Function at 0x140004000
Capabilities:
Create thread

Disassembly:
push rbx
sub rsp, 0x70
mov r9d, 0x64
lea r8, [0x140029b20]
mov rbx, rcx
lea edx, [r9 + 3]
call qword [sym.imp.USER32.dll_LoadStringW]
mov r9d, 0x64
lea r8, [0x140029de0]
lea edx, [r9 + 9]
mov rcx, rbx
call qword [sym.imp.USER32.dll_LoadStringW]
mov rcx, rbx
call fcn.140004750
mov rcx, rbx
call fcn.1400047e0
test eax, eax
jne 0x140004054
add rsp, 0x70
pop rbx
ret
mov edx, 0x6d
mov rcx, rbx
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rdi
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov ecx, 0x30
mov rsi, rax
call fcn.140007cc8
xor ebx, ebx
mov rdi, rax
test rax, rax
je 0x1400040a2
mov qword [rax + 0x18], rbx
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
jmp 0x1400040a5
mov rdi, rbx
mov qword [0x140029c10], rdi
test rdi, rdi
jne 0x1400040b8
xor eax, eax
jmp 0x1400046d0
cmp qword [rdi], 0
mov qword [rsp + 0x90], r14
mov r14d, 1
jne 0x1400040fa
mov r8, rdi
mov rcx, rdi
call fcn.140005fd0
test eax, eax
je 0x140004112
mov rcx, rdi
call fcn.140006590
test eax, eax
je 0x140004112
mov rcx, rdi
call fcn.140006770
test eax, eax
je 0x140004112
mov rdi, qword [0x140029c10]
mov rdx, qword [rdi + 8]
lea rcx, [0x140029a10]
mov dword [0x140029a00], r14d
call qword [0x140016190]
mov rcx, qword [0x140029c10]
test rcx, rcx
je 0x140004123
call fcn.1400046f0
mov ecx, 0x18
call fcn.140007cc8
test rax, rax
je 0x140004143
mov word [rax + 4], 0
mov qword [rax + 8], rbx
mov dword [rax + 0x10], ebx
mov dword [rax], ebx
jmp 0x140004146
mov rax, rbx
mov qword [0x140029c30], rax
test rax, rax
je 0x1400041cb
mov rcx, rax
call fcn.140006cf0
lea rdx, [rsp + 0x30]
mov byte [rsp + 0x30], 0
call fcn.140007150
test eax, eax
je 0x140004178
movzx r8d, byte [rsp + 0x30]
call fcn.140007230
mov rdi, qword [0x140029c30]
cmp dword [rdi], 0
jne 0x14000419c
call fcn.140005780
mov rdi, qword [0x140029c30]
mov dword [0x140029bf0], eax
test eax, eax
je 0x1400041a2
jmp 0x1400041d6
mov eax, dword [0x140029bf0]
cmp byte [rsp + 0x30], 0
jne 0x1400041d2
test rdi, rdi
je 0x1400041c4
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400041bc
call fcn.140007e20
mov rcx, rdi
call fcn.140007b6c
mov qword [0x140029c30], rbx
xor eax, eax
jmp 0x1400046c8
test eax, eax
je 0x1400041dc
mov dword [rdi], 0x300
call fcn.140005c30
cmp dword [0x140029bf0], 0
mov ecx, 0x30
je 0x140004522
call fcn.140007cc8
test rax, rax
je 0x140004219
lea rcx, str.VID_5986PID_0516
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
mov qword [rax + 0x18], rcx
jmp 0x14000421c
mov rax, rbx
mov qword [0x140029c00], rax
test rax, rax
je 0x140004242
mov rcx, rax
call fcn.140006250
mov ecx, dword [0x140029a00]
test eax, eax
cmovne ecx, r14d
mov dword [0x140029a00], ecx
mov ecx, 0x30
call fcn.140007cc8
test rax, rax
je 0x14000426d
lea rcx, str.VID_5986PID_0518
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
mov qword [rax + 0x18], rcx
jmp 0x140004270
mov rax, rbx
mov qword [0x140029d08], rax
test rax, rax
je 0x140004296
mov rcx, rax
call fcn.140006250
mov ecx, dword [0x140029a00]
test eax, eax
cmovne ecx, r14d
mov dword [0x140029a00], ecx
mov ecx, 0x30
call fcn.140007cc8
test rax, rax
je 0x1400042c1
lea rcx, str.VID_5986PID_0519
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
mov qword [rax + 0x18], rcx
jmp 0x1400042c4
mov rax, rbx
mov qword [0x140029b00], rax
test rax, rax
je 0x1400042ea
mov rcx, rax
call fcn.140006250
mov ecx, dword [0x140029a00]
test eax, eax
cmovne ecx, r14d
mov dword [0x140029a00], ecx
mov ecx, 0x30
call fcn.140007cc8
test rax, rax
je 0x140004315
lea rcx, str.VID_04F2PID_B3E0
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
mov qword [rax + 0x18], rcx
jmp 0x140004318
mov rax, rbx
mov qword [0x140029b08], rax
test rax, rax
je 0x14000433e
mov rcx, rax
call fcn.140006250
mov ecx, dword [0x140029a00]
test eax, eax
cmovne ecx, r14d
mov dword [0x140029a00], ecx
mov ecx, 0x30
call fcn.140007cc8
test rax, rax
je 0x140004369
lea rcx, str.VID_04F2PID_B327
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
mov qword [rax + 0x18], rcx
jmp 0x14000436c
mov rax, rbx
mov qword [0x140029c08], rax
test rax, rax
je 0x140004392
mov rcx, rax
call fcn.140006250
mov ecx, dword [0x140029a00]
test eax, eax
cmovne ecx, r14d
mov dword [0x140029a00], ecx
mov ecx, 0x30
call fcn.140007cc8
test rax, rax
je 0x1400043bd
lea rcx, str.VID_04F2PID_B32F
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
mov qword [rax + 0x18], rcx
jmp 0x1400043c0
mov rax, rbx
mov qword [0x140029c28], rax
test rax, rax
je 0x1400043e6
mov rcx, rax
call fcn.140006250
mov ecx, dword [0x140029a00]
test eax, eax
cmovne ecx, r14d
mov dword [0x140029a00], ecx
mov ecx, 0x30
call fcn.140007cc8
test rax, rax
je 0x140004411
lea rcx, str.VID_5986PID_0523
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
mov qword [rax + 0x18], rcx
jmp 0x140004414
mov rax, rbx
mov qword [0x140029b18], rax
test rax, rax
je 0x14000443a
mov rcx, rax
call fcn.140006250
mov ecx, dword [0x140029a00]
test eax, eax
cmovne ecx, r14d
mov dword [0x140029a00], ecx
cmp dword [0x14001feb0], 0xffffffff
lea rdi, str.VID_05C8PID_0344
jle 0x1400044b3
mov rcx, qword [0x140029c18]
test rcx, rcx
je 0x14000445b
call fcn.1400046f0
mov ecx, 0x30
call fcn.140007cc8
mov rcx, rax
test rax, rax
je 0x14000448d
movsxd rax, dword [0x14001feb0]
mov rax, qword [rdi + rax*8]
mov qword [rcx], rbx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x20], rbx
mov qword [rcx + 0x28], rbx
mov qword [rcx + 0x18], rax
jmp 0x140004490
mov rcx, rbx
mov qword [0x140029c18], rcx
test rcx, rcx
je 0x1400044b3
call fcn.140006250
mov edx, dword [0x140029a00]
test eax, eax
cmovne edx, r14d
mov dword [0x140029a00], edx
cmp dword [0x14001feb4], 0xffffffff
jle 0x140004517
mov rcx, qword [0x140029ad8]
test rcx, rcx
je 0x1400044cd
call fcn.1400046f0
mov ecx, 0x30
call fcn.140007cc8
mov rcx, rax
test rax, rax
je 0x1400044ff
movsxd rax, dword [0x14001feb4]
mov rax, qword [rdi + rax*8]
mov qword [rcx], rbx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x20], rbx
mov qword [rcx + 0x28], rbx
mov qword [rcx + 0x18], rax
jmp 0x140004502
mov rcx, rbx
mov qword [0x140029ad8], rcx
test rcx, rcx
je 0x140004517
call fcn.140006250
test eax, eax
jne 0x14000455b
cmp dword [0x140029a00], 0
je 0x140004567
jmp 0x140004562
call fcn.140007cc8
test rax, rax
je 0x140004545
mov qword [rax + 0x18], rbx
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
jmp 0x140004548
mov rax, rbx
mov rcx, rax
mov qword [0x140029c10], rax
call fcn.140006250
test eax, eax
je 0x140004567
mov dword [0x140029a00], r14d
call fcn.140004870
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [0x140016180]
lea r8, [0x140004f40]
xor r9d, r9d
mov qword [0x140029a08], rax
lea rax, [rsp + 0x34]
xor edx, edx
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [0x140016198]
lea rcx, str.Control_Visual_Indicator
mov qword [0x140029ea8], rax
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
lea r8, [0x140004ce0]
mov dword [0x140029bf4], eax
lea rax, [rsp + 0x34]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [0x140016198]
lea r8, [0x140004e40]
mov qword [0x140029b10], rax
lea rax, [rsp + 0x34]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [0x140016198]
lea r8, [0x140004dd0]
mov qword [0x140029ae0], rax
lea rax, [rsp + 0x34]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [0x140016198]
lea r8, [0x140004ef0]
mov qword [0x140029ae8], rax
lea rax, [rsp + 0x34]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [0x140016198]
lea rcx, [rsp + 0x38]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [0x140029bf8], rax
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x1400046c4
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
lea r8, [rsp + 0x38]
mov rdx, rsi
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x1400046ad
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_DispatchMessageW]
lea rcx, [rsp + 0x38]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x140004680
mov eax, dword [rsp + 0x48]
mov r14, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
add rsp, 0x70
pop rbx
ret