Function at 0x140180678
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x828]
sub rsp, 0x900
mov r12, rcx
mov edi, 1
mov ecx, edi
call fcn.1403caaf4
mov rcx, rax
call fcn.1401f6870
lea ecx, [rdi + 0x47]
call fcn.1403caaf4
mov rcx, rax
call fcn.14013fc90
movdqa xmm0, xmmword [0x1404cff10]
lea edx, [rdi + 0x11]
xor r15d, r15d
mov qword [0x140548828], rax
xor eax, eax
mov qword [0x140548938], r15
mov byte [rbp - 0x46], al
mov ecx, r15d
mov qword [0x140548918], r15
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x48], 0x7d7c
xor byte [rbp + rcx - 0x58], al
add eax, edi
movsxd rcx, eax
cmp rcx, rdx
jb 0x1401806fb
lea rcx, [rbp - 0x58]
mov byte [rbp - 0x46], r15b
call qword [sym.imp.kernel32.dll_LoadLibraryA]
mov r8, rax
mov r14d, 0x64
test rax, rax
je 0x140180820
xor eax, eax
mov dword [rsp + 0x78], 0x40463244
mov byte [rbp - 0x7e], al
mov rcx, r15
mov dword [rsp + 0x7c], 0x6e76686b
mov word [rbp - 0x80], 0x6c64
xor byte [rsp + rcx + 0x78], al
add eax, edi
movsxd rcx, eax
cmp rcx, 0xa
jb 0x140180747
lea rdx, [rsp + 0x78]
mov byte [rbp - 0x7e], r15b
mov rcx, r8
call qword [sym.imp.kernel32.dll_GetProcAddress]
mov qword [0x140548938], rax
test rax, rax
je 0x140180820
mov dword [rsp + 0x60], 0x32663264
mov ecx, r15d
mov dword [rsp + 0x64], 0x6b622b35
mov rdx, r15
mov word [rsp + 0x68], r14w
xor byte [rsp + rdx + 0x60], cl
add ecx, edi
movsxd rdx, ecx
cmp rdx, 9
jb 0x140180794
mov rax, qword [0x140549018]
lea rcx, [rsp + 0x60]
mov byte [rsp + 0x69], r15b
call qword [case.0x140173169.0]
mov r8, rax
test rax, rax
je 0x140180820
movdqa xmm0, xmmword [0x1404d0000]
mov eax, r15d
movdqu xmmword [rbp - 0x78], xmm0
mov dword [rbp - 0x68], 0x777c5075
mov rcx, r15
mov dword [rbp - 0x64], 0x67776247
mov dword [rbp - 0x60], 0x727b715b
mov word [rbp - 0x5c], 0x72
xor byte [rbp + rcx - 0x78], al
add eax, edi
movsxd rcx, eax
cmp rcx, 0x1d
jb 0x1401807f0
lea rdx, [rbp - 0x78]
mov byte [rbp - 0x5b], r15b
mov rcx, r8
call qword [sym.imp.kernel32.dll_GetProcAddress]
mov qword [0x140548918], rax
test rax, rax
jne 0x140180d65
mov dword [rbp + 4], 0x790044
mov eax, r15d
mov dword [rbp + 8], 0x660022
mov rcx, r15
mov dword [rbp + 0xc], 0x73006a
mov dword [rbp + 0x10], 0x75006f
mov dword [rbp + 0x14], 0x640067
mov dword [rbp + 0x18], 0x65006f
mov dword [rbp + 0x1c], 0x2d0078
mov dword [rbp + 0x20], 0x7d006b
mov dword [rbp + 0x24], 0x7e0062
mov dword [rbp + 0x28], 0x60
xor word [rbp + rcx*2 + 4], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x13
jb 0x14018086c
xor eax, eax
mov word [rbp + 0x2a], r15w
mov word [rbp + 0x2f8], ax
mov rcx, r15
mov dword [rbp + 0x1cc], 0x640057
mov dword [rbp + 0x1d0], 0x620022
mov dword [rbp + 0x1d4], 0x600076
mov dword [rbp + 0x1d8], 0x630026
mov dword [rbp + 0x1dc], 0x7d006d
mov dword [rbp + 0x1e0], 0x68006f
mov dword [rbp + 0x1e4], 0x680078
mov dword [rbp + 0x1e8], 0x2f006a
mov dword [rbp + 0x1ec], 0x790064
mov dword [rbp + 0x1f0], 0x670073
mov dword [rbp + 0x1f4], 0x600034
mov dword [rbp + 0x1f8], 0x370064
mov dword [rbp + 0x1fc], 0x70004f
mov dword [rbp + 0x200], 0x7f0074
mov dword [rbp + 0x204], 0x6a0073
mov dword [rbp + 0x208], 0x3f006d
mov dword [rbp + 0x20c], 0x4e0044
mov dword [rbp + 0x210], 0x500047
mov dword [rbp + 0x214], 0x2004a
mov dword [rbp + 0x218], 0x70052
mov dword [rbp + 0x21c], 0x46004b
mov dword [rbp + 0x220], 0x5f0044
mov dword [rbp + 0x224], 0x44004d
mov dword [rbp + 0x228], 0xf0040
mov dword [rbp + 0x22c], 0x590044
mov dword [rbp + 0x230], 0x130057
mov dword [rbp + 0x234], 0x50005a
mov dword [rbp + 0x238], 0x520055
mov dword [rbp + 0x23c], 0x4a004b
mov dword [rbp + 0x240], 0x49005b
mov dword [rbp + 0x244], 0x1d0045
mov dword [rbp + 0x248], 0x50005d
mov dword [rbp + 0x24c], 0x31002d
mov dword [rbp + 0x250], 0x2d002d
mov dword [rbp + 0x254], 0x2b0021
mov dword [rbp + 0x258], 0x340032
mov dword [rbp + 0x25c], 0x2f0068
mov dword [rbp + 0x260], 0x390025
mov dword [rbp + 0x264], 0x21006c
mov dword [rbp + 0x268], 0x2e0021
mov dword [rbp + 0x26c], 0x340034
mov dword [rbp + 0x270], 0x7f0020
mov dword [rbp + 0x274], 0x3c0074
mov dword [rbp + 0x278], 0x240038
mov dword [rbp + 0x27c], 0x38002c
mov dword [rbp + 0x280], 0x370036
mov dword [rbp + 0x284], 0x2d007c
mov dword [rbp + 0x288], 0x3a0032
mov dword [rbp + 0x28c], 0x120001
mov dword [rbp + 0x290], 0x430007
mov dword [rbp + 0x294], 0xc0000
mov dword [rbp + 0x298], 0x20014
mov dword [rbp + 0x29c], 0x1d000b
mov dword [rbp + 0x2a0], 0x4b0012
mov dword [rbp + 0x2a4], 0x1e0019
mov dword [rbp + 0x2a8], 0x10007
mov dword [rbp + 0x2ac], 0x510017
mov dword [rbp + 0x2b0], 0xb0016
mov dword [rbp + 0x2b4], 0x100003
mov dword [rbp + 0x2b8], 0x40014
mov dword [rbp + 0x2bc], 0xd001d
mov dword [rbp + 0x2c0], 0xb000f
mov dword [rbp + 0x2c4], 0x55005c
mov dword [rbp + 0x2c8], 0x1a0009
mov dword [rbp + 0x2cc], 0xf600a0
mov dword [rbp + 0x2d0], 0xef00eb
mov dword [rbp + 0x2d4], 0xa500e8
mov dword [rbp + 0x2d8], 0xe800e1
mov dword [rbp + 0x2dc], 0xee00e7
mov dword [rbp + 0x2e0], 0xee00e6
mov dword [rbp + 0x2e4], 0xeb00ac
mov dword [rbp + 0x2e8], 0xfd00e1
mov dword [rbp + 0x2ec], 0xe800b0
mov dword [rbp + 0x2f0], 0xe600fd
mov dword [rbp + 0x2f4], 0xbc00ba
xor word [rbp + rcx*2 + 0x1cc], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x96
jb 0x140180b7b
mov word [rbp + 0x2f8], r15w
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x140180c0f
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140180c0f
mov esi, dword [r9 + 0x20]
dec r10d
mov r11d, 0x8c3b9dd7
lea rcx, [r8 + r10*4]
mov edx, dword [rcx + rsi]
add rdx, r8
mov cl, byte [rdx]
add rdx, rdi
test cl, cl
je 0x140180c0a
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, rdi
test cl, cl
jne 0x140180beb
cmp r11d, 0x7dfbe800
je 0x140180c14
test r10d, r10d
jne 0x140180bcf
mov rax, qword [rax]
jmp 0x140180baa
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
call qword [case.0x140173169.0]
mov rcx, qword gs:[0x60]
mov r14, rax
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x140180cac
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140180cac
mov esi, dword [r9 + 0x20]
dec r10d
mov r11d, 0x8b3b9c44
lea rcx, [r8 + r10*4]
mov edx, dword [rcx + rsi]
add rdx, r8
mov cl, byte [rdx]
add rdx, rdi
test cl, cl
je 0x140180ca7
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, rdi
test cl, cl
jne 0x140180c88
cmp r11d, 0x1b838e9
je 0x140180cb1
test r10d, r10d
jne 0x140180c6c
mov rax, qword [rax]
jmp 0x140180c47
mov ecx, dword [r9 + 0x24]
mov ebx, 0x10
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
mov r9d, ebx
add rcx, r8
mov eax, dword [rcx + rdx*4]
lea rdx, [rbp + 0x1cc]
add rax, r8
mov rcx, r14
lea r8, [rbp + 4]
call qword [case.0x140173169.0]
movdqa xmm0, xmmword [0x1404cfb80]
xor eax, eax
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x48], al
mov rcx, r15
xor byte [rbp + rcx - 0x58], al
add eax, edi
movsxd rcx, eax
cmp rcx, rbx
jb 0x140180cfb
xor eax, eax
mov byte [rbp - 0x48], r15b
mov byte [rsp + 0x74], al
mov ecx, r15d
mov dword [rsp + 0x70], 0x6d67716f
xor byte [rsp + rax + 0x70], cl
add ecx, edi
movsxd rax, ecx
cmp rax, 4
jb 0x140180d1e
mov rax, qword [0x140549010]
lea r8, [rbp - 0x58]
mov dword [rsp + 0x28], 0xa
lea rdx, [rsp + 0x70]
xor r9d, r9d
mov qword [rsp + 0x20], r15
xor ecx, ecx
mov byte [rsp + 0x74], r15b
call qword [case.0x140173169.0]
call fcn.1401a9e40
mov r14d, 0x64
call fcn.1401418e8
call fcn.1401e9d20
call fcn.1401418e8
mov dl, dil
mov rcx, rax
call fcn.1401ebde0
mov rbx, qword [0x140549020]
xor eax, eax
mov byte [rbp + 0x832], al
mov rcx, r15
mov word [rbp + 0x830], 0x3131
xor byte [rbp + rcx + 0x830], al
add eax, edi
movsxd rcx, eax
cmp rcx, 2
jb 0x140180d9a
lea rcx, [rbp + 0x830]
mov byte [rbp + 0x832], r15b
call fcn.1403d6dc0
mov r8d, eax
lea rcx, [0x1404cb614]
xor edx, edx
call fcn.1403d6cb0
mov rcx, qword [0x140549008]
mov edx, eax
mov rax, rbx
xor r9d, r9d
xor r8d, r8d
call qword [case.0x140173169.0]
mov rax, qword [0x140549030]
lea r8, [0x14017fdc0]
xor r9d, r9d
mov qword [rsp + 0x28], r15
xor edx, edx
mov dword [rsp + 0x20], r15d
xor ecx, ecx
call qword [case.0x140173169.0]
mov rax, qword [0x140549030]
lea r8, [0x140180230]
xor r9d, r9d
mov qword [rsp + 0x28], r15
xor edx, edx
mov dword [rsp + 0x20], r15d
xor ecx, ecx
call qword [case.0x140173169.0]
call fcn.1401a8920
call fcn.1401418e8
lea r9, [rbp + 0x830]
mov qword [rbp + 0x830], r15
xor r8d, r8d
lea rdx, [0x1401f3540]
xor ecx, ecx
call qword [0x140549228]
xor eax, eax
mov dword [rbp - 0x44], 0x640053
mov dword [rbp - 0x40], 0x660046
mov rcx, r15
mov dword [rbp - 0x3c], 0x700066
mov dword [rbp - 0x38], 0x570061
lea edx, [rax + 0x10]
mov dword [rbp - 0x34], 0x60007a
mov dword [rbp - 0x30], 0x62007c
mov dword [rbp - 0x2c], 0x680060
mov dword [rbp - 0x28], 0x6a0069
mov word [rbp - 0x24], ax
xor word [rbp + rcx*2 - 0x44], ax
add eax, edi
movsxd rcx, eax
cmp rcx, rdx
jb 0x140180ea0
lea rcx, [rbp - 0x44]
mov word [rbp - 0x24], r15w
call fcn.1401a7ad0
xor eax, eax
mov dword [rbp + 0x192], 0x640053
mov word [rbp + 0x1ca], ax
mov rcx, r15
mov dword [rbp + 0x196], 0x7a0051
mov dword [rbp + 0x19a], 0x710077
mov dword [rbp + 0x19e], 0x6a0063
mov dword [rbp + 0x1a2], 0x67004d
mov dword [rbp + 0x1a6], 0x62007c
mov dword [rbp + 0x1aa], 0x62007e
mov dword [rbp + 0x1ae], 0x620060
mov dword [rbp + 0x1b2], 0x7f0075
mov dword [rbp + 0x1b6], 0x430066
mov dword [rbp + 0x1ba], 0x7c0066
mov dword [rbp + 0x1be], 0x7e0060
mov dword [rbp + 0x1c2], 0x7c0074
mov dword [rbp + 0x1c6], 0x7e007d
xor word [rbp + rcx*2 + 0x192], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x1c
jb 0x140180f55
lea rcx, [rbp + 0x192]
mov word [rbp + 0x1ca], r15w
call fcn.1401a7ad0
mov eax, r15d
mov dword [rbp + 0xa8], 0x640053
mov rcx, r15
mov dword [rbp + 0xac], 0x6c004e
mov dword [rbp + 0xb0], 0x610065
mov dword [rbp + 0xb4], 0x750042
mov dword [rbp + 0xb8], 0x7f0061
mov dword [rbp + 0xbc], 0x79006f
mov dword [rbp + 0xc0], 0x7f005c
mov dword [rbp + 0xc4], 0x790067
mov dword [rbp + 0xc8], 0x7d0079
mov dword [rbp + 0xcc], 0x740077
mov dword [rbp + 0xd0], 0x71
xor word [rbp + rcx*2 + 0xa8], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x15
jb 0x140180ff0
lea rcx, [rbp + 0xa8]
mov word [rbp + 0xd2], r15w
call fcn.1401a7ad0
mov eax, r15d
mov dword [rbp + 0x2c], 0x640053
mov rcx, r15
mov dword [rbp + 0x30], 0x6b0051
mov edx, 0x13
mov dword [rbp + 0x34], 0x710071
mov dword [rbp + 0x38], 0x680062
mov dword [rbp + 0x3c], 0x67007f
mov dword [rbp + 0x40], 0x79005a
mov dword [rbp + 0x44], 0x7b0065
mov dword [rbp + 0x48], 0x630067
mov dword [rbp + 0x4c], 0x760075
mov dword [rbp + 0x50], 0x77
xor word [rbp + rcx*2 + 0x2c], ax
add eax, edi
movsxd rcx, eax
cmp rcx, rdx
jb 0x140181068
lea rcx, [rbp + 0x2c]
mov word [rbp + 0x52], r15w
call fcn.1401a7ad0
xor eax, eax
mov dword [rbp + 0x12e], 0x640053
mov word [rbp + 0x15e], ax
mov rcx, r15
mov dword [rbp + 0x132], 0x620056
mov dword [rbp + 0x136], 0x60006f
mov dword [rbp + 0x13a], 0x700049
mov dword [rbp + 0x13e], 0x6c0066
mov dword [rbp + 0x142], 0x780078
mov dword [rbp + 0x146], 0x640064
mov dword [rbp + 0x14a], 0x5f007e
mov dword [rbp + 0x14e], 0x780062
mov dword [rbp + 0x152], 0x7a0064
mov dword [rbp + 0x156], 0x700078
mov dword [rbp + 0x15a], 0x720071
xor word [rbp + rcx*2 + 0x12e], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x18
jb 0x140181109
lea rcx, [rbp + 0x12e]
mov word [rbp + 0x15e], r15w
call fcn.1401a7ad0
call fcn.1401418e8
lea rdx, [0x1401f1ba0]
mov rcx, rax
call fcn.1401f1ab0
mov eax, r15d
mov dword [rsp + 0x60], 0x710053
mov rcx, r15
mov dword [rsp + 0x64], 0x6e
mov r11d, 3
xor word [rsp + rcx*2 + 0x60], ax
add eax, edi
movsxd rcx, eax
cmp rcx, r11
jb 0x140181160
lea rcx, [0x140548940]
mov word [rsp + 0x66], r15w
lea r8, [rsp + 0x60]
mov rdx, r14
sub r8, rcx
mov r9d, 2
lea rax, [rdx + 0x7fffff9a]
test rax, rax
je 0x1401811b6
movzx eax, word [r8 + rcx]
test ax, ax
je 0x1401811ae
mov word [rcx], ax
add rcx, r9
sub rdx, rdi
jne 0x14018118d
test rdx, rdx
jne 0x1401811b6
sub rcx, r9
mov word [rcx], r15w
mov eax, r15d
mov rcx, r15
mov dword [rsp + 0x78], 0x710053
mov dword [rsp + 0x7c], 0x40006e
mov dword [rbp - 0x80], 0x68
xor word [rsp + rcx*2 + 0x78], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 5
jb 0x1401811d7
lea rsi, [0x140548850]
mov word [rbp - 0x7e], r15w
lea r8, [rsp + 0x78]
mov rcx, rsi
sub r8, rsi
mov rdx, r14
lea rax, [rdx + 0x7fffff9a]
test rax, rax
je 0x14018122a
movzx eax, word [r8 + rcx]
test ax, ax
je 0x140181222
mov word [rcx], ax
add rcx, r9
sub rdx, rdi
jne 0x140181201
test rdx, rdx
jne 0x14018122a
sub rcx, r9
mov eax, 0x50
mov word [rcx], r15w
mov dword [rbp + 0x410], eax
mov ebx, 0x7f05
lea rax, [0x140181f30]
mov dword [rbp + 0x414], r11d
mov edx, ebx
mov qword [rbp + 0x418], rax
xor ecx, ecx
mov qword [rbp + 0x420], r15
mov qword [rbp + 0x428], r12
call qword [sym.imp.user32.dll_LoadIconW]
lea edx, [rbx - 5]
xor ecx, ecx
mov qword [rbp + 0x430], rax
call qword [sym.imp.user32.dll_LoadCursorW]
movdqa xmm0, xmmword [0x1404cebe0]
mov edx, ebx
xor ecx, ecx
movdqa xmmword [rbp + 0x440], xmm0
mov qword [rbp + 0x438], rax
mov qword [rbp + 0x450], rsi
call qword [sym.imp.user32.dll_LoadIconW]
lea rcx, [rbp + 0x410]
mov qword [rbp + 0x458], rax
call qword [sym.imp.user32.dll_RegisterClassExW]
lea r8, [rbp + 0x4a0]
mov dword [rbp + 0x3a0], edi
lea rdx, [rbp + 0x3a0]
mov qword [rbp + 0x3a8], r15
lea rcx, [rbp + 0x490]
mov qword [rbp + 0x3b0], rdi
call qword [sym.imp.GdiPlus.dll_GdiplusStartup]
mov rax, qword [rbp + 0x4a0]
lea rcx, [rbp + 0x498]
call qword [case.0x140173169.0]
mov edx, 0x1653
lea rcx, [0x1404f7f40]
call qword [sym.imp.shlwapi.dll_SHCreateMemStream]
mov ecx, 0x18
mov rsi, rax
call qword [sym.imp.GdiPlus.dll_GdipAlloc]
mov rbx, rax
test rax, rax
je 0x140181343
lea rax, [0x1404ce668]
mov rcx, rsi
lea rdx, [rbx + 8]
mov qword [rbx], rax
mov qword [rdx], r15
call qword [sym.imp.GdiPlus.dll_GdipLoadImageFromStream]
mov dword [rbx + 0x10], eax
jmp 0x140181346
mov rbx, r15
call fcn.140141298
xor edx, edx
lea rcx, [0x1404f7f40]
mov r8d, 0x1653
mov qword [rax + 0x60], rbx
call fcn.1403ccc50
mov eax, 7
mov qword [rbp + 0x340], r15
mov qword [rbp + 0x358], rax
mov qword [rbp + 0x388], rax
mov qword [rbp + 0x350], r15
mov qword [rbp + 0x370], r15
mov qword [rbp + 0x380], r15
mov qword [rbp + 0x310], r15
mov qword [rbp + 0x328], r15
mov qword [rbp + 0x338], r15
mov dword [rbp + 0x318], r15d
mov qword [rbp + 0x360], r15
mov qword [rbp + 0x320], r15
mov qword [rbp + 0x368], r15
call fcn.140141298
mov rcx, qword [rax + 0x60]
cmp qword [rbp + 0x328], r15
jne 0x1401813ee
test rcx, rcx
je 0x1401813ee
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140173169.0]
mov qword [rbp + 0x328], rax
call fcn.140141104
lea rdx, [rbp + 0x4b0]
call fcn.1401a4870
cmp qword [rax + 0x18], 8
jb 0x140181409
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x340]
call fcn.14013edcc
lea rcx, [rbp + 0x4b0]
call fcn.14013ed68
call fcn.1401418e8
lea rdx, [0x1401f2980]
mov rcx, rax
call fcn.1401f1ab0
xor r9d, r9d
cmp qword [rbp + 0x310], r15
jne 0x14018149b
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateEventW]
mov qword [rbp + 0x320], rax
lea r9, [rbp + 0x310]
lea rax, [rbp + 0x318]
xor edx, edx
mov qword [rsp + 0x28], rax
lea r8, [0x14019f840]
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call fcn.1403e0850
mov rcx, qword [rbp + 0x320]
mov edx, 0x1388
mov qword [rbp + 0x310], rax
call qword [sym.imp.kernel32.dll_WaitForSingleObject]
jmp 0x1401814b0
mov ecx, dword [rbp + 0x318]
mov edx, 6
lea r8d, [rdx - 4]
call qword [sym.imp.user32.dll_PostThreadMessageW]
xor eax, eax
mov dword [rbp + 0x54], 0x6f0049
mov word [rbp + 0x7c], ax
mov rcx, r15
mov dword [rbp + 0x58], 0x77006b
mov dword [rbp + 0x5c], 0x64006d
mov dword [rbp + 0x60], 0x6e006a
mov dword [rbp + 0x64], 0x600072
mov dword [rbp + 0x68], 0x6c0064
mov dword [rbp + 0x6c], 0x6e002c
mov dword [rbp + 0x70], 0x7d0061
mov dword [rbp + 0x74], 0x3f0075
mov dword [rbp + 0x78], 0x3d003c
xor word [rbp + rcx*2 + 0x54], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x14
jb 0x1401814ff
lea r8, [rbp + 0x54]
mov word [rbp + 0x7c], r15w
xor edx, edx
lea rcx, [rbp + 0x310]
call fcn.1401a016c
call fcn.140141298
call fcn.14019db74
call fcn.1401418e8
mov rcx, rax
call fcn.1401ed7c0
xor eax, eax
mov dword [rbp - 0x22], 0x750055
mov word [rbp + 2], ax
mov rcx, r15
mov dword [rbp - 0x1e], 0x6f006b
mov dword [rbp - 0x1a], 0x7f006d
mov dword [rbp - 0x16], 0x69006f
mov dword [rbp - 0x12], 0x29006f
mov dword [rbp - 0xe], 0x6a0069
mov dword [rbp - 0xa], 0x65006f
mov dword [rbp - 6], 0x21006b
mov dword [rbp - 2], 0x3f003e
xor word [rbp + rcx*2 - 0x22], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x12
jb 0x140181585
lea r8, [rbp - 0x22]
mov word [rbp + 2], r15w
mov edx, 0xa
lea rcx, [rbp + 0x310]
call fcn.1401a016c
call fcn.1401418e8
lea rdx, [0x1401f20d0]
mov rcx, rax
call fcn.1401f1ab0
xor edx, edx
lea rcx, [rbp + 0x4d0]
mov r8d, 0x1fe
call fcn.1403ccc50
call fcn.140141104
mov r8d, 0xa
lea rdx, [rbp + 0x4d0]
call fcn.1401a5cc0
lea rax, [0x140181f30]
mov qword [rbp + 0x3c0], 3
mov qword [rbp + 0x3c8], rax
mov edx, 0x7f00
lea rax, [rbp + 0x4d0]
mov qword [rbp + 0x3d0], r15
xor ecx, ecx
mov qword [rbp + 0x400], rax
mov qword [rbp + 0x3e0], r15
mov qword [rbp + 0x3f8], r15
mov qword [rbp + 0x3d8], r12
call qword [sym.imp.user32.dll_LoadCursorW]
lea rcx, [rbp + 0x3c0]
mov qword [rbp + 0x3f0], r15
mov qword [rbp + 0x3e8], rax
call qword [sym.imp.user32.dll_RegisterClassW]
test ax, ax
je 0x14018183c
call fcn.1401ac260
call fcn.1401ad1f0
xor eax, eax
mov dword [rbp + 0x100], 0x6e004c
mov word [rbp + 0x12c], ax
mov rcx, r15
mov dword [rbp + 0x104], 0x670063
mov dword [rbp + 0x108], 0x6b006d
mov dword [rbp + 0x10c], 0x270061
mov dword [rbp + 0x110], 0x68006b
mov dword [rbp + 0x114], 0x630069
mov dword [rbp + 0x118], 0x2d0069
mov dword [rbp + 0x11c], 0x660068
mov dword [rbp + 0x120], 0x74007c
mov dword [rbp + 0x124], 0x3d0061
mov dword [rbp + 0x128], 0x3b003a
xor word [rbp + rcx*2 + 0x100], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x16
jb 0x1401816e6
lea r8, [rbp + 0x100]
mov word [rbp + 0x12c], r15w
mov edx, 0xa
lea rcx, [rbp + 0x310]
call fcn.1401a016c
xor eax, eax
mov dword [rbp + 0x7e], 0x730043
mov word [rbp + 0xa6], ax
mov rcx, r15
mov dword [rbp + 0x82], 0x620067
mov dword [rbp + 0x86], 0x6c0070
mov dword [rbp + 0x8a], 0x600068
mov dword [rbp + 0x8e], 0x600028
mov dword [rbp + 0x92], 0x780064
mov dword [rbp + 0x96], 0x6c0078
mov dword [rbp + 0x9a], 0x6c0060
mov dword [rbp + 0x9e], 0x3f0075
mov dword [rbp + 0xa2], 0x3d003c
xor word [rbp + rcx*2 + 0x7e], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x14
jb 0x140181786
lea r8, [rbp + 0x7e]
mov word [rbp + 0xa6], r15w
mov edx, 0x1e
lea rcx, [rbp + 0x310]
call fcn.1401a016c
call fcn.1401418e8
lea rdx, [0x1401a7b50]
mov rcx, rax
call fcn.1401f1ab0
mov qword [rsp + 0x58], r15
lea r8, [rbp + 0x4d0]
mov qword [rsp + 0x50], r12
lea rdx, [rbp + 0x4d0]
mov qword [rsp + 0x48], r15
mov eax, 0x12c
mov qword [rsp + 0x40], r15
mov r9d, 0x80080000
mov dword [rsp + 0x38], eax
xor ecx, ecx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
call qword [sym.imp.user32.dll_CreateWindowExW]
mov r14, rax
test rax, rax
jne 0x14018181b
lea edi, [rax + 2]
jmp 0x14018183c
mov rcx, r14
call fcn.140182054
test al, al
jne 0x14018184f
call fcn.140182140
mov rdx, r12
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.user32.dll_UnregisterClassW]
lea rcx, [rbp + 0x310]
call fcn.14019f79c
mov eax, edi
jmp 0x140181f01
mov rbx, qword [0x140548838]
mov ecx, 0x61f8
call fcn.140147358
test rax, rax
je 0x140181871
xor edx, edx
mov rcx, rax
call fcn.140141c4c
jmp 0x140181874
mov rax, r15
mov qword [0x140548838], rax
call fcn.140145a68
mov r13, qword [0x140548838]
test rbx, rbx
cmovne r13, rbx
mov qword [0x140548838], r13
call fcn.14015f07c
mov rcx, r14
call fcn.140167dfc
call fcn.140167c50
mov r8d, 0x3228
lea rdx, [0x1404f3790]
lea rcx, [rbp + 0x6d0]
call fcn.140204660
mov qword [rsp + 0x60], r15
mov qword [rbp + 0x830], r15
call fcn.140140ddc
mov rbx, qword [rbp + 0x6d8]
lea rcx, [rbp + 0x830]
mov rsi, qword [rbp + 0x6d0]
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r8, rbx
mov rcx, rax
mov rdx, rsi
call fcn.1401db070
mov r8, rbx
xor edx, edx
mov rcx, rsi
call fcn.1403ccc50
mov r15, qword [rbp + 0x830]
cmp r15, rbx
jbe 0x140181925
mov rdx, r15
mov rcx, rsi
call fcn.1403de9e0
mov rsi, rax
mov rdx, qword [rsp + 0x60]
mov r8, r15
mov rcx, rsi
call fcn.1403cc5a0
movss xmm3, dword [0x1404ceb0c]
lea rax, [0x1404ca440]
mov rcx, qword [r13 + 0x38]
mov r8d, r15d
mov qword [rsp + 0x28], rax
mov rdx, rsi
and qword [rsp + 0x20], 0
call fcn.140162bc0
xor edx, edx
lea rcx, [0x1404f3790]
mov r8d, 0x3228
call fcn.1403ccc50
mov r15d, 0x6b
mov dword [rsp + 0x70], 0x121
xor esi, esi
mov dword [rbp + 0x830], r15d
lea r8, [rbp + 0x830]
mov qword [rbp + 0x300], rsi
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x300]
call fcn.140182230
mov rbx, qword [rbp + 0x300]
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
xor edx, edx
lea rcx, [0x1404f69c0]
mov r8d, 0x1572
mov qword [rax + 0x910], rbx
call fcn.1403ccc50
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
mov byte [rax + 0x8b9], dil
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
xor ecx, ecx
mov byte [rax + 0x8bc], dil
call qword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jne 0x140181a31
lea rax, [0x140548930]
xor edx, edx
lea r9, [0x140419cd0]
mov qword [rsp + 0x20], rax
lea r8d, [r15 - 0x54]
lea rcx, [0x140419ce0]
call qword [sym.imp.combase.dll_CoCreateInstance]
xor eax, eax
mov dword [rbp + 0x160], 0x6f0049
mov word [rbp + 0x190], ax
mov r15d, 0x64
mov dword [rbp + 0x164], 0x77006b
mov rcx, rsi
mov dword [rbp + 0x168], 0x64006d
mov dword [rbp + 0x16c], 0x6e006a
mov dword [rbp + 0x170], 0x600072
mov dword [rbp + 0x174], 0x6c0064
mov dword [rbp + 0x178], 0x64002c
mov dword [rbp + 0x17c], 0x7c0060
mov dword [rbp + 0x180], 0x700064
mov dword [rbp + 0x184], 0x70007c
mov dword [rbp + 0x188], 0x3b0071
mov dword [rbp + 0x18c], 0x390038
xor word [rbp + rcx*2 + 0x160], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x18
jb 0x140181abb
lea r8, [rbp + 0x160]
mov word [rbp + 0x190], si
mov edx, 0x3c
lea rcx, [rbp + 0x310]
call fcn.1401a016c
call fcn.1401ac520
call fcn.140140f70
mov qword [rax + 0x4358], r14
call fcn.140141298
lea rdx, [rbp - 0x78]
mov rcx, rax
call fcn.14019de88
mov rbx, rax
call fcn.140141298
add rax, 0x170
cmp rax, rbx
je 0x140181b30
mov r8b, sil
mov rdx, rbx
mov rcx, rax
call fcn.1401823c8
mov rdx, qword [rbp - 0x60]
mov eax, 0x10
cmp rdx, rax
jb 0x140181b6f
mov rcx, qword [rbp - 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140181b6a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140181f22
call fcn.1403cad84
call fcn.140202570
mov ebx, eax
call fcn.140141298
mov dword [rbp + 0xd4], 0x60004c
mov edx, 0x3c
mov dword [rbp + 0xd8], 0x6d0077
mov rcx, rsi
mov dword [rbp + 0xdc], 0x6d0067
mov dword [rax + 0xc], ebx
mov eax, esi
mov dword [rbp + 0xe0], 0x69006f
mov dword [rbp + 0xe4], 0x29006f
mov dword [rbp + 0xe8], 0x650063
mov dword [rbp + 0xec], 0x79007f
mov dword [rbp + 0xf0], 0x61006f
mov dword [rbp + 0xf4], 0x740073
mov dword [rbp + 0xf8], 0x3d003c
mov dword [rbp + 0xfc], 0x3a
xor word [rbp + rcx*2 + 0xd4], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0x15
jb 0x140181bf6
lea r8, [rbp + 0xd4]
mov word [rbp + 0xfe], si
lea rcx, [rbp + 0x310]
call fcn.1401a016c
mov rbx, qword [0x140548930]
call fcn.140141298
mov qword [rax + 0x58], rbx
call fcn.1401418e8
mov rcx, rax
call fcn.1401f2200
xorps xmm0, xmm0
movups xmmword [rbp + 0x460], xmm0
movups xmmword [rbp + 0x470], xmm0
movups xmmword [rbp + 0x480], xmm0
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor r8d, r8d
lea rcx, [rbp + 0x460]
xor edx, edx
call qword [sym.imp.user32.dll_PeekMessageW]
test eax, eax
je 0x140181c94
lea rcx, [rbp + 0x460]
call qword [sym.imp.user32.dll_TranslateMessage]
lea rcx, [rbp + 0x460]
call qword [sym.imp.user32.dll_DispatchMessageW]
jmp 0x140181df6
mov rax, qword [0x140548838]
test rax, rax
je 0x140181ca9
mov rcx, qword [rax + 0x98]
jmp 0x140181cac
mov rcx, rsi
cmp qword [rcx + 0x48], rsi
jne 0x140181cb7
call fcn.140167628
call fcn.140167fb8
call fcn.140147ac0
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
cmp byte [rax + 0x8bc], sil
jne 0x140181ce5
mov ecx, r15d
call qword [sym.imp.kernel32.dll_Sleep]
call fcn.1401a9e40
cmp qword [rbp + 0x310], rsi
jbe 0x140181d5c
xor eax, eax
mov dword [rbp - 0x78], 0x6d0041
mov word [rbp - 0x5c], ax
mov rcx, rsi
mov dword [rbp - 0x74], 0x6c006f
mov dword [rbp - 0x70], 0x710077
mov dword [rbp - 0x6c], 0x630026
mov dword [rbp - 0x68], 0x670067
mov dword [rbp - 0x64], 0x25006f
mov dword [rbp - 0x60], 0x230022
xor word [rbp + rcx*2 - 0x78], ax
add eax, edi
movsxd rcx, eax
cmp rcx, 0xe
jb 0x140181d28
lea r8, [rbp - 0x78]
mov word [rbp - 0x5c], si
mov edx, 0x5a
lea rcx, [rbp + 0x310]
call fcn.1401a016c
mov ecx, 0xc8
call qword [sym.imp.kernel32.dll_Sleep]
call fcn.140141298
mov qword [rax + 0x28], r14
call fcn.140141298
mov qword [rax + 0x18], r12
call fcn.140202210
lea rcx, [rbp + 0x310]
call fcn.14019f7dc
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
call fcn.14013e114
call fcn.140149838
mov rcx, qword [0x140548840]
lea r8, [0x140548928]
xor r9d, r9d
mov edx, edi
mov rax, qword [rcx]
mov rax, qword [rax + 0x108]
call qword [case.0x140173169.0]
mov rax, qword [0x140548838]
mov rcx, qword [rax + 0x4b00]
mov rdx, qword [rcx]
add rdx, 0x48
mov al, byte [rdx]
neg al
sbb rcx, rcx
and rcx, rdx
call fcn.1401668d8
mov rcx, qword [0x140548920]
xor r8d, r8d
mov edx, edi
mov rax, qword [rcx]
mov rax, qword [rax + 0x40]
call qword [case.0x140173169.0]
cmp dword [rbp + 0x468], 0x12
jne 0x140181c58
mov rbx, qword [0x140548838]
test rbx, rbx
je 0x140181e18
mov rdi, qword [rbx + 0x98]
jmp 0x140181e1b
mov rdi, rsi
call fcn.140167ae8
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140181e36
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140173169.0]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140181e4b
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140173169.0]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140181e61
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140173169.0]
and dword [rbx + 0xc], 0xfffffff7
mov rcx, rdi
mov qword [rbx + 0x88], rsi
mov qword [rbx + 0x98], rsi
call fcn.1401473a4
mov rbx, qword [0x140548838]
test rbx, rbx
je 0x140181e90
mov rcx, qword [rbx + 0x90]
jmp 0x140181e93
mov rcx, rsi
and dword [rbx + 0xc], 0xfffffff8
mov qword [rbx + 0x80], rsi
mov qword [rbx + 0x90], rsi
test rcx, rcx
je 0x140181eb6
call fcn.1401473a4
mov rbx, qword [0x140548838]
call fcn.140145da4
mov qword [0x140548838], rsi
test rbx, rbx
je 0x140181ed7
mov rcx, rbx
call fcn.140159638
mov rcx, rbx
call fcn.1401473a4
call fcn.140182140
mov rcx, r14
call qword [sym.imp.user32.dll_DestroyWindow]
mov rdx, r12
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.user32.dll_UnregisterClassW]
lea rcx, [rbp + 0x310]
call fcn.14019f79c
lea r11, [rsp + 0x900]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1403d7020
int3