Function at 0x2f8aab409
Capabilities:
Populate syswhispers2 syscall list
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
sub rsp, 0xd8
lea rbp, [rsp + 0xd0]
movzx eax, word [0x2f8ab4114]
add ax, 0x2ba4
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
imul eax, eax, 0x840f7217
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0x1bd2
mov word [0x2f8ab4114], ax
mov rax, qword [0x2f8ab53f0]
mov eax, dword [rax]
test eax, eax
je 0x2f8aab4bf
mov eax, dword [0x2f8ab4110]
or eax, 0xc1416e88
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add ax, 0x4ba
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
or eax, 0xa16ac3c5
mov dword [0x2f8ab4110], eax
mov ecx, 0x3a
mov rax, qword [sym.imp.USER32.dll_GetDC]
call rax
movzx eax, word [0x2f8ab4114]
xor ax, 0xa8ec
mov word [0x2f8ab4114], ax
mov eax, 1
jmp 0x2f8aac877
mov dword [rbp - 0x8c], 0x60
mov eax, dword [rbp - 0x8c]
mov rax, qword gs:[rax]
mov qword [rbp - 0x98], rax
mov rax, qword [rbp - 0x98]
mov qword [rbp - 0x30], rax
mov eax, dword [0x2f8ab4110]
imul eax, eax, 0x88b17828
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0x9e3dd669
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
add ax, 0x7415
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
add ax, 0x5930
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
add ax, 0x21b4
mov word [0x2f8ab4114], ax
mov rax, qword [rbp - 0x30]
mov rax, qword [rax + 0x18]
mov qword [rbp - 0x38], rax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0x602f54ec
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and eax, 0x4a5f72b7
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0x7847be74
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
or eax, 0x9eb8f984
mov dword [0x2f8ab4110], eax
mov qword [rbp - 8], 0
mov eax, dword [0x2f8ab4110]
xor ax, 0x4efb
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
or ax, 0x13cd
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
and ax, 0x73ca
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
sub ax, 0x1d9e
mov word [0x2f8ab4114], ax
mov qword [rbp - 0x10], 0
mov eax, dword [0x2f8ab4110]
imul ax, ax, 0x1dcd
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
sub ax, 0x59cc
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
and eax, 0x2a34a8f4
mov dword [0x2f8ab4110], eax
mov rax, qword [rbp - 0x38]
mov rax, qword [rax + 0x10]
mov qword [rbp - 0x18], rax
jmp 0x2f8aab6d6
mov rax, qword [rbp - 0x18]
mov rax, qword [rax + 0x30]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x40]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp - 0x10]
add rax, rdx
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
add rax, 0x88
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
mov eax, dword [rax]
mov dword [rbp - 0x54], eax
cmp dword [rbp - 0x54], 0
je 0x2f8aab6c7
mov edx, dword [rbp - 0x54]
mov rax, qword [rbp - 0x10]
add rax, rdx
mov qword [rbp - 8], rax
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0xc]
mov edx, eax
mov rax, qword [rbp - 0x10]
add rax, rdx
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x60]
mov eax, dword [rax]
or eax, 0x20202020
cmp eax, 0x6c64746e
jne 0x2f8aab6ca
mov rax, qword [rbp - 0x60]
add rax, 4
mov eax, dword [rax]
or eax, 0x20202020
cmp eax, 0x6c642e6c
je 0x2f8aab6e9
jmp 0x2f8aab6cb
nop
jmp 0x2f8aab6cb
nop
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
mov rax, qword [rax + 0x30]
test rax, rax
jne 0x2f8aab635
jmp 0x2f8aab6ea
nop
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0x822
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
imul ax, ax, 0xc1e7
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x25205d9
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0x9e2c
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor ax, 0xc301
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x5a2c0581
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
or ax, 0x3768
mov word [0x2f8ab4114], ax
cmp qword [rbp - 8], 0
jne 0x2f8aab803
mov eax, dword [0x2f8ab4110]
or ax, 0x98b3
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
sub eax, 0x77d42d1e
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0x4eea
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
or eax, 0x1c5e6c75
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
imul eax, eax, 0xe94c3a6b
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
or ax, 0x36ba
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
or ax, 0x4bd
mov word [0x2f8ab4114], ax
mov eax, 0
jmp 0x2f8aac877
mov eax, dword [0x2f8ab4110]
xor ax, 0xa01d
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
and ax, 0xe6ac
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor eax, 0xd9ae26f2
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
sub ax, 0x46e3
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
and ax, 0x8b63
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
sub ax, 0x442e
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
or ax, 0xc5b2
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
add eax, 0x7d1d4ca3
mov dword [0x2f8ab4110], eax
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x18]
mov dword [rbp - 0x1c], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x71b21eb7
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
or eax, 0x74b012bf
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add ax, 0x181b
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
sub eax, 0x3ad962c4
mov dword [0x2f8ab4110], eax
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x1c]
mov edx, eax
mov rax, qword [rbp - 0x10]
add rax, rdx
mov qword [rbp - 0x68], rax
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0x9755
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
sub eax, 0x6d230377
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0xb3b8
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
xor eax, 0x2c966417
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
or ax, 0xe82
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
add ax, 0x60c
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x716ee40b
mov dword [0x2f8ab4110], eax
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x20]
mov edx, eax
mov rax, qword [rbp - 0x10]
add rax, rdx
mov qword [rbp - 0x70], rax
mov eax, dword [0x2f8ab4110]
or ax, 0x4098
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
and ax, 0xa8bc
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor eax, 0xdead7e86
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
xor ax, 0x6494
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0xf78865f2
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
or eax, 0xbcddfb9
mov dword [0x2f8ab4110], eax
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x24]
mov edx, eax
mov rax, qword [rbp - 0x10]
add rax, rdx
mov qword [rbp - 0x78], rax
movzx eax, word [0x2f8ab4114]
or ax, 0xb434
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x16e5a8ba
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0x3c389121
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and eax, 0x4019295c
mov dword [0x2f8ab4110], eax
mov dword [rbp - 0x20], 0
movzx eax, word [0x2f8ab4114]
movzx eax, ax
xor eax, 0xa9a927f5
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
sub eax, 0x442ab340
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and eax, 0xd9a5fee8
mov dword [0x2f8ab4110], eax
mov rax, qword [0x2f8ab53f0]
add rax, 8
mov qword [rbp - 0x80], rax
mov eax, dword [0x2f8ab4110]
add eax, 0x46ce30cc
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
sub eax, 0x5a23b44f
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and eax, 0xf8ac38a7
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x2cf3bf9a
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
sub eax, 0x719d3610
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
add ax, 0x9ac
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
imul eax, eax, 0x1ca89ec7
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
imul eax, eax, 0x77676254
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
xor ax, 0xe027
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor ax, 0xad3
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
and eax, 0xe7c75c08
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
imul ax, ax, 0xb014
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x2d05048c
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0x3814
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
imul ax, ax, 0x4d0a
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0x6aa287bb
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
sub eax, 0x4b71676f
mov dword [0x2f8ab4110], eax
mov eax, dword [rbp - 0x1c]
sub eax, 1
mov eax, eax
lea rdx, [rax*4]
mov rax, qword [rbp - 0x70]
add rax, rdx
mov eax, dword [rax]
mov edx, eax
mov rax, qword [rbp - 0x10]
add rax, rdx
mov qword [rbp - 0x88], rax
mov eax, dword [0x2f8ab4110]
add eax, 0x6a0bf9b4
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and eax, 0x9059fd8c
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add eax, 0x2125c0c3
mov dword [0x2f8ab4110], eax
mov rax, qword [rbp - 0x88]
movzx eax, word [rax]
cmp ax, 0x775a
jne 0x2f8aabff3
movzx eax, word [0x2f8ab4114]
or ax, 0x2ce
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
and ax, 0xd553
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
add ax, 0x7cd8
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
sub eax, 0x4235dce2
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
xor ax, 0xba9d
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
xor ax, 0xbecf
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
or ax, 0x80de
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor eax, 0x234e6e2f
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add eax, 0x7a476def
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add eax, 0x46c6742d
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
or ax, 0xd009
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0xd0dfdb9b
mov dword [0x2f8ab4110], eax
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0x93
mov rax, qword [sym.imp.USER32.dll_RedrawWindow]
call rax
mov eax, dword [rbp - 0x20]
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
lea rbx, [rdx + rax]
mov rax, qword [rbp - 0x88]
mov rcx, rax
call fcn.2f8aa5571
mov dword [rbx], eax
movzx eax, word [0x2f8ab4114]
add ax, 0x6ea6
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
sub eax, 0x1968ed8d
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
or eax, 0xa9de0485
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
xor eax, 0x4223b450
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
xor eax, 0xf4438dbe
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
or eax, 0x6d98c008
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add eax, 0x4c66048d
mov dword [0x2f8ab4110], eax
mov eax, dword [rbp - 0x1c]
sub eax, 1
mov eax, eax
lea rdx, [rax + rax]
mov rax, qword [rbp - 0x78]
add rax, rdx
movzx eax, word [rax]
movzx eax, ax
lea rdx, [rax*4]
mov rax, qword [rbp - 0x68]
add rax, rdx
mov edx, dword [rbp - 0x20]
mov rcx, rdx
shl rcx, 4
mov rdx, qword [rbp - 0x80]
add rdx, rcx
mov eax, dword [rax]
mov dword [rdx + 4], eax
mov eax, dword [rbp - 0x20]
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rax, rdx
mov eax, dword [rax + 4]
mov edx, eax
mov rax, qword [rbp - 0x10]
add rax, rdx
mov rcx, rax
mov eax, dword [rbp - 0x20]
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
lea rbx, [rdx + rax]
call fcn.2f8aa23f5
mov qword [rbx + 8], rax
mov eax, dword [0x2f8ab4110]
xor eax, 0x40656118
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
imul eax, eax, 0xc9072c10
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
sub ax, 0x4070
mov word [0x2f8ab4114], ax
mov ecx, 0xd3
mov rax, qword [sym.imp.USER32.dll_GetSysColorBrush]
call rax
movzx eax, word [0x2f8ab4114]
xor ax, 0x4f9d
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
and ax, 0x90b8
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
sub ax, 0x4886
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor ax, 0x1e14
mov word [0x2f8ab4114], ax
add dword [rbp - 0x20], 1
movzx eax, word [0x2f8ab4114]
movzx eax, ax
xor eax, 0x18bc3551
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add ax, 0xfdb
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
and eax, 0x45d5e81b
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x335eceb4
mov dword [0x2f8ab4110], eax
cmp dword [rbp - 0x20], 0x1f4
jne 0x2f8aabff3
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0x7f2084d1
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and eax, 0x97a10a3
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
xor eax, 0xcb804baf
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
or eax, 0xb01174d8
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add eax, 0x52f8635c
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0x3e392a70
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
sub eax, 0x7690dbec
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
sub eax, 0x462366bd
mov dword [0x2f8ab4110], eax
jmp 0x2f8aac006
sub dword [rbp - 0x1c], 1
cmp dword [rbp - 0x1c], 0
setne al
test al, al
jne 0x2f8aabade
mov eax, dword [0x2f8ab4110]
add eax, 0x376936ca
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x35d7357f
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
imul eax, eax, 0xd7395c6b
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
imul eax, eax, 0xb9f11d00
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
or ax, 0x766c
mov word [0x2f8ab4114], ax
mov ecx, 0xcd
mov rax, qword [sym.imp.USER32.dll_GetSysColorBrush]
call rax
mov rax, qword [0x2f8ab53f0]
mov edx, dword [rbp - 0x20]
mov dword [rax], edx
movzx eax, word [0x2f8ab4114]
movzx eax, ax
sub eax, 0x3013856f
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and ax, 0x98c0
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
xor eax, 0xa7b93d06
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
imul ax, ax, 0x3ec8
mov word [0x2f8ab4114], ax
mov dword [rbp - 0x24], 0
jmp 0x2f8aac85d
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0xdbccec0
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
sub ax, 0x7863
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
add ax, 0x52c7
mov word [0x2f8ab4114], ax
mov ecx, 0x51
mov rax, qword [sym.imp.USER32.dll_GetDC]
call rax
mov eax, dword [0x2f8ab4110]
or ax, 0xd62d
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
xor ax, 0xa2c4
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
sub ax, 0x15f3
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor ax, 0x12b0
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
xor ax, 0xd6a4
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
add eax, 0x3f8af078
mov dword [0x2f8ab4110], eax
mov dword [rbp - 0x28], 0
jmp 0x2f8aac841
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0xcd22
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
add ax, 0x4009
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
sub eax, 0x12ceb85e
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
xor eax, 0x534acd48
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
imul eax, eax, 0xc24052da
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add ax, 0x6d37
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
add eax, 0x7adf1d17
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
xor eax, 0x415bd686
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and eax, 0x44ba3c1
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
xor ax, 0x1967
mov word [0x2f8ab4114], ax
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 8
mov rax, qword [sym.imp.USER32.dll_RedrawWindow]
call rax
movzx eax, word [0x2f8ab4114]
sub ax, 0x50d
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0xc9c83e63
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add ax, 0x1ce7
mov word [0x2f8ab4114], ax
mov eax, dword [rbp - 0x28]
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rax, rdx
mov eax, dword [rax + 4]
mov edx, dword [rbp - 0x28]
add edx, 1
mov edx, edx
mov rcx, rdx
shl rcx, 4
mov rdx, qword [rbp - 0x80]
add rdx, rcx
mov edx, dword [rdx + 4]
cmp edx, eax
jae 0x2f8aac83d
movzx eax, word [0x2f8ab4114]
and ax, 0x9f6c
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
add ax, 0x38a8
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
xor eax, 0x2d4e140e
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and ax, 0x9854
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
and ax, 0xb9cc
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor eax, 0xd396e846
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
and eax, 0x3a5f6389
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x521696ee
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add eax, 0x18ac7531
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
or eax, 0x91c2d4a0
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
add ax, 0x59a4
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
or eax, 0x2c84bab
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x42700a58
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
sub ax, 0x23d4
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
imul eax, eax, 0x450ffb16
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
sub ax, 0x178f
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
add eax, 0xe4378ad
mov dword [0x2f8ab4110], eax
mov eax, dword [rbp - 0x28]
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rax, rdx
mov eax, dword [rax]
mov dword [rbp - 0xb0], eax
mov eax, dword [0x2f8ab4110]
or eax, 0x6132af35
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
or ax, 0xd9a2
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor eax, 0x6906f639
mov dword [0x2f8ab4110], eax
mov eax, dword [rbp - 0x28]
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rax, rdx
mov eax, dword [rax + 4]
mov dword [rbp - 0xac], eax
mov eax, dword [0x2f8ab4110]
xor ax, 0xbf7e
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0x13d6
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
sub ax, 0xd03
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
xor eax, 0xff789d37
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
sub ax, 0x2925
mov word [0x2f8ab4114], ax
mov eax, dword [rbp - 0x28]
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rax, rdx
mov rax, qword [rax + 8]
mov qword [rbp - 0xa8], rax
mov eax, dword [0x2f8ab4110]
or eax, 0xa7eb5b4e
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
and ax, 0x99ac
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
or ax, 0x19da
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
xor eax, 0x87af0840
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
add ax, 0x143
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
imul ax, ax, 0x6522
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
sub eax, 0x3fbdbbc4
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
or ax, 0xdb49
mov word [0x2f8ab4114], ax
mov eax, dword [rbp - 0x28]
add eax, 1
mov eax, eax
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rax, rdx
mov edx, dword [rbp - 0x28]
mov rcx, rdx
shl rcx, 4
mov rdx, qword [rbp - 0x80]
add rdx, rcx
mov eax, dword [rax]
mov dword [rdx], eax
mov eax, dword [0x2f8ab4110]
imul ax, ax, 0x94ae
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x7ae48809
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
xor ax, 0xa123
mov word [0x2f8ab4114], ax
mov eax, dword [rbp - 0x28]
add eax, 1
mov eax, eax
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rax, rdx
mov edx, dword [rbp - 0x28]
mov rcx, rdx
shl rcx, 4
mov rdx, qword [rbp - 0x80]
add rdx, rcx
mov eax, dword [rax + 4]
mov dword [rdx + 4], eax
mov eax, dword [0x2f8ab4110]
or ax, 0xe0b5
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
and eax, 0x3f9ea34c
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0xb43c
mov word [0x2f8ab4114], ax
mov eax, dword [rbp - 0x28]
add eax, 1
mov eax, eax
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rax, rdx
mov edx, dword [rbp - 0x28]
mov rcx, rdx
shl rcx, 4
mov rdx, qword [rbp - 0x80]
add rdx, rcx
mov rax, qword [rax + 8]
mov qword [rdx + 8], rax
mov eax, dword [0x2f8ab4110]
xor ax, 0x5737
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
or ax, 0x7433
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
or ax, 0xba09
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
add ax, 0x7b73
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
and ax, 0x8073
mov word [0x2f8ab4114], ax
mov eax, dword [0x2f8ab4110]
or eax, 0xd2b1987c
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
sub ax, 0x333e
mov word [0x2f8ab4114], ax
mov eax, dword [rbp - 0x28]
add eax, 1
mov eax, eax
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rdx, rax
mov eax, dword [rbp - 0xb0]
mov dword [rdx], eax
mov ecx, 0x5b
mov rax, qword [sym.imp.USER32.dll_IsWindow]
call rax
mov eax, dword [0x2f8ab4110]
sub eax, 0x516f436b
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
imul eax, eax, 0x57f0e096
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0x557c475c
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
imul ax, ax, 0xd0b5
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x46deadf7
mov dword [0x2f8ab4110], eax
mov eax, dword [0x2f8ab4110]
xor eax, 0xdb3be03b
mov dword [0x2f8ab4110], eax
mov eax, dword [rbp - 0x28]
add eax, 1
mov eax, eax
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rdx, rax
mov eax, dword [rbp - 0xac]
mov dword [rdx + 4], eax
movzx eax, word [0x2f8ab4114]
sub ax, 0x530f
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
xor ax, 0xa156
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x56a07354
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
imul ax, ax, 0x6f3
mov word [0x2f8ab4114], ax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
add eax, 0x6593fe7c
mov dword [0x2f8ab4110], eax
movzx eax, word [0x2f8ab4114]
movzx eax, ax
and eax, 0x2eb334b
mov dword [0x2f8ab4110], eax
mov eax, dword [rbp - 0x28]
add eax, 1
mov eax, eax
shl rax, 4
mov rdx, rax
mov rax, qword [rbp - 0x80]
add rdx, rax
mov rax, qword [rbp - 0xa8]
mov qword [rdx + 8], rax
add dword [rbp - 0x28], 1
mov rax, qword [0x2f8ab53f0]
mov eax, dword [rax]
sub eax, dword [rbp - 0x24]
sub eax, 1
cmp dword [rbp - 0x28], eax
jb 0x2f8aac195
add dword [rbp - 0x24], 1
mov rax, qword [0x2f8ab53f0]
mov eax, dword [rax]
sub eax, 1
cmp dword [rbp - 0x24], eax
jb 0x2f8aac0d9
mov eax, 1
add rsp, 0xd8
pop rbx
pop rbp
ret