Function at 0x140019670
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
lea rbp, [rsp - 0x120]
sub rsp, 0x220
mov rax, qword [0x140159140]
xor rax, rsp
mov qword [rbp + 0x110], rax
lea rcx, [0x14001ffc0]
call fcn.14008e140
call fcn.14008de10
test eax, eax
jne 0x1400196de
movdqa xmm0, xmmword [0x1400afe80]
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x52], 0xa2e6b
mov word [rsp + 0x50], 0x726f
mov byte [rsp + 0x56], al
call fcn.140017aa0
jmp 0x140019c74
mov qword [rsp + 0x230], rbx
call fcn.14008e8d0
mov rbx, rax
test rax, rax
jne 0x140019741
movdqa xmm0, xmmword [0x1400afe60]
mov ecx, 2
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x5a], 0x726f74
mov dword [rsp + 0x50], 0x72616d69
mov dword [rsp + 0x54], 0x6f6d2079
mov word [rsp + 0x58], 0x696e
mov byte [rsp + 0x5e], al
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140031e70
jmp 0x140019c6c
mov rcx, rbx
mov qword [rsp + 0x238], rsi
call fcn.14008eea0
mov ecx, dword [rax]
mov dword [0x1400e6458], ecx
mov rcx, rbx
call fcn.14008eea0
mov edx, 1
mov ecx, dword [rax + 4]
mov dword [0x1400e645c], ecx
mov ecx, 0x20007
call fcn.14008fe70
xor edx, edx
mov ecx, 0x20003
call fcn.14008fe70
mov edx, 1
mov ecx, 0x20008
call fcn.14008fe70
mov edx, 1
mov ecx, 0x2000a
call fcn.14008fe70
mov edx, dword [0x1400e645c]
lea r8, [rsp + 0x40]
mov ecx, dword [0x1400e6458]
xor esi, esi
xor r9d, r9d
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x44], 0x577265
mov dword [rsp + 0x40], 0x6b726f57
mov byte [rsp + 0x48], 0
call fcn.140090640
mov qword [0x140159950], rax
test rax, rax
jne 0x14001982c
movdqa xmm0, xmmword [0x1400aff20]
lea rcx, [rsp + 0x40]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xb1b7aafc
mov dword [rsp + 0x54], 0xcd958e84
mov word [rsp + 0x58], 0xee
mov byte [rsp + 0x5a], 1
call fcn.14001f0e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rdx, rax
call fcn.140017aa0
jmp 0x140019c64
xor r8d, r8d
mov edx, 0x20005
mov rcx, rax
call fcn.140091f00
mov rcx, qword [0x140159950]
mov edx, 0x2000d
mov r8d, 1
call fcn.140091f00
mov eax, dword [0x1400e645c]
xor r9d, r9d
mov rcx, qword [0x140159950]
inc eax
mov dword [rsp + 0x30], esi
xor r8d, r8d
mov dword [rsp + 0x28], eax
xor edx, edx
mov eax, dword [0x1400e6458]
mov dword [rsp + 0x20], eax
call fcn.140091ab0
mov rcx, qword [0x140159950]
call fcn.140092c30
mov ecx, 1
call fcn.140092dc0
call fcn.14008d3d0
test eax, eax
je 0x1400198f2
movdqa xmm0, xmmword [0x1400aff10]
lea rcx, [rsp + 0x40]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xaf91fdb9
mov dword [rsp + 0x54], 0xafa58f85
mov word [rsp + 0x58], 0xee
mov byte [rsp + 0x5a], 1
call fcn.14001f0e0
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov rdx, rbx
call fcn.140031e70
jmp 0x140019c64
lea rdx, str.WorkerW
mov qword [rsp + 0x240], rdi
lea rcx, [0x1400af208]
call qword [sym.imp.USER32.dll_FindWindowA]
xor ecx, ecx
mov qword [rsp + 0x40], rsi
mov rbx, rax
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x40]
xor edx, edx
lea r9, [0x1400cff60]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x1400cff70]
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp byte [0x1401597f6], sil
mov edi, eax
je 0x140019970
lea rdx, [0x140159958]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [0x140159958]
mov r8b, 1
mov rdx, rbx
call fcn.140020000
test edi, edi
jne 0x14001998d
mov rcx, qword [rsp + 0x40]
mov rdx, rbx
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov qword [rsp + 0x30], 2
lea rcx, str.1.84_WIP
mov qword [rsp + 0x28], 0x14
mov edx, 0x1558
mov r9d, 8
mov qword [rsp + 0x20], 0x10
mov r8d, 0x414
call fcn.140039c60
xor ecx, ecx
call fcn.140039760
call fcn.14003bc10
mov rdi, rax
call fcn.14003c0f0
lea rcx, [rsp + 0x60]
mov byte [rax + 0xb8], 1
mov byte [rax + 0xba], 1
call fcn.14004ac60
mov qword [rdi + 0x18], rsi
lea rcx, [rbp - 0x10]
mov qword [rdi + 0x20], rsi
mov byte [rbp - 0x58], 1
mov byte [rbp - 0x80], 1
mov dword [rsp + 0x78], 3
mov dword [rsp + 0x7c], 3
call fcn.14004ac60
lea rcx, [rbp + 0x80]
mov dword [rbp + 8], 1
mov dword [rbp + 0xc], 1
mov byte [rbp + 0x10], 1
call fcn.14004ac60
movss xmm2, dword [0x1400afac4]
lea rdx, str.C:WindowsFontsCalibri.ttf
mov byte [rbp + 0x8c], sil
xor r9d, r9d
mov rcx, qword [rdi + 0xa0]
mov qword [rsp + 0x20], rsi
call fcn.14004bad0
movss xmm3, dword [0x1400afac4]
lea rdx, [0x1400ec9f0]
mov rcx, qword [rdi + 0xa0]
mov r8d, 0x3bfcc
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
call fcn.14004c000
mov qword [0x140159908], rax
mov rbx, qword [rdi + 0xa0]
mov rcx, rbx
call fcn.14004e600
movss xmm2, dword [0x1400afacc]
lea rdx, str.C:WindowsFonts_segoeui.ttf
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14004bad0
movss xmm2, dword [0x1400afac8]
lea rdx, str.C:WindowsFontscalibri.ttf
mov qword [0x140159910], rax
xor r9d, r9d
mov rcx, qword [rdi + 0xa0]
mov qword [rsp + 0x20], rsi
call fcn.14004bad0
movss xmm2, dword [0x1400afad0]
lea rdx, str.C:WindowsFontscalibri.ttf
mov qword [0x140159930], rax
xor r9d, r9d
mov rcx, qword [rdi + 0xa0]
mov qword [rsp + 0x20], rsi
call fcn.14004bad0
movss xmm2, dword [0x1400afac4]
lea rdx, str.C:WindowsFontscalibri.ttf
mov qword [0x140159918], rax
xor r9d, r9d
mov rcx, qword [rdi + 0xa0]
mov qword [rsp + 0x20], rsi
call fcn.14004bad0
movss xmm2, dword [0x1400afac0]
lea rdx, str.C:WindowsFontscalibri.ttf
mov qword [0x140159920], rax
xor r9d, r9d
mov qword [rsp + 0x20], rsi
mov rcx, qword [rdi + 0xa0]
call fcn.14004bad0
lea r9, [0x1400e64dc]
mov qword [0x140159928], rax
lea r8, [0x1400e64cc]
lea rdx, [0x14015973c]
lea rcx, str.MyImage02.jpg
call fcn.14001c7b0
lea r9, [0x1400e64dc]
lea r8, [0x1400e64cc]
lea rdx, [0x140159748]
lea rcx, str.bg.jpg
call fcn.14001c7b0
lea r9, [0x1400e64dc]
lea r8, [0x1400e64cc]
lea rdx, [0x140159740]
lea rcx, str.hourglass.jpg
call fcn.14001c7b0
lea r9, [0x1400e64dc]
lea r8, [0x1400e64cc]
lea rdx, [0x14015974c]
lea rcx, str.smile.jpg
call fcn.14001c7b0
lea r9, [0x1400e64dc]
lea r8, [0x1400e64cc]
lea rdx, [0x140159744]
lea rcx, str.logo.jpg
call fcn.14001c7b0
mov rcx, qword [0x140159950]
mov dl, 1
call fcn.14005b440
lea rcx, [rsp + 0x40]
mov word [rsp + 0x4b], 0x30
mov dword [rsp + 0x40], 0x72657623
mov dword [rsp + 0x44], 0x6e6f6973
mov word [rsp + 0x48], 0x3120
mov byte [rsp + 0x4a], 0x33
mov byte [rsp + 0x4d], sil
call fcn.14005c130
mov rdi, qword [rsp + 0x240]
mov rsi, qword [rsp + 0x238]
mov rbx, qword [rsp + 0x230]
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.1400a88d0
add rsp, 0x220
pop rbp
ret