Function at 0x10003c748
Capabilities:
Accept command line arguments
Check mutex and terminate process on windows
Check mutex on windows
Create thread
Print debug messages
Register raw input devices
Set current directory
Terminate process

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x720
mov qword [rsp + 0xa8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x1000aa140]
xor rax, rsp
mov qword [rsp + 0x710], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call fcn.1000644cc
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x20]
mov rdi, rax
xor eax, eax
or r14, 0xffffffffffffffff
mov rcx, r14
repne scasw ax, word [rdi]
not rcx
lea ebp, [rax + 1]
sub rcx, rbp
lea edi, [rcx + 0x18]
lea r12d, [rax + 2]
mov rax, r12
mul rdi
cmovo rax, r14
mov rcx, rax
call fcn.10009d6a4
mov rsi, rax
xor r13d, r13d
cmp rax, r13
jne 0x10003c7e9
xor al, al
jmp 0x10003d7b4
lea r8, [0x100019c10]
mov rdx, rdi
mov rcx, rax
call sub.msvcrt.dll_wcscpy_s
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov r8, rax
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_wcscat_s
lea r8, [0x100019c30]
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_wcscat_s
mov r8, rsi
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rdi, rax
mov rcx, rsi
call sub.msvcrt.dll_free
cmp rdi, r13
jne 0x10003c84a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call sub.KERNEL32.dll_GetLastError
cmp eax, 0xb7
jne 0x10003c8bd
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov rcx, rax
call fcn.100068844
mov rdi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
mov rsi, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp rsi, r13
je 0x10003c8b4
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsIconic]
cmp eax, r13d
je 0x10003c8a2
mov edx, 0xa
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_BringWindowToTop]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [rsp + 0x60], r13d
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r8, rax
mov r15d, 5
mov eax, dword [rsp + 0x60]
cmp eax, ebp
jle 0x10003c927
add r8, 8
dec eax
mov r9d, eax
mov al, byte [0x1000b5ff5]
xor edx, edx
lea rdi, [0x100019c48]
mov rsi, qword [r8]
mov rcx, r15
repe cmpsw word [rsi], word [rdi]
je 0x10003c90f
sbb edx, edx
sbb edx, r14d
movzx eax, al
cmp edx, r13d
cmove eax, ebp
mov byte [0x1000b5ff5], al
add r8, 8
sub r9, rbp
jne 0x10003c8f6
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov sil, r13b
mov qword [rsp + 0x48], r13
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [0x10001a3b0]
mov r8d, ebp
xor edx, edx
lea rcx, [0x10001a390]
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, r13d
jl 0x10003ca79
mov edi, 0x104
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x100]
xor r8d, r8d
xor edx, edx
lea rcx, [0x100019a30]
call sub.SHELL32.dll_SHGetFolderPathEx
cmp eax, r13d
jl 0x10003ca79
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0xa8]
mov r11, rax
mov rdx, rdi
lea rcx, [rsp + 0x100]
cmp word [rcx], r13w
je 0x10003c9c7
add rcx, r12
sub rdx, rbp
jne 0x10003c9b9
cmp rdx, r13
je 0x10003ca79
mov rcx, rdi
sub rcx, rdx
sub rdi, rcx
lea rax, [rsp + rcx*2 + 0x100]
mov r8d, r13d
je 0x10003ca17
lea rdx, [rdi + rcx + 0x7ffffefb]
sub r11, rax
cmp rdx, r13
je 0x10003ca12
movzx ecx, word [r11 + rax]
cmp cx, r13w
je 0x10003ca12
mov word [rax], cx
add rax, r12
sub rdi, rbp
sub rdx, rbp
cmp rdi, r13
jne 0x10003c9f1
cmp rdi, r13
jne 0x10003ca20
sub rax, r12
mov r8d, 0x8007007a
mov word [rax], r13w
cmp r8d, r13d
jl 0x10003ca79
lea rcx, [rsp + 0x100]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [0x1000b5f90], rax
cmp rax, r13
je 0x10003ca79
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_VariantInit]
cmp eax, r13d
je 0x10003ca79
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x40]
mov rdx, qword [0x1000b5f90]
call qword [rax + 0x30]
cmp eax, r13d
jl 0x10003ca79
movzx esi, sil
cmp dword [rsp + 0x40], r13d
cmovne esi, ebp
mov rcx, qword [rsp + 0x48]
cmp rcx, r13
je 0x10003ca89
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp sil, r13b
jne 0x10003ca97
mov ecx, r15d
call fcn.10003bba0
int3
mov ecx, 8
call fcn.10009d604
cmp rax, r13
je 0x10003cab2
mov qword [rax], r13
mov qword [0x1000b5fc8], rax
jmp 0x10003cab9
mov qword [0x1000b5fc8], r13
lea rcx, [0x10003c700]
call qword [sym.imp.msvcrt.dll_int____cdecl___unsigned_long_long_unsigned___int64_____cdecl__set_new_handler_int____cdecl___unsigned_long_long_unsigned___int64___]
mov ecx, ebp
call qword [sym.imp.msvcrt.dll_int___cdecl__set_new_mode_int_]
mov qword [0x1000b5fb8], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov rcx, rax
call fcn.100068844
mov qword [0x1000b5f88], rax
mov r8d, 0x200
lea rdx, [rsp + 0x310]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [rax - 1]
movsxd rdx, ecx
cmp ecx, eax
ja 0x10003cb35
lea rdx, [rsp + rdx*2 + 0x310]
cmp word [rdx], 0x2f
je 0x10003cb2c
cmp word [rdx], 0x5c
je 0x10003cb2c
dec ecx
sub rdx, r12
cmp ecx, eax
jbe 0x10003cb15
jmp 0x10003cb35
mov word [rsp + rcx*2 + 0x310], r13w
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rdx, [0x100019c58]
lea rcx, [0x1000b6850]
call fcn.10006a400
mov esi, 0x18
mov rcx, rsi
call fcn.10009d604
lea r14d, [rsi - 8]
cmp rax, r13
je 0x10003cb7d
mov dword [rax], r13d
mov dword [rax + 4], r13d
mov dword [rax + 8], r14d
mov qword [rax + 0x10], r13
jmp 0x10003cb80
mov rax, r13
mov qword [0x1000b5ff8], rax
mov rcx, rax
call fcn.100063638
lea r9, [0x100019c70]
lea r15, [0x100019af0]
mov r8, r15
mov edx, 0x469
mov ecx, r14d
call fcn.100061ef8
mov rdx, qword [0x1000b5f88]
mov qword [rsp + 0x20], rdx
lea r9, [0x100019ca0]
mov r8, r15
mov edx, 0x472
mov ecx, r14d
call fcn.100061ef8
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rdx, [rsp + 0x310]
mov qword [rsp + 0x20], rdx
lea r9, [0x100019ce0]
mov r8, r15
mov edx, 0x476
mov ecx, r14d
call fcn.100061ef8
lea r9, [0x100019d18]
mov r8, r15
mov edx, 0x47a
mov ecx, r14d
call fcn.100061ef8
mov dword [rsp + 0x80], ebp
mov qword [rsp + 0x88], r13
mov dword [rsp + 0x94], r13d
mov dword [rsp + 0x90], ebp
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x80]
lea rcx, [0x1000b5f80]
call sub.gdiplus.dll_GdiplusStartup
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.10004af28
mov ecx, 0x2868
call fcn.10009d604
mov qword [rsp + 0x48], rax
cmp rax, r13
je 0x10003cc82
xor edx, edx
mov rcx, rax
call fcn.100061340
jmp 0x10003cc85
mov rax, r13
mov qword [0x1000b5fd0], rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.100060370
nop
lea r9, [0x100019d40]
mov r8b, byte [0x1000b60f4]
lea rdx, [rsp + 0x48]
mov rcx, qword [0x1000b5fd0]
call fcn.100061568
cmp al, r13b
sete dil
mov rcx, qword [rsp + 0x58]
call sub.msvcrt.dll_free
cmp dil, r13b
je 0x10003cd54
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov edx, 0x37c
lea rcx, [rsp + 0xe0]
call fcn.100060490
nop
mov rdi, qword [rax + 0x10]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.1000607cc
nop
mov rcx, qword [rsp + 0xf0]
call sub.msvcrt.dll_free
mov byte [rsp + 0x30], bpl
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xfffe
mov r8d, ebp
xor edx, edx
mov ecx, 0x385
call fcn.100064784
xor ecx, ecx
call fcn.10003bba0
nop
call fcn.100047404
cmp al, r13b
jne 0x10003cd7d
lea r9, [0x100019d50]
mov r8, r15
mov edx, 0x4ae
mov ecx, r14d
call fcn.100061ef8
xor ecx, ecx
call fcn.10003bba0
int3
mov edi, 0xc
cmp byte [0x1000b5ff5], r13b
je 0x10003ce1d
lea r9, [0x100019d80]
mov r8, r15
mov edx, 0x4bb
mov ecx, r14d
call fcn.100061ef8
xor ecx, ecx
call fcn.100064638
cmp byte [0x1000b5ff5], r13b
je 0x10003ce1d
lea r9, [0x100019db0]
mov r8, r15
mov edx, 0x4c4
mov ecx, r14d
call fcn.100061ef8
mov word [rsp + 0x48], di
mov word [rsp + 0x4a], bp
mov dword [rsp + 0x4c], r13d
mov rax, qword [0x1000b5f98]
mov qword [rsp + 0x50], rax
mov r8d, r14d
mov edx, ebp
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_RegisterRawInputDevices]
cmp eax, r13d
jne 0x10003ce1d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea r9, [0x100019e10]
mov r8, r15
mov edx, 0x4cf
mov ecx, r14d
call fcn.100061ef8
lea r9, [0x100019e50]
mov r8, r15
mov edx, 0x4d5
mov ecx, r14d
call fcn.100061ef8
lea rdx, [0x10003b41c]
mov ecx, r12d
call fcn.10004f344
lea rdx, [0x10003b484]
mov ecx, 4
call fcn.10004f344
lea rdx, [0x10003b4bc]
mov ecx, 5
call fcn.10004f344
lea rdx, [0x10003b450]
mov ecx, 3
call fcn.10004f344
lea rdx, [0x10003b4f0]
mov ecx, 6
call fcn.10004f344
lea rdx, [0x10003b524]
mov ecx, 7
call fcn.10004f344
lea rdx, [0x10003b584]
mov ecx, 8
call fcn.10004f344
lea rdx, [0x10003b5bc]
mov ecx, 9
call fcn.10004f344
lea rdx, [0x10003b5f4]
mov ecx, 0xa
call fcn.10004f344
lea rdx, [0x10003b62c]
mov ecx, 0xb
call fcn.10004f344
lea rdx, [0x10003b660]
mov ecx, ebp
call fcn.10004f344
lea rdx, [0x10003b73c]
mov ecx, 0xd
call fcn.10004f344
lea rdx, [0x10003b6a8]
mov ecx, edi
call fcn.10004f344
lea rdx, [0x10003b770]
mov ecx, 0xe
call fcn.10004f344
lea rdx, [0x10003b7a4]
mov ecx, 0xf
call fcn.10004f344
lea rdx, [0x10003b7d8]
mov ecx, r14d
call fcn.10004f344
lea rdx, [0x10003b814]
mov ecx, 0x11
call fcn.10004f344
lea rdx, [0x10003b848]
mov ecx, 0x12
call fcn.10004f344
lea rdx, [0x10003b87c]
mov ecx, 0x13
call fcn.10004f344
lea rdx, [0x10003b8b0]
mov ecx, 0x14
call fcn.10004f344
lea rdx, [0x10003b8e4]
mov ecx, 0x15
call fcn.10004f344
lea rdx, [0x10003b918]
mov ecx, 0x16
call fcn.10004f344
lea rdx, [0x10003b380]
mov ecx, 0x17
call fcn.10004f344
lea rdx, [0x10003b3b4]
mov ecx, esi
call fcn.10004f344
lea rdx, [0x10003b94c]
mov ecx, 0x19
call fcn.10004f344
lea rdx, [0x10003b980]
mov ecx, 0x1a
call fcn.10004f344
lea rdx, [0x10003b9b4]
mov ecx, 0x1b
call fcn.10004f344
lea rdx, [0x10003b9e8]
mov ecx, 0x1c
call fcn.10004f344
lea rdx, [0x10003ba1c]
mov ecx, 0x1d
call fcn.10004f344
lea rdx, [0x10003ba54]
mov ecx, 0x1e
call fcn.10004f344
lea rdx, [0x10003bac4]
mov ecx, 0x1f
call fcn.10004f344
lea rdx, [0x10003bafc]
mov edi, 0x20
mov ecx, edi
call fcn.10004f344
lea rdx, [0x10003bb34]
lea ecx, [rdi + 1]
call fcn.10004f344
lea rdx, [0x10003bb6c]
lea ecx, [rdi + 2]
call fcn.10004f344
lea rdx, [0x10003b3e8]
lea ecx, [rdi + 5]
call fcn.10004f344
lea rdx, [0x10003ba8c]
lea ecx, [rdi + 3]
call fcn.10004f344
lea r9, [0x100019e80]
mov r8, r15
mov edx, 0x500
mov ecx, r14d
call fcn.100061ef8
lea rdx, [0x10004fa00]
lea rcx, [0x10001ee50]
call fcn.100042e4c
lea rdx, [0x1000512b4]
lea rcx, [0x10001f088]
call fcn.100042e4c
lea rdx, [0x100041e74]
lea rcx, [0x100016de8]
call fcn.100042e4c
mov r8, rsi
xor edx, edx
lea rcx, [0x1000b3840]
call sub.msvcrt.dll_memset
mov byte [0x1000b5ff1], bpl
lea rdx, [0x10004b798]
lea rcx, [0x10001d400]
call fcn.100042e4c
lea rdx, [0x10004cc00]
lea rcx, [0x10001d760]
call fcn.100042e4c
lea rdx, [0x1000512f4]
lea rcx, [0x10001f120]
call fcn.100042e4c
lea rdx, [0x1000514a4]
lea rcx, [0x10001f1a0]
call fcn.100042e4c
lea r9, [0x100019eb0]
mov r8, r15
mov edx, 0x50b
mov ecx, r14d
call fcn.100061ef8
call fcn.10004da40
cmp al, r13b
jne 0x10003d179
lea r9, [0x100019ef0]
mov r8, r15
mov edx, 0x50e
mov ecx, r14d
call fcn.100061ef8
xor ecx, ecx
call fcn.10003bba0
int3
lea rax, [fcn.10003c424]
mov qword [0x1000b6438], rax
lea r9, [0x100019f38]
mov r8, r15
mov edx, 0x518
mov ecx, r14d
call fcn.100061ef8
mov ecx, 0x80
call fcn.10009d604
cmp rax, r13
je 0x10003d1b7
mov rcx, rax
call fcn.10004e260
jmp 0x10003d1ba
mov rax, r13
mov qword [0x1000b60b8], rax
mov rcx, rax
call fcn.100063638
mov rcx, qword [0x1000b60b8]
call fcn.10004e320
cmp al, r13b
jne 0x10003d1f9
lea r9, [0x100019f80]
mov r8, r15
mov edx, 0x51c
mov ecx, r14d
call fcn.100061ef8
xor ecx, ecx
call fcn.10003bba0
int3
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
mov rax, qword [0x1000b5fa0]
mov qword [rsp + 0x68], rax
mov byte [rsp + 0x7c], r13b
mov dword [rsp + 0x78], edi
mov byte [rsp + 0x7d], r13b
mov rcx, qword [0x1000b5fb8]
mov rax, qword [rcx]
lea r8, [rsp + 0x74]
lea rdx, [rsp + 0x70]
call qword [rax + 0x18]
cmp byte [0x1000b5d3c], r13b
je 0x10003d258
mov eax, dword [rsp + 0x70]
add eax, eax
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x74]
add eax, eax
mov dword [rsp + 0x74], eax
lea r9, [0x100019fd0]
mov r8, r15
mov edx, 0x533
mov ecx, r14d
call fcn.100061ef8
mov ecx, 0xd8
call fcn.10009d604
cmp rax, r13
je 0x10003d288
mov rcx, rax
call fcn.100040f10
jmp 0x10003d28b
mov rax, r13
mov qword [0x1000b5fe8], rax
mov rcx, rax
call fcn.100063638
lea rdx, [rsp + 0x68]
mov rcx, qword [0x1000b5fe8]
call fcn.10003ed40
cmp al, r13b
jne 0x10003d2cf
lea r9, [0x10001a010]
mov r8, r15
mov edx, 0x537
mov ecx, r14d
call fcn.100061ef8
xor ecx, ecx
call fcn.10003bba0
int3
lea r9, [0x10001a058]
mov r8, r15
mov edx, 0x53e
mov ecx, r14d
call fcn.100061ef8
mov ecx, 0x38
call fcn.10009d604
cmp rax, r13
je 0x10003d320
mov dword [rax + 0x20], r13d
mov dword [rax + 0x24], r13d
mov dword [rax + 0x28], r14d
mov qword [rax + 0x30], r13
mov qword [rax + 0x10], r13
mov dword [rax + 0x1c], r13d
mov dword [rax + 0x18], r12d
mov ecx, 0x64
mov dword [rax + 8], ecx
mov dword [rax], ecx
mov dword [rax + 4], ecx
jmp 0x10003d323
mov rax, r13
mov qword [0x1000b5fe0], rax
mov rcx, rax
call fcn.100063638
mov rcx, qword [0x1000b5fe0]
call fcn.10003e134
cmp al, r13b
jne 0x10003d362
lea r9, [0x10001a080]
mov r8, r15
mov edx, 0x542
mov ecx, r14d
call fcn.100061ef8
xor ecx, ecx
call fcn.10003bba0
int3
lea r9, [0x10001a0c0]
mov r8, r15
mov edx, 0x54a
mov ecx, r14d
call fcn.100061ef8
mov ecx, 0x90
call fcn.10009d604
cmp rax, r13
je 0x10003d3a6
xor r9d, r9d
mov r8b, byte [0x1000b5ff5]
mov rdx, qword [0x1000b5f98]
mov rcx, rax
call fcn.10006b720
mov rdi, rax
jmp 0x10003d3a9
mov rdi, r13
mov qword [0x1000b5fa8], rdi
cmp qword [rdi + 8], r13
je 0x10003d3be
mov rcx, rdi
call fcn.10006ae00
mov byte [rdi + 0x14], bpl
lea rax, [rdi + 0x10]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9, rdi
lea r8, [0x10006ad98]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi + 8], rax
lea r9, [0x10001a108]
mov r8, r15
mov edx, 0x551
mov ecx, r14d
call fcn.100061ef8
mov ecx, 0x50
call fcn.10009d604
mov rdi, rax
cmp rax, r13
je 0x10003d483
mov esi, 0x40
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi], rax
mov r12d, 0x200
mov rcx, r12
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 8], rax
mov dword [rdi + 0x10], r13d
mov dword [rdi + 0x14], r14d
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x18], rax
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x20], rax
mov dword [rdi + 0x28], r13d
mov dword [rdi + 0x2c], r14d
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x30], rax
mov rcx, r12
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x38], rax
mov dword [rdi + 0x40], r13d
mov dword [rdi + 0x44], r14d
jmp 0x10003d486
mov rdi, r13
mov qword [0x1000b60b0], rdi
mov rcx, rdi
call fcn.100063638
lea r9, [0x10001a130]
mov r8, r15
mov edx, 0x55c
mov ecx, r14d
call fcn.100061ef8
lea rdx, [0x10001a150]
mov rcx, qword [0x1000b5ff8]
call fcn.100043900
cmp rax, r13
je 0x10003d5ed
lea r8, [rsp + 0x40]
lea rdx, [0x10001a170]
mov rcx, rax
call fcn.100069c5c
mov r12, rax
mov ecx, dword [rsp + 0x40]
mov dword [rsp + 0x20], ecx
lea r9, [0x10001a180]
mov r8, r15
mov edx, 0x567
mov ecx, r14d
call fcn.100061ef8
mov ebp, r13d
cmp dword [rsp + 0x40], r13d
jbe 0x10003d5de
mov rsi, r12
mov rcx, qword [rsi]
call fcn.10006a338
mov rdi, rax
mov qword [rsp + 0x20], rax
lea r9, [0x10001a1a0]
mov r8, r15
mov edx, 0x56c
mov ecx, r14d
call fcn.100061ef8
mov rcx, rdi
call qword [sym.imp.GDI32.dll_AddFontResourceW]
cmp eax, r13d
jne 0x10003d56a
mov qword [rsp + 0x20], rdi
lea r9, [0x10001a1c8]
mov r8, r15
mov edx, 0x584
mov ecx, r14d
call fcn.100061ef8
mov rcx, rdi
call sub.msvcrt.dll_free
jmp 0x10003d5ce
mov eax, dword [0x1000b1e18]
inc eax
mov dword [0x1000b1e18], eax
mov ecx, dword [0x1000b1e1c]
cmp eax, ecx
jbe 0x10003d5c1
add ecx, dword [0x1000b1e20]
mov dword [0x1000b1e1c], ecx
mov edx, ecx
shl rdx, 3
mov rcx, qword [0x1000b1e28]
call qword [sym.imp.msvcrt.dll_realloc]
mov rdx, rax
cmp rax, r13
jne 0x10003d5b2
xor ecx, ecx
call fcn.100063638
jmp 0x10003d5ce
mov qword [0x1000b1e28], rax
mov eax, dword [0x1000b1e18]
jmp 0x10003d5c8
mov rdx, qword [0x1000b1e28]
dec eax
mov qword [rdx + rax*8], rdi
inc ebp
add rsi, 8
cmp ebp, dword [rsp + 0x40]
jb 0x10003d50f
mov rcx, r12
call sub.msvcrt.dll_free
mov ebp, 1
jmp 0x10003d604
lea r9, [0x10001a1f8]
mov r8, r15
mov edx, 0x592
mov ecx, r14d
call fcn.100061ef8
lea r9, [0x10001a220]
mov r8, r15
mov edx, 0x597
mov ecx, r14d
call fcn.100061ef8
xor edx, edx
mov rcx, qword [0x1000b5f98]
call sub.WTSAPI32.dll_WTSRegisterSessionNotification
lea rdx, [0x10001a270]
mov rcx, qword [0x1000b5ff8]
call fcn.100043900
mov rdi, rax
mov byte [0x1000b5fb3], bpl
lea r9, [0x10001a290]
mov r8, r15
mov edx, 0x59f
mov ecx, r14d
call fcn.100061ef8
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x60]
cmp al, r13b
jne 0x10003d68a
lea r9, [0x10001a300]
mov r8, r15
mov edx, 0x5a2
mov ecx, r14d
call fcn.100061ef8
xor ecx, ecx
call fcn.10003bba0
int3
mov byte [0x1000b5fb3], r13b
cmp rdi, r13
je 0x10003d6b3
or r8d, 0xffffffff
lea rdx, [0x10001a348]
mov rcx, rdi
call fcn.100069f80
cmp eax, r13d
setg byte [0x1000b5fb1]
call fcn.10003c238
mov qword [0x1000b5fc0], r13
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
cmp rax, r13
je 0x10003d6f4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
mov rdi, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x1000b5fc0], rax
mov byte [0x1000ab373], r13b
lea rcx, [0x1000b5f80]
call qword [rsp + 0x98]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, r13d
je 0x10003d788
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_GetMessageW]
cmp eax, r13d
je 0x10003d792
mov rdx, qword [0x1000b5fc0]
cmp rdx, r13
je 0x10003d76a
lea r8, [rsp + 0xb0]
mov rcx, qword [0x1000b5f98]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
cmp eax, r13d
jne 0x10003d709
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x10003d709
call fcn.10003d868
jmp 0x10003d709
mov rcx, qword [0x1000b5f80]
call qword [rsp + 0xa0]
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x90]
xor ecx, ecx
call fcn.10003bba0
int3
mov rcx, qword [rsp + 0x710]
xor rcx, rsp
call fcn.10009dad0
lea r11, [rsp + 0x720]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret