Function at 0x140066e40
Capabilities:
Get graphical window text
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
xor r14d, r14d
mov edi, r14d
mov dword [rbp + 0x210], r14d
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_GetWindow]
mov rbx, rax
mov qword [rbp + 0x218], rax
test rax, rax
je 0x140067b80
mov esi, reloc.WS2_32.dll_ntohs
nop dword [rax + rax]
mov r8d, 0x100
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowTextA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
lea rax, [rbp + 0xd0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140066ed6
lea rdx, [rbp + 0xd0]
lea rcx, [rsp + 0x30]
call fcn.14004e700
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], 3
mov qword [rbp + 0xa8], rsi
mov eax, dword [0x140143790]
mov word [rbp + 0x90], ax
movzx eax, byte [0x140143792]
mov byte [rbp + 0x92], al
mov byte [rbp + 0x93], 0
or edi, 1
lea r9, [rbp + 0x90]
lea rcx, [rsp + 0x30]
mov r13, qword [rsp + 0x30]
mov r15, qword [rsp + 0x48]
cmp r15, 0xf
cmova rcx, r13
mov qword [rsp + 0x20], 3
mov r12, qword [rsp + 0x40]
mov rdx, r12
call fcn.140056010
cmp rax, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], 6
mov qword [rbp + 0x68], rsi
mov eax, dword [str.x64dbg]
mov dword [rbp + 0x50], eax
movzx eax, word [0x140143798]
mov word [rbp + 0x54], ax
mov byte [rbp + 0x56], 0
or edi, 2
lea rax, [rbp + 0x50]
lea rsi, [rsp + 0x30]
cmp r15, 0xf
cmova rsi, r13
cmp r12, 6
jb 0x140067022
lea r14, [rsi + r12]
movsx r15d, byte [rax]
lea r8, [r14 - 5]
sub r8, rsi
mov edx, r15d
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140067022
nop word [rax + rax]
mov r8d, 6
lea rdx, [rbp + 0x50]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140067015
inc rbx
lea r8, [r14 - 5]
sub r8, rbx
mov edx, r15d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140066fe0
jmp 0x140067022
sub rbx, rsi
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], 6
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov eax, dword [str.x32dbg]
mov dword [rbp + 0x30], eax
movzx eax, word [0x1401437a0]
mov word [rbp + 0x34], ax
mov byte [rbp + 0x36], 0
or edi, 4
lea rax, [rbp + 0x30]
lea r15, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
cmp r12, 6
jb 0x1400670d2
lea rsi, [r15 + r12]
movsx r14d, byte [rax]
lea r8, [rsi - 5]
sub r8, r15
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400670d2
nop
mov r8d, 6
lea rdx, [rbp + 0x30]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400670c5
inc rbx
lea r8, [rsi - 5]
sub r8, rbx
mov edx, r14d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140067090
jmp 0x1400670d2
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], 7
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
mov rax, qword [str.OllyDbg]
mov dword [rbp - 0x10], eax
movzx eax, word [0x1401437ac]
mov word [rbp - 0xc], ax
movzx eax, byte [0x1401437ae]
mov byte [rbp - 0xa], al
mov byte [rbp - 9], 0
or edi, 8
lea rax, [rbp - 0x10]
lea r15, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
cmp r12, 7
jb 0x140067192
lea rsi, [r15 + r12]
movsx r14d, byte [rax]
lea r8, [rsi - 6]
sub r8, r15
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140067192
nop word [rax + rax]
mov r8d, 7
lea rdx, [rbp - 0x10]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140067185
inc rbx
lea r8, [rsi - 6]
sub r8, rbx
mov edx, r14d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140067150
jmp 0x140067192
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.System_Informer]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x1401437b8]
mov dword [rsp + 0x78], eax
movzx eax, word [0x1401437bc]
mov word [rsp + 0x7c], ax
movzx eax, byte [0x1401437be]
mov byte [rsp + 0x7e], al
mov byte [rsp + 0x7f], 0
or edi, 0x10
lea rax, [rsp + 0x70]
lea r15, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
cmp r12, 0xf
jb 0x140067263
lea rsi, [r12 + r15]
movsx r14d, byte [rax]
lea r8, [rsi - 0xe]
sub r8, r15
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140067263
nop dword [rax]
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, [rsp + 0x70]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140067256
inc rbx
lea r8, [rsi - 0xe]
sub r8, rbx
mov edx, r14d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140067220
jmp 0x140067263
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], select
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.Process_Hacker]
movsd qword [rbp - 0x30], xmm0
mov eax, dword [0x1401437c8]
mov dword [rbp - 0x28], eax
movzx eax, word [0x1401437cc]
mov word [rbp - 0x24], ax
mov byte [rbp - 0x22], 0
or edi, 0x20
lea rax, [rbp - 0x30]
lea r15, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
cmp r12, 0xe
jb 0x140067322
lea rsi, [r12 + r15]
movsx r14d, byte [rax]
lea r8, [rsi - 0xd]
sub r8, r15
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140067322
nop dword [rax]
mov r8d, select
lea rdx, [rbp - 0x30]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140067315
inc rbx
lea r8, [rsi - 0xd]
sub r8, rbx
mov edx, r14d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400672e0
jmp 0x140067322
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], select
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.ReClass.NET]
movsd qword [rbp - 0x50], xmm0
movzx eax, word [0x1401437d8]
mov word [rbp - 0x48], ax
movzx eax, byte [0x1401437da]
mov byte [rbp - 0x46], al
mov byte [rbp - 0x45], 0
or edi, 0x40
lea rax, [rbp - 0x50]
lea r15, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
cmp r12, 0xb
jb 0x1400673e2
lea rsi, [r15 + r12]
movsx r14d, byte [rax]
lea r8, [rsi - 0xa]
sub r8, r15
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400673e2
nop dword [rax]
mov r8d, ntohs
lea rdx, [rbp - 0x50]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400673d5
inc rbx
lea r8, [rsi - 0xa]
sub r8, rbx
mov edx, r14d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400673a0
jmp 0x1400673e2
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], 5
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov eax, dword [str.ILSpy]
mov dword [rbp + 0x70], eax
movzx eax, byte [0x1401437e0]
mov byte [rbp + 0x74], al
mov byte [rbp + 0x75], 0
bts edi, 7
mov dword [rbp + 0x210], edi
lea r15, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
cmp r12, 5
jb 0x1400674a1
lea rsi, [r15 + r12]
lea r12, [rbp + 0x70]
movsx r14d, byte [r12]
lea r8, [rsi - 4]
sub r8, r15
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400674a1
nop dword [rax]
mov r8d, 5
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140067494
inc rbx
lea r8, [rsi - 4]
sub r8, rbx
mov edx, r14d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140067460
jmp 0x1400674a1
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400c3474
mov rbx, rax
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xc0], reloc.WS2_32.dll_recv
mov qword [rbp + 0xc8], Ordinal_41
movups xmm0, xmmword [str.IDA:_Quick_start]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
bts edi, 8
lea r15, [rsp + 0x30]
mov r13, qword [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
mov r12, qword [rsp + 0x40]
cmp r12, 0x10
jb 0x140067560
lea rsi, [r15 + r12]
movsx r14d, byte [rax]
lea r8, [rsi - 0xf]
sub r8, r15
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140067560
mov rcx, qword [rax]
cmp rcx, qword [rbx]
jne 0x140067537
mov rcx, qword [rax + 8]
cmp rcx, qword [rbx + 8]
je 0x140067553
inc rax
lea r8, [rsi - 0xf]
sub r8, rax
mov edx, r14d
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140067525
jmp 0x140067560
sub rax, r15
cmp rax, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], 7
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov rax, qword [str.Cracker]
mov dword [rbp - 0x70], eax
movzx eax, word [0x140143804]
mov word [rbp - 0x6c], ax
movzx eax, byte [0x140143806]
mov byte [rbp - 0x6a], al
mov byte [rbp - 0x69], 0
bts edi, 9
lea rax, [rbp - 0x70]
lea r15, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
cmp r12, 7
jb 0x140067622
lea rsi, [r15 + r12]
movsx r14d, byte [rax]
lea r8, [rsi - 6]
sub r8, r15
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140067622
nop dword [rax]
mov r8d, 7
lea rdx, [rbp - 0x70]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140067615
inc rbx
lea r8, [rsi - 6]
sub r8, rbx
mov edx, r14d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400675e0
jmp 0x140067622
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], 6
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov eax, dword [str.Engine]
mov dword [rbp + 0x10], eax
movzx eax, word [0x14014380c]
mov word [rbp + 0x14], ax
mov byte [rbp + 0x16], 0
bts edi, 0xa
lea rax, [rbp + 0x10]
lea r15, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
cmp r12, 6
jb 0x1400676d2
lea rsi, [r12 + r15]
movsx r14d, byte [rax]
lea r8, [rsi - 5]
sub r8, r15
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400676d2
mov r8d, 6
lea rdx, [rbp + 0x10]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400676c5
inc rbx
lea r8, [rsi - 5]
sub r8, rbx
mov edx, r14d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140067690
jmp 0x1400676d2
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xor eax, eax
mov word [rsp + 0x5e], ax
mov eax, dword [0x140143818]
mov dword [rsp + 0x58], eax
mov esi, reloc.WS2_32.dll_listen
movsd xmm0, qword [str.Memory_Viewer]
movzx eax, byte [0x14014381c]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
movsd qword [rsp + 0x50], xmm0
mov byte [rsp + 0x5c], al
mov byte [rsp + 0x5d], 0
bts edi, 0xb
lea r14, [rsp + 0x50]
lea r15, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r15, r13
cmp r12, rsi
jb 0x14006779e
movsx r13d, byte [r14]
lea r8, [r12 - 0xc]
add r8, r15
sub r8, r15
mov edx, r13d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14006779e
nop dword [rax]
nop word [rax + rax]
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140067795
inc rbx
lea r8, [r12 - 0xc]
add r8, r15
sub r8, rbx
mov edx, r13d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140067760
jmp 0x1400677a4
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x1400677a2
xor bl, bl
jmp 0x1400677a4
mov bl, 1
bt edi, 0xb
jae 0x1400677ec
btr edi, 0xb
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400677ec
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400677e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b23
call fcn.1400c36f8
nop
bt edi, 0xa
jae 0x140067832
btr edi, 0xa
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x140067832
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006782c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b2a
call fcn.1400c36f8
nop
bt edi, 9
jae 0x140067878
btr edi, 9
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140067878
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067872
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b31
call fcn.1400c36f8
nop
bt edi, 8
jae 0x1400678c4
btr edi, 8
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x1400678c4
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400678be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b38
call fcn.1400c36f8
nop
test dil, dil
jns 0x14006790c
btr edi, 7
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x14006790c
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067906
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b3f
call fcn.1400c36f8
nop
test dil, 0x40
je 0x140067951
and edi, 0xffffffbf
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140067951
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006794b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b46
call fcn.1400c36f8
nop
test dil, 0x20
je 0x140067996
and edi, 0xffffffdf
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140067996
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067990
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b4d
call fcn.1400c36f8
nop
test dil, 0x10
je 0x1400679dc
and edi, 0xffffffef
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400679dc
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400679d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b54
call fcn.1400c36f8
nop
test dil, 8
je 0x140067a21
and edi, 0xfffffff7
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140067a21
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067a1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b5b
call fcn.1400c36f8
nop
test dil, 4
je 0x140067a66
and edi, 0xfffffffb
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140067a66
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067a60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b62
call fcn.1400c36f8
nop
test dil, 2
je 0x140067aab
and edi, 0xfffffffd
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140067aab
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067aa5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b69
call fcn.1400c36f8
nop
mov esi, reloc.WS2_32.dll_ntohs
test dil, 1
je 0x140067ab9
and edi, 0xfffffffe
test bl, bl
jne 0x140067b77
mov edx, 2
mov rcx, qword [rbp + 0x218]
call qword [sym.imp.USER32.dll_GetWindow]
mov rbx, rax
mov qword [rbp + 0x218], rax
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140067b16
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067b11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067b70
call fcn.1400c36f8
test rbx, rbx
je 0x140067b80
xor r14d, r14d
jmp 0x140066ea0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x320]
add rsp, 0x2d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret