Function at 0x140003230
Capabilities:
Accept command line arguments

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov rsi, rcx
call fcn.14001f08c
call fcn.140018760
mov dword [0x140279fbc], eax
call fcn.1400187e0
mov dword [0x140269444], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rbx, rax
call fcn.140023c3c
mov rcx, rax
xor r15d, r15d
mov edx, r15d
test rax, rax
setne dl
test edx, edx
jne 0x140003292
mov ecx, 0x80004005
call fcn.140019e30
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x88], rax
or rdi, 0xffffffffffffffff
test rbx, rbx
je 0x1400032ec
test rbx, 0xffffffffffff0000
jne 0x1400032da
movzx ebx, bx
mov ecx, ebx
call fcn.14002364c
test rax, rax
je 0x140003303
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.140019b00
jmp 0x140003303
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400032e0
jmp 0x1400032ef
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x88]
call fcn.140019e50
nop
lea rcx, [rsp + 0x88]
call fcn.140018ff0
mov rcx, rax
call fcn.1400190b0
mov rcx, qword [rsp + 0x88]
movsxd rbx, dword [rcx - 0x10]
test ebx, ebx
jns 0x140003333
mov ecx, 0x80070057
call fcn.140019e30
int3
mov r12d, 1
mov edx, r12d
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, ebx
or eax, edx
jge 0x14000335f
mov edx, ebx
lea rcx, [rsp + 0x88]
call fcn.140019dd0
mov rcx, qword [rsp + 0x88]
lea eax, [rbx + 1]
movsxd rdx, eax
call fcn.14019b2a0
mov rax, qword [rsp + 0x88]
cmp ebx, dword [rax - 0xc]
jg 0x140004572
mov dword [rax - 0x10], ebx
mov rax, qword [rsp + 0x88]
mov word [rax + rbx*2], r15w
mov rcx, qword [rsp + 0x88]
cmp dword [rcx - 0x10], 0
jl 0x1400033c8
lea rdx, str._rst
call fcn.14019aaf8
test rax, rax
je 0x1400033c8
sub rax, qword [rsp + 0x88]
sar rax, 1
movzx ecx, byte [0x140279c30]
test eax, eax
cmovg ecx, r12d
mov byte [0x140279c30], cl
mov dword [0x14027a028], r15d
mov dword [0x14027a024], r15d
mov dword [0x14027a020], r15d
call fcn.1400240d4
call fcn.1400240d4
mov edx, VariantTimeToSystemTime
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279fa8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc9
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279fa0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xcc
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f98], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x81
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f90], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xca
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f88], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x82
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f80], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, VariantTimeToSystemTime
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f78], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xb3
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f70], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xcd
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f68], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd0
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f60], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd1
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f58], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd2
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f50], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, VariantTimeToSystemTime
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f48], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, VariantTimeToSystemTime
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f40], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, VariantTimeToSystemTime
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f38], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xb2
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f30], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd3
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f28], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe3
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f20], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe6
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f18], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe9
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f10], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, reloc.OLEAUT32.dll_VariantTimeToSystemTime
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f08], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd4
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279f00], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd7
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ef8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd8
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ef0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd9
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ee8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, reloc.OLEAUT32.dll_UnRegisterTypeLib
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ee0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xbb
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ed8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xbc
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ed0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc6
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ec8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd5
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ec0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe4
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279eb8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe7
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279eb0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xea
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ea8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xba
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279ea0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xd6
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e98], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe5
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e90], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe8
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e88], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe2
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e80], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xda
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e78], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xdb
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e70], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xdc
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e68], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xdd
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e60], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xbd
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e58], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xbe
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e50], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xbf
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e48], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc7
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e40], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xde
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e38], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xdf
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e30], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe0
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e28], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xe1
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e20], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc0
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e18], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc1
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e10], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc2
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e08], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc8
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279e00], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x83
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279df8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x84
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279df0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x85
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279de8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x86
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279de0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc3
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279dd8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc4
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279dd0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xc5
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279dc8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xcb
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279dc0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x87
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279db8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x88
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279db0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x89
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279da8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x8a
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279da0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xf5
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d98], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xf6
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d90], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xf7
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d88], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xeb
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d80], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xcf
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d78], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xce
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d70], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x91
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d68], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x92
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d60], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x8f
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d58], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x90
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d50], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x8b
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d48], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x8c
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d40], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x8d
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d38], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x8e
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d30], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, LoadRegTypeLib
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d28], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, LoadRegTypeLib
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d20], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xa8
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d18], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xa7
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d10], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xa9
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140279d08], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x133
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x140279730], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x134
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x140279728], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x130
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x140279720], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x12e
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x140279718], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x132
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x140279710], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x12d
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x140279708], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x9a
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x140279700], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x97
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x1402796f8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x98
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x1402796f0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x99
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x1402796e8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xad
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x1402796e0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xae
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x1402796d8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xaf
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x1402796d0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0xb0
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x1402796c8], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x66
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x1402796c0], rax
call fcn.1400240d4
call fcn.1400240d4
mov edx, 0x65
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [0x1402796b8], rax
lea rcx, [0x140279ce0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x140279cb8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x140279c90]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call fcn.140014aa0
mov dword [0x140279c44], eax
call fcn.1400152f0
call fcn.140018860
movzx eax, al
mov dword [0x14027a004], eax
xor edx, edx
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.WTSAPI32.dll_WTSRegisterSessionNotification]
test eax, eax
jne 0x1400040e8
xor r9d, r9d
lea edx, [rax + 2]
mov r8d, 0x1f4
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_SetTimer]
call fcn.1400046b0
test eax, eax
je 0x1400040fb
mov rcx, qword [rsi + 0x40]
call qword [0x1402796a8]
call fcn.140004750
test eax, eax
je 0x14000411b
mov rcx, qword [rsi + 0x40]
mov qword [0x140279680], rcx
call qword [0x140279678]
call qword [0x140279640]
call fcn.140004920
test eax, eax
je 0x140004142
call fcn.140012ff0
call qword [0x1402792c0]
call qword [0x140279250]
lea rcx, [0x1402793b0]
call qword [0x1402792f0]
mov r14d, r15d
mov ebp, r15d
mov ebx, r15d
cmp qword [0x140279688], rbx
je 0x14000441f
cmp qword [0x140279600], rbx
je 0x14000441f
mov r14d, r12d
call qword [0x1402793a8]
mov ebp, eax
call fcn.140014b60
mov ebx, eax
cmp ebp, r12d
jne 0x14000441f
cmp eax, r12d
jne 0x14000441f
call fcn.14000e2c0
cmp eax, r12d
jne 0x1400041a6
mov dword [0x140279c40], r12d
mov ecx, 2
call fcn.140011960
jmp 0x1400041ae
test eax, eax
je 0x14000441f
cmp dword [0x140269440], 0
je 0x14000442b
xor r9d, r9d
lea edx, [r9 + 3]
lea r8d, [r9 + 0x64]
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [0x140279c44]
cmp eax, 4
jb 0x1400041f8
cmp dword [0x1402793f0], r12d
je 0x1400041ed
cmp dword [0x140279494], r12d
jne 0x1400041f8
call fcn.140017020
mov eax, dword [0x140279c44]
cmp eax, 2
jb 0x140004345
lea r8, str.75293DF8_9D0D_43e3_9143_39E4C2AB881C
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
test rax, rax
je 0x14000422f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x140279c48], r12d
jmp 0x14000435e
mov dword [0x140279c48], r15d
call fcn.140012870
test eax, eax
jne 0x140004258
cmp dword [0x140279458], r12d
jne 0x140004250
xor ecx, ecx
call qword [0x140279668]
xor ecx, ecx
call qword [0x140279658]
lea r8, str.75293DF8_9D0D_43e3_9143_39E4C2AB881C
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
test rax, rax
je 0x14000427f
mov ebx, r12d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140004282
mov ebx, r15d
mov dword [0x140279c48], ebx
cmp byte [0x14027952c], 0xa
jne 0x14000435e
cmp dword [0x140279c44], 5
jb 0x14000435e
lea rcx, [rsp + 0x90]
call fcn.140012e60
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [0x14027a400]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14000430f
cmp dword [rbx + 0x10], 0
jl 0x1400042fe
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400042fe
call fcn.1400198b0
mov rbp, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x1400042f1
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbp + 0x18]
mov qword [0x14027a400], rax
jmp 0x14000430f
mov r8d, dword [rdx - 0x10]
lea rcx, [0x14027a400]
call fcn.140019e50
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000432b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.NECOSDOSDSwitch.exe
lea rcx, [0x14027a400]
call fcn.140018b00
call fcn.140017170
jmp 0x14000435e
cmp dword [0x140279458], r12d
jne 0x140004356
xor ecx, ecx
call qword [0x140279668]
xor ecx, ecx
call qword [0x140279658]
cmp dword [0x140279c44], 2
jb 0x140004418
lea r8, str.F69FFC44_29C0_43f3_AD52_626C40133A56
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
test rax, rax
je 0x140004392
mov ebx, r12d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140004395
mov ebx, r15d
mov dword [0x14027a000], ebx
lea r8, str.F69FFC44_29C0_43f3_AD52_626C40133A56
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
test rax, rax
je 0x1400043c2
mov ebx, r12d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400043c5
mov ebx, r15d
mov dword [0x140279ffc], ebx
cmp dword [0x14027a000], 0
jne 0x14000440f
call fcn.140016b10
lea r8, str.F69FFC44_29C0_43f3_AD52_626C40133A56
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
test rax, rax
je 0x140004400
mov ebx, r12d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140004403
mov ebx, r15d
mov dword [0x140279c48], ebx
mov ebx, dword [0x140279ffc]
test ebx, ebx
jne 0x140004418
call fcn.140016cc0
call fcn.140016e70
jmp 0x140004440
mov dword [0x140269440], r15d
cmp r14d, r12d
jne 0x140004440
call qword [0x1402792a0]
cmp ebp, r12d
jne 0x140004440
test ebx, ebx
jne 0x140004440
call qword [0x140279270]
call qword [sym.imp.KERNEL32.dll_WTSGetActiveConsoleSessionId]
mov dword [0x14026943c], eax
cmp dword [0x140279c8c], 4
jne 0x140004463
mov edx, r12d
mov ecx, 6
call qword [0x140279260]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x140017fb0]
call fcn.140020098
xor ecx, ecx
call fcn.140017630
mov byte [0x140279fb0], 0
mov dword [0x140279fb4], 0xa
xor r9d, r9d
lea edx, [r9 + 0xd]
mov r8d, 0x3e8
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_SetTimer]
cmp byte [0x140279c30], 1
jne 0x1400044bf
call qword [0x1402791f8]
cmp dword [0x14027a004], 1
jne 0x1400044d7
call fcn.1400189b0
call fcn.140018a70
call fcn.1400188e0
lea rax, [rsp + 0x98]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareElantechSmartPad
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000452c
lea rdx, str.TPStatus_Mode
lea rcx, [rsp + 0x38]
call fcn.140019f40
mov rdx, rax
mov rcx, qword [rsp + 0x98]
call fcn.14000a6a0
mov dword [0x14027a01c], eax
call fcn.140018630
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x140018350]
call fcn.140020098
nop
mov rdx, qword [rsp + 0x88]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000456d
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r12d
jmp 0x14000457d
mov ecx, 0x80070057
call fcn.140019e30
nop
add rsp, 0x40
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret