Function at 0x100038fbc
Capabilities:
Accept command line arguments
Check mutex and terminate process on windows
Check mutex on windows
Create thread
Print debug messages
Register raw input devices
Set current directory
Terminate process

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x720
mov qword [rsp + 0xa8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x1000a5140]
xor rax, rsp
mov qword [rsp + 0x710], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call fcn.10006071c
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x20]
mov rdi, rax
xor eax, eax
or r14, 0xffffffffffffffff
mov rcx, r14
repne scasw ax, word [rdi]
not rcx
lea ebp, [rax + 1]
sub rcx, rbp
lea edi, [rcx + 0x18]
lea r12d, [rax + 2]
mov rax, r12
mul rdi
cmovo rax, r14
mov rcx, rax
call fcn.100099170
mov rsi, rax
xor r13d, r13d
cmp rax, r13
jne 0x10003905d
xor al, al
jmp 0x10003a028
lea r8, [0x100017dc0]
mov rdx, rdi
mov rcx, rax
call sub.msvcrt.dll_wcscpy_s
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov r8, rax
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_wcscat_s
lea r8, [0x100017de0]
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_wcscat_s
mov r8, rsi
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rdi, rax
mov rcx, rsi
call sub.msvcrt.dll_free
cmp rdi, r13
jne 0x1000390be
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call sub.KERNEL32.dll_GetLastError
cmp eax, 0xb7
jne 0x100039131
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov rcx, rax
call fcn.1000650f8
mov rdi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
mov rsi, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp rsi, r13
je 0x100039128
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsIconic]
cmp eax, r13d
je 0x100039116
mov edx, 0xa
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_BringWindowToTop]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [rsp + 0x60], r13d
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r8, rax
mov r15d, 5
mov eax, dword [rsp + 0x60]
cmp eax, ebp
jle 0x10003919b
add r8, 8
dec eax
mov r9d, eax
mov al, byte [0x1000b10f2]
xor edx, edx
lea rdi, [0x100017df8]
mov rsi, qword [r8]
mov rcx, r15
repe cmpsw word [rsi], word [rdi]
je 0x100039183
sbb edx, edx
sbb edx, r14d
movzx eax, al
cmp edx, r13d
cmove eax, ebp
mov byte [0x1000b10f2], al
add r8, 8
sub r9, rbp
jne 0x10003916a
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov sil, r13b
mov qword [rsp + 0x48], r13
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [0x100018560]
mov r8d, ebp
xor edx, edx
lea rcx, [0x100018540]
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, r13d
jl 0x1000392ed
mov edi, 0x104
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x100]
xor r8d, r8d
xor edx, edx
lea rcx, [0x100017bd8]
call sub.SHELL32.dll_SHGetFolderPathEx
cmp eax, r13d
jl 0x1000392ed
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0xa8]
mov r11, rax
mov rdx, rdi
lea rcx, [rsp + 0x100]
cmp word [rcx], r13w
je 0x10003923b
add rcx, r12
sub rdx, rbp
jne 0x10003922d
cmp rdx, r13
je 0x1000392ed
mov rcx, rdi
sub rcx, rdx
sub rdi, rcx
lea rax, [rsp + rcx*2 + 0x100]
mov r8d, r13d
je 0x10003928b
lea rdx, [rdi + rcx + 0x7ffffefb]
sub r11, rax
cmp rdx, r13
je 0x100039286
movzx ecx, word [r11 + rax]
cmp cx, r13w
je 0x100039286
mov word [rax], cx
add rax, r12
sub rdi, rbp
sub rdx, rbp
cmp rdi, r13
jne 0x100039265
cmp rdi, r13
jne 0x100039294
sub rax, r12
mov r8d, 0x8007007a
mov word [rax], r13w
cmp r8d, r13d
jl 0x1000392ed
lea rcx, [rsp + 0x100]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [0x1000b1070], rax
cmp rax, r13
je 0x1000392ed
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_VariantInit]
cmp eax, r13d
je 0x1000392ed
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x40]
mov rdx, qword [0x1000b1070]
call qword [rax + 0x30]
cmp eax, r13d
jl 0x1000392ed
movzx esi, sil
cmp dword [rsp + 0x40], r13d
cmovne esi, ebp
mov rcx, qword [rsp + 0x48]
cmp rcx, r13
je 0x1000392fd
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp sil, r13b
jne 0x10003930b
mov ecx, r15d
call fcn.1000384a4
int3
mov ecx, 8
call fcn.1000990c0
cmp rax, r13
je 0x100039326
mov qword [rax], r13
mov qword [0x1000b10a8], rax
jmp 0x10003932d
mov qword [0x1000b10a8], r13
lea rcx, [0x100038f74]
call qword [sym.imp.msvcrt.dll_int____cdecl___unsigned_long_long_unsigned___int64_____cdecl__set_new_handler_int____cdecl___unsigned_long_long_unsigned___int64___]
mov ecx, ebp
call qword [sym.imp.msvcrt.dll_int___cdecl__set_new_mode_int_]
mov qword [0x1000b1090], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov rcx, rax
call fcn.1000650f8
mov qword [0x1000b1068], rax
mov r8d, 0x200
lea rdx, [rsp + 0x310]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [rax - 1]
movsxd rdx, ecx
cmp ecx, eax
ja 0x1000393a9
lea rdx, [rsp + rdx*2 + 0x310]
cmp word [rdx], 0x2f
je 0x1000393a0
cmp word [rdx], 0x5c
je 0x1000393a0
dec ecx
sub rdx, r12
cmp ecx, eax
jbe 0x100039389
jmp 0x1000393a9
mov word [rsp + rcx*2 + 0x310], r13w
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rdx, [0x100017e08]
lea rcx, [0x1000b1730]
call fcn.100066cb4
mov esi, 0x18
mov rcx, rsi
call fcn.1000990c0
lea r14d, [rsi - 8]
cmp rax, r13
je 0x1000393f1
mov dword [rax], r13d
mov dword [rax + 4], r13d
mov dword [rax + 8], r14d
mov qword [rax + 0x10], r13
jmp 0x1000393f4
mov rax, r13
mov qword [0x1000b10d0], rax
mov rcx, rax
call fcn.10005f7ec
lea r9, [0x100017e20]
lea r15, [0x100017c98]
mov r8, r15
mov edx, 0x469
mov ecx, r14d
call fcn.10005e0ac
mov rdx, qword [0x1000b1068]
mov qword [rsp + 0x20], rdx
lea r9, [0x100017e50]
mov r8, r15
mov edx, 0x472
mov ecx, r14d
call fcn.10005e0ac
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rdx, [rsp + 0x310]
mov qword [rsp + 0x20], rdx
lea r9, [0x100017e90]
mov r8, r15
mov edx, 0x476
mov ecx, r14d
call fcn.10005e0ac
lea r9, [0x100017ec8]
mov r8, r15
mov edx, 0x47a
mov ecx, r14d
call fcn.10005e0ac
mov dword [rsp + 0x80], ebp
mov qword [rsp + 0x88], r13
mov dword [rsp + 0x94], r13d
mov dword [rsp + 0x90], ebp
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x80]
