Function at 0x100041388
Capabilities:
Accept command line arguments
Check mutex and terminate process on windows
Check mutex on windows
Create thread
Print debug messages
Register raw input devices
Set current directory
Terminate process

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x720
mov qword [rsp + 0xa8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x1000a1140]
xor rax, rsp
mov qword [rsp + 0x710], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call fcn.100065788
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x20]
mov rdi, rax
xor eax, eax
or r14, 0xffffffffffffffff
mov rcx, r14
repne scasw ax, word [rdi]
not rcx
lea ebp, [rax + 1]
sub rcx, rbp
lea edi, [rcx + 0x18]
lea r12d, [rax + 2]
mov rax, r12
mul rdi
cmovo rax, r14
mov rcx, rax
call fcn.100091194
mov rsi, rax
xor r13d, r13d
cmp rax, r13
jne 0x100041429
xor al, al
jmp 0x1000423f4
lea r8, [0x10001a3a0]
mov rdx, rdi
mov rcx, rax
call sub.msvcrt.dll_wcscpy_s
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov r8, rax
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_wcscat_s
lea r8, [0x10001a3c0]
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_wcscat_s
mov r8, rsi
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rdi, rax
mov rcx, rsi
call sub.msvcrt.dll_free
cmp rdi, r13
jne 0x10004148a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call sub.KERNEL32.dll_GetLastError
cmp eax, 0xb7
jne 0x1000414fd
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov rcx, rax
call fcn.10006007c
mov rdi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
mov rsi, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp rsi, r13
je 0x1000414f4
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsIconic]
cmp eax, r13d
je 0x1000414e2
mov edx, 0xa
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_BringWindowToTop]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [rsp + 0x60], r13d
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r8, rax
mov r15d, 5
mov eax, dword [rsp + 0x60]
cmp eax, ebp
jle 0x100041567
add r8, 8
dec eax
mov r9d, eax
mov al, byte [0x1000acbbe]
xor edx, edx
lea rdi, [0x10001a3d8]
mov rsi, qword [r8]
mov rcx, r15
repe cmpsw word [rsi], word [rdi]
je 0x10004154f
sbb edx, edx
sbb edx, r14d
movzx eax, al
cmp edx, r13d
cmove eax, ebp
mov byte [0x1000acbbe], al
add r8, 8
sub r9, rbp
jne 0x100041536
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov sil, r13b
mov qword [rsp + 0x48], r13
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [0x10001ab20]
mov r8d, ebp
xor edx, edx
lea rcx, [0x10001ab00]
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, r13d
jl 0x1000416b9
mov edi, 0x104
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x100]
xor r8d, r8d
xor edx, edx
lea rcx, [0x10001a1b8]
call sub.SHELL32.dll_SHGetFolderPathEx
cmp eax, r13d
jl 0x1000416b9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0xa8]
mov r11, rax
mov rdx, rdi
lea rcx, [rsp + 0x100]
cmp word [rcx], r13w
je 0x100041607
add rcx, r12
sub rdx, rbp
jne 0x1000415f9
cmp rdx, r13
je 0x1000416b9
mov rcx, rdi
sub rcx, rdx
sub rdi, rcx
lea rax, [rsp + rcx*2 + 0x100]
mov r8d, r13d
je 0x100041657
lea rdx, [rdi + rcx + 0x7ffffefb]
sub r11, rax
cmp rdx, r13
je 0x100041652
movzx ecx, word [r11 + rax]
cmp cx, r13w
je 0x100041652
mov word [rax], cx
add rax, r12
sub rdi, rbp
sub rdx, rbp
cmp rdi, r13
jne 0x100041631
cmp rdi, r13
jne 0x100041660
sub rax, r12
mov r8d, 0x8007007a
mov word [rax], r13w
cmp r8d, r13d
jl 0x1000416b9
lea rcx, [rsp + 0x100]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [0x1000acb98], rax
cmp rax, r13
je 0x1000416b9
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_VariantInit]
cmp eax, r13d
je 0x1000416b9
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x40]
mov rdx, qword [0x1000acb98]
call qword [rax + 0x30]
cmp eax, r13d
jl 0x1000416b9
movzx esi, sil
cmp dword [rsp + 0x40], r13d
cmovne esi, ebp
mov rcx, qword [rsp + 0x48]
cmp rcx, r13
je 0x1000416c9
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp sil, r13b
jne 0x1000416d7
mov ecx, r15d
call fcn.1000407fc
int3
mov ecx, 8
call fcn.1000910f4
cmp rax, r13
je 0x1000416f2
mov qword [rax], r13
mov qword [0x1000acbd0], rax
jmp 0x1000416f9
mov qword [0x1000acbd0], r13
lea rcx, [0x100041340]
call qword [sym.imp.msvcrt.dll_int____cdecl___unsigned_long_long_unsigned___int64_____cdecl__set_new_handler_int____cdecl___unsigned_long_long_unsigned___int64___]
mov ecx, ebp
call qword [sym.imp.msvcrt.dll_int___cdecl__set_new_mode_int_]
mov qword [0x1000acbc0], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov rcx, rax
call fcn.10006007c
mov qword [0x1000acb90], rax
mov r8d, 0x200
lea rdx, [rsp + 0x310]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [rax - 1]
movsxd rdx, ecx
cmp ecx, eax
ja 0x100041775
lea rdx, [rsp + rdx*2 + 0x310]
cmp word [rdx], 0x2f
je 0x10004176c
cmp word [rdx], 0x5c
je 0x10004176c
dec ecx
sub rdx, r12
cmp ecx, eax
jbe 0x100041755
jmp 0x100041775
mov word [rsp + rcx*2 + 0x310], r13w
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rdx, [0x10001a3e8]
lea rcx, [0x1000add00]
call fcn.100061c08
mov esi, 0x18
mov rcx, rsi
call fcn.1000910f4
lea r14d, [rsi - 8]
cmp rax, r13
je 0x1000417bd
mov dword [rax], r13d
mov dword [rax + 4], r13d
mov dword [rax + 8], r14d
mov qword [rax + 0x10], r13
jmp 0x1000417c0
mov rax, r13
mov qword [0x1000acbf0], rax
mov rcx, rax
call fcn.100063938
lea r9, [0x10001a400]
lea r15, [0x10001a278]
mov r8, r15
mov edx, 0x469
mov ecx, r14d
call fcn.100069a3c
mov rdx, qword [0x1000acb90]
mov qword [rsp + 0x20], rdx
lea r9, [0x10001a430]
mov r8, r15
mov edx, 0x472
mov ecx, r14d
call fcn.100069a3c
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rdx, [rsp + 0x310]
mov qword [rsp + 0x20], rdx
lea r9, [0x10001a470]
mov r8, r15
mov edx, 0x476
mov ecx, r14d
call fcn.100069a3c
lea r9, [0x10001a4a8]
mov r8, r15
mov edx, 0x47a
mov ecx, r14d
call fcn.100069a3c
mov dword [rsp + 0x80], ebp
mov qword [rsp + 0x88], r13
mov dword [rsp + 0x94], r13d
mov dword [rsp + 0x90], ebp
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x80]
lea rcx, [0x1000acb88]
call sub.gdiplus.dll_GdiplusStartup
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.100049308
mov ecx, 0x2868
call fcn.1000910f4
mov qword [rsp + 0x48], rax
cmp rax, r13
je 0x1000418c2
xor edx, edx
mov rcx, rax
call fcn.100062d14
jmp 0x1000418c5
mov rax, r13
mov qword [0x1000acbd8], rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.10005fa08
nop
lea r9, [0x10001a4d0]
mov r8b, byte [0x1000acc3b]
lea rdx, [rsp + 0x48]
mov rcx, qword [0x1000acbd8]
call fcn.100062f3c
cmp al, r13b
sete dil
mov rcx, qword [rsp + 0x58]
call sub.msvcrt.dll_free
cmp dil, r13b
je 0x100041994
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov edx, 0x37c
lea rcx, [rsp + 0xe0]
call fcn.10005fb28
nop
mov rdi, qword [rax + 0x10]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.10005fea8
nop
mov rcx, qword [rsp + 0xf0]
call sub.msvcrt.dll_free
mov byte [rsp + 0x30], bpl
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xfffe
mov r8d, ebp
xor edx, edx
mov ecx, 0x385
call fcn.100065a40
xor ecx, ecx
call fcn.1000407fc
nop
call fcn.10004573c
cmp al, r13b
jne 0x1000419bd
lea r9, [0x10001a4e0]
mov r8, r15
mov edx, 0x4ae
mov ecx, r14d
call fcn.100069a3c
xor ecx, ecx
call fcn.1000407fc
int3
mov edi, 0xc
cmp byte [0x1000acbbe], r13b
je 0x100041a5d
lea r9, [0x10001a510]
mov r8, r15
mov edx, 0x4bb
mov ecx, r14d
call fcn.100069a3c
xor ecx, ecx
call fcn.1000658f4
cmp byte [0x1000acbbe], r13b
je 0x100041a5d
lea r9, [0x10001a540]
mov r8, r15
mov edx, 0x4c4
mov ecx, r14d
call fcn.100069a3c
mov word [rsp + 0x48], di
mov word [rsp + 0x4a], bp
mov dword [rsp + 0x4c], r13d
mov rax, qword [0x1000acba0]
mov qword [rsp + 0x50], rax
mov r8d, r14d
mov edx, ebp
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_RegisterRawInputDevices]
cmp eax, r13d
jne 0x100041a5d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea r9, [0x10001a5a0]
mov r8, r15
mov edx, 0x4cf
mov ecx, r14d
call fcn.100069a3c
lea r9, [0x10001a5e0]
mov r8, r15
mov edx, 0x4d5
mov ecx, r14d
call fcn.100069a3c
lea rdx, [0x1000400d8]
mov ecx, r12d
call fcn.10004c554
lea rdx, [0x100040140]
mov ecx, 4
call fcn.10004c554
lea rdx, [0x100040178]
mov ecx, 5
call fcn.10004c554
lea rdx, [0x10004010c]
mov ecx, 3
call fcn.10004c554
lea rdx, [0x1000401ac]
mov ecx, 6
call fcn.10004c554
lea rdx, [0x1000401e0]
mov ecx, 7
call fcn.10004c554
lea rdx, [0x100040214]
mov ecx, 8
call fcn.10004c554
lea rdx, [0x10004024c]
mov ecx, 9
call fcn.10004c554
lea rdx, [0x100040284]
mov ecx, 0xa
call fcn.10004c554
lea rdx, [0x1000402bc]
mov ecx, 0xb
call fcn.10004c554
lea rdx, [0x1000402f0]
mov ecx, ebp
call fcn.10004c554
lea rdx, [0x1000403cc]
mov ecx, 0xd
call fcn.10004c554
lea rdx, [0x100040338]
mov ecx, edi
call fcn.10004c554
lea rdx, [0x100040400]
mov ecx, 0xe
call fcn.10004c554
lea rdx, [0x100040434]
mov ecx, 0xf
call fcn.10004c554
lea rdx, [0x100040468]
mov ecx, r14d
call fcn.10004c554
lea rdx, [0x1000404a4]
mov ecx, 0x11
call fcn.10004c554
lea rdx, [0x1000404d8]
mov ecx, 0x12
call fcn.10004c554
lea rdx, [0x10004050c]
mov ecx, 0x13
call fcn.10004c554
lea rdx, [0x100040540]
mov ecx, 0x14
call fcn.10004c554
lea rdx, [0x10002ea04]
mov ecx, 0x15
call fcn.10004c554
lea rdx, [0x100040574]
mov ecx, 0x16
call fcn.10004c554
lea rdx, [0x100040010]
mov ecx, 0x17
call fcn.10004c554
lea rdx, [0x100040044]
mov ecx, esi
call fcn.10004c554
lea rdx, [0x1000405a8]
mov ecx, 0x19
call fcn.10004c554
lea rdx, [0x1000405dc]
mov ecx, 0x1a
call fcn.10004c554
lea rdx, [0x100040610]
mov ecx, 0x1b
call fcn.10004c554
lea rdx, [0x100040644]
mov ecx, 0x1c
call fcn.10004c554
lea rdx, [0x100040678]
mov ecx, 0x1d
call fcn.10004c554
lea rdx, [0x1000406b0]
mov ecx, 0x1e
call fcn.10004c554
lea rdx, [0x100040720]
mov ecx, 0x1f
call fcn.10004c554
lea rdx, [0x100040758]
mov edi, 0x20
mov ecx, edi
call fcn.10004c554
lea rdx, [0x100040790]
lea ecx, [rdi + 1]
call fcn.10004c554
lea rdx, [0x1000407c8]
lea ecx, [rdi + 2]
call fcn.10004c554
lea rdx, [0x100040078]
lea ecx, [rdi + 5]
call fcn.10004c554
lea rdx, [0x1000406e8]
lea ecx, [rdi + 3]
call fcn.10004c554
lea r9, [0x10001a610]
mov r8, r15
mov edx, 0x500
mov ecx, r14d
call fcn.100069a3c
lea rdx, [0x100051f9c]
lea rcx, [0x100017168]
call fcn.100044498
lea rdx, [0x10004f170]
lea rcx, [0x100017178]
call fcn.100044498
lea rdx, [0x100043580]
lea rcx, [0x100014aa0]
call fcn.100044498
mov r8, rsi
xor edx, edx
lea rcx, [0x1000aa570]
call sub.msvcrt.dll_memset
mov byte [0x1000acbba], bpl
lea rdx, [0x10004aff4]
lea rcx, [0x10001c748]
call fcn.100044498
lea rdx, [0x10004c480]
lea rcx, [0x10001caa0]
call fcn.100044498
lea rdx, [0x100052cc4]
lea rcx, [0x10001e170]
call fcn.100044498
lea rdx, [0x100052e74]
lea rcx, [0x10001e1f0]
call fcn.100044498
lea r9, [0x10001a640]
mov r8, r15
mov edx, 0x50b
mov ecx, r14d
call fcn.100069a3c
call fcn.100051278
cmp al, r13b
jne 0x100041db9
lea r9, [0x10001a680]
mov r8, r15
mov edx, 0x50e
mov ecx, r14d
call fcn.100069a3c
xor ecx, ecx
call fcn.1000407fc
int3
lea rax, [fcn.100041064]
mov qword [0x1000ace18], rax
lea r9, [0x10001a6c8]
mov r8, r15
mov edx, 0x518
mov ecx, r14d
call fcn.100069a3c
mov ecx, 0x80
call fcn.1000910f4
cmp rax, r13
je 0x100041df7
mov rcx, rax
call fcn.10004f500
jmp 0x100041dfa
mov rax, r13
mov qword [0x1000accb8], rax
mov rcx, rax
call fcn.100063938
mov rcx, qword [0x1000accb8]
call fcn.10004f5c0
cmp al, r13b
jne 0x100041e39
lea r9, [0x10001a710]
mov r8, r15
mov edx, 0x51c
mov ecx, r14d
call fcn.100069a3c
xor ecx, ecx
call fcn.1000407fc
int3
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
mov rax, qword [0x1000acba8]
mov qword [rsp + 0x68], rax
mov byte [rsp + 0x7c], r13b
mov dword [rsp + 0x78], edi
mov byte [rsp + 0x7d], r13b
mov rcx, qword [0x1000acbc0]
mov rax, qword [rcx]
lea r8, [rsp + 0x74]
lea rdx, [rsp + 0x70]
call qword [rax + 0x18]
cmp byte [0x1000acaca], r13b
je 0x100041e98
mov eax, dword [rsp + 0x70]
add eax, eax
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x74]
add eax, eax
mov dword [rsp + 0x74], eax
lea r9, [0x10001a760]
mov r8, r15
mov edx, 0x533
mov ecx, r14d
call fcn.100069a3c
mov ecx, 0xd8
call fcn.1000910f4
cmp rax, r13
je 0x100041ec8
mov rcx, rax
call fcn.10003d3a8
jmp 0x100041ecb
mov rax, r13
mov qword [0x1000acb70], rax
mov rcx, rax
call fcn.100063938
lea rdx, [rsp + 0x68]
mov rcx, qword [0x1000acb70]
call fcn.10003b1d8
cmp al, r13b
jne 0x100041f0f
lea r9, [0x10001a7a0]
mov r8, r15
mov edx, 0x537
mov ecx, r14d
call fcn.100069a3c
xor ecx, ecx
call fcn.1000407fc
int3
lea r9, [0x10001a7e8]
mov r8, r15
mov edx, 0x53e
mov ecx, r14d
call fcn.100069a3c
mov ecx, 0x38
call fcn.1000910f4
cmp rax, r13
je 0x100041f60
mov dword [rax + 0x20], r13d
mov dword [rax + 0x24], r13d
mov dword [rax + 0x28], r14d
mov qword [rax + 0x30], r13
mov qword [rax + 0x10], r13
mov dword [rax + 0x1c], r13d
mov dword [rax + 0x18], r12d
mov ecx, 0x64
mov dword [rax + 8], ecx
mov dword [rax], ecx
mov dword [rax + 4], ecx
jmp 0x100041f63
mov rax, r13
mov qword [0x1000acbe8], rax
mov rcx, rax
call fcn.100063938
mov rcx, qword [0x1000acbe8]
call fcn.100042620
cmp al, r13b
jne 0x100041fa2
lea r9, [0x10001a810]
mov r8, r15
mov edx, 0x542
mov ecx, r14d
call fcn.100069a3c
xor ecx, ecx
call fcn.1000407fc
int3
lea r9, [0x10001a850]
mov r8, r15
mov edx, 0x54a
mov ecx, r14d
call fcn.100069a3c
mov ecx, 0x90
call fcn.1000910f4
cmp rax, r13
je 0x100041fe6
xor r9d, r9d
mov r8b, byte [0x1000acbbe]
mov rdx, qword [0x1000acba0]
mov rcx, rax
call fcn.10006adc0
mov rdi, rax
jmp 0x100041fe9
mov rdi, r13
mov qword [0x1000acbb0], rdi
cmp qword [rdi + 8], r13
je 0x100041ffe
mov rcx, rdi
call fcn.10006a4a0
mov byte [rdi + 0x14], bpl
lea rax, [rdi + 0x10]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9, rdi
lea r8, [0x10006a438]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi + 8], rax
lea r9, [0x10001a898]
mov r8, r15
mov edx, 0x551
mov ecx, r14d
call fcn.100069a3c
mov ecx, 0x50
call fcn.1000910f4
mov rdi, rax
cmp rax, r13
je 0x1000420c3
mov esi, 0x40
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi], rax
mov r12d, 0x200
mov rcx, r12
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 8], rax
mov dword [rdi + 0x10], r13d
mov dword [rdi + 0x14], r14d
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x18], rax
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x20], rax
mov dword [rdi + 0x28], r13d
mov dword [rdi + 0x2c], r14d
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x30], rax
mov rcx, r12
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x38], rax
mov dword [rdi + 0x40], r13d
mov dword [rdi + 0x44], r14d
jmp 0x1000420c6
mov rdi, r13
mov qword [0x1000accc0], rdi
mov rcx, rdi
call fcn.100063938
lea r9, [0x10001a8c0]
mov r8, r15
mov edx, 0x55c
mov ecx, r14d
call fcn.100069a3c
lea rdx, [0x10001a8e0]
mov rcx, qword [0x1000acbf0]
call fcn.100044e50
cmp rax, r13
je 0x10004222d
lea r8, [rsp + 0x40]
lea rdx, [0x10001a900]
mov rcx, rax
call fcn.100061494
mov r12, rax
mov ecx, dword [rsp + 0x40]
mov dword [rsp + 0x20], ecx
lea r9, [0x10001a910]
mov r8, r15
mov edx, 0x567
mov ecx, r14d
call fcn.100069a3c
mov ebp, r13d
cmp dword [rsp + 0x40], r13d
jbe 0x10004221e
mov rsi, r12
mov rcx, qword [rsi]
call fcn.100061b40
mov rdi, rax
mov qword [rsp + 0x20], rax
lea r9, [0x10001a930]
mov r8, r15
mov edx, 0x56c
mov ecx, r14d
call fcn.100069a3c
mov rcx, rdi
call qword [sym.imp.GDI32.dll_AddFontResourceW]
cmp eax, r13d
jne 0x1000421aa
mov qword [rsp + 0x20], rdi
lea r9, [0x10001a958]
mov r8, r15
mov edx, 0x584
mov ecx, r14d
call fcn.100069a3c
mov rcx, rdi
call sub.msvcrt.dll_free
jmp 0x10004220e
mov eax, dword [0x1000a8bf0]
inc eax
mov dword [0x1000a8bf0], eax
mov ecx, dword [0x1000a8bf4]
cmp eax, ecx
jbe 0x100042201
add ecx, dword [0x1000a8bf8]
mov dword [0x1000a8bf4], ecx
mov edx, ecx
shl rdx, 3
mov rcx, qword [0x1000a8c00]
call qword [sym.imp.msvcrt.dll_realloc]
mov rdx, rax
cmp rax, r13
jne 0x1000421f2
xor ecx, ecx
call fcn.100063938
jmp 0x10004220e
mov qword [0x1000a8c00], rax
mov eax, dword [0x1000a8bf0]
jmp 0x100042208
mov rdx, qword [0x1000a8c00]
dec eax
mov qword [rdx + rax*8], rdi
inc ebp
add rsi, 8
cmp ebp, dword [rsp + 0x40]
jb 0x10004214f
mov rcx, r12
call sub.msvcrt.dll_free
mov ebp, 1
jmp 0x100042244
lea r9, [0x10001a988]
mov r8, r15
mov edx, 0x592
mov ecx, r14d
call fcn.100069a3c
lea r9, [0x10001a9b0]
mov r8, r15
mov edx, 0x597
mov ecx, r14d
call fcn.100069a3c
xor edx, edx
mov rcx, qword [0x1000acba0]
call sub.WTSAPI32.dll_WTSRegisterSessionNotification
lea rdx, [0x100018968]
mov rcx, qword [0x1000acbf0]
call fcn.100044e50
mov rdi, rax
mov byte [0x1000acbb9], bpl
lea r9, [0x10001aa00]
mov r8, r15
mov edx, 0x59f
mov ecx, r14d
call fcn.100069a3c
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x60]
cmp al, r13b
jne 0x1000422ca
lea r9, [0x10001aa70]
mov r8, r15
mov edx, 0x5a2
mov ecx, r14d
call fcn.100069a3c
xor ecx, ecx
call fcn.1000407fc
int3
mov byte [0x1000acbb9], r13b
cmp rdi, r13
je 0x1000422f3
or r8d, 0xffffffff
lea rdx, [0x10001aab8]
mov rcx, rdi
call fcn.1000617b8
cmp eax, r13d
setg byte [0x1000acb7f]
call fcn.100040e78
mov qword [0x1000acbc8], r13
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
cmp rax, r13
je 0x100042334
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
mov rdi, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x1000acbc8], rax
mov byte [0x1000a24a2], r13b
lea rcx, [0x1000acb88]
call qword [rsp + 0x98]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, r13d
je 0x1000423c8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_GetMessageW]
cmp eax, r13d
je 0x1000423d2
mov rdx, qword [0x1000acbc8]
cmp rdx, r13
je 0x1000423aa
lea r8, [rsp + 0xb0]
mov rcx, qword [0x1000acba0]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
cmp eax, r13d
jne 0x100042349
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x100042349
call fcn.1000424a8
jmp 0x100042349
mov rcx, qword [0x1000acb88]
call qword [rsp + 0xa0]
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x90]
xor ecx, ecx
call fcn.1000407fc
int3
mov rcx, qword [rsp + 0x710]
xor rcx, rsp
call fcn.1000915c0
lea r11, [rsp + 0x720]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret