Function at 0x14003b720
Capabilities:
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x100
mov rax, qword [0x1400b9060]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor ecx, ecx
mov qword [rsp + 0x110], rbx
mov al, 0x49
mov byte [rbp - 0x46], cl
xor al, 0x7c
mov byte [rbp - 0x49], 0x7c
mov r8b, Ordinal_79
mov byte [rbp - 0x47], al
xor r8b, 0x7c
lea r9, [rbp - 0x48]
mov ecx, reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp - 0x48], r8b
call fcn.140037d70
mov r11, rax
cmp r8b, 0x30
jl 0x14003b7a2
cmp r8b, 0x39
jg 0x14003b7a2
mov ecx, 0xc3d
call fcn.140037d70
imul eax, r11d
inc r9
movsx r11d, r8b
add r11d, 0xffffffd0
movzx r8d, byte [r9]
add r11d, eax
cmp r8b, 0x30
jge 0x14003b776
xor eax, eax
mov byte [rbp - 0x49], 0x3f
mov r8b, 9
mov byte [rbp - 0x47], al
xor r8b, 0x3f
lea r9, [rbp - 0x48]
mov byte [rbp - 0x48], r8b
lea ecx, [rax + 0x21]
call fcn.140037d70
mov r10, rax
cmp r8b, 0x30
jl 0x14003b7fc
nop dword [rax + rax]
cmp r8b, 0x39
jg 0x14003b7fc
mov ecx, 0xc3d
call fcn.140037d70
imul eax, r10d
inc r9
movsx r10d, r8b
add r10d, 0xffffffd0
movzx r8d, byte [r9]
add r10d, eax
cmp r8b, 0x30
jge 0x14003b7d0
mov edx, r11d
mov ecx, r10d
call fcn.14003b390
mov edx, eax
lea rcx, [rbp + 0x1f]
call fcn.14003b4c0
lea rax, [0x14003cba0]
mov dword [rbp - 0x39], 0x50
xor ebx, ebx
mov qword [rbp - 0x31], rax
xor ecx, ecx
mov dword [rbp - 0x35], 0x40
mov qword [rbp - 0x29], rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp qword [rbp + 0x37], 0x10
lea rcx, [rbp - 0x39]
mov qword [rbp - 0x21], rax
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x19], xmm0
lea rax, [rbp + 0x1f]
movdqa xmmword [rbp - 9], xmm1
cmovae rax, qword [rbp + 0x1f]
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
cmp byte [0x140287a08], bl
jne 0x14003ba04
mov qword [rsp + 0x118], rdi
lea edi, [rbx + 1]
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [0x140287a20]
test rcx, rcx
je 0x14003b9e5
lea rdx, [0x140287a28]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x140287a20]
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rbx
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x17]
lea r9, [rbp - 0x40]
mov dword [0x140287a28], eax
mov r8b, reloc.WLDAP32.dll_Ordinal_41
mov eax, dword [rbp + 0x1b]
movzx ecx, r8b
mov dword [0x140287a2c], eax
movzx edx, r8b
mov eax, dword [0x140287a30]
xor cl, 0x18
mov dword [0x140287810], eax
xor dl, 0x18
mov eax, dword [0x140287a34]
xor r8b, 0x18
mov dword [0x140287a14], eax
mov al, Ordinal_41
xor al, 0x18
mov byte [rbp - 0x3e], cl
mov ecx, reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp - 0x3f], al
mov byte [rbp - 0x41], Ordinal_27
mov byte [rbp - 0x40], r8b
mov byte [rbp - 0x3d], dl
mov byte [rbp - 0x3c], bl
call fcn.140037d70
mov r10, rax
cmp r8b, 0x30
jl 0x14003b95c
cmp r8b, 0x39
jg 0x14003b95c
mov ecx, 0xc3d
call fcn.140037d70
imul eax, r10d
inc r9
movsx r10d, r8b
add r10d, 0xffffffd0
movzx r8d, byte [r9]
add r10d, eax
cmp r8b, 0x30
jge 0x14003b930
cmp dword [0x140287810], r10d
jle 0x14003b9e5
mov al, 0x1c
mov byte [rbp - 0x49], reloc.WLDAP32.dll_Ordinal_41
movzx ecx, al
lea r9, [rbp - 0x48]
xor edx, edx
xor cl, 0x29
mov byte [rbp - 0x46], cl
xor al, 0x29
mov r8b, reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp - 0x47], al
xor r8b, 0x29
mov byte [rbp - 0x45], dl
lea ecx, [rdx + 0x21]
mov byte [rbp - 0x48], r8b
call fcn.140037d70
mov r10, rax
cmp r8b, 0x30
jl 0x14003b9ce
cmp r8b, 0x39
jg 0x14003b9ce
mov ecx, 0xc3d
call fcn.140037d70
imul eax, r10d
inc r9
movsx r10d, r8b
add r10d, 0xffffffd0
movzx r8d, byte [r9]
add r10d, eax
cmp r8b, 0x30
jge 0x14003b9a2
movzx eax, byte [0x140287a08]
cmp dword [0x140287a14], r10d
cmovg eax, edi
mov byte [0x140287a08], al
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x140287a08], bl
je 0x14003b890
mov rdi, qword [rsp + 0x118]
cmp qword [rbp + 0x37], 0x10
lea r8, [rbp + 0x1f]
mov eax, dword [0x140287a14]
lea rdx, [rbp + 0x1f]
cmovae r8, qword [rbp + 0x1f]
mov r9d, 0x90000000
cmovae rdx, qword [rbp + 0x1f]
xor ecx, ecx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], eax
mov eax, dword [0x140287810]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, qword [rsp + 0x110]
mov qword [0x140287ab8], rax
test rax, rax
jne 0x14003ba77
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x1400a9b70]
lea rdx, [rbp + 0x3f]
mov rcx, rax
movdqu xmmword [rbp + 0x3f], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140287ab8]
mov edx, 0xffffffec
mov r8d, 0x800a0
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x140287ab8]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140287ab8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdx, qword [rbp + 0x37]
cmp rdx, 0x10
jb 0x14003bb06
mov rcx, qword [rbp + 0x1f]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003bb01
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003bb01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140095ad8
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140095530
add rsp, 0x100
pop rbp
ret