Function at 0x140035100
Capabilities:
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x100
mov rax, qword [0x140062010]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov edx, 0x14
mov qword [rsp + 0x110], rbx
lea rcx, [rbp + 0x1f]
call fcn.140034ea0
lea rax, [0x140038fe0]
mov dword [rbp - 0x39], 0x50
xor ebx, ebx
mov qword [rbp - 0x31], rax
xor ecx, ecx
mov dword [rbp - 0x35], 0x40
mov qword [rbp - 0x29], rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp qword [rbp + 0x37], 0x10
lea rcx, [rbp - 0x39]
mov qword [rbp - 0x21], rax
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x19], xmm0
lea rax, [rbp + 0x1f]
movdqa xmmword [rbp - 9], xmm1
cmovae rax, qword [rbp + 0x1f]
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
cmp byte [0x14014878f], bl
jne 0x140035324
mov qword [rsp + 0x118], rdi
lea edi, [rbx + 1]
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [0x1401487a8]
test rcx, rcx
je 0x140035305
lea rdx, [0x1401487b8]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x1401487a8]
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rbx
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x17]
lea r9, [rbp - 0x40]
mov dword [0x1401487b8], eax
mov r8b, 0x36
mov eax, dword [rbp + 0x1b]
movzx ecx, r8b
mov dword [0x1401487bc], eax
movzx edx, r8b
mov eax, dword [0x1401487c0]
xor cl, 7
mov dword [0x1401485a8], eax
xor dl, 7
mov eax, dword [0x1401487c4]
xor r8b, 7
mov dword [0x1401487a4], eax
mov al, 0x37
xor al, 7
mov byte [rbp - 0x3e], cl
mov ecx, 0x22
mov byte [rbp - 0x3f], al
mov byte [rbp - 0x41], 7
mov byte [rbp - 0x40], r8b
mov byte [rbp - 0x3d], dl
mov byte [rbp - 0x3c], bl
call fcn.14002ed00
mov r10, rax
cmp r8b, 0x30
jl 0x14003527c
cmp r8b, 0x39
jg 0x14003527c
mov ecx, 0xbb2
call fcn.14002ed00
imul eax, r10d
inc r9
movsx r10d, r8b
add r10d, 0xffffffd0
movzx r8d, byte [r9]
add r10d, eax
cmp r8b, 0x30
jge 0x140035250
cmp dword [0x1401485a8], r10d
jle 0x140035305
mov al, 0x67
mov byte [rbp - 0x49], 0x52
movzx ecx, al
lea r9, [rbp - 0x48]
xor edx, edx
xor cl, 0x52
mov byte [rbp - 0x46], cl
xor al, 0x52
mov r8b, 0x65
mov byte [rbp - 0x47], al
xor r8b, 0x52
mov byte [rbp - 0x45], dl
lea ecx, [rdx + 0x22]
mov byte [rbp - 0x48], r8b
call fcn.14002ed00
mov r10, rax
cmp r8b, 0x30
jl 0x1400352ee
cmp r8b, 0x39
jg 0x1400352ee
mov ecx, 0xbb2
call fcn.14002ed00
imul eax, r10d
inc r9
movsx r10d, r8b
add r10d, 0xffffffd0
movzx r8d, byte [r9]
add r10d, eax
cmp r8b, 0x30
jge 0x1400352c2
movzx eax, byte [0x14014878f]
cmp dword [0x1401487a4], r10d
cmovg eax, edi
mov byte [0x14014878f], al
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14014878f], bl
je 0x1400351b0
mov rdi, qword [rsp + 0x118]
cmp qword [rbp + 0x37], 0x10
lea r8, [rbp + 0x1f]
mov eax, dword [0x1401487a4]
lea rdx, [rbp + 0x1f]
cmovae r8, qword [rbp + 0x1f]
mov r9d, 0x90000000
cmovae rdx, qword [rbp + 0x1f]
xor ecx, ecx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], eax
mov eax, dword [0x1401485a8]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, qword [rsp + 0x110]
mov qword [0x140148828], rax
test rax, rax
jne 0x140035397
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x1400587a0]
lea rdx, [rbp + 0x3f]
mov rcx, rax
movdqu xmmword [rbp + 0x3f], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140148828]
mov edx, 0xffffffec
mov r8d, 0x800a0
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x140148828]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140148828]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdx, qword [rbp + 0x37]
cmp rdx, 0x10
jb 0x140035426
mov rcx, qword [rbp + 0x1f]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035421
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035421
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400462c8
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140045d20
add rsp, 0x100
pop rbp
ret