Function at 0x140047d40
Capabilities:
Terminate process

Disassembly:
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x78
mov rax, qword [0x1400d9040]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rdi, r9
mov qword [rsp + 0x40], r9
mov rbx, r8
mov esi, edx
mov rbp, rcx
call fcn.140076e10
test rax, rax
je 0x140047d7c
mov eax, 1
jmp 0x140048110
cmp esi, 0x101
ja 0x140047f9c
je 0x140047f6d
mov eax, esi
sub eax, 2
je 0x140047f5e
sub eax, 3
je 0x140047f48
sub eax, 1
je 0x140047f39
sub eax, 0xa
je 0x140047f30
cmp eax, 0xf0
jne 0x1400480ff
cmp rbx, 0x31
jne 0x140047dd6
mov dword [0x1400db858], 2
xor eax, eax
jmp 0x140048110
cmp rbx, 0x32
jne 0x140047ded
mov dword [0x1400db858], 1
xor eax, eax
jmp 0x140048110
cmp rbx, 0x33
jne 0x140047e00
xor eax, eax
mov dword [0x1400db858], eax
jmp 0x140048110
cmp rbx, 0x2e
jne 0x140047e12
call fcn.140040d70
xor eax, eax
jmp 0x140048110
cmp rbx, 0x11
jne 0x140047e26
mov byte [0x14014c37f], 1
xor eax, eax
jmp 0x140048110
cmp rbx, 0x5a
jne 0x140047f66
cmp byte [0x14014c37f], 0
je 0x140047f66
cmp byte [0x14014c380], 0
jne 0x140047f66
mov rdx, qword [0x14014bf00]
test rdx, rdx
je 0x140047f22
mov rcx, qword [0x14014bef8]
mov rax, qword [0x14014bef0]
dec rcx
add rcx, rdx
dec rax
and rcx, rax
mov rax, qword [0x14014bee8]
sub rdx, 1
mov rax, qword [rax + rcx*8]
movups xmm0, xmmword [rax]
mov qword [0x14014bf00], rdx
jne 0x140047e98
xor eax, eax
mov qword [0x14014bef8], rax
movd ecx, xmm0
test ecx, ecx
je 0x140047f01
sub ecx, 1
je 0x140047ed8
cmp ecx, 1
jne 0x140047f22
mov rax, qword [0x14014c020]
cmp qword [0x14014c018], rax
je 0x140047f22
sub rax, 8
mov qword [0x14014c020], rax
call fcn.140039f40
xor eax, eax
mov byte [0x14014c380], 1
jmp 0x140048110
mov rax, qword [0x14014ab58]
cmp qword [0x14014ab50], rax
je 0x140047f22
add rax, 0xfffffffffffffff0
mov byte [0x14014c380], 1
mov qword [0x14014ab58], rax
xor eax, eax
jmp 0x140048110
mov rax, qword [0x14014bfc0]
cmp qword [0x14014bfb8], rax
je 0x140047f22
sub rax, 0xc
dec dword [0x14014bf80]
mov qword [0x14014bfc0], rax
mov byte [0x14014c380], 1
xor eax, eax
jmp 0x140048110
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test rbx, rbx
setne byte [0x1400db857]
jmp 0x1400480ff
cmp rbx, 1
je 0x140047f66
movzx eax, di
mov dword [0x14014beb0], eax
xor eax, eax
jmp 0x140048110
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
jmp 0x140048110
cmp rbx, 0x11
jne 0x140047f88
mov byte [0x14014c37f], 0
xor eax, eax
mov byte [0x14014c380], 0
jmp 0x140048110
cmp rbx, 0x5a
jne 0x140047f66
mov byte [0x14014c380], 0
xor eax, eax
jmp 0x140048110
mov eax, esi
sub eax, 0x112
je 0x1400480eb
sub eax, 0xee
je 0x14004804c
sub eax, 1
je 0x14004803f
sub eax, 6
je 0x140048008
cmp eax, 0x21ff
jne 0x1400480ff
cmp rdi, 0x201
jne 0x1400480ff
lea rdx, [0x14014c160]
mov ecx, 2
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
mov edx, 9
mov rcx, rbp
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbp
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x1400480ff
mov rax, qword [0x14014ab50]
cmp rax, qword [0x14014ab58]
je 0x140047f66
movsd xmm0, qword [rax + 8]
movss xmm1, dword [rax]
movss xmm2, dword [rax + 4]
movsd qword [rax], xmm0
movss dword [rax + 8], xmm1
movss dword [rax + 0xc], xmm2
xor eax, eax
jmp 0x140048110
mov dword [0x14014bea4], edi
xor eax, eax
jmp 0x140048110
cmp rbx, 1
jne 0x140047f66
xorps xmm0, xmm0
lea rdx, [rsp + 0x48]
mov rcx, rbp
movups xmmword [rsp + 0x48], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [0x14014bea4]
movsx ecx, ax
movsx edx, di
sub edx, ecx
movsx ecx, word [0x14014bea6]
add dword [rsp + 0x48], edx
movsx edx, word [rsp + 0x42]
sub edx, ecx
add dword [rsp + 0x4c], edx
test ax, ax
js 0x140047f66
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movsx ecx, word [0x14014bea4]
cmp ecx, eax
jg 0x140047f66
cmp word [0x14014bea6], 0x13
ja 0x140047f66
mov r9d, dword [rsp + 0x4c]
lea rdx, [rbx - 2]
mov r8d, dword [rsp + 0x48]
xor eax, eax
mov dword [rsp + 0x30], 0x45
mov rcx, rbp
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SetWindowPos]
xor eax, eax
jmp 0x140048110
mov rax, rbx
and eax, 0xfff0
cmp rax, 0xf100
je 0x140047f66
mov r9, rdi
mov r8, rbx
mov edx, esi
mov rcx, rbp
call qword [sym.imp.USER32.dll_DefWindowProcW]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140097960
add rsp, 0x78
pop rdi
pop rsi
pop rbp
pop rbx
ret