Function at 0x6d57d3
Capabilities:
Access peb ldr_data
Acquire debug privileges
Check for debugger via api
Check for unmoving mouse cursor
Create thread
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x244
mov eax, dword [0x73e040]
xor eax, esp
mov dword [esp + 0x240], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [esp + 0x34], eax
call eax
mov esi, eax
xor eax, eax
mov dword [esp + 0x180], eax
lea eax, [esp + 0x180]
push eax
push 0x20
push esi
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
mov dword [esp + 0x34], ebx
call ebx
mov esi, dword [esp + 0x180]
lea eax, [esp + 0x1ec]
push eax
push str.SeDebugPrivilege
xorps xmm0, xmm0
push 0
movlpd qword [esp + 0x1f8], xmm0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x6d58a5
mov ecx, dword [esp + 0x1f0]
mov eax, dword [esp + 0x1ec]
mov dword [esp + 0x200], ecx
xor ecx, ecx
push ecx
push ecx
push 0x10
mov dword [esp + 0x208], eax
lea eax, [esp + 0x204]
push eax
push ecx
push esi
mov dword [esp + 0x210], 1
mov dword [esp + 0x21c], 2
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
je 0x6d58a5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [esp + 0x180]
call ebx
mov eax, dword fs:[0x30]
xor ebx, ebx
push ebx
push ebx
push 0x6d52f0
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx + 0x18]
add eax, 0x100000
mov dword [ecx + 0x20], eax
call fcn.006edde7
add esp, 0xc
test eax, eax
je 0x6d6f7f
mov dword [esp + 0x198], edi
lea ecx, [esp + 0x1ec]
mov dword [0xb40f44], edi
xorps xmm0, xmm0
xor edi, edi
mov dword [esp + 0x184], 0x30
inc edi
mov dword [esp + 0x188], 0x40
mov dword [esp + 0x18c], 0x6d501f
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], ebx
movups xmmword [esp + 0x19c], xmm0
mov dword [esp + 0x1ec], edi
mov dword [esp + 0x1f0], 0xe996
call fcn.006d79c0
mov dword [esp + 0x1ac], eax
lea eax, [esp + 0x184]
push eax
mov dword [esp + 0x1b4], ebx
call dword [sym.imp.USER32.dll_RegisterClassExA]
lea eax, [esp + 0x1f8]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov eax, dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [esp + 0x1f4], eax
call eax
mov eax, dword [esp + 0x204]
mov ecx, ebx
sub eax, dword [esp + 0x1fc]
sub eax, 0x2bc
mov dword [esp + 0x1b4], 7
cdq
sub eax, edx
mov dword [esp + 0x1b8], 0x828b9bbc
mov esi, eax
mov dword [esp + 0x1bc], 0xef9c8882
mov eax, dword [esp + 0x200]
sub eax, dword [esp + 0x1f8]
sub eax, 0x384
sar esi, 1
add esi, dword [esp + 0x1fc]
cdq
sub eax, edx
mov edx, eax
sar edx, 1
add edx, dword [esp + 0x1f8]
mov al, cl
sub al, 0x18
xor byte [esp + ecx + 0x1b8], al
inc ecx
mov eax, dword [esp + 0x1b4]
cmp ecx, eax
jb 0x6d59e4
push ebx
mov byte [esp + eax + 0x1bc], bl
lea eax, [esp + 0x1bc]
push dword [esp + 0x19c]
push ebx
push ebx
push 0x2bc
push 0x384
push esi
push edx
push 0x80000000
push eax
push dword [esp + 0x1d4]
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [0xb40d9c], eax
call fcn.006d511f
test al, al
jne 0x6d5a61
call fcn.006d4f04
push dword [esp + 0x198]
push dword [esp + 0x1b0]
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, edi
jmp 0x6d6f81
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push dword [0xb40d9c]
call edi
push dword [0xb40d9c]
mov esi, dword [sym.imp.USER32.dll_UpdateWindow]
call esi
cmp dword [0x740d74], ebx
jne 0x6d5aa4
cmp dword [0x740d88], ebx
jne 0x6d5aa4
push 0xa
push dword [0xb40d9c]
call edi
test eax, eax
je 0x6d5aa4
push dword [0xb40d9c]
call esi
cmp byte [0x73f184], bl
je 0x6d63ee
call fcn.006a6e22
mov ebx, dword [0x740b64]
xor eax, eax
movss xmm3, dword [0x72ccfc]
push 0x72b19c
push eax
or dword [ebx + 8], 0x40
mov dword [ebx + 0x20], eax
mov ecx, dword [0xb4100c]
mov eax, dword [0xb41010]
sub eax, ecx
push eax
push ecx
mov ecx, dword [ebx + 0x2c]
call fcn.006bfe7b
movss xmm0, dword [0x72cce0]
lea edi, [ebx + 0x39dc]
and dword [ebx + 0x38bc], 0
lea esi, [esp + 0x1b4]
and dword [ebx + 0x38b8], 0
xorps xmm2, xmm2
movss xmm1, dword [0x72ccc0]
movss dword [ebx + 0x38e4], xmm0
movaps xmm0, xmmword [0x72e020]
movss dword [ebx + 0x3904], xmm0
movss dword [ebx + 0x3908], xmm0
movups xmmword [ebx + 0x38f4], xmm0
mov dword [ebx + 0x3914], 0x41c80000
movss dword [ebx + 0x38b0], xmm2
movss dword [ebx + 0x38b4], xmm2
movss dword [ebx + 0x38e8], xmm1
movss dword [ebx + 0x390c], xmm2
movss dword [ebx + 0x3910], xmm2
mov dword [ebx + 0x391c], 0x41300000
mov dword [ebx + 0x3924], 0x41200000
mov dword [ebx + 0x38d8], 0x3f800000
mov dword [ebx + 0x38e0], 0x3f800000
mov dword [ebx + 0x38f0], 0x3f800000
mov dword [ebx + 0x3934], 0x3f800000
mov dword [ebx + 0x38d4], 0x40800000
mov dword [ebx + 0x38ec], 0x40400000
mov dword [ebx + 0x38dc], 0x40800000
mov dword [ebx + 0x3920], 0x41100000
mov dword [ebx + 0x3928], 0x40400000
mov dword [ebx + 0x392c], 0x40800000
mov dword [ebx + 0x3930], 0x40800000
mov dword [ebx + 0x398c], 0x3f800000
mov dword [ebx + 0x3990], 0x3f800000
mov dword [ebx + 0x3994], 0x3f800000
mov dword [ebx + 0x3998], 0x3f800000
mov dword [ebx + 0x399c], 0x3f000000
mov dword [ebx + 0x39a0], 0x3f000000
mov dword [ebx + 0x39a4], 0x3f000000
mov dword [ebx + 0x39a8], 0x3f800000
mov dword [ebx + 0x39ac], 0x3dcccccd
mov dword [ebx + 0x39b0], 0x3dcccccd
mov dword [ebx + 0x39b4], 0x3dcccccd
mov dword [ebx + 0x39b8], 0x3f800000
and dword [ebx + 0x39bc], 0
and dword [ebx + 0x39c0], 0
and dword [ebx + 0x39c4], 0
and dword [ebx + 0x39c8], 0
mov dword [ebx + 0x39cc], 0x3e428f5c
mov dword [ebx + 0x39d0], 0x3e428f5c
mov dword [ebx + 0x39d4], 0x3e428f5c
mov dword [ebx + 0x39d8], 0x3f6b851f
movaps xmm0, xmmword [0x72dff0]
movups xmmword [esp + 0x1b4], xmm0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
and dword [ebx + 0x39ec], 0
and dword [ebx + 0x39f0], 0
and dword [ebx + 0x39f4], 0
mov dword [ebx + 0x39f8], 0x3e75c28f
mov dword [ebx + 0x39fc], 0x3d4ccccd
mov dword [ebx + 0x3a00], 0x3d4ccccd
mov dword [ebx + 0x3a04], 0x3d4ccccd
mov dword [ebx + 0x3a08], 0x3f0a3d71
mov dword [ebx + 0x3a0c], 0x3e428f5c
mov dword [ebx + 0x3a10], 0x3e428f5c
lea edi, [ebx + 0x3a6c]
mov dword [ebx + 0x3a14], 0x3e428f5c
lea esi, [esp + 0x1b4]
mov dword [ebx + 0x3a18], 0x3f0a3d71
mov dword [ebx + 0x3a1c], 0x3e4ccccd
mov dword [ebx + 0x3a20], 0x3e6147ae
mov dword [ebx + 0x3a24], 0x3e6b851f
mov dword [ebx + 0x3a28], 0x3f800000
and dword [ebx + 0x3a2c], 0
and dword [ebx + 0x3a30], 0
and dword [ebx + 0x3a34], 0
mov dword [ebx + 0x3a38], 0x3f800000
mov dword [ebx + 0x3a3c], 0x3d75c28f
mov dword [ebx + 0x3a40], 0x3d75c28f
mov dword [ebx + 0x3a44], 0x3d75c28f
mov dword [ebx + 0x3a48], 0x3f800000
and dword [ebx + 0x3a4c], 0
and dword [ebx + 0x3a50], 0
and dword [ebx + 0x3a54], 0
mov dword [ebx + 0x3a58], 0x3f800000
mov dword [ebx + 0x3a5c], 0x3e0f5c29
mov dword [ebx + 0x3a60], 0x3e0f5c29
mov dword [ebx + 0x3a64], 0x3e0f5c29
mov dword [ebx + 0x3a68], 0x3f800000
movaps xmm0, xmmword [0x72dfd0]
movups xmmword [esp + 0x1b4], xmm0
movsd dword es:[edi], dword [esi]
movaps xmm0, xmmword [0x72dfb0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movups xmmword [esp + 0x1b4], xmm0
lea edi, [ebx + 0x3a7c]
movaps xmm0, xmmword [0x72dfe0]
lea esi, [esp + 0x1b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movups xmmword [esp + 0x1b4], xmm0
lea edi, [ebx + 0x3a8c]
movaps xmm0, xmmword [0x72dfe0]
lea esi, [esp + 0x1b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movups xmmword [esp + 0x1b4], xmm0
lea edi, [ebx + 0x3a9c]
lea esi, [esp + 0x1b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x3aac], 0x3ea8f5c3
mov dword [ebx + 0x3ab0], 0x3f2b851f
mov dword [ebx + 0x3ab4], 0x3f5c28f6
mov dword [ebx + 0x3ab8], 0x3f800000
mov dword [ebx + 0x3abc], 0x3eae147b
mov dword [ebx + 0x3ac0], 0x3eae147b
mov dword [ebx + 0x3ac4], 0x3eae147b
mov dword [ebx + 0x3ac8], 0x3f0a3d71
mov dword [ebx + 0x3acc], 0x3f0f5c29
mov dword [ebx + 0x3ad0], 0x3f0f5c29
mov dword [ebx + 0x3ad4], 0x3f0f5c29
mov dword [ebx + 0x3ad8], 0x3f0a3d71
mov dword [ebx + 0x3adc], 0x3d4ccccd
mov dword [ebx + 0x3ae0], 0x3d4ccccd
mov dword [ebx + 0x3ae4], 0x3d4ccccd
mov dword [ebx + 0x3ae8], 0x3f0a3d71
mov dword [ebx + 0x3aec], 0x3e428f5c
mov dword [ebx + 0x3af0], 0x3e428f5c
mov dword [ebx + 0x3af4], 0x3e428f5c
mov dword [ebx + 0x3af8], 0x3f0a3d71
mov dword [ebx + 0x3afc], 0x3e4ccccd
mov dword [ebx + 0x3b00], 0x3e6147ae
mov dword [ebx + 0x3b04], 0x3e6b851f
mov dword [ebx + 0x3b08], 0x3f800000
and dword [ebx + 0x3b0c], 0
and dword [ebx + 0x3b10], 0
and dword [ebx + 0x3b14], 0
mov dword [ebx + 0x3b18], 0x3f051eb8
and dword [ebx + 0x3b1c], 0
and dword [ebx + 0x3b20], 0
and dword [ebx + 0x3b24], 0
mov dword [ebx + 0x3b28], 0x3eb851ec
mov dword [ebx + 0x3b2c], 0x3e4ccccd
mov dword [ebx + 0x3b30], 0x3e6147ae
mov dword [ebx + 0x3b34], 0x3e6b851f
mov dword [ebx + 0x3b38], 0x3ea8f5c3
mov dword [ebx + 0x3b3c], 0x3e8f5c29
mov dword [ebx + 0x3b40], 0x3e8f5c29
mov dword [ebx + 0x3b44], 0x3e8f5c29
mov dword [ebx + 0x3b48], 0x3e947ae1
mov dword [ebx + 0x3b4c], 0x3ee147ae
mov dword [ebx + 0x3b50], 0x3ee147ae
mov dword [ebx + 0x3b54], 0x3ee147ae
mov dword [ebx + 0x3b58], 0x3e947ae1
mov dword [ebx + 0x3b5c], 0x3ecccccd
mov dword [ebx + 0x3b60], 0x3ee147ae
mov dword [ebx + 0x3b64], 0x3ef0a3d7
mov dword [ebx + 0x3b68], 0x3f800000
mov dword [ebx + 0x3b6c], 0x3e8f5c29
mov dword [ebx + 0x3b70], 0x3e8f5c29
mov dword [ebx + 0x3b74], 0x3e8f5c29
mov dword [ebx + 0x3b78], 0x3e947ae1
mov dword [ebx + 0x3b7c], 0x3ee147ae
mov dword [ebx + 0x3b80], 0x3ee147ae
mov dword [ebx + 0x3b84], 0x3ee147ae
mov dword [ebx + 0x3b88], 0x3e947ae1
mov dword [ebx + 0x3b8c], 0x3ecccccd
mov dword [ebx + 0x3b90], 0x3ee147ae
mov dword [ebx + 0x3b94], 0x3ef0a3d7
mov dword [ebx + 0x3b98], 0x3f800000
and dword [ebx + 0x3b9c], 0
and dword [ebx + 0x3ba0], 0
and dword [ebx + 0x3ba4], 0
mov dword [ebx + 0x3ba8], 0x3f051eb8
mov dword [ebx + 0x3bac], 0x3e0f5c29
mov dword [ebx + 0x3bb0], 0x3e0f5c29
mov dword [ebx + 0x3bb4], 0x3e0f5c29
mov dword [ebx + 0x3bb8], 0x3f800000
mov dword [ebx + 0x3bbc], 0x3e4ccccd
mov dword [ebx + 0x3bc0], 0x3e4ccccd
mov dword [ebx + 0x3bc4], 0x3e4ccccd
mov dword [ebx + 0x3bc8], 0x3eb851ec
and dword [ebx + 0x3bcc], 0
and dword [ebx + 0x3bd0], 0
and dword [ebx + 0x3bd4], 0
mov dword [ebx + 0x3bd8], 0x3f051eb8
mov dword [ebx + 0x3bdc], 0x3e0f5c29
mov dword [ebx + 0x3be0], 0x3e0f5c29
mov dword [ebx + 0x3be4], 0x3e0f5c29
mov dword [ebx + 0x3be8], 0x3f800000
mov dword [ebx + 0x3bec], 0x3f800000
and dword [ebx + 0x3bf0], 0
and dword [ebx + 0x3bf4], 0
mov dword [ebx + 0x3bf8], 0x3f800000
mov dword [ebx + 0x3bfc], 0x3f800000
and dword [ebx + 0x3c00], 0
and dword [ebx + 0x3c04], 0
mov dword [ebx + 0x3c08], 0x3f800000
mov dword [ebx + 0x3c0c], 0x3f800000
and dword [ebx + 0x3c10], 0
and dword [ebx + 0x3c14], 0
mov dword [ebx + 0x3c18], 0x3f800000
mov dword [ebx + 0x3c1c], 0x3f800000
and dword [ebx + 0x3c20], 0
and dword [ebx + 0x3c24], 0
mov dword [ebx + 0x3c28], 0x3f800000
and dword [ebx + 0x3c2c], 0
and dword [ebx + 0x3c30], 0
and dword [ebx + 0x3c34], 0
mov dword [ebx + 0x3c38], 0x3f051eb8
and dword [ebx + 0x3c3c], 0
and dword [ebx + 0x3c40], 0
and dword [ebx + 0x3c44], 0
mov dword [ebx + 0x3c48], 0x3f051eb8
mov dword [ebx + 0x3c4c], 0x3e8f5c29
mov dword [ebx + 0x3c50], 0x3e8f5c29
mov dword [ebx + 0x3c54], 0x3e8f5c29
mov dword [ebx + 0x3c58], 0x3e947ae1
and dword [ebx + 0x3c5c], 0
and dword [ebx + 0x3c60], 0
and dword [ebx + 0x3c64], 0
and dword [ebx + 0x3c68], 0
mov dword [ebx + 0x3c6c], 0x3f800000
mov dword [ebx + 0x3c70], 0x3f800000
mov dword [ebx + 0x3c74], 0x3f800000
mov dword [ebx + 0x3c78], 0x3d75c28f
mov dword [ebx + 0x3c7c], 0x3e4ccccd
mov dword [ebx + 0x3c80], 0x3e6147ae
mov dword [ebx + 0x3c84], 0x3e6b851f
mov dword [ebx + 0x3c88], 0x3f800000
mov dword [ebx + 0x3c8c], 0x3ea8f5c3
mov dword [ebx + 0x3c90], 0x3f2b851f
mov dword [ebx + 0x3c94], 0x3f5c28f6
mov dword [ebx + 0x3c98], 0x3f800000
mov dword [ebx + 0x3c9c], 0x3f800000
and dword [ebx + 0x3ca0], 0
and dword [ebx + 0x3ca4], 0
mov dword [ebx + 0x3ca8], 0x3f800000
mov dword [ebx + 0x3cac], 0x3f800000
and dword [ebx + 0x3cb0], 0
and dword [ebx + 0x3cb4], 0
mov dword [ebx + 0x3cb8], 0x3f333333
mov dword [ebx + 0x3cbc], 0x3f800000
and dword [ebx + 0x3cc0], 0
and dword [ebx + 0x3cc4], 0
mov dword [ebx + 0x3cc8], 0x3e4ccccd
mov dword [ebx + 0x3ccc], 0x3f800000
and dword [ebx + 0x3cd0], 0
and dword [ebx + 0x3cd4], 0
push ecx
mov dword [ebx + 0x3cd8], 0x3eb33333
mov edx, dword [0xb41004]
push ecx
mov ecx, dword [0xb41000]
sub edx, ecx
push 0x740d80
call fcn.006d51ca
mov edx, dword [0xb40fe0]
mov ecx, dword [0xb40fdc]
sub edx, ecx
mov dword [esp], 0x740d7c
call fcn.006d51ca
mov edx, dword [0xb40fec]
mov ecx, dword [0xb40fe8]
sub edx, ecx
mov dword [esp], 0x740d90
call fcn.006d51ca
mov edx, dword [0xb40ff8]
mov ecx, dword [0xb40ff4]
sub edx, ecx
mov dword [esp], 0x740d00
call fcn.006d51ca
mov ecx, dword [0xb40d9c]
add esp, 0xc
call fcn.006c3eab
call fcn.006c3d26
xor ebx, ebx
mov byte [0x73f184], bl
push 7
xor eax, eax
mov dword [esp + 0x28], ebx
pop ecx
lea edi, [esp + 0x220]
mov dword [esp + 0x20], ebx
rep stosd dword es:[edi], eax
mov byte [esp + 0xf], al
call fcn.006c4831
push 1
xor eax, eax
push eax
push eax
push eax
lea eax, [esp + 0x230]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x6d647f
xor ebx, ebx
lea eax, [esp + 0x220]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x220]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [esp + 0x224], 0x12
jne 0x6d645a
mov byte [esp + 0xf], 1
mov byte [0x740b69], 1
push 1
push ebx
push ebx
push ebx
lea eax, [esp + 0x230]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x6d6428
mov ebx, dword [esp + 0x20]
cmp byte [esp + 0xf], al
jne 0x6d6efd
cmp byte [0x740b69], 0
jne 0x6d6efd
cmp dword [0x740d88], 0
je 0x6d64cc
mov eax, dword [0x740d74]
test eax, eax
je 0x6d64cc
push eax
xor eax, eax
push eax
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
xor eax, eax
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
mov esi, eax
call dword [esp + 0x34]
cmp esi, 0x102
jne 0x6d6f98
xor eax, eax
mov dword [esp + 0x1f4], eax
lea eax, [esp + 0x1f4]
push eax
call dword [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x6d6f98
cmp dword [esp + 0x1f4], eax
jne 0x6d6f98
call fcn.006d6fa1
call fcn.006d70f9
call fcn.006d7220
call fcn.006d73b0
call fcn.006d75f8
call fcn.006d7713
call fcn.006c2ee3
cmp dword [eax + 0x24], 0
jne 0x6d6531
call fcn.006c395e
call fcn.006c4738
call fcn.006a865e
xor eax, eax
xor edx, edx
push eax
xor ecx, ecx
call fcn.006af387
pop ecx
test al, al
je 0x6d65ac
xor eax, eax
lea edi, [esp + 0x210]
stosd dword es:[edi], eax
xorps xmm0, xmm0
movlpd qword [esp + 0x208], xmm0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0x208]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esp + 0x210]
push eax
push dword [0xb40d9c]
call dword [esp + 0x1f4]
mov esi, dword [esp + 0x208]
sub esi, dword [esp + 0x210]
mov ebx, dword [esp + 0x20c]
sub ebx, dword [esp + 0x214]
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], ebx
mov eax, dword [0x740b64]
lea ecx, [esp + 0x60]
movss xmm0, dword [0x72cd68]
xor esi, esi
and dword [esp + 0x58], 0
inc esi
and dword [esp + 0x5c], 0
xor edx, edx
or dword [eax + 0x490c], 2
and dword [esp + 0x60], 0
and dword [esp + 0x64], 0
movss dword [eax + 0x492c], xmm0
movss xmm0, dword [0x72cd5c]
movss dword [eax + 0x4930], xmm0
mov dword [eax + 0x4914], esi
lea eax, [esp + 0x58]
push eax
call fcn.006aece0
pop ecx
push 0x2f
mov edx, 0x73f185
mov ecx, 0x72a644
call fcn.006ac562
pop ecx
test al, al
je 0x6d6e85
and dword [esp + 0x70], 0
lea eax, [esp + 0x68]
and dword [esp + 0x74], 0
lea edx, [esp + 0x78]
push ecx
push ecx
mov ecx, dword [0x740d80]
push eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x74], 0x3f800000
push eax
mov dword [esp + 0x7c], 0x3f800000
mov dword [esp + 0x88], 0x44610000
mov dword [esp + 0x8c], 0x442f0000
call fcn.006c7739
lea ecx, [esp + 0x90]
mov dword [esp + 0x90], 0x420c0000
mov dword [esp + 0x94], 0x42b00000
call fcn.006b0f51
mov ecx, dword [0x740d7c]
lea eax, [esp + 0x98]
and dword [esp + 0xa0], 0
lea edx, [esp + 0xa8]
and dword [esp + 0xa4], 0
add esp, 8
mov dword [esp + 0x90], 0x3f800000
mov dword [esp + 0x94], 0x3f800000
mov dword [esp + 0xa0], 0x43910000
push eax
lea eax, [esp + 0x9c]
mov dword [esp + 0xa8], 0x43c00000
push eax
call fcn.006c7739
and dword [esp + 0xb0], 0
lea eax, [esp + 0xb0]
and dword [esp + 0xb4], 0
lea ecx, [esp + 0xb8]
push eax
xor edx, edx
mov dword [esp + 0xbc], 0x43bd0000
mov dword [esp + 0xc0], 0x42ae0000
call fcn.006aece0
add esp, 0x14
mov dword [esp + 0xb0], 0x43f50000
mov dword [esp + 0xb4], 0x43eb0000
mov ecx, edx
mov dword [esp + 0x14], 0x9f8486ab
mov dword [esp + 0x18], 0x8a80848d
push 9
pop eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], 0xf182
test eax, eax
je 0x6d6779
mov al, cl
sub al, 0x18
xor byte [esp + ecx + 0x14], al
inc ecx
mov eax, dword [esp + 0x10]
cmp ecx, eax
jb 0x6d6768
push ecx
mov byte [esp + eax + 0x18], dl
lea edx, [esp + 0xb4]
push ecx
lea ecx, [esp + 0x1c]
call fcn.006a9d9d
pop ecx
pop ecx
test al, al
je 0x6d6c71
movaps xmm0, xmmword [0x72e060]
xor edx, edx
and dword [esp + 0xc0], 0
mov ecx, edx
and dword [esp + 0xc4], 0
push 0x25
pop eax
mov dword [esp + 0xb8], 0x3f800000
mov dword [esp + 0xbc], 0x3f800000
mov dword [esp + 0xc8], 0x43eb0000
mov dword [esp + 0xcc], 0x41d80000
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1d8], 0xdab7d9b6
mov dword [esp + 0x1dc], 0xd87
movups xmmword [esp + 0x1b8], xmm0
movaps xmm0, xmmword [str._Dp_H]
movups xmmword [esp + 0x1c8], xmm0
test eax, eax
je 0x6d6832
mov al, cl
sub al, 0x18
xor byte [esp + ecx + 0x1b8], al
inc ecx
mov eax, dword [esp + 0x1b4]
cmp ecx, eax
jb 0x6d681b
sub esp, 0xc
mov byte [esp + eax + 0x1c4], dl
mov edx, dword [0x740d00]
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0x1d0]
push eax
push dword [str.pqrstu]
push esi
push ecx
mov ecx, dword [0x740d90]
push 0x740d09
call fcn.006c7a7a
and dword [esp + 0x104], 0
add esp, 0x2c
and dword [esp + 0xdc], 0
xor edx, edx
movaps xmm0, xmmword [str.8x:_Z]
mov ecx, edx
mov dword [esp + 0xd0], 0x3f800000
mov dword [esp + 0xd4], 0x3f800000
mov dword [esp + 0xe0], 0x43eb0000
mov dword [esp + 0xe4], 0x41d80000
mov dword [esp + 0x1b4], 0x13
movups xmmword [esp + 0x1b8], xmm0
mov dword [esp + 0x1c8], 0xfb42297f
mov al, cl
sub al, 0x18
xor byte [esp + ecx + 0x1b8], al
inc ecx
mov eax, dword [esp + 0x1b4]
cmp ecx, eax
jb 0x6d68e2
sub esp, 0xc
mov byte [esp + eax + 0x1c4], dl
mov edx, dword [0x740d00]
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0xf4]
push eax
lea eax, [esp + 0x1d0]
push eax
push dword [0x73f198]
push 2
push ecx
mov ecx, dword [0x740d90]
push 0x740d0a
call fcn.006c7a7a
and dword [esp + 0x11c], 0
lea eax, [esp + 0x1e0]
and dword [esp + 0x120], 0
add esp, 0x2c
mov dword [esp + 0xe8], 0x3f800000
mov dword [esp + 0xec], 0x3f800000
mov dword [esp + 0xf8], 0x43eb0000
push eax
mov dword [esp + 0x100], 0x41d80000
call fcn.006d7881
mov esi, eax
xor eax, eax
mov edx, eax
mov ecx, dword [esi]
lea edi, [esi + 4]
test ecx, ecx
je 0x6d69af
mov al, dl
lea ecx, [edi + edx]
sub al, 0x18
xor byte [ecx], al
inc edx
mov ecx, dword [esi]
cmp edx, ecx
jb 0x6d699d
xor eax, eax
sub esp, 0xc
mov byte [ecx + edi], al
mov edx, dword [0x740d00]
lea eax, [esp + 0xf4]
push eax
lea eax, [esp + 0x100]
push eax
lea eax, [esp + 0x10c]
push eax
push edi
push dword [0x73f19c]
push 3
push ecx
mov ecx, dword [0x740d90]
push 0x740d0b
call fcn.006c7a7a
and dword [esp + 0x134], 0
add esp, 0x2c
and dword [esp + 0x10c], 0
xor edx, edx
movaps xmm0, xmmword [0x72e070]
mov ecx, edx
mov dword [esp + 0x100], 0x3f800000
push 0x14
pop eax
mov dword [esp + 0x104], 0x3f800000
mov dword [esp + 0x110], 0x43eb0000
mov dword [esp + 0x114], 0x41d80000
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1c8], 0x4e2a4128
mov byte [esp + 0x1cc], 0xfc
mov word [esp + 0x1cd], dx
mov byte [esp + 0x1cf], dl
movups xmmword [esp + 0x1b8], xmm0
test eax, eax
je 0x6d6a86
mov al, cl
sub al, 0x18
xor byte [esp + ecx + 0x1b8], al
inc ecx
mov eax, dword [esp + 0x1b4]
cmp ecx, eax
jb 0x6d6a6f
sub esp, 0xc
mov byte [esp + eax + 0x1c4], dl
mov edx, dword [0x740d00]
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x124]
push eax
lea eax, [esp + 0x1d0]
push eax
push dword [0x73f1a0]
push 4
push ecx
mov ecx, dword [0x740d90]
push 0x740d0c
call fcn.006c7a7a
and dword [esp + 0x14c], 0
add esp, 0x2c
and dword [esp + 0x124], 0
xor edx, edx
movaps xmm0, xmmword [0x72e050]
mov ecx, edx
mov dword [esp + 0x118], 0x3f800000
push 0x16
pop eax
mov dword [esp + 0x11c], 0x3f800000
mov dword [esp + 0x128], 0x43eb0000
mov dword [esp + 0x12c], 0x41d80000
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1c8], 0x792b7829
mov dword [esp + 0x1cc], 0xfe712d
movups xmmword [esp + 0x1b8], xmm0
test eax, eax
je 0x6d6b5c
mov al, cl
sub al, 0x18
xor byte [esp + ecx + 0x1b8], al
inc ecx
mov eax, dword [esp + 0x1b4]
cmp ecx, eax
jb 0x6d6b45
sub esp, 0xc
mov byte [esp + eax + 0x1c4], dl
mov edx, dword [0x740d00]
lea eax, [esp + 0x124]
push eax
lea eax, [esp + 0x130]
push eax
lea eax, [esp + 0x13c]
push eax
lea eax, [esp + 0x1d0]
push eax
push dword [0x73f1a4]
push 5
push ecx
mov ecx, dword [0x740d90]
push 0x740d0d
call fcn.006c7a7a
movaps xmm0, xmmword [0x72df90]
add esp, 0x2c
and dword [esp + 0x50], 0
xor edx, edx
and dword [esp + 0x54], 0
mov ecx, edx
movups xmmword [esp + 0x1b8], xmm0
push 0x1d
movaps xmm0, xmmword [str.I_BE_]
pop eax
mov dword [esp + 0x130], 0x3f800000
mov dword [esp + 0x134], 0x3f800000
mov dword [esp + 0x138], 0x43eb0000
mov dword [esp + 0x13c], 0x41d80000
mov dword [esp + 0x1b4], eax
movups xmmword [esp + 0x1c8], xmm0
test eax, eax
je 0x6d6c25
mov al, cl
sub al, 0x18
xor byte [esp + ecx + 0x1b8], al
inc ecx
mov eax, dword [esp + 0x1b4]
cmp ecx, eax
jb 0x6d6c0e
sub esp, 0xc
mov byte [esp + eax + 0x1c4], dl
mov edx, dword [0x740d00]
lea eax, [esp + 0x13c]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x14c]
push eax
lea eax, [esp + 0x1d0]
push eax
push dword [0x73f1a8]
push 6
push ecx
mov ecx, dword [0x740d90]
push 0x740d0e
call fcn.006c7a7a
xor esi, esi
add esp, 0x2c
inc esi
call fcn.006a9f7a
cmp dword [0x740d70], 0
je 0x6d6e1e
mov eax, dword [0x740b64]
lea ecx, [esp + 0x40]
movss xmm0, dword [0x72cd4c]
mov dword [esp + 0x38], 0x3f000000
mov dword [esp + 0x3c], 0x3f000000
or dword [eax + 0x490c], 2
movss dword [eax + 0x492c], xmm0
movss xmm0, dword [0x72cd44]
movss dword [eax + 0x4930], xmm0
mov dword [eax + 0x4914], esi
mov eax, dword [eax + 0x49ec]
mov eax, dword [eax]
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x72cc54]
addss xmm0, dword [eax + 4]
movss dword [esp + 0x40], xmm0
movss xmm0, dword [eax + 0x10]
mulss xmm0, dword [0x72cc54]
addss xmm0, dword [eax + 8]
lea eax, [esp + 0x38]
push eax
push 8
pop edx
movss dword [esp + 0x48], xmm0
call fcn.006aece0
pop ecx
lea eax, [esp + 0x1b4]
push eax
call fcn.006d78e4
mov edi, eax
xor eax, eax
mov edx, eax
mov ecx, dword [edi]
lea esi, [edi + 4]
test ecx, ecx
je 0x6d6d3d
mov al, dl
lea ecx, [edx + esi]
sub al, 0x18
xor byte [ecx], al
inc edx
mov ecx, dword [edi]
cmp edx, ecx
jb 0x6d6d2b
xor eax, eax
mov byte [ecx + esi], al
xor edx, edx
push 0x2a
mov ecx, esi
call fcn.006ac562
pop ecx
test al, al
je 0x6d6e19
lea eax, [esp + 0x148]
push eax
call fcn.006d7955
mov edi, eax
xor eax, eax
mov edx, eax
mov ecx, dword [edi]
lea esi, [edi + 4]
test ecx, ecx
je 0x6d6d82
mov al, dl
lea ecx, [edx + esi]
sub al, 0x18
xor byte [ecx], al
inc edx
mov ecx, dword [edi]
cmp edx, ecx
jb 0x6d6d70
xor eax, eax
push ecx
mov dword [esp], 0xbf800000
mov edx, esi
push eax
mov byte [ecx + esi], al
lea ecx, [esp + 0x148]
push eax
call fcn.006a9adf
mov ecx, dword [0x740b64]
add esp, 0xc
mov ecx, dword [ecx + 0x3f88]
mov edx, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x24]
mov dword [esp + 0x28], edx
movss xmm0, dword [esp + 0x28]
subss xmm0, dword [eax]
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x48]
mulss xmm0, dword [0x72cc54]
movss dword [esp + 0x48], xmm0
movss xmm0, dword [esp + 0x2c]
subss xmm0, dword [eax + 4]
mulss xmm0, dword [0x72cc54]
movss dword [esp + 0x4c], xmm0
call fcn.006b0f51
push esi
call fcn.006c658a
mov eax, dword [0x740b64]
pop ecx
mov ecx, dword [eax + 0x49f8]
test ecx, ecx
je 0x6d6e12
cmp ecx, dword [eax + 0x3f88]
je 0x6d6e19
xor eax, eax
mov dword [0x740d70], eax
call fcn.006ae4ec
cmp ebx, 0x28
ja 0x6d6e85
mov eax, dword [0x740b64]
cmp byte [eax + 0xe08], 0
je 0x6d6e85
movss xmm1, dword [0x72cd9c]
call fcn.006af4c3
test al, al
je 0x6d6e85
lea eax, [esp + 0x1b4]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x1b8], xmm0
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [esp + 0x1b8]
xor ecx, ecx
push 5
push ecx
push ecx
sub eax, ebx
push eax
mov eax, dword [esp + 0x1c4]
sub eax, dword [esp + 0x34]
push eax
push ecx
push dword [0xb40d9c]
call dword [sym.imp.USER32.dll_SetWindowPos]
call fcn.006ae4ec
call fcn.006a9815
mov eax, dword [0xb41038]
xor esi, esi
push esi
xorps xmm0, xmm0
push 0xb4102c
movups xmmword [esp + 0x244], xmm0
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x84]
mov eax, dword [0xb41038]
lea edx, [esp + 0x23c]
push edx
push dword [0xb4102c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc8]
mov eax, dword [0x740b64]
xor ecx, ecx
mov eax, dword [eax + 0x49ec]
mov eax, dword [eax]
add eax, 0x38
cmp byte [eax], cl
cmovne ecx, eax
call fcn.006c3028
mov eax, dword [0xb41030]
push esi
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
jmp 0x6d6408
call fcn.006c3e1f
call fcn.006c3e6e
mov esi, dword [0x740b64]
mov edi, eax
cmp dword [edi + 0x2c], 0
je 0x6d6f1e
push dword [edi + 0x2c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
and dword [esi + 0xc], 0xfffffff8
xor ebx, ebx
mov ecx, edi
mov dword [esi + 0x68], ebx
mov dword [esi + 0x70], ebx
call fcn.006a801d
mov esi, dword [0x740b64]
mov dword [0x740b64], esi
call fcn.006a7050
mov dword [0x740b64], ebx
test esi, esi
je 0x6d6f5a
mov ecx, esi
call fcn.006b725e
mov ecx, esi
call fcn.006a801d
call fcn.006d4f04
push dword [0xb40d9c]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [esp + 0x198]
push dword [esp + 0x1b0]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [esp + 0x24c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.006dd431
mov esp, ebp
pop ebp
ret 0x10
xor eax, eax
push eax
call fcn.006edc73
int3