Function at 0x100040568
Capabilities:
Accept command line arguments
Check mutex and terminate process on windows
Check mutex on windows
Create thread
Print debug messages
Register raw input devices
Set current directory
Terminate process

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x720
mov qword [rsp + 0xa8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x1000af140]
xor rax, rsp
mov qword [rsp + 0x710], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call fcn.100068800
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x20]
mov rdi, rax
xor eax, eax
or r14, 0xffffffffffffffff
mov rcx, r14
repne scasw ax, word [rdi]
not rcx
lea ebp, [rax + 1]
sub rcx, rbp
lea edi, [rcx + 0x18]
lea r12d, [rax + 2]
mov rax, r12
mul rdi
cmovo rax, r14
mov rcx, rax
call fcn.1000a1d24
mov rsi, rax
xor r13d, r13d
cmp rax, r13
jne 0x100040609
xor al, al
jmp 0x1000415d4
lea r8, [0x10001c2b0]
mov rdx, rdi
mov rcx, rax
call sub.msvcrt.dll_wcscpy_s
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov r8, rax
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_wcscat_s
lea r8, [0x10001c2d0]
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_wcscat_s
mov r8, rsi
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rdi, rax
mov rcx, rsi
call sub.msvcrt.dll_free
cmp rdi, r13
jne 0x10004066a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call sub.KERNEL32.dll_GetLastError
cmp eax, 0xb7
jne 0x1000406dd
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov rcx, rax
call fcn.10006cd90
mov rdi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
mov rsi, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp rsi, r13
je 0x1000406d4
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsIconic]
cmp eax, r13d
je 0x1000406c2
mov edx, 0xa
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_BringWindowToTop]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [rsp + 0x60], r13d
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r8, rax
mov r15d, 5
mov eax, dword [rsp + 0x60]
cmp eax, ebp
jle 0x100040747
add r8, 8
dec eax
mov r9d, eax
mov al, byte [0x1000bb01d]
xor edx, edx
lea rdi, [0x10001c2e8]
mov rsi, qword [r8]
mov rcx, r15
repe cmpsw word [rsi], word [rdi]
je 0x10004072f
sbb edx, edx
sbb edx, r14d
movzx eax, al
cmp edx, r13d
cmove eax, ebp
mov byte [0x1000bb01d], al
add r8, 8
sub r9, rbp
jne 0x100040716
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov sil, r13b
mov qword [rsp + 0x48], r13
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [0x10001ca50]
mov r8d, ebp
xor edx, edx
lea rcx, [0x10001ca30]
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, r13d
jl 0x100040899
mov edi, 0x104
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x100]
xor r8d, r8d
xor edx, edx
lea rcx, [0x10001c0d0]
call sub.SHELL32.dll_SHGetFolderPathEx
cmp eax, r13d
jl 0x100040899
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0xa8]
mov r11, rax
mov rdx, rdi
lea rcx, [rsp + 0x100]
cmp word [rcx], r13w
je 0x1000407e7
add rcx, r12
sub rdx, rbp
jne 0x1000407d9
cmp rdx, r13
je 0x100040899
mov rcx, rdi
sub rcx, rdx
sub rdi, rcx
lea rax, [rsp + rcx*2 + 0x100]
mov r8d, r13d
je 0x100040837
lea rdx, [rdi + rcx + 0x7ffffefb]
sub r11, rax
cmp rdx, r13
je 0x100040832
movzx ecx, word [r11 + rax]
cmp cx, r13w
je 0x100040832
mov word [rax], cx
add rax, r12
sub rdi, rbp
sub rdx, rbp
cmp rdi, r13
jne 0x100040811
cmp rdi, r13
jne 0x100040840
sub rax, r12
mov r8d, 0x8007007a
mov word [rax], r13w
cmp r8d, r13d
jl 0x100040899
lea rcx, [rsp + 0x100]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [0x1000bafc0], rax
cmp rax, r13
je 0x100040899
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_VariantInit]
cmp eax, r13d
je 0x100040899
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x40]
mov rdx, qword [0x1000bafc0]
call qword [rax + 0x30]
cmp eax, r13d
jl 0x100040899
movzx esi, sil
cmp dword [rsp + 0x40], r13d
cmovne esi, ebp
mov rcx, qword [rsp + 0x48]
cmp rcx, r13
je 0x1000408a9
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp sil, r13b
jne 0x1000408b7
mov ecx, r15d
call fcn.10003f9c0
int3
mov ecx, 8
call fcn.1000a1c84
cmp rax, r13
je 0x1000408d2
mov qword [rax], r13
mov qword [0x1000baff8], rax
jmp 0x1000408d9
mov qword [0x1000baff8], r13
lea rcx, [0x100040520]
call qword [sym.imp.msvcrt.dll_int____cdecl___unsigned_long_long_unsigned___int64_____cdecl__set_new_handler_int____cdecl___unsigned_long_long_unsigned___int64___]
mov ecx, ebp
call qword [sym.imp.msvcrt.dll_int___cdecl__set_new_mode_int_]
mov qword [0x1000bafe8], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov rcx, rax
call fcn.10006cd90
mov qword [0x1000bafb8], rax
mov r8d, 0x200
lea rdx, [rsp + 0x310]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [rax - 1]
movsxd rdx, ecx
cmp ecx, eax
ja 0x100040955
lea rdx, [rsp + rdx*2 + 0x310]
cmp word [rdx], 0x2f
je 0x10004094c
cmp word [rdx], 0x5c
je 0x10004094c
dec ecx
sub rdx, r12
cmp ecx, eax
jbe 0x100040935
jmp 0x100040955
mov word [rsp + rcx*2 + 0x310], r13w
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rdx, [0x10001c2f8]
lea rcx, [0x1000bb840]
call fcn.10006e94c
mov esi, 0x18
mov rcx, rsi
call fcn.1000a1c84
lea r14d, [rsi - 8]
cmp rax, r13
je 0x10004099d
mov dword [rax], r13d
mov dword [rax + 4], r13d
mov dword [rax + 8], r14d
mov qword [rax + 0x10], r13
jmp 0x1000409a0
mov rax, r13
mov qword [0x1000bb028], rax
mov rcx, rax
call fcn.1000677fc
lea r9, [0x10001c310]
lea r15, [0x10001c190]
mov r8, r15
mov edx, 0x469
mov ecx, r14d
call fcn.100065cf8
mov rdx, qword [0x1000bafb8]
mov qword [rsp + 0x20], rdx
lea r9, [0x10001c340]
mov r8, r15
mov edx, 0x472
mov ecx, r14d
call fcn.100065cf8
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rdx, [rsp + 0x310]
mov qword [rsp + 0x20], rdx
lea r9, [0x10001c380]
mov r8, r15
mov edx, 0x476
mov ecx, r14d
call fcn.100065cf8
lea r9, [0x10001c3b8]
mov r8, r15
mov edx, 0x47a
mov ecx, r14d
call fcn.100065cf8
mov dword [rsp + 0x80], ebp
mov qword [rsp + 0x88], r13
mov dword [rsp + 0x94], r13d
mov dword [rsp + 0x90], ebp
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x80]
lea rcx, [0x1000bafb0]
call sub.gdiplus.dll_GdiplusStartup
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.10004f3f0
mov ecx, 0x2868
call fcn.1000a1c84
mov qword [rsp + 0x48], rax
cmp rax, r13
je 0x100040aa2
xor edx, edx
mov rcx, rax
call fcn.100065130
jmp 0x100040aa5
mov rax, r13
mov qword [0x1000bb000], rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.100064160
nop
lea r9, [0x10001c3e0]
mov r8b, byte [0x1000bb124]
lea rdx, [rsp + 0x48]
mov rcx, qword [0x1000bb000]
call fcn.100065368
cmp al, r13b
sete dil
mov rcx, qword [rsp + 0x58]
call sub.msvcrt.dll_free
cmp dil, r13b
je 0x100040b74
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov edx, 0x37c
lea rcx, [rsp + 0xe0]
call fcn.100064280
nop
mov rdi, qword [rax + 0x10]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.1000645ac
nop
mov rcx, qword [rsp + 0xf0]
call sub.msvcrt.dll_free
mov byte [rsp + 0x30], bpl
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xfffe
mov r8d, ebp
xor edx, edx
mov ecx, 0x385
call fcn.100068ab8
xor ecx, ecx
call fcn.10003f9c0
nop
call fcn.10004b8cc
cmp al, r13b
jne 0x100040b9d
lea r9, [0x10001c3f0]
mov r8, r15
mov edx, 0x4ae
mov ecx, r14d
call fcn.100065cf8
xor ecx, ecx
call fcn.10003f9c0
int3
mov edi, 0xc
cmp byte [0x1000bb01d], r13b
je 0x100040c3d
lea r9, [0x10001c420]
mov r8, r15
mov edx, 0x4bb
mov ecx, r14d
call fcn.100065cf8
xor ecx, ecx
call fcn.10006896c
cmp byte [0x1000bb01d], r13b
je 0x100040c3d
lea r9, [0x10001c450]
mov r8, r15
mov edx, 0x4c4
mov ecx, r14d
call fcn.100065cf8
mov word [rsp + 0x48], di
mov word [rsp + 0x4a], bp
mov dword [rsp + 0x4c], r13d
mov rax, qword [0x1000bafc8]
mov qword [rsp + 0x50], rax
mov r8d, r14d
mov edx, ebp
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_RegisterRawInputDevices]
cmp eax, r13d
jne 0x100040c3d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea r9, [0x10001c4b0]
mov r8, r15
mov edx, 0x4cf
mov ecx, r14d
call fcn.100065cf8
lea r9, [0x10001c4f0]
mov r8, r15
mov edx, 0x4d5
mov ecx, r14d
call fcn.100065cf8
lea rdx, [0x10003f23c]
mov ecx, r12d
call fcn.100051bec
lea rdx, [0x10003f2a4]
mov ecx, 4
call fcn.100051bec
lea rdx, [0x10003f2dc]
mov ecx, 5
call fcn.100051bec
lea rdx, [0x10003f270]
mov ecx, 3
call fcn.100051bec
lea rdx, [0x10003f310]
mov ecx, 6
call fcn.100051bec
lea rdx, [0x10003f344]
mov ecx, 7
call fcn.100051bec
lea rdx, [0x10003f378]
mov ecx, 8
call fcn.100051bec
lea rdx, [0x10003f3dc]
mov ecx, 9
call fcn.100051bec
lea rdx, [0x10003f414]
mov ecx, 0xa
call fcn.100051bec
lea rdx, [0x10003f44c]
mov ecx, 0xb
call fcn.100051bec
lea rdx, [0x10003f480]
mov ecx, ebp
call fcn.100051bec
lea rdx, [0x10003f55c]
mov ecx, 0xd
call fcn.100051bec
lea rdx, [0x10003f4c8]
mov ecx, edi
call fcn.100051bec
lea rdx, [0x10003f590]
mov ecx, 0xe
call fcn.100051bec
lea rdx, [0x10003f5c4]
mov ecx, 0xf
call fcn.100051bec
lea rdx, [0x10003f5f8]
mov ecx, r14d
call fcn.100051bec
lea rdx, [0x10003f634]
mov ecx, 0x11
call fcn.100051bec
lea rdx, [0x10003f668]
mov ecx, 0x12
call fcn.100051bec
lea rdx, [0x10003f69c]
mov ecx, 0x13
call fcn.100051bec
lea rdx, [0x10003f6d0]
mov ecx, 0x14
call fcn.100051bec
lea rdx, [0x10003f704]
mov ecx, 0x15
call fcn.100051bec
lea rdx, [0x10003f738]
mov ecx, 0x16
call fcn.100051bec
lea rdx, [0x10003f1a0]
mov ecx, 0x17
call fcn.100051bec
lea rdx, [0x10003f1d4]
mov ecx, esi
call fcn.100051bec
lea rdx, [0x10003f76c]
mov ecx, 0x19
call fcn.100051bec
lea rdx, [0x10003f7a0]
mov ecx, 0x1a
call fcn.100051bec
lea rdx, [0x10003f7d4]
mov ecx, 0x1b
call fcn.100051bec
lea rdx, [0x10003f808]
mov ecx, 0x1c
call fcn.100051bec
lea rdx, [0x10003f83c]
mov ecx, 0x1d
call fcn.100051bec
lea rdx, [0x10003f874]
mov ecx, 0x1e
call fcn.100051bec
lea rdx, [0x10003f8e4]
mov ecx, 0x1f
call fcn.100051bec
lea rdx, [0x10003f91c]
mov edi, 0x20
mov ecx, edi
call fcn.100051bec
lea rdx, [0x10003f954]
lea ecx, [rdi + 1]
call fcn.100051bec
lea rdx, [0x10003f98c]
lea ecx, [rdi + 2]
call fcn.100051bec
lea rdx, [0x10003f208]
lea ecx, [rdi + 5]
call fcn.100051bec
lea rdx, [0x10003f8ac]
lea ecx, [rdi + 3]
call fcn.100051bec
lea r9, [0x10001c520]
mov r8, r15
mov edx, 0x500
mov ecx, r14d
call fcn.100065cf8
lea rdx, [0x1000523d0]
lea rcx, [0x100020fa0]
call fcn.100046cd8
lea rdx, [0x100053c84]
lea rcx, [0x1000211d8]
call fcn.100046cd8
lea rdx, [0x100045d00]
lea rcx, [0x100018078]
call fcn.100046cd8
mov r8, rsi
xor edx, edx
lea rcx, [0x1000b88e8]
call sub.msvcrt.dll_memset
mov byte [0x1000bb019], bpl
lea rdx, [0x100053d00]
lea rcx, [0x100021270]
call fcn.100046cd8
lea rdx, [0x100055168]
lea rcx, [0x1000215b0]
call fcn.100046cd8
lea rdx, [0x1000551a8]
lea rcx, [0x1000216f0]
call fcn.100046cd8
lea rdx, [0x100055358]
lea rcx, [0x100021770]
call fcn.100046cd8
lea r9, [0x10001c550]
mov r8, r15
mov edx, 0x50b
mov ecx, r14d
call fcn.100065cf8
call fcn.100050934
cmp al, r13b
jne 0x100040f99
lea r9, [0x10001c590]
mov r8, r15
mov edx, 0x50e
mov ecx, r14d
call fcn.100065cf8
xor ecx, ecx
call fcn.10003f9c0
int3
lea rax, [fcn.100040244]
mov qword [0x1000bb468], rax
lea r9, [0x10001c5d8]
mov r8, r15
mov edx, 0x518
mov ecx, r14d
call fcn.100065cf8
mov ecx, 0x80
call fcn.1000a1c84
cmp rax, r13
je 0x100040fd7
mov rcx, rax
call fcn.100050aa0
jmp 0x100040fda
mov rax, r13
mov qword [0x1000bb0e8], rax
mov rcx, rax
call fcn.1000677fc
mov rcx, qword [0x1000bb0e8]
call fcn.100050b60
cmp al, r13b
jne 0x100041019
lea r9, [0x10001c620]
mov r8, r15
mov edx, 0x51c
mov ecx, r14d
call fcn.100065cf8
xor ecx, ecx
call fcn.10003f9c0
int3
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
mov rax, qword [0x1000bafd0]
mov qword [rsp + 0x68], rax
mov byte [rsp + 0x7c], r13b
mov dword [rsp + 0x78], edi
mov byte [rsp + 0x7d], r13b
mov rcx, qword [0x1000bafe8]
mov rax, qword [rcx]
lea r8, [rsp + 0x74]
lea rdx, [rsp + 0x70]
call qword [rax + 0x18]
cmp byte [0x1000bae9c], r13b
je 0x100041078
mov eax, dword [rsp + 0x70]
add eax, eax
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x74]
add eax, eax
mov dword [rsp + 0x74], eax
lea r9, [0x10001c670]
mov r8, r15
mov edx, 0x533
mov ecx, r14d
call fcn.100065cf8
mov ecx, 0xd8
call fcn.1000a1c84
cmp rax, r13
je 0x1000410a8
mov rcx, rax
call fcn.10004496c
jmp 0x1000410ab
mov rax, r13
mov qword [0x1000bb010], rax
mov rcx, rax
call fcn.1000677fc
lea rdx, [rsp + 0x68]
mov rcx, qword [0x1000bb010]
call fcn.10004279c
cmp al, r13b
jne 0x1000410ef
lea r9, [0x10001c6b0]
mov r8, r15
mov edx, 0x537
mov ecx, r14d
call fcn.100065cf8
xor ecx, ecx
call fcn.10003f9c0
int3
lea r9, [0x10001c6f8]
mov r8, r15
mov edx, 0x53e
mov ecx, r14d
call fcn.100065cf8
mov ecx, 0x38
call fcn.1000a1c84
cmp rax, r13
je 0x100041140
mov dword [rax + 0x20], r13d
mov dword [rax + 0x24], r13d
mov dword [rax + 0x28], r14d
mov qword [rax + 0x30], r13
mov qword [rax + 0x10], r13
mov dword [rax + 0x1c], r13d
mov dword [rax + 0x18], r12d
mov ecx, 0x64
mov dword [rax + 8], ecx
mov dword [rax], ecx
mov dword [rax + 4], ecx
jmp 0x100041143
mov rax, r13
mov qword [0x1000bb020], rax
mov rcx, rax
call fcn.1000677fc
mov rcx, qword [0x1000bb020]
call fcn.100045438
cmp al, r13b
jne 0x100041182
lea r9, [0x10001c720]
mov r8, r15
mov edx, 0x542
mov ecx, r14d
call fcn.100065cf8
xor ecx, ecx
call fcn.10003f9c0
int3
lea r9, [0x10001c760]
mov r8, r15
mov edx, 0x54a
mov ecx, r14d
call fcn.100065cf8
mov ecx, 0x90
call fcn.1000a1c84
cmp rax, r13
je 0x1000411c6
xor r9d, r9d
mov r8b, byte [0x1000bb01d]
mov rdx, qword [0x1000bafc8]
mov rcx, rax
call fcn.10006fbb0
mov rdi, rax
jmp 0x1000411c9
mov rdi, r13
mov qword [0x1000bafd8], rdi
cmp qword [rdi + 8], r13
je 0x1000411de
mov rcx, rdi
call fcn.10006f310
mov byte [rdi + 0x14], bpl
lea rax, [rdi + 0x10]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9, rdi
lea r8, [0x10006f2a8]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi + 8], rax
lea r9, [0x10001c7a8]
mov r8, r15
mov edx, 0x551
mov ecx, r14d
call fcn.100065cf8
mov ecx, 0x50
call fcn.1000a1c84
mov rdi, rax
cmp rax, r13
je 0x1000412a3
mov esi, 0x40
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi], rax
mov r12d, 0x200
mov rcx, r12
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 8], rax
mov dword [rdi + 0x10], r13d
mov dword [rdi + 0x14], r14d
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x18], rax
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x20], rax
mov dword [rdi + 0x28], r13d
mov dword [rdi + 0x2c], r14d
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x30], rax
mov rcx, r12
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x38], rax
mov dword [rdi + 0x40], r13d
mov dword [rdi + 0x44], r14d
jmp 0x1000412a6
mov rdi, r13
mov qword [0x1000bb038], rdi
mov rcx, rdi
call fcn.1000677fc
lea r9, [0x10001c7d0]
mov r8, r15
mov edx, 0x55c
mov ecx, r14d
call fcn.100065cf8
lea rdx, [0x10001c7f0]
mov rcx, qword [0x1000bb028]
call fcn.100047740
cmp rax, r13
je 0x10004140d
lea r8, [rsp + 0x40]
lea rdx, [0x10001c810]
mov rcx, rax
call fcn.10006e1a8
mov r12, rax
mov ecx, dword [rsp + 0x40]
mov dword [rsp + 0x20], ecx
lea r9, [0x10001c820]
mov r8, r15
mov edx, 0x567
mov ecx, r14d
call fcn.100065cf8
mov ebp, r13d
cmp dword [rsp + 0x40], r13d
jbe 0x1000413fe
mov rsi, r12
mov rcx, qword [rsi]
call fcn.10006e884
mov rdi, rax
mov qword [rsp + 0x20], rax
lea r9, [0x10001c840]
mov r8, r15
mov edx, 0x56c
mov ecx, r14d
call fcn.100065cf8
mov rcx, rdi
call qword [sym.imp.GDI32.dll_AddFontResourceW]
cmp eax, r13d
jne 0x10004138a
mov qword [rsp + 0x20], rdi
lea r9, [0x10001c868]
mov r8, r15
mov edx, 0x584
mov ecx, r14d
call fcn.100065cf8
mov rcx, rdi
call sub.msvcrt.dll_free
jmp 0x1000413ee
mov eax, dword [0x1000b6e70]
inc eax
mov dword [0x1000b6e70], eax
mov ecx, dword [0x1000b6e74]
cmp eax, ecx
jbe 0x1000413e1
add ecx, dword [0x1000b6e78]
mov dword [0x1000b6e74], ecx
mov edx, ecx
shl rdx, 3
mov rcx, qword [0x1000b6e80]
call qword [sym.imp.msvcrt.dll_realloc]
mov rdx, rax
cmp rax, r13
jne 0x1000413d2
xor ecx, ecx
call fcn.1000677fc
jmp 0x1000413ee
mov qword [0x1000b6e80], rax
mov eax, dword [0x1000b6e70]
jmp 0x1000413e8
mov rdx, qword [0x1000b6e80]
dec eax
mov qword [rdx + rax*8], rdi
inc ebp
add rsi, 8
cmp ebp, dword [rsp + 0x40]
jb 0x10004132f
mov rcx, r12
call sub.msvcrt.dll_free
mov ebp, 1
jmp 0x100041424
lea r9, [0x10001c898]
mov r8, r15
mov edx, 0x592
mov ecx, r14d
call fcn.100065cf8
lea r9, [0x10001c8c0]
mov r8, r15
mov edx, 0x597
mov ecx, r14d
call fcn.100065cf8
xor edx, edx
mov rcx, qword [0x1000bafc8]
call sub.WTSAPI32.dll_WTSRegisterSessionNotification
lea rdx, [0x10001c910]
mov rcx, qword [0x1000bb028]
call fcn.100047740
mov rdi, rax
mov byte [0x1000bafe3], bpl
lea r9, [0x10001c930]
mov r8, r15
mov edx, 0x59f
mov ecx, r14d
call fcn.100065cf8
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x60]
cmp al, r13b
jne 0x1000414aa
lea r9, [0x10001c9a0]
mov r8, r15
mov edx, 0x5a2
mov ecx, r14d
call fcn.100065cf8
xor ecx, ecx
call fcn.10003f9c0
int3
mov byte [0x1000bafe3], r13b
cmp rdi, r13
je 0x1000414d3
or r8d, 0xffffffff
lea rdx, [0x10001c9e8]
mov rcx, rdi
call fcn.10006e4cc
cmp eax, r13d
setg byte [0x1000bafe1]
call fcn.100040058
mov qword [0x1000baff0], r13
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
cmp rax, r13
je 0x100041514
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
mov rdi, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x1000baff0], rax
mov byte [0x1000b03c3], r13b
lea rcx, [0x1000bafb0]
call qword [rsp + 0x98]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, r13d
je 0x1000415a8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_GetMessageW]
cmp eax, r13d
je 0x1000415b2
mov rdx, qword [0x1000baff0]
cmp rdx, r13
je 0x10004158a
lea r8, [rsp + 0xb0]
mov rcx, qword [0x1000bafc8]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
cmp eax, r13d
jne 0x100041529
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x100041529
call fcn.100041688
jmp 0x100041529
mov rcx, qword [0x1000bafb0]
call qword [rsp + 0xa0]
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x90]
xor ecx, ecx
call fcn.10003f9c0
int3
mov rcx, qword [rsp + 0x710]
xor rcx, rsp
call fcn.1000a2150
lea r11, [rsp + 0x720]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret