Function at 0x14003b6f0
Capabilities:
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x100
mov rax, qword [0x1400b9060]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov al, reloc.WLDAP32.dll_Ordinal_50
mov qword [rsp + 0x110], rbx
xor al, 7
mov byte [rbp - 0x49], 7
xor ecx, ecx
mov byte [rbp - 0x47], al
mov r8b, 0x36
mov byte [rbp - 0x46], cl
xor r8b, 7
lea r9, [rbp - 0x48]
mov byte [rbp - 0x48], r8b
call fcn.140037d70
mov r11, rax
cmp r8b, 0x30
jl 0x14003b76d
cmp r8b, 0x39
jg 0x14003b76d
mov ecx, 0xa
call fcn.140037d70
imul eax, r11d
inc r9
movsx r11d, r8b
add r11d, 0xffffffd0
movzx r8d, byte [r9]
add r11d, eax
cmp r8b, 0x30
jge 0x14003b741
xor eax, eax
mov byte [rbp - 0x49], reloc.WLDAP32.dll_Ordinal_41
mov r8b, Ordinal_33
mov byte [rbp - 0x47], al
xor r8b, 0x29
lea r9, [rbp - 0x48]
xor ecx, ecx
mov byte [rbp - 0x48], r8b
call fcn.140037d70
mov r10, rax
cmp r8b, 0x30
jl 0x14003b7c1
cmp r8b, 0x39
jg 0x14003b7c1
mov ecx, 0xa
call fcn.140037d70
imul eax, r10d
inc r9
movsx r10d, r8b
add r10d, 0xffffffd0
movzx r8d, byte [r9]
add r10d, eax
cmp r8b, 0x30
jge 0x14003b795
mov edx, r11d
mov ecx, r10d
call fcn.14003b360
mov edx, eax
lea rcx, [rbp + 0x1f]
call fcn.14003b490
lea rax, [0x14003cb60]
mov dword [rbp - 0x39], 0x50
xor ebx, ebx
mov qword [rbp - 0x31], rax
xor ecx, ecx
mov dword [rbp - 0x35], 0x40
mov qword [rbp - 0x29], rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp qword [rbp + 0x37], 0x10
lea rcx, [rbp - 0x39]
mov qword [rbp - 0x21], rax
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x19], xmm0
lea rax, [rbp + 0x1f]
movdqa xmmword [rbp - 9], xmm1
cmovae rax, qword [rbp + 0x1f]
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
cmp byte [0x140287a0b], bl
jne 0x14003b9c2
mov qword [rsp + 0x118], rdi
lea edi, [rbx + 1]
nop dword [rax]
mov rcx, qword [0x140287a30]
test rcx, rcx
je 0x14003b9a3
lea rdx, [0x140287a38]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x140287a30]
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rbx
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x17]
lea r9, [rbp - 0x40]
mov dword [0x140287a38], eax
mov r8b, 0x62
mov eax, dword [rbp + 0x1b]
movzx ecx, r8b
mov dword [0x140287a3c], eax
movzx edx, r8b
mov eax, dword [0x140287a40]
xor cl, 0x53
mov dword [0x140287820], eax
xor dl, 0x53
mov eax, dword [0x140287a44]
xor r8b, 0x53
mov dword [0x140287a24], eax
mov al, 0x63
xor al, 0x53
mov byte [rbp - 0x3e], cl
xor ecx, ecx
mov byte [rbp - 0x3f], al
mov byte [rbp - 0x41], 0x53
mov byte [rbp - 0x40], r8b
mov byte [rbp - 0x3d], dl
mov byte [rbp - 0x3c], bl
call fcn.140037d70
mov r10, rax
cmp r8b, 0x30
jl 0x14003b91c
nop dword [rax]
cmp r8b, 0x39
jg 0x14003b91c
mov ecx, 0xa
call fcn.140037d70
imul eax, r10d
inc r9
movsx r10d, r8b
add r10d, 0xffffffd0
movzx r8d, byte [r9]
add r10d, eax
cmp r8b, 0x30
jge 0x14003b8f0
cmp dword [0x140287820], r10d
jle 0x14003b9a3
mov al, 0x71
mov byte [rbp - 0x49], 0x44
movzx ecx, al
lea r9, [rbp - 0x48]
xor cl, 0x44
xor edx, edx
mov byte [rbp - 0x46], cl
xor al, 0x44
mov r8b, reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x47], al
xor r8b, 0x44
mov byte [rbp - 0x45], dl
xor ecx, ecx
mov byte [rbp - 0x48], r8b
call fcn.140037d70
mov r10, rax
cmp r8b, 0x30
jl 0x14003b98c
nop dword [rax]
cmp r8b, 0x39
jg 0x14003b98c
mov ecx, 0xa
call fcn.140037d70
imul eax, r10d
inc r9
movsx r10d, r8b
add r10d, 0xffffffd0
movzx r8d, byte [r9]
add r10d, eax
cmp r8b, 0x30
jge 0x14003b960
movzx eax, byte [0x140287a0b]
cmp dword [0x140287a24], r10d
cmovg eax, edi
mov byte [0x140287a0b], al
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x140287a0b], bl
je 0x14003b850
mov rdi, qword [rsp + 0x118]
cmp qword [rbp + 0x37], 0x10
lea r8, [rbp + 0x1f]
mov eax, dword [0x140287a24]
lea rdx, [rbp + 0x1f]
cmovae r8, qword [rbp + 0x1f]
mov r9d, 0x90000000
cmovae rdx, qword [rbp + 0x1f]
xor ecx, ecx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], eax
mov eax, dword [0x140287820]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, qword [rsp + 0x110]
mov qword [0x140287ac8], rax
test rax, rax
jne 0x14003ba35
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x1400a9b80]
lea rdx, [rbp + 0x3f]
mov rcx, rax
movdqu xmmword [rbp + 0x3f], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140287ac8]
mov edx, 0xffffffec
mov r8d, 0x800a0
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x140287ac8]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140287ac8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdx, qword [rbp + 0x37]
cmp rdx, 0x10
jb 0x14003bac4
mov rcx, qword [rbp + 0x1f]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003babf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003babf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140095c68
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.1400956c0
add rsp, 0x100
pop rbp
ret