Function at 0x410770
Capabilities:
Accept command line arguments
Create process on windows
Create thread
Enumerate gui resources
Enumerate process modules
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x4f8
mov eax, dword [0x49b180]
xor eax, esp
mov dword [esp + 0x4f4], eax
push esi
xor eax, eax
push edi
mov dword [esp + 0x30], eax
mov dword [esp + 0x2e4], eax
lea eax, [esp + 0x80]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4107fa
cmp eax, 0x104
je 0x4107fa
xorps xmm0, xmm0
mov dword [esp + 0x60], 0
lea ecx, [esp + 0x80]
movaps xmmword [esp + 0x50], xmm0
mov dword [esp + 0x64], 0
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4107e0
sub ecx, edx
lea eax, [esp + 0x80]
sar ecx, 1
push ecx
push eax
jmp 0x410819
xorps xmm0, xmm0
mov dword [esp + 0x60], 0
push 0
movaps xmmword [esp + 0x54], xmm0
mov dword [esp + 0x68], 0
push 0x48b818
lea ecx, [esp + 0x58]
call fcn.00418450
xor edi, edi
mov dword [esp + 0x80], 0x22c
push edi
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea ecx, [esp + 0x80]
mov dword [esp + 0x34], eax
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
mov esi, dword [esp + 0x50]
test eax, eax
je 0x41096a
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x38]
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x41096a
xor eax, eax
push 0x206
push eax
mov word [esp + 0x2f8], ax
lea eax, [esp + 0x2fa]
push eax
call fcn.00455810
add esp, 0xc
push dword [esp + 0x88]
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x4108ea
lea eax, [esp + 0x2e4]
push eax
push 4
lea eax, [esp + 0x84]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
test eax, eax
je 0x4108e3
push 0x104
lea eax, [esp + 0x2f4]
push eax
push dword [esp + 0x84]
push esi
call dword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x2f0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4108f4
mov esi, dword [esp + 0x50]
sub ecx, edx
sar ecx, 1
je 0x410950
cmp dword [esp + 0x64], 7
lea eax, [esp + 0x50]
lea ecx, [esp + 0x2f0]
cmova eax, esi
nop dword [eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x410946
test dx, dx
je 0x410942
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x410946
add ecx, 4
add eax, 4
test dx, dx
jne 0x410920
xor eax, eax
jmp 0x41094b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x410950
inc edi
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x38]
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x410871
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x64]
cmp eax, 7
jbe 0x4109ac
lea ecx, [eax*2 + 2]
mov eax, esi
cmp ecx, 0x1000
jb 0x4109a2
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120cc
push ecx
push esi
call fcn.0045350b
add esp, 8
cmp edi, 1
jg 0x411b4f
lea ecx, [esp + 0x38]
call fcn.0042dae0
push 1
push 0x48ad9c
mov ecx, eax
call fcn.00405fa0
mov dword [esp + 0x2c0], 0
lea edx, [esp + 0x2b0]
mov dword [esp + 0x2c4], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x2b0], xmm0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x2b0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x2c0], xmm0
mov word [eax], cx
lea ecx, [esp + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
call fcn.0042e270
push eax
mov ecx, 0x49bd5c
call fcn.00413fc0
mov ecx, dword [esp + 0x24]
cmp ecx, 0xf
jbe 0x410a6a
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x410a60
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120d1
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x2c4]
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0xf
mov byte [esp + 0x10], 0
cmp ecx, 7
jbe 0x410ac1
mov edx, dword [esp + 0x2b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x410ab7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120d1
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x4c]
xor eax, eax
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 7
mov word [esp + 0x2b0], ax
cmp ecx, 7
jbe 0x410b1d
mov edx, dword [esp + 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x410b13
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120d1
push ecx
push edx
call fcn.0045350b
add esp, 8
call fcn.0042a460
mov edx, eax
lea ecx, [esp + 0x10]
call fcn.00428e30
lea edx, [esp + 0x10]
lea ecx, [esp + 0x2b0]
call fcn.0042e0a0
mov esi, eax
cmp esi, 0x49bcd4
je 0x410bcb
mov edx, dword [0x49bce8]
cmp edx, 7
jbe 0x410b8b
mov ecx, dword [0x49bcd4]
lea edx, [edx*2 + 2]
cmp edx, 0x1000
jb 0x410b81
mov edi, dword [ecx - 4]
add edx, 0x23
sub ecx, edi
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x4120d6
mov ecx, edi
push edx
push ecx
call fcn.0045350b
add esp, 8
mov dword [0x49bce4], 0
xor eax, eax
mov dword [0x49bce8], 7
mov word [0x49bcd4], ax
movups xmm0, xmmword [esi]
movups xmmword [0x49bcd4], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x49bce4], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [esp + 0x2c4]
cmp ecx, 7
jbe 0x410c0d
mov edx, dword [esp + 0x2b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x410c03
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120d6
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x24]
xor eax, eax
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 7
mov word [esp + 0x2b0], ax
cmp ecx, 0xf
jbe 0x410c63
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x410c59
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120d6
push ecx
push edx
call fcn.0045350b
add esp, 8
mov edi, dword [0x49bce4]
test edi, edi
je 0x410cbf
cmp dword [0x49bce8], 7
mov eax, 0x49bcd4
mov esi, 0x49bcd4
cmova eax, dword [0x49bcd4]
cmova esi, dword [0x49bcd4]
lea eax, [eax + edi*2]
mov dword [esp + 0x7c], eax
cmp esi, eax
je 0x410cce
movzx edi, word [esi]
push edi
call fcn.004613aa
add esp, 4
test eax, eax
jne 0x410cb4
push edi
call fcn.004613c0
add esp, 4
test eax, eax
je 0x410cbf
add esi, 2
cmp esi, dword [esp + 0x7c]
jne 0x410c97
jmp 0x410cce
push 0x48ada0
mov ecx, 0x49bcd4
call fcn.00406130
mov edx, 0x49bd5c
lea ecx, [esp + 0x38]
call fcn.0042e0a0
push 3
push 0x48adb0
mov ecx, eax
call fcn.00405fa0
mov dword [esp + 0x20], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x10], xmm0
xor ecx, ecx
mov dword [esp + 0x24], 0
movups xmm0, xmmword [eax]
push ecx
movups xmmword [esp + 0x14], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x24], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [esp + 0x14]
cmp dword [esp + 0x28], 7
cmova eax, dword [esp + 0x14]
push eax
call fcn.004585f3
mov ecx, dword [esp + 0x2c]
add esp, 8
mov esi, eax
cmp ecx, 7
jbe 0x410d7e
mov edx, dword [esp + 0x10]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x410d74
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120db
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x4c]
xor eax, eax
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 7
mov word [esp + 0x10], ax
cmp ecx, 7
jbe 0x410dd1
mov edx, dword [esp + 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x410dc7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120db
push ecx
push edx
call fcn.0045350b
add esp, 8
mov edx, 0x49bd5c
lea ecx, [esp + 0x38]
call fcn.0042e0a0
mov ecx, eax
cmp esi, 0xffffffff
jne 0x410edf
push 3
push 0x48adb8
call fcn.00405fa0
xor ecx, ecx
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
lea ecx, [esp + 0x2b0]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movq qword [esp + 0x2c0], xmm0
cmp dword [esp + 0x2c4], 7
movd eax, xmm1
movaps xmmword [esp + 0x2b0], xmm1
cmova ecx, eax
push ecx
call fcn.0043e69d
mov ecx, dword [esp + 0x2c4]
cmp ecx, 7
jbe 0x410e80
mov edx, dword [esp + 0x2b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x410e76
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120e0
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x4c]
xor eax, eax
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 7
mov word [esp + 0x2b0], ax
cmp ecx, 7
jbe 0x4110d8
mov edx, dword [esp + 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4110ce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120e0
jmp 0x4110ce
push 0xb
push 0x48adc0
call fcn.00405fa0
mov dword [esp + 0x20], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x10], xmm0
xor ecx, ecx
mov dword [esp + 0x24], 0
movups xmm0, xmmword [eax]
push ecx
movups xmmword [esp + 0x14], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x24], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [esp + 0x14]
cmp dword [esp + 0x28], 7
cmova eax, dword [esp + 0x14]
push eax
call fcn.004585f3
mov ecx, dword [esp + 0x2c]
add esp, 8
mov esi, eax
cmp ecx, 7
jbe 0x410f7f
mov edx, dword [esp + 0x10]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x410f75
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120e5
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x4c]
xor eax, eax
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 7
mov word [esp + 0x10], ax
cmp ecx, 7
jbe 0x410fd2
mov edx, dword [esp + 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x410fc8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120e5
push ecx
push edx
call fcn.0045350b
add esp, 8
test esi, esi
jne 0x4110d8
mov edx, 0x49bd5c
lea ecx, [esp + 0x38]
call fcn.0042e0a0
push 0xb
push 0x48add8
mov ecx, eax
call fcn.00405fa0
xor ecx, ecx
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
lea ecx, [esp + 0x2b0]
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], 7
movq qword [esp + 0x2c0], xmm0
cmp dword [esp + 0x2c4], 7
movd eax, xmm1
movaps xmmword [esp + 0x2b0], xmm1
cmova ecx, eax
push ecx
call fcn.0043e99c
mov ecx, dword [esp + 0x2c4]
cmp ecx, 7
jbe 0x41107c
mov edx, dword [esp + 0x2b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x411072
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120ea
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x4c]
xor eax, eax
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 7
mov word [esp + 0x2b0], ax
cmp ecx, 7
jbe 0x4110d8
mov edx, dword [esp + 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4110ce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120ea
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [0x49bd6c]
mov eax, SysReAllocString
sub eax, ecx
cmp eax, 0xb
jb 0x4120ef
cmp dword [0x49bd70], 0xf
mov eax, 0x49bd5c
push 0xb
cmova eax, dword [0x49bd5c]
push str.logDdb.log
push ecx
push eax
push ecx
push dword [esp + 0x2ec]
lea ecx, [esp + 0x2c8]
call fcn.0041c570
push 0x118
call fcn.0045328a
mov edi, eax
mov dword [esp + 0xa8], 0
add esp, 4
mov dword [edi + 4], 1
lea eax, [edi + 4]
mov dword [esp + 0x2e4], edi
mov dword [esp + 0x34], eax
lea eax, [esp + 0x80]
lea esi, [edi + 0x10]
mov dword [edi + 8], 1
push eax
push ecx
lea eax, [esp + 0x2b8]
mov dword [edi], vtable.std::_Ref_count_obj2_class_spdlog::sinks::basic_file_sink_class_std::mutex__.0
push eax
mov ecx, esi
mov dword [esp + 0xd8], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x128], 0
call fcn.004205c0
lea ecx, [esp + 0x80]
call fcn.0040e820
mov ecx, dword [esp + 0x2c4]
mov dword [esp + 0x2e8], esi
mov dword [esp + 0x2ec], edi
cmp ecx, 0xf
jbe 0x4111ec
mov edx, dword [esp + 0x2b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4111e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120f4
push ecx
push edx
call fcn.0045350b
add esp, 8
sub esp, 0x28
mov eax, esp
sub esp, 0x28
mov dword [eax], vtable.std::_Func_impl_no_alloc_class__void___cdecl_spdlog::init_thread_pool_unsigned_int__unsigned_int_::_2::_lambda_2___void___.0
mov dword [eax + 0x24], eax
mov eax, esp
mov dword [eax], vtable.std::_Func_impl_no_alloc_class__void___cdecl_spdlog::init_thread_pool_unsigned_int__unsigned_int_::_2::_lambda_1___void___.0
mov dword [eax + 0x24], eax
call fcn.004105a0
mov dword [esp + 0xcc], 0
call fcn.0040e780
mov edi, eax
lea esi, [edi + 0x60]
push esi
call fcn.0043eb9c
add esp, 0x54
test eax, eax
jne 0x4120f9
mov eax, dword [esi + 0x2c]
cmp eax, 0x7fffffff
je 0x412100
mov eax, dword [edi + 0x10c]
test eax, eax
je 0x41124f
lock inc dword [eax + 4]
mov eax, dword [edi + 0x108]
mov edi, dword [edi + 0x10c]
push esi
mov dword [esp + 0x2dc], eax
mov dword [esp + 0x2e0], edi
call fcn.0043ebad
add esp, 4
lea eax, [esp + 0x7c]
lea ecx, [esp + 0x10]
push eax
lea eax, [esp + 0x2dc]
push eax
lea eax, [esp + 0x2f0]
push eax
call fcn.004178d0
add esp, 0xc
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [eax], 0
mov dword [eax + 4], 0
or eax, 0xffffffff
mov esi, dword [0x4a09bc]
mov dword [0x4a09b8], ecx
mov dword [0x4a09bc], edx
test esi, esi
je 0x4112df
lock xadd dword [esi + 4], eax
jne 0x4112dc
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x4112dc
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
or eax, 0xffffffff
mov esi, dword [esp + 0x14]
test esi, esi
je 0x411307
lock xadd dword [esi + 4], eax
jne 0x411307
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or ecx, 0xffffffff
mov eax, ecx
lock xadd dword [esi + 8], eax
jne 0x41130a
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
or ecx, 0xffffffff
test edi, edi
je 0x41132e
mov eax, ecx
lock xadd dword [edi + 4], eax
jne 0x41132e
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
jne 0x41132e
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [0x4a09b8]
mov edi, 2
add ecx, 0x2c
mov eax, edi
xchg dword [ecx], eax
mov esi, dword [0x4a09b8]
sub esp, 0x18
mov ecx, esp
xorps xmm0, xmm0
push 0x13
movups xmmword [ecx], xmm0
push str.__l___H:_M:_S._e__v
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004075a0
push ecx
mov ecx, esi
call fcn.0040d950
mov eax, dword [0x4a09b8]
add eax, 0x30
xchg dword [eax], edi
mov ecx, dword [0x4a09b8]
sub esp, 8
mov eax, esp
mov dword [esp + 0x18], 0
sub esp, 0x10
mov dword [esp + 0x2c], 0
movq xmm0, qword [esp + 0x28]
mov dword [eax], 0x48ae1c
mov dword [eax + 4], 0x1e
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], 0
call fcn.0040bf80
mov ecx, dword [0x4a0998]
mov eax, SysReAllocString
mov esi, dword [0x4a09b8]
sub eax, ecx
cmp eax, 0x1a
jb 0x41210b
cmp dword [0x4a099c], 0xf
mov eax, 0x4a0988
push ecx
cmova eax, dword [0x4a0988]
push eax
push 0x1a
push 0x48ae3c
push ecx
push dword [esp + 0x2ec]
lea ecx, [esp + 0x2c8]
call fcn.0041c570
sub esp, 8
mov dword [esp + 0x18], 0
cmp dword [esp + 0x2cc], 0xf
lea eax, [esp + 0x2b8]
mov edx, esp
mov dword [esp + 0x1c], 0
cmova eax, dword [esp + 0x2b8]
mov ecx, esi
movq xmm0, qword [esp + 0x18]
sub esp, 0x10
mov dword [edx], eax
mov eax, dword [esp + 0x2d8]
mov dword [edx + 4], eax
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], 0
call fcn.0040bf80
mov ecx, dword [esp + 0x2c4]
cmp ecx, 0xf
jbe 0x41149d
mov edx, dword [esp + 0x2b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x411493
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412110
push ecx
push edx
call fcn.0045350b
add esp, 8
mov esi, dword [0x4a09b8]
lea ecx, [esp + 0x38]
mov edx, 0x49bcd4
call fcn.0042e270
push eax
mov edx, 0x48ae58
lea ecx, [esp + 0x2b4]
call fcn.004175f0
push ecx
mov dword [esp + 0x18], 0
mov edx, esp
mov dword [esp + 0x1c], 0
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x4114e0
mov ecx, dword [eax]
movq xmm0, qword [esp + 0x18]
sub esp, 0x10
mov dword [edx], ecx
mov ecx, esi
mov eax, dword [eax + 0x10]
mov dword [edx + 4], eax
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], 0
call fcn.0040bf80
mov ecx, dword [esp + 0x2c4]
cmp ecx, 0xf
jbe 0x411541
mov edx, dword [esp + 0x2b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x411537
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412115
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 0xf
mov byte [esp + 0x2b0], 0
cmp ecx, 0xf
jbe 0x411595
mov edx, dword [esp + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41158b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412115
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x34]
or edi, 0xffffffff
mov eax, edi
lock xadd dword [ecx], eax
jne 0x4115c3
mov esi, dword [esp + 0x2e4]
mov ecx, esi
mov eax, dword [esi]
call dword [eax]
mov eax, edi
lea ecx, [esi + 8]
lock xadd dword [ecx], eax
jne 0x4115c3
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
xor eax, eax
mov dword [esp + 0x2c0], 0
xorps xmm0, xmm0
mov dword [esp + 0x2c4], 7
push 0xb0
movaps xmmword [esp + 0x2b4], xmm0
push eax
mov word [esp + 0x2b8], ax
lea eax, [esp + 0x88]
push eax
call fcn.00455810
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, eax
mov dword [esp + 0x20], 0
mov ecx, edx
mov dword [esp + 0x24], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x10], xmm0
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x411630
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [esp + 0x18]
call fcn.00418450
sub esp, 8
lea eax, [esp + 0x18]
lea ecx, [esp + 0x88]
push eax
call fcn.00412b80
mov ecx, dword [esp + 0x24]
cmp ecx, 7
jbe 0x41169a
mov edx, dword [esp + 0x10]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x411690
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412124
push ecx
push edx
call fcn.0045350b
add esp, 8
push 0x2d
lea edx, [esp + 0x2b4]
lea ecx, [esp + 0x84]
call fcn.0041cfc0
add esp, 4
lea edx, [esp + 0x2b0]
lea ecx, [esp + 0x80]
push 0x20
call fcn.0041cfc0
mov edi, dword [esp + 0x2b4]
lea eax, [esp + 0x2b4]
mov esi, dword [esp + 0x2c4]
add esp, 4
cmp dword [esp + 0x2c4], 7
cmova eax, edi
cmp esi, 7
jne 0x4117dd
mov edx, 0x48ae74
test esi, esi
je 0x411724
sub eax, edx
mov dword [esp + 0x2e4], eax
movzx ecx, word [eax + edx]
movzx eax, word [edx]
cmp cx, ax
jne 0x4117dd
mov eax, dword [esp + 0x2e4]
add edx, 2
sub esi, 1
jne 0x411705
mov eax, dword [esp + 0x30]
mov byte [esp + 0xf], 1
mov dword [esp + 0x2e4], eax
test al, 2
je 0x411796
mov ecx, dword [esp + 0x24]
and eax, 0xfffffffd
mov dword [esp + 0x30], eax
cmp ecx, 7
jbe 0x41177f
mov edx, dword [esp + 0x10]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x411771
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41211a
push ecx
push edx
call fcn.0045350b
mov eax, dword [esp + 0x38]
add esp, 8
xor ecx, ecx
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 7
mov word [esp + 0x10], cx
test al, 1
je 0x411878
mov ecx, dword [esp + 0x4c]
cmp ecx, 7
jbe 0x411878
mov edx, dword [esp + 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41186e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41211a
jmp 0x41186e
mov eax, 3
lea ecx, [esp + 0x38]
mov edx, 0x49bd5c
mov dword [esp + 0x30], eax
call fcn.0042e0a0
push 0xf
push str.start_up.signal
mov ecx, eax
call fcn.00405fa0
mov dword [esp + 0x20], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x10], xmm0
xor ecx, ecx
mov dword [esp + 0x24], 0
movups xmm0, xmmword [eax]
push ecx
movups xmmword [esp + 0x14], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x24], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [esp + 0x14]
cmp dword [esp + 0x28], 7
cmova eax, dword [esp + 0x14]
push eax
call fcn.004585f3
add esp, 8
test eax, eax
je 0x411724
mov eax, dword [esp + 0x30]
mov byte [esp + 0xf], 0
jmp 0x411738
push ecx
push edx
call fcn.0045350b
add esp, 8
mov edx, 0x49bd5c
lea ecx, [esp + 0x38]
call fcn.0042e0a0
cmp byte [esp + 0xf], 0
mov ecx, eax
push 0x1e
je 0x4119e5
push 0x48aea4
call fcn.00405fa0
mov dword [esp + 0x20], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x10], xmm0
xor ecx, ecx
mov dword [esp + 0x24], 0
movups xmm0, xmmword [eax]
push ecx
movups xmmword [esp + 0x14], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x24], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [esp + 0x14]
cmp dword [esp + 0x28], 7
cmova eax, dword [esp + 0x14]
push eax
call fcn.004585f3
mov ecx, dword [esp + 0x2c]
add esp, 8
mov esi, eax
cmp ecx, 7
jbe 0x411933
mov edx, dword [esp + 0x10]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x411929
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41211f
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x4c]
xor eax, eax
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 7
mov word [esp + 0x10], ax
cmp ecx, 7
jbe 0x411986
mov edx, dword [esp + 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41197c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41211f
push ecx
push edx
call fcn.0045350b
add esp, 8
cmp esi, 0xffffffff
je 0x411b01
call fcn.00403300
xor cl, cl
call fcn.00403f60
lea ecx, [esp + 0x80]
call fcn.00412140
mov eax, dword [esp + 0x2c4]
cmp eax, 7
jbe 0x411b71
lea ecx, [eax*2 + 2]
mov eax, edi
cmp ecx, 0x1000
jb 0x411b67
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412124
jmp 0x411b67
push 0x48aee4
call fcn.00405fa0
mov dword [esp + 0x20], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x10], xmm0
xor ecx, ecx
mov dword [esp + 0x24], 0
movups xmm0, xmmword [eax]
push ecx
movups xmmword [esp + 0x14], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x24], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [esp + 0x14]
cmp dword [esp + 0x28], 7
cmova eax, dword [esp + 0x14]
push eax
call fcn.004585f3
add esp, 8
cmp eax, 0xffffffff
je 0x411a61
call fcn.00402640
test al, al
je 0x411a61
call fcn.00402d50
mov byte [esp + 0xf], 0
test al, al
je 0x411a66
mov byte [esp + 0xf], 1
mov ecx, dword [esp + 0x24]
cmp ecx, 7
jbe 0x411aa2
mov edx, dword [esp + 0x10]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x411a98
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412129
push ecx
push edx
call fcn.0045350b
add esp, 8
mov ecx, dword [esp + 0x4c]
xor eax, eax
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 7
mov word [esp + 0x10], ax
cmp ecx, 7
jbe 0x411af5
mov edx, dword [esp + 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x411aeb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412129
push ecx
push edx
call fcn.0045350b
add esp, 8
mov al, byte [esp + 0xf]
test al, al
je 0x41198f
mov cl, 1
call fcn.00403f60
lea ecx, [esp + 0x80]
call fcn.00412140
mov eax, dword [esp + 0x2c4]
cmp eax, 7
jbe 0x411b4f
lea ecx, [eax*2 + 2]
mov eax, edi
cmp ecx, 0x1000
jb 0x411b45
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412124
push ecx
push edi
call fcn.0045350b
add esp, 8
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x4f4]
xor ecx, esp
call fcn.00453277
mov esp, ebp
pop ebp
ret 0x10
push ecx
push edi
call fcn.0045350b
add esp, 8
cmp dword [0x49bcac], 2
jne 0x411bb7
mov ecx, 0x49bcb0
call fcn.0042dd30
test al, al
jne 0x411ba7
mov cl, 1
call fcn.00403f60
mov ecx, dword [esp + 0x4fc]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.00453277
mov esp, ebp
pop ebp
ret 0x10
cmp dword [0x49bcac], 2
jne 0x411bb7
mov byte [0x49bcc8], 1
push 4
call fcn.0045328a
add esp, 4
lea ecx, [esp + 0x2dc]
mov dword [eax], 0x42de80
push ecx
push 0
push eax
push 0x4204b0
push 0
push 0
call fcn.0045b593
add esp, 0x18
mov dword [esp + 0x2d8], eax
test eax, eax
je 0x4120ba
mov ecx, dword [esp + 0x2dc]
test ecx, ecx
je 0x412133
push ecx
push eax
call fcn.0043edcc
add esp, 8
test eax, eax
jne 0x412133
xorps xmm0, xmm0
movlpd qword [esp + 0x2d8], xmm0
cmp byte [0x4a063d], al
jne 0x411c63
mov dword [esp + 0x2e8], 0xa
mov dword [esp + 0x2ec], eax
nop dword [eax]
lea ecx, [esp + 0x2e8]
call fcn.00417af0
cmp byte [0x4a063d], 0
je 0x411c40
cmp dword [esp + 0x2dc], 0
jne 0x41212e
push str.Note
mov ecx, 0x4a0660
mov byte [0x4a065c], 1
call fcn.00406130
push str.HwndWrapper_EasiNote.exe__
mov ecx, 0x4a0644
mov byte [0x4a0640], 1
call fcn.00406130
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
mov byte [0x4a0678], 1
mov dword [0x4a067c], 0x160f0000
mov byte [0x4a0680], 1
call esi
push 1
mov dword [0x4a0684], eax
call esi
push str.HwndWrapper_EasiNote__
mov ecx, 0x4a0698
mov dword [0x4a0688], eax
mov byte [0x4a0694], 1
call fcn.00406130
push str.HwndWrapper_EasiNote5C__
mov ecx, 0x4a06ec
mov byte [0x4a06cc], 1
mov dword [0x4a06d0], 0x16080000
mov byte [0x4a06d4], 1
mov dword [0x4a06d8], 0x226
mov dword [0x4a06dc], 0xc8
mov byte [0x4a06e8], 1
call fcn.00406130
push str.Chrome_WidgetWin_1
mov ecx, 0x4a0740
mov byte [0x4a0720], 1
mov dword [0x4a0724], 0x16080000
mov byte [0x4a0728], 1
mov dword [0x4a072c], 0x226
mov dword [0x4a0730], 0xc8
mov byte [0x4a073c], 1
call fcn.00406130
push 0x48aff4
mov ecx, 0x4a075c
mov byte [0x4a0758], 1
call fcn.00406130
push str.HwndWrapper_BoardService__
mov ecx, 0x4a0794
mov byte [0x4a0774], 1
mov dword [0x4a0778], 0x14020000
mov byte [0x4a0790], 1
call fcn.00406130
push 0
mov byte [0x4a07c8], 1
mov dword [0x4a07cc], 0x16080000
mov byte [0x4a07d0], 1
call esi
push 1
mov dword [0x4a07d4], eax
call esi
push str.HwndWrapper_PPTService.exe__
mov ecx, 0x4a07e8
mov dword [0x4a07d8], eax
mov byte [0x4a07e4], 1
call fcn.00406130
push str.UIWndTransparent
mov ecx, 0x4a083c
mov byte [0x4a081c], 1
mov dword [0x4a0820], 0x16080000
mov byte [0x4a0838], 1
call fcn.00406130
push str.TransparentWindow
mov ecx, 0x4a0858
mov byte [0x4a0854], 1
call fcn.00406130
push str.HiteAnnotation
mov ecx, 0x4a08ac
mov byte [0x4a0870], 1
mov dword [0x4a0874], 0x84000000
mov byte [0x4a08a8], 1
call fcn.00406130
mov byte [0x4a088c], 1
push str.Qt5QWindowToolSaveBits
mov ecx, 0x4a0890
call fcn.00406130
cmp byte [0x4a063c], 0
mov byte [0x4a08c4], 1
mov dword [0x4a08c8], 0x96000000
mov dword [0x4a0638], 8
jne 0x411b88
nop dword [eax + eax]
mov ecx, dword [0x49bd6c]
mov eax, SysReAllocString
sub eax, ecx
cmp eax, 0x1e
jb 0x4120ef
cmp dword [0x49bd70], 0xf
mov eax, 0x49bd5c
push 0x1e
cmova eax, dword [0x49bd5c]
push str.interaction_configuration.json
push ecx
push eax
push ecx
push dword [esp + 0x2ec]
lea ecx, [esp + 0x2c8]
call fcn.0041c570
cmp dword [esp + 0x2c4], 0xf
lea ecx, [esp + 0x2e4]
push 0
push ecx
push 0x180
push 0x10
lea eax, [esp + 0x2c0]
mov byte [esp + 0x1f], 0
cmova eax, dword [esp + 0x2c0]
push 2
push eax
call fcn.0045a8ed
mov ecx, dword [esp + 0x2fc]
add esp, 0x18
test eax, eax
mov eax, 0xffffffff
cmovne ecx, eax
cmp ecx, eax
jne 0x411f1a
mov byte [esp + 0xf], 1
jmp 0x411f23
push ecx
call fcn.0045ad41
add esp, 4
mov ecx, dword [esp + 0x2c4]
cmp ecx, 0xf
jbe 0x411f5f
mov edx, dword [esp + 0x2b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x411f55
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4120cc
push ecx
push edx
call fcn.0045350b
add esp, 8
cmp byte [esp + 0xf], 0
je 0x411f8d
lea ecx, [esp + 0x2e8]
mov dword [esp + 0x2e8], 5
mov dword [esp + 0x2ec], 0
call fcn.00417af0
jmp 0x411e80
call fcn.00402d50
test al, al
jne 0x411b88
call fcn.00402640
test al, al
je 0x411faf
call fcn.00403300
xor cl, cl
call fcn.00403f60
push 0
xor al, al
push 0x407da0
mov byte [esp + 0x17], al
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [0x4a0638]
xor edi, edi
test eax, eax
jle 0x412088
mov esi, 0x4a068c
cmp byte [edi + 0x49bcca], 0
je 0x412000
cmp byte [esi], 0
je 0x412000
push 0
push 0
push 0x10
push dword [esi + 4]
mov byte [esp + 0x1f], 1
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [0x4a0638]
mov byte [esi], 0
inc edi
add esi, 0x54
cmp edi, eax
jl 0x411fd6
cmp byte [esp + 0xf], 0
je 0x412088
cmp dword [0x49bcac], 0
jne 0x412088
cmp byte [0x49bcc9], 0
je 0x412088
mov ecx, 0x49bcb0
call fcn.0042dd30
test al, al
jne 0x412088
mov edx, 0x48b144
mov ecx, 0x49bcb0
call fcn.00417a90
test al, al
jne 0x412088
cmp dword [0x49bcc4], 7
mov eax, 0x49bcb0
push 0
cmova eax, dword [0x49bcb0]
push eax
call fcn.004585f3
add esp, 8
test eax, eax
jne 0x412088
cmp dword [0x49bcc4], 7
mov eax, 0x49bcb0
push 1
cmova eax, dword [0x49bcb0]
push 0
push 0
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [0x49bca8]
lea ecx, [esp + 0x2d8]
cdq
mov dword [esp + 0x2d8], eax
mov dword [esp + 0x2dc], edx
call fcn.00417af0
cmp byte [0x4a063c], 0
je 0x411e80
jmp 0x411b88
push 6
mov dword [esp + 0x2e0], 0
call fcn.0043e5a0
call fcn.0045a09f
call fcn.0045a09f
call fcn.0045a09f
call fcn.0045a09f
call fcn.0045a09f
call fcn.0045a09f
call fcn.0045a09f
call fcn.00401420
call fcn.0045a09f
push 5
call fcn.0043e5a0
dec eax
push 6
mov dword [esi + 0x2c], eax
call fcn.0043e5a0
call fcn.00401420
call fcn.0045a09f
call fcn.0045a09f
call fcn.0045a09f
call fcn.0045a09f
call fcn.0045a09f
call fcn.0045a09f
call fcn.00460682
push 1
call fcn.0043e5a0
int3