Function at 0x140020520
Capabilities:
Create thread
Enumerate gui resources

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x338]
sub rsp, 0x400
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
xor r12d, r12d
mov rsi, qword [0x140223248]
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021ce7
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp - 0x48], rax
lea rdx, str.bnBtYnNhcg
lea rcx, [rbp - 0x48]
call fcn.140031e00
test al, al
jne 0x14002059f
lea r8d, [r12 + 0xc]
lea rdx, str.bnBtYnNhcg
lea rcx, [rbp - 0x48]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021cf2
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rdx, str.cXJfcHJjYg
lea rcx, [rbp - 0x50]
call fcn.140031e00
test al, al
jne 0x1400205e9
mov r8d, 0xc
lea rdx, str.cXJfcHJjYg
lea rcx, [rbp - 0x50]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021cfd
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp - 0x38], rax
lea rdx, str.c2ddYXBjX3JnbWxdY3BwbXA
lea rcx, [rbp - 0x38]
call fcn.140031e00
test al, al
jne 0x140020633
mov r8d, SafeArrayPutElement
lea rdx, str.c2ddYXBjX3JnbWxdY3BwbXA
lea rcx, [rbp - 0x38]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021d08
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rdx, str.dV9ncmdsZV1kbXBdU0ddYW1sbGNhcmdtbA
lea rcx, [rbp - 0x58]
call fcn.140031e00
test al, al
jne 0x14002067d
mov r8d, 0x24
lea rdx, str.dV9ncmdsZV1kbXBdU0ddYW1sbGNhcmdtbA
lea rcx, [rbp - 0x58]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021d13
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rdx, str.dV9ncmdsZV1kbXBddWdsYm11cV1hcGNfcmdtbA
lea rcx, [rbp - 0x60]
call fcn.140031e00
test al, al
jne 0x1400206c7
mov r8d, 0x28
lea rdx, str.dV9ncmdsZV1kbXBddWdsYm11cV1hcGNfcmdtbA
lea rcx, [rbp - 0x60]
call fcn.140032190
nop
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], r12
mov r8d, SafeArrayPutElement
lea rdx, str.dWdsYm11cV1hcGNfcmNi
lea rcx, [rbp + 0x130]
call fcn.140030750
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021d1e
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.eSBfbm4gOB55IGdsZ3IgOB55IGNsZWdsY0dsZ3IgOB5ycHNje3t7
lea rcx, [rbp - 0x68]
call fcn.140031e00
test al, al
jne 0x140020740
mov r8d, 0x34
lea rdx, str.eSBfbm4gOB55IGdsZ3IgOB55IGNsZWdsY0dsZ3IgOB5ycHNje3t7
lea rcx, [rbp - 0x68]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021d29
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp - 0x40], rax
mov r8, qword [rsi + 0x20]
lea rdx, str.prnt_ws
lea rcx, [rbp - 0x40]
call fcn.140025c80
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021d34
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x40]
call fcn.140031e00
test al, al
jne 0x1400207bd
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x40]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021d3f
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp + 0x358], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rbp + 0x358]
call fcn.140031e00
test al, al
jne 0x14002080d
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rbp + 0x358]
call fcn.140032190
nop
mov r15, qword [rbp - 0x50]
add r15, 0xffffffffffffffe8
mov qword [rbp - 0x70], r15
mov rcx, r15
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0x70], rax
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x188]
call fcn.14004beb0
mov rbx, rax
mov rdi, qword [rbp - 0x48]
add rdi, 0xffffffffffffffe8
mov qword [rbp + 0x340], rdi
mov rcx, rdi
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0x78], rax
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x1b0]
call fcn.14004beb0
nop
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x358]
lea r8, [rbp - 0x40]
mov rdx, rbx
mov rcx, rax
call fcn.140061650
nop
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
mov r14d, 0xffffffff
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400208b5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400208d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x358]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400208f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140020918
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, 0x10
call fcn.1401833e0
mov qword [rax], rsi
lea rcx, [0x1400184e0]
mov qword [rax + 8], rcx
mov qword [rbp + 0x298], rax
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140028150]
xor edx, edx
xor ecx, ecx
call fcn.14019290c
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140021cd8
cmp dword [rbp - 0x18], 0
je 0x140021d4a
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x2b0], xmm0
lea rcx, [rbp + 0x2b0]
call fcn.14015ca68
test eax, eax
jne 0x140021d55
xorps xmm0, xmm0
movaps xmmword [rbp + 0x2c0], xmm0
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14001ce60
test al, al
jne 0x1400209b6
xor edx, edx
mov rcx, rsi
call fcn.1400220e0
jmp 0x140020c07
call fcn.140006db0
call fcn.14015ccbc
mov rbx, rax
call fcn.14015cca0
mov r8, rax
cmp rbx, 0x989680
jne 0x1400209da
imul rbx, r8, 0x64
jmp 0x1400209fe
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
mov rax, r8
cqo
idiv rbx
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rbx, [rax + rcx]
movsd xmm6, qword [0x1401f4968]
movsd xmm7, qword [0x1401f48b8]
nop
mov rax, qword [rsi + 0x68]
cmp qword [rax + 0x60], 0
je 0x140020a82
cmp qword [rax + 0x40], 0
jne 0x140020a82
mov rax, qword [rax + 0x58]
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x140020d11
cmp qword [rax + 0x28], 0
je 0x140020a82
mov rcx, qword [rax + 0x10]
cmp byte [rcx + 0x19], 0
je 0x140020a68
mov rcx, qword [rax + 8]
cmp byte [rcx + 0x19], 0
jne 0x140020a63
nop
cmp rax, qword [rcx + 0x10]
jne 0x140020a63
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], 0
je 0x140020a50
mov rax, rcx
jmp 0x140020a29
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
jne 0x140020a29
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x140020a74
jmp 0x140020a29
cmp byte [rsi + 0x171], 0
jne 0x140020d11
call fcn.14015ccbc
mov rdi, rax
call fcn.14015cca0
mov r8, rax
cmp rdi, 0x989680
jne 0x140020aae
imul rax, r8, 0x64
jmp 0x140020ad1
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
mov rax, r8
cqo
idiv rdi
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
sub rax, rbx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm0, xmm6
comisd xmm0, xmm7
jae 0x140020b8f
mov rdi, qword [rsi + 0x68]
cmp qword [rdi + 0x40], 0
je 0x140020b73
cmp dword [rdi + 0x48], 0
je 0x140020b73
mov rdx, qword [rdi + 0x38]
mov rcx, qword [rdi + 0x30]
dec rcx
mov rax, rdx
shr rax, 1
and rcx, rax
and edx, 1
mov rax, qword [rdi + 0x28]
mov rcx, qword [rax + rcx*8]
mov rcx, qword [rcx + rdx*8]
sub rcx, 0x18
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0x290], rax
lea r15, [rax - 0x18]
mov rcx, r15
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0x80], rax
lea rdx, [rbp + 0x80]
mov rcx, rdi
call fcn.14006d060
nop
mov eax, r14d
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x140020b73
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp + 0x180], 0x64
lea rcx, [rbp + 0x180]
call fcn.140025f00
jmp 0x140020a10
mov rcx, qword [rbp - 0x58]
add rcx, 0xffffffffffffffe8
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0x88], rax
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x178]
call fcn.14004beb0
nop
mov rdx, rax
mov rcx, rsi
call fcn.14001fec0
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140020be8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.140006db0
mov dl, 1
mov rcx, rsi
call fcn.1400220e0
call fcn.140022460
mov rdi, qword [rbp + 0x340]
mov r15, qword [rbp - 0x70]
cmp dword [rbp - 0x18], 0
jne 0x140021d5d
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140020c30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140020c4f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x130]
call fcn.140031830
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140020c7b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140020c9a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140020cb9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, r14d
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x140020cd4
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lock xadd dword [rdi + 0x10], r14d
sub r14d, 1
jg 0x140020cec
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, rsi
call fcn.14001a370
mov rcx, rsi
call fcn.14001a680
call fcn.14015ccbc
mov rbx, rax
call fcn.14015cca0
mov r8, rax
cmp rbx, 0x989680
jne 0x140020d40
imul rdi, r8, 0x64
jmp 0x140020d63
cqo
idiv rbx
imul rdi, rax, 0x3b9aca00
mov rax, r8
cqo
idiv rbx
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rdi, rax
mov rax, qword [rsi + 0x68]
cmp qword [rax + 0x60], 0
je 0x140020dd2
mov rax, qword [rax + 0x58]
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x140020e96
mov rcx, qword [rax + 0x28]
cmp byte [rcx + 0x118], 0
je 0x140020dd2
mov rcx, qword [rax + 0x10]
cmp byte [rcx + 0x19], 0
je 0x140020db8
mov rcx, qword [rax + 8]
cmp byte [rcx + 0x19], 0
jne 0x140020db3
cmp rax, qword [rcx + 0x10]
jne 0x140020db3
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], 0
je 0x140020da0
mov rax, rcx
jmp 0x140020d75
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
jne 0x140020d75
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x140020dc4
jmp 0x140020d75
cmp byte [rsi + 0x171], 0
jne 0x140020e96
call fcn.14015ccbc
mov rbx, rax
call fcn.14015cca0
mov r8, rax
cmp rbx, 0x989680
jne 0x140020dfe
imul rax, r8, 0x64
jmp 0x140020e21
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
mov rax, r8
cqo
idiv rbx
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
sub rax, rdi
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm0, xmm6
comisd xmm0, xmm7
jae 0x140020e52
mov qword [rbp + 0x150], 0x64
lea rcx, [rbp + 0x150]
call fcn.140025f00
jmp 0x140020d63
mov rcx, qword [rbp - 0x60]
add rcx, 0xffffffffffffffe8
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0x90], rax
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x1a0]
call fcn.14004beb0
nop
mov rdx, rax
mov rcx, rsi
call fcn.14001fec0
nop
mov rdx, qword [rbp + 0x1a0]
jmp 0x140020bce
lea rax, vtable.std::_Func_impl_no_alloc_class__lambda_c5cd2ee499ac440fefda6c820ac8d022___void__enum_ThreadRecipient_.0
mov qword [rbp + 0x1f8], rax
mov qword [rbp + 0x200], rsi
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0x230], rax
lea rax, [rbp + 0x1f8]
mov qword [rsp + 0x30], rax
lea rdx, [rbp + 0x1f8]
call fcn.14015c010
nop
mov rcx, qword [rbp + 0x230]
test rcx, rcx
je 0x140020ef1
mov rax, qword [rcx]
lea rdx, [rbp + 0x1f8]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
lea rax, vtable.std::_Func_impl_no_alloc_class__lambda_bb9407fcf6106583a8edc7e1a35b1897___void__enum_ThreadRecipient__bool_.0
mov qword [rbp + 0x238], rax
mov qword [rbp + 0x240], rsi
lea rax, [rbp + 0x238]
mov qword [rbp + 0x270], rax
lea rax, [rbp + 0x238]
mov qword [rsp + 0x30], rax
lea rdx, [rbp + 0x238]
call fcn.14015be80
nop
mov rcx, qword [rbp + 0x270]
test rcx, rcx
je 0x140020f4c
mov rax, qword [rcx]
lea rdx, [rbp + 0x238]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
lea r13, [rsi + 0x178]
mov qword [rbp - 0x28], r12
mov ecx, 0x48
call fcn.1401833e0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x30]
lea rcx, [0x140059f90]
call qword [sym.imp.USER32.dll_EnumWindows]
mov r15, qword [0x140223d60]
mov rdi, qword [r15 + 8]
cmp byte [rdi + 0x19], 0
jne 0x140020fd9
nop dword [rax + rax]
mov r8, qword [rdi + 0x10]
lea rdx, [0x140223d60]
lea rcx, [0x140223d60]
call fcn.14005cdd0
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.140031830
mov edx, 0x48
mov rcx, rbx
call fcn.140183144
cmp byte [rdi + 0x19], 0
je 0x140020fa0
mov qword [r15 + 8], r15
mov qword [r15], r15
mov qword [r15 + 0x10], r15
mov rcx, qword [0x140223d60]
mov rax, qword [rbp - 0x30]
mov qword [0x140223d60], rax
mov qword [rbp - 0x30], rcx
mov rax, qword [rbp - 0x28]
mov qword [0x140223d68], rax
mov qword [rbp - 0x28], r12
lea rcx, [rbp - 0x30]
call fcn.14005a2c0
mov ecx, 8
call fcn.1401833e0
mov qword [rax], r13
mov qword [rbp + 0x2a0], rax
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14015c350]
xor edx, edx
xor ecx, ecx
call fcn.14019290c
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x140021cc6
cmp dword [rbp + 0xc8], 0
je 0x140021d63
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x280], xmm0
lea rcx, [rbp + 0x280]
call fcn.14015ca68
test eax, eax
jne 0x140021d6e
xorps xmm0, xmm0
movaps xmmword [rbp + 0x2d0], xmm0
movdqa xmmword [rbp + 0xc0], xmm0
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021d76
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x58]
call fcn.140031e00
test al, al
jne 0x1400210e6
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x58]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021d81
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x50]
call fcn.140031e00
test al, al
jne 0x140021130
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x50]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021d8c
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x48]
call fcn.140031e00
test al, al
jne 0x14002117a
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x48]
call fcn.140032190
nop
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], r12
lea r12, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae r12, qword [rbp + 0x130]
movabs rdi, 0x7ffffffffffffffe
mov r15, qword [rbp + 0x140]
cmp r15, rdi
ja 0x140021d97
mov eax, 0xa
mov qword [rbp + 0x68], 7
cmp r15, 8
jae 0x1400211e0
mov qword [rbp + 0x60], r15
lea r8d, [rax + 6]
mov rdx, r12
lea rcx, [rbp + 0x50]
call fcn.140185440
jmp 0x140021224
mov rbx, r15
or rbx, 7
cmp rbx, rdi
jbe 0x1400211f1
mov rbx, rdi
jmp 0x1400211f8
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x50]
call fcn.140030fc0
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], rbx
lea r8, [r15*2 + 2]
mov rdx, r12
mov rcx, rax
call fcn.140185440
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x198]
call fcn.14004bc20
mov rbx, rax
mov rcx, qword [rbp + 0x340]
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0x98], rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x190]
call fcn.14004beb0
nop
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, rax
call fcn.140061650
nop
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400212a4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400212c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400212e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021306
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021325
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsi + 0x68]
mov rcx, qword [rbp - 0x68]
add rcx, 0xffffffffffffffe8
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0xa0], rax
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x1a8]
call fcn.14004beb0
mov r8d, 0x7f
mov rdx, rax
mov rcx, rbx
call fcn.14006cf00
cmp byte [rsi + 0x171], 0
jne 0x140020bfc
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
xor ebx, ebx
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002e0e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx], rax
lea rax, [rbp + 0x1c4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002e0d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 8], rax
lea rax, [rbp + 0x1c8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002e0c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x10], rax
lea rax, [rbp + 0x1cc]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002e0b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x18], rax
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002e0a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x20], rax
lea rax, [rbp + 0x1d4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002e090]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x28], rax
lea rax, [rbp + 0x1d8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002e080]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x30], rax
lea rax, [rbp + 0x1dc]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002e070]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x38], rax
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002e010]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x40], rax
lea rax, [rbp + 0x1e4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002df80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x48], rax
lea rax, [rbp + 0x1e8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002df70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x50], rax
lea rax, [rbp + 0x1ec]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002df60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x58], rax
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002df50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x60], rax
lea rax, [rbp + 0x1f4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rsi
lea r8, [0x14002df40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsi + 0x38]
mov qword [rcx + 0x68], rax
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x120], rbx
mov qword [rbp + 0x128], rbx
lea r8d, [rbx + 0x2c]
lea rdx, str.eSBfbm4gHjgeeSBxZm11XXVnbGJtdSA4IGtfZ2wge3s
lea rcx, [rbp + 0x110]
call fcn.140030750
nop
mov byte [rsi + 0x170], 1
mov rax, qword [rsi + 0x68]
mov qword [rsp + 0x30], rax
mov qword [rbp - 0x10], rbx
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
lea r12, [rbp + 0x110]
cmp qword [rbp + 0x128], 8
cmovae r12, qword [rbp + 0x110]
mov r15, qword [rbp + 0x120]
cmp r15, rdi
ja 0x140021d9d
mov qword [rbp + 8], 7
cmp r15, 8
jae 0x14002166f
mov qword [rbp], r15
lea r8d, [rbx + 0x10]
mov rdx, r12
lea rcx, [rbp - 0x10]
call fcn.140185440
jmp 0x1400216bb
mov rbx, r15
or rbx, 7
cmp rbx, rdi
jbe 0x140021680
mov rbx, rdi
jmp 0x14002168d
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x10]
call fcn.140030fc0
mov qword [rbp - 0x10], rax
mov qword [rbp], r15
mov qword [rbp + 8], rbx
lea r8, [r15*2 + 2]
mov rdx, r12
mov rcx, rax
call fcn.140185440
xor ebx, ebx
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x1b8]
call fcn.14004bc20
mov r8d, 1
mov rdx, rax
mov rcx, qword [rsp + 0x30]
call fcn.14006cf00
mov r9d, 0xffffffff
mov r8d, 1
mov rdx, qword [rsi + 0x38]
lea ecx, [r8 + 0xd]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
call fcn.1400700c0
cmp eax, 1
jne 0x1400219c8
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0x100], rbx
mov qword [rbp + 0x108], rbx
lea r8d, [rax + 0x17]
lea rdx, str.c2ddYWptcWdsZV1kX2dqY2I
lea rcx, [rbp + 0xf0]
call fcn.140030750
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021da3
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x70]
call fcn.140031e00
test al, al
jne 0x14002177d
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x70]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021dae
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x68]
call fcn.140031e00
test al, al
jne 0x1400217c7
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x68]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021db9
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x60]
call fcn.140031e00
test al, al
jne 0x140021811
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x60]
call fcn.140032190
nop
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rbx
lea r15, [rbp + 0xf0]
cmp qword [rbp + 0x108], 8
cmovae r15, qword [rbp + 0xf0]
mov rbx, qword [rbp + 0x100]
cmp rbx, rdi
ja 0x140021dc4
mov qword [rbp + 0x48], 7
cmp rbx, 8
jae 0x14002186a
mov qword [rbp + 0x40], rbx
mov r8d, 0x10
mov rdx, r15
lea rcx, [rbp + 0x30]
call fcn.140185440
jmp 0x1400218b2
mov rax, rbx
or rax, 7
cmp rax, rdi
ja 0x140021886
mov rdi, rax
cmp rax, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x30]
call fcn.140030fc0
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rdi
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.140185440
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x160]
call fcn.14004bc20
mov rbx, rax
mov rdi, qword [rbp + 0x340]
mov rcx, rdi
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0xa8], rax
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x158]
call fcn.14004beb0
nop
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x60]
mov rdx, rbx
mov rcx, rax
call fcn.140061870
nop
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021935
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x160]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021957
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021977
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021997
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400219b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0xf0]
call fcn.140031830
jmp 0x140021c8d
cmp eax, 2
jne 0x140021c86
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xe0], rbx
mov qword [rbp + 0xe8], rbx
lea r8d, [rax + 0xe]
lea rdx, str.c2ddbG1yXWRtc2xi
lea rcx, [rbp + 0xd0]
call fcn.140030750
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021dca
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rbp - 0x78]
call fcn.140031e00
test al, al
jne 0x140021a45
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rbp - 0x78]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021dd5
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rbp - 0x80]
call fcn.140031e00
test al, al
jne 0x140021a8c
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rbp - 0x80]
call fcn.140032190
nop
call fcn.140031bd0
mov rcx, rax
test rax, rax
je 0x140021de0
mov rax, qword [rax]
call qword [rax + SafeArrayPutElement]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x78]
call fcn.140031e00
test al, al
jne 0x140021ad6
xor r8d, r8d
lea rdx, [0x1401e3cf8]
lea rcx, [rsp + 0x78]
call fcn.140032190
nop
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rbx
lea r15, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae r15, qword [rbp + 0xd0]
mov rbx, qword [rbp + 0xe0]
cmp rbx, rdi
ja 0x140021deb
mov qword [rbp + 0x28], 7
cmp rbx, 8
jae 0x140021b2f
mov qword [rbp + 0x20], rbx
mov r8d, 0x10
mov rdx, r15
lea rcx, [rbp + 0x10]
call fcn.140185440
jmp 0x140021b77
mov rax, rbx
or rax, 7
cmp rax, rdi
ja 0x140021b4b
mov rdi, rax
cmp rax, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x10]
call fcn.140030fc0
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rdi
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.140185440
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x170]
call fcn.14004bc20
mov rbx, rax
mov rdi, qword [rbp + 0x340]
mov rcx, rdi
call fcn.1400318c0
add rax, 0x18
mov qword [rbp + 0xb0], rax
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x168]
call fcn.14004beb0
nop
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x78]
mov rdx, rbx
mov rcx, rax
call fcn.140061870
nop
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021bf8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021c1a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021c3a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021c59
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140021c78
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0xd0]
call fcn.140031830
jmp 0x140021c8d
mov rdi, qword [rbp + 0x340]
call fcn.140006db0
mov rcx, rsi
call fcn.140023340
mov dword [r13], eax
mov rcx, qword [rsi + 0x50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
cmp dword [r13], 2
jne 0x140021cb5
call fcn.140022460
nop
lea rcx, [rbp + 0x110]
call fcn.140031830
jmp 0x140020c03
mov dword [rbp + 0xc8], r12d
mov ecx, 6
call fcn.14015cc58
nop
mov dword [rbp - 0x18], r12d
mov ecx, 6
call fcn.14015cc58
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 1
call fcn.14015cc58
int3
mov ecx, eax
call fcn.14015cc1c
nop
call fcn.140191d3c
nop
mov ecx, 1
call fcn.14015cc58
int3
mov ecx, eax
call fcn.14015cc1c
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
call fcn.140030df0
nop
call fcn.140030df0
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
call fcn.140030df0
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
mov ecx, 0x80004005
call fcn.140032160
nop
call fcn.140030df0
int3