword [rbp + 0xe4], eax
add eax, 0x12c
mov dword [rbp + 0xe8], eax
lea r9, [rbp + 0x90]
mov edx, 0x404
mov r8d, 0x17
mov rcx, qword [r15 + 0x388]
call qword [sym.imp.USER32.dll_SendMessageW]
and byte [r15 + 0x235], 0xfe
or byte [r15 + 0x234], 0x80
mov dword [r15 + 0x480], 0x22
mov rbx, qword [r15 + 8]
lea r9, [r15 + 0x418]
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0x20], al
lea r8, [0x1401195e0]
lea rdx, [0x14011a890]
lea rcx, [0x140133ec0]
call fcn.14004aeb0
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x56000000
xor r9d, r9d
lea r8, [0x140119010]
mov rdx, rbx
lea rcx, [r15 + 0x3d8]
call fcn.1400687b0
mov qword [r15 + 0x58], rax
mov rbx, qword [r15 + 0x3e0]
lea r9, [r15 + 0x128]
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0x20], al
lea r8, [0x1401194e0]
lea rdx, [0x14011a890]
lea rcx, [0x140133ec0]
call fcn.14004aeb0
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0x56000000
xor r9d, r9d
lea r8, [0x140119010]
mov rdx, rbx
lea rcx, [r15 + 0xe8]
call fcn.1400687b0
lea r14, [r15 + 0x4f8]
mov rax, qword [r15 + 0x3e0]
mov qword [rsp + 0x78], rax
mov rax, qword [r14 + 0x28]
test rax, rax
jne 0x140073f61
call fcn.14009a174
mov qword [r14 + 0x28], rax
test rax, rax
jne 0x140073f61
lea ecx, [rax + 0xe]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x140073fee
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.14009a2a4
lea rbx, [r14 + 0x10]
test rbx, rbx
je 0x140074458
test r14, r14
je 0x140074458
mov qword [rbx], r14
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbx + 8], eax
lea r14, [0x14011a898]
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x28], 0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rbp - 0x28], 1
mov rax, qword [0x14011a8c0]
mov qword [rbx + 0x10], rax
mov qword [0x14011a8c0], rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [rbp - 0x28], 0
mov qword [rsp + 0x20], rdi
lea r9, [0x14007f690]
mov r8, qword [rsp + 0x78]
mov edx, 0x12f
mov rcx, qword [0x140133ed0]
call qword [sym.imp.USER32.dll_CreateDialogParamW]
mov edx, 5
mov rcx, qword [r15 + 0x500]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [r15 + 0x420]
mov r10, qword [r15 + 0x500]
mov rax, qword [r15 + 0xf0]
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], r10
call fcn.140081310
mov edx, 1
mov rcx, r15
call fcn.140080f90
mov rdx, rsi
lea rcx, [r15 + 0x80]
call fcn.140080220
mov dword [rsp + 0x20], edi
mov r9d, 0x800a
lea r8d, [r9 - 2]
mov edx, dword [rsp + 0x68]
lea rcx, [r15 + 0x80]
call fcn.140080730
call fcn.14004e320
mov rcx, rax
call fcn.14004f4a0
test al, al
je 0x14007408b
mov dword [r15 + 0x490], 0xf0f0f0
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, qword [r15 + 0x3e0]
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rcx, r15
call fcn.140068ff0
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edx, eax
lea rcx, [0x140133c90]
call fcn.14006e7e0
mov r14, rax
lea r8, [r15 + 0x68]
lea rbx, [rax + 8]
mov qword [rsp + 0x78], rbx
mov esi, dword [rbx + 8]
movsxd rdx, dword [rbx + 0xc]
cmp esi, edx
jne 0x140074114
mov r9, qword [rbx]
lea rax, [rbp - 0x68]
cmp rax, r9
jb 0x1400740df
lea rcx, [r9 + rdx*8]
lea rax, [rbp - 0x68]
cmp rax, rcx
jb 0x14007449b
test edx, edx
jne 0x1400740e8
lea esi, [rdx + 1]
jmp 0x1400740ec
add esi, esi
js 0x140074135
mov edx, esi
cmp rdx, 0xfffffff
ja 0x140074135
mov r8d, 8
mov rcx, r9
call fcn.1400b0e30
test rax, rax
je 0x140074135
mov dword [rbx + 0xc], esi
mov qword [rbx], rax
lea r8, [r15 + 0x68]
movsxd rax, dword [rbx + 8]
mov dword [rsp + 0x68], eax
mov rcx, rax
mov rax, qword [rbx]
lea rdx, [rax + rcx*8]
mov qword [rbp - 0x80], rdx
test rdx, rdx
je 0x140074132
mov qword [rdx], r8
inc dword [rbx + 8]
lea r8, [r15 + 0x70]
lea rbx, [r14 + 0x18]
mov qword [rsp + 0x78], rbx
mov esi, dword [rbx + 8]
movsxd rdx, dword [rbx + 0xc]
cmp esi, edx
jne 0x14007419f
mov r9, qword [rbx]
lea rax, [rbp - 0x60]
cmp rax, r9
jb 0x14007416a
lea rcx, [r9 + rdx*8]
lea rax, [rbp - 0x60]
cmp rax, rcx
jb 0x1400744a6
test edx, edx
jne 0x140074173
lea esi, [rdx + 1]
jmp 0x140074177
add esi, esi
js 0x1400741c0
mov edx, esi
cmp rdx, 0xfffffff
ja 0x1400741c0
mov r8d, 8
mov rcx, r9
call fcn.1400b0e30
test rax, rax
je 0x1400741c0
mov dword [rbx + 0xc], esi
mov qword [rbx], rax
lea r8, [r15 + 0x70]
movsxd rax, dword [rbx + 8]
mov dword [rsp + 0x68], eax
mov rcx, rax
mov rax, qword [rbx]
lea rdx, [rax + rcx*8]
mov qword [rbp - 0x80], rdx
test rdx, rdx
je 0x1400741bd
mov qword [rdx], r8
inc dword [rbx + 8]
mov dword [r15 + 0x1a4], 0x14
lea rdx, str.Font
lea rcx, [rbp - 0x20]
call fcn.1400034d0
nop
mov rsi, qword [r13]
mov rbx, qword [rsi + 8]
cmp byte [rbx + 0x19], 0
jne 0x140074227
nop word [rax + rax]
lea rcx, [rbx + 0x20]
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae rdx, qword [rbp - 0x20]
cmp qword [rcx + 0x18], 8
jb 0x14007420c
mov rcx, qword [rcx]
call fcn.1400b0f10
test eax, eax
jns 0x14007421b
mov rbx, qword [rbx + 0x10]
jmp 0x140074221
mov rsi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1400741f0
cmp byte [rsi + 0x19], 0
jne 0x140074252
lea rdx, [rsi + 0x20]
cmp qword [rdx + 0x18], 8
jb 0x14007423b
mov rdx, qword [rdx]
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae rcx, qword [rbp - 0x20]
call fcn.1400b0f10
test eax, eax
jns 0x140074256
mov rsi, qword [r13]
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140074296
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074291
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400744b1
call fcn.14009bfe4
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 7
mov word [rbp - 0x20], di
cmp rsi, qword [r13]
je 0x1400742f2
mov rcx, qword [rsi + 0x68]
test rcx, rcx
je 0x1400742f2
call qword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov qword [r15 + 0x578], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x78], rax
mov qword [rbp + 0x18], rdi
lea rax, vtable.std::_Func_impl_no_alloc_class__private:_long_long___int64____cdecl_CMainFrame::OnCreate_unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64___int____ptr64____ptr64::_36::_lambda_1___void__class_CView____ptr64_.0
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x20]
mov qword [rbp + 0x18], rax
lea rdx, [rbp - 0x20]
mov rcx, r15
call fcn.140080bd0
lea rdx, [rbp - 0x58]
lea rcx, [r15 + 0x240]
call fcn.14006e7b0
nop
mov edx, dword [0x1401191d0]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.USER32.dll_GetSubMenu]
mov qword [rbp - 0x78], rax
or r12d, 2
mov dword [rsp + 0x60], r12d
lea rcx, [r15 + 0xe8]
mov qword [rcx + 0xb0], rax
call fcn.1400810f0
and r12d, 0xfffffffd
mov dword [rsp + 0x60], r12d
mov rcx, r13
call fcn.140067800
mov ebx, eax
mov rdx, rdi
test eax, eax
setne dl
add rdx, 0xfffffffffffffffe
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [r15 + 8]
call qword [sym.imp.USER32.dll_SetWindowPos]
test ebx, ebx
setne dil
xor r9d, r9d
mov r8d, edi
mov edx, 0x802a
lea rcx, [r15 + 0x80]
call fcn.140080630
mov rcx, r13
call fcn.14006f4b0
mov r8d, eax
xor r9d, r9d
mov edx, 0x802b
lea rcx, [r15 + 0x80]
call fcn.140080630
mov rcx, r13
call fcn.14006f5e0
mov r8d, eax
xor r9d, r9d
mov edx, 0x802c
lea rcx, [r15 + 0x80]
call fcn.140080630
mov rcx, r13
call fcn.14006f5e0
test eax, eax
je 0x1400743ee
mov dword [rsp + 0x68], 1
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14006f840
mov rcx, r13
call fcn.14006f900
mov r8d, eax
xor r9d, r9d
mov edx, 0x802d
lea rcx, [r15 + 0x80]
call fcn.140080630
mov rcx, r13
call fcn.14006f710
mov r8d, eax
xor r9d, r9d
mov edx, 0x802e
lea rcx, [r15 + 0x80]
call fcn.140080630
mov eax, dword [r15 + 0xe0]
test eax, eax
js 0x140074451
lea r8d, [rax + 0x1388]
xor r9d, r9d
mov edx, 0x111
mov rcx, qword [r15 + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
xor eax, eax
jmp 0x14007323c
mov edx, 1
mov ecx, 0xc0000005
call fcn.14004bd70
nop
mov ecx, 0x80070057
call fcn.140007f00
nop
call fcn.1400a3080
int3
call fcn.1400a3080
nop
mov ecx, 0x80004005
call fcn.140007f00
nop
mov ecx, 0x80004005
call fcn.140007f00
nop
call fcn.1400a3080
nop
mov ecx, 0x80004005
call fcn.140007f00
int3
mov ecx, 0x80004005
call fcn.140007f00
int3
call fcn.1400a3080
int3