lea rcx, [0x1000b1060]
call sub.gdiplus.dll_GdiplusStartup
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.100047708
mov ecx, 0x2868
call fcn.1000990c0
mov qword [rsp + 0x48], rax
cmp rax, r13
je 0x1000394f6
xor edx, edx
mov rcx, rax
call fcn.10005d4e4
jmp 0x1000394f9
mov rax, r13
mov qword [0x1000b10b0], rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.100064ac8
nop
lea r9, [0x100017ef0]
mov r8b, byte [0x1000b111d]
lea rdx, [rsp + 0x48]
mov rcx, qword [0x1000b10b0]
call fcn.10005d71c
cmp al, r13b
sete dil
mov rcx, qword [rsp + 0x58]
call sub.msvcrt.dll_free
cmp dil, r13b
je 0x1000395c8
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov edx, 0x37c
lea rcx, [rsp + 0xe0]
call fcn.100064be8
nop
mov rdi, qword [rax + 0x10]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.100064f14
nop
mov rcx, qword [rsp + 0xf0]
call sub.msvcrt.dll_free
mov byte [rsp + 0x30], bpl
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xfffe
mov r8d, ebp
xor edx, edx
mov ecx, 0x385
call fcn.1000609d4
xor ecx, ecx
call fcn.1000384a4
nop
call fcn.100043b94
cmp al, r13b
jne 0x1000395f1
lea r9, [0x100017f00]
mov r8, r15
mov edx, 0x4ae
mov ecx, r14d
call fcn.10005e0ac
xor ecx, ecx
call fcn.1000384a4
int3
mov edi, 0xc
cmp byte [0x1000b10f2], r13b
je 0x100039691
lea r9, [0x100017f30]
mov r8, r15
mov edx, 0x4bb
mov ecx, r14d
call fcn.10005e0ac
xor ecx, ecx
call fcn.100060888
cmp byte [0x1000b10f2], r13b
je 0x100039691
lea r9, [0x100017f60]
mov r8, r15
mov edx, 0x4c4
mov ecx, r14d
call fcn.10005e0ac
mov word [rsp + 0x48], di
mov word [rsp + 0x4a], bp
mov dword [rsp + 0x4c], r13d
mov rax, qword [0x1000b1078]
mov qword [rsp + 0x50], rax
mov r8d, r14d
mov edx, ebp
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_RegisterRawInputDevices]
cmp eax, r13d
jne 0x100039691
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea r9, [0x100017fc0]
mov r8, r15
mov edx, 0x4cf
mov ecx, r14d
call fcn.10005e0ac
lea r9, [0x100018000]
mov r8, r15
mov edx, 0x4d5
mov ecx, r14d
call fcn.10005e0ac
lea rdx, [0x100037d80]
mov ecx, r12d
call fcn.100047ee0
lea rdx, [0x100037de8]
mov ecx, 4
call fcn.100047ee0
lea rdx, [0x100037e20]
mov ecx, 5
call fcn.100047ee0
lea rdx, [0x100037db4]
mov ecx, 3
call fcn.100047ee0
lea rdx, [0x100037e54]
mov ecx, 6
call fcn.100047ee0
lea rdx, [0x100037e88]
mov ecx, 7
call fcn.100047ee0
lea rdx, [0x100037ebc]
mov ecx, 8
call fcn.100047ee0
lea rdx, [0x100037ef4]
mov ecx, 9
call fcn.100047ee0
lea rdx, [0x100037f2c]
mov ecx, 0xa
call fcn.100047ee0
lea rdx, [0x100037f64]
mov ecx, 0xb
call fcn.100047ee0
lea rdx, [0x10002e140]
mov ecx, ebp
call fcn.100047ee0
lea rdx, [0x100038040]
mov ecx, 0xd
call fcn.100047ee0
lea rdx, [0x100037fac]
mov ecx, edi
call fcn.100047ee0
lea rdx, [0x100038074]
mov ecx, 0xe
call fcn.100047ee0
lea rdx, [0x1000380a8]
mov ecx, 0xf
call fcn.100047ee0
lea rdx, [0x1000380dc]
mov ecx, r14d
call fcn.100047ee0
lea rdx, [0x100038118]
mov ecx, 0x11
call fcn.100047ee0
lea rdx, [0x10003814c]
mov ecx, 0x12
call fcn.100047ee0
lea rdx, [0x100038180]
mov ecx, 0x13
call fcn.100047ee0
lea rdx, [0x1000381b4]
mov ecx, 0x14
call fcn.100047ee0
lea rdx, [0x1000381e8]
mov ecx, 0x15
call fcn.100047ee0
lea rdx, [0x10003821c]
mov ecx, 0x16
call fcn.100047ee0
lea rdx, [0x100037ce4]
mov ecx, 0x17
call fcn.100047ee0
lea rdx, [0x100037d18]
mov ecx, esi
call fcn.100047ee0
lea rdx, [0x100038250]
mov ecx, 0x19
call fcn.100047ee0
lea rdx, [0x100038284]
mov ecx, 0x1a
call fcn.100047ee0
lea rdx, [0x1000382b8]
mov ecx, 0x1b
call fcn.100047ee0
lea rdx, [0x1000382ec]
mov ecx, 0x1c
call fcn.100047ee0
lea rdx, [0x100038320]
mov ecx, 0x1d
call fcn.100047ee0
lea rdx, [0x100038358]
mov ecx, 0x1e
call fcn.100047ee0
lea rdx, [0x1000383c8]
mov ecx, 0x1f
call fcn.100047ee0
lea rdx, [0x100038400]
mov edi, 0x20
mov ecx, edi
call fcn.100047ee0
lea rdx, [0x100038438]
lea ecx, [rdi + 1]
call fcn.100047ee0
lea rdx, [0x100038470]
lea ecx, [rdi + 2]
call fcn.100047ee0
lea rdx, [0x100037d4c]
lea ecx, [rdi + 5]
call fcn.100047ee0
lea rdx, [0x100038390]
lea ecx, [rdi + 3]
call fcn.100047ee0
lea r9, [0x100018030]
mov r8, r15
mov edx, 0x500
mov ecx, r14d
call fcn.10005e0ac
lea rdx, [0x10004ae0c]
lea rcx, [0x10001cac0]
call fcn.10003f280
lea rdx, [0x10004c6c0]
lea rcx, [0x10001ccf8]
call fcn.10003f280
lea rdx, [0x10003e2a8]
lea rcx, [0x100015bd8]
call fcn.10003f280
mov r8, rsi
xor edx, edx
lea rcx, [0x1000ae8d0]
call sub.msvcrt.dll_memset
mov byte [0x1000b109a], bpl
lea rdx, [0x10004c73c]
lea rcx, [0x10001cd90]
call fcn.10003f280
lea rdx, [0x10004dba4]
lea rcx, [0x10001d0d0]
call fcn.10003f280
lea rdx, [0x10004dbe4]
lea rcx, [0x10001d210]
call fcn.10003f280
lea rdx, [0x10004dd94]
lea rcx, [0x10001d290]
call fcn.10003f280
lea r9, [0x100018060]
mov r8, r15
mov edx, 0x50b
mov ecx, r14d
call fcn.10005e0ac
call fcn.100048ecc
cmp al, r13b
jne 0x1000399ed
lea r9, [0x1000180a0]
mov r8, r15
mov edx, 0x50e
mov ecx, r14d
call fcn.10005e0ac
xor ecx, ecx
call fcn.1000384a4
int3
lea rax, [fcn.100038cc8]
mov qword [0x1000b1510], rax
lea r9, [0x1000180e8]
mov r8, r15
mov edx, 0x518
mov ecx, r14d
call fcn.10005e0ac
mov ecx, 0x80
call fcn.1000990c0
cmp rax, r13
je 0x100039a2b
mov rcx, rax
call fcn.1000496ec
jmp 0x100039a2e
mov rax, r13
mov qword [0x1000b1198], rax
mov rcx, rax
call fcn.10005f7ec
mov rcx, qword [0x1000b1198]
call fcn.1000497ac
cmp al, r13b
jne 0x100039a6d
lea r9, [0x100018130]
mov r8, r15
mov edx, 0x51c
mov ecx, r14d
call fcn.10005e0ac
xor ecx, ecx
call fcn.1000384a4
int3
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
mov rax, qword [0x1000b1080]
mov qword [rsp + 0x68], rax
mov byte [rsp + 0x7c], r13b
mov dword [rsp + 0x78], edi
mov byte [rsp + 0x7d], r13b
mov rcx, qword [0x1000b1090]
mov rax, qword [rcx]
lea r8, [rsp + 0x74]
lea rdx, [rsp + 0x70]
call qword [rax + 0x18]
cmp byte [0x1000b0f59], r13b
je 0x100039acc
mov eax, dword [rsp + 0x70]
add eax, eax
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x74]
add eax, eax
mov dword [rsp + 0x74], eax
lea r9, [0x100018180]
mov r8, r15
mov edx, 0x533
mov ecx, r14d
call fcn.10005e0ac
mov ecx, 0xd8
call fcn.1000990c0
cmp rax, r13
je 0x100039afc
mov rcx, rax
call fcn.10003d384
jmp 0x100039aff
mov rax, r13
mov qword [0x1000b10c0], rax
mov rcx, rax
call fcn.10005f7ec
lea rdx, [rsp + 0x68]
mov rcx, qword [0x1000b10c0]
call fcn.10003b1b4
cmp al, r13b
jne 0x100039b43
lea r9, [0x1000181c0]
mov r8, r15
mov edx, 0x537
mov ecx, r14d
call fcn.10005e0ac
xor ecx, ecx
call fcn.1000384a4
int3
lea r9, [0x100018208]
mov r8, r15
mov edx, 0x53e
mov ecx, r14d
call fcn.10005e0ac
mov ecx, 0x38
call fcn.1000990c0
cmp rax, r13
je 0x100039b94
mov dword [rax + 0x20], r13d
mov dword [rax + 0x24], r13d
mov dword [rax + 0x28], r14d
mov qword [rax + 0x30], r13
mov qword [rax + 0x10], r13
mov dword [rax + 0x1c], r13d
mov dword [rax + 0x18], r12d
mov ecx, 0x64
mov dword [rax + 8], ecx
mov dword [rax], ecx
mov dword [rax + 4], ecx
jmp 0x100039b97
mov rax, r13
mov qword [0x1000b10c8], rax
mov rcx, rax
call fcn.10005f7ec
mov rcx, qword [0x1000b10c8]
call fcn.10003fc7c
cmp al, r13b
jne 0x100039bd6
lea r9, [0x100018230]
mov r8, r15
mov edx, 0x542
mov ecx, r14d
call fcn.10005e0ac
xor ecx, ecx
call fcn.1000384a4
int3
lea r9, [0x100018270]
mov r8, r15
mov edx, 0x54a
mov ecx, r14d
call fcn.10005e0ac
mov ecx, 0x90
call fcn.1000990c0
cmp rax, r13
je 0x100039c1a
xor r9d, r9d
mov r8b, byte [0x1000b10f2]
mov rdx, qword [0x1000b1078]
mov rcx, rax
call fcn.100067f48
mov rdi, rax
jmp 0x100039c1d
mov rdi, r13
mov qword [0x1000b1088], rdi
cmp qword [rdi + 8], r13
je 0x100039c32
mov rcx, rdi
call fcn.1000676a8
mov byte [rdi + 0x14], bpl
lea rax, [rdi + 0x10]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9, rdi
lea r8, [0x100067640]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi + 8], rax
lea r9, [0x1000182b8]
mov r8, r15
mov edx, 0x551
mov ecx, r14d
call fcn.10005e0ac
mov ecx, 0x50
call fcn.1000990c0
mov rdi, rax
cmp rax, r13
je 0x100039cf7
mov esi, 0x40
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi], rax
mov r12d, 0x200
mov rcx, r12
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 8], rax
mov dword [rdi + 0x10], r13d
mov dword [rdi + 0x14], r14d
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x18], rax
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x20], rax
mov dword [rdi + 0x28], r13d
mov dword [rdi + 0x2c], r14d
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x30], rax
mov rcx, r12
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rdi + 0x38], rax
mov dword [rdi + 0x40], r13d
mov dword [rdi + 0x44], r14d
jmp 0x100039cfa
mov rdi, r13
mov qword [0x1000b1190], rdi
mov rcx, rdi
call fcn.10005f7ec
lea r9, [0x1000182e0]
mov r8, r15
mov edx, 0x55c
mov ecx, r14d
call fcn.10005e0ac
lea rdx, [0x100018300]
mov rcx, qword [0x1000b10d0]
call fcn.1000400f8
cmp rax, r13
je 0x100039e61
lea r8, [rsp + 0x40]
lea rdx, [0x100018320]
mov rcx, rax
call fcn.100066510
mov r12, rax
mov ecx, dword [rsp + 0x40]
mov dword [rsp + 0x20], ecx
lea r9, [0x100018330]
mov r8, r15
mov edx, 0x567
mov ecx, r14d
call fcn.10005e0ac
mov ebp, r13d
cmp dword [rsp + 0x40], r13d
jbe 0x100039e52
mov rsi, r12
mov rcx, qword [rsi]
call fcn.100066bec
mov rdi, rax
mov qword [rsp + 0x20], rax
lea r9, [0x100018350]
mov r8, r15
mov edx, 0x56c
mov ecx, r14d
call fcn.10005e0ac
mov rcx, rdi
call qword [sym.imp.GDI32.dll_AddFontResourceW]
cmp eax, r13d
jne 0x100039dde
mov qword [rsp + 0x20], rdi
lea r9, [0x100018378]
mov r8, r15
mov edx, 0x584
mov ecx, r14d
call fcn.10005e0ac
mov rcx, rdi
call sub.msvcrt.dll_free
jmp 0x100039e42
mov eax, dword [0x1000ace38]
inc eax
mov dword [0x1000ace38], eax
mov ecx, dword [0x1000ace3c]
cmp eax, ecx
jbe 0x100039e35
add ecx, dword [0x1000ace40]
mov dword [0x1000ace3c], ecx
mov edx, ecx
shl rdx, 3
mov rcx, qword [0x1000ace48]
call qword [sym.imp.msvcrt.dll_realloc]
mov rdx, rax
cmp rax, r13
jne 0x100039e26
xor ecx, ecx
call fcn.10005f7ec
jmp 0x100039e42
mov qword [0x1000ace48], rax
mov eax, dword [0x1000ace38]
jmp 0x100039e3c
mov rdx, qword [0x1000ace48]
dec eax
mov qword [rdx + rax*8], rdi
inc ebp
add rsi, 8
cmp ebp, dword [rsp + 0x40]
jb 0x100039d83
mov rcx, r12
call sub.msvcrt.dll_free
mov ebp, 1
jmp 0x100039e78
lea r9, [0x1000183a8]
mov r8, r15
mov edx, 0x592
mov ecx, r14d
call fcn.10005e0ac
lea r9, [0x1000183d0]
mov r8, r15
mov edx, 0x597
mov ecx, r14d
call fcn.10005e0ac
xor edx, edx
mov rcx, qword [0x1000b1078]
call sub.WTSAPI32.dll_WTSRegisterSessionNotification
lea rdx, [0x100018420]
mov rcx, qword [0x1000b10d0]
call fcn.1000400f8
mov rdi, rax
mov byte [0x1000b1098], bpl
lea r9, [0x100018440]
mov r8, r15
mov edx, 0x59f
mov ecx, r14d
call fcn.10005e0ac
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x60]
cmp al, r13b
jne 0x100039efe
lea r9, [0x1000184b0]
mov r8, r15
mov edx, 0x5a2
mov ecx, r14d
call fcn.10005e0ac
xor ecx, ecx
call fcn.1000384a4
int3
mov byte [0x1000b1098], r13b
cmp rdi, r13
je 0x100039f27
or r8d, 0xffffffff
lea rdx, [0x1000184f8]
mov rcx, rdi
call fcn.100066834
cmp eax, r13d
setg byte [0x1000b0f5e]
call fcn.100038b3c
mov qword [0x1000b10a0], r13
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
cmp rax, r13
je 0x100039f68
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
mov rdi, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x1000b10a0], rax
mov byte [0x1000a6373], r13b
lea rcx, [0x1000b1060]
call qword [rsp + 0x98]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, r13d
je 0x100039ffc
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_GetMessageW]
cmp eax, r13d
je 0x10003a006
mov rdx, qword [0x1000b10a0]
cmp rdx, r13
je 0x100039fde
lea r8, [rsp + 0xb0]
mov rcx, qword [0x1000b1078]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
cmp eax, r13d
jne 0x100039f7d
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x100039f7d
call fcn.10003a0dc
jmp 0x100039f7d
mov rcx, qword [0x1000b1060]
call qword [rsp + 0xa0]
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x90]
xor ecx, ecx
call fcn.1000384a4
int3
mov rcx, qword [rsp + 0x710]
xor rcx, rsp
call fcn.1000995a0
lea r11, [rsp + 0x720]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret