Function at 0x14001150a
Capabilities:
Hide graphical window

Disassembly:
jmp 0x140018434
push rbp
push rdi
mov eax, 0x1f18
call fcn.14001115e
sub rsp, rax
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x63e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140027040]
xor rax, rbp
mov qword [rbp + 0x1ee8], rax
lea rcx, [0x14002d10a]
call fcn.14001172b
call fcn.140017bf0
movzx eax, al
test eax, eax
je 0x14001848d
mov eax, 1
jmp 0x14001875d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140017f74
lea rcx, [rbp + 4]
call fcn.1400113e8
mov edx, eax
lea rcx, [rbp + 0x30]
call fcn.140011325
mov r8d, 0xffff
mov edx, 1
lea rcx, [rbp + 0x13d8]
call fcn.140011177
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x13d8]
call fcn.1400110e6
mov word [rbp + 0x13f4], ax
mov rdx, qword [str.PopulationONE.exe]
lea rcx, [rbp + 0x1ce8]
call fcn.140011262
nop
movzx r8d, word [rbp + 0x13f4]
lea rdx, [rbp + 0x1ce8]
lea rcx, [rbp + 0x1418]
call fcn.1400182d8
nop
lea rcx, [rbp + 0x1ce8]
call fcn.140011668
mov rdx, qword [str.Papbase.dll]
lea rcx, [rbp + 0x1d28]
call fcn.140011262
nop
movzx r8d, word [rbp + 0x13f4]
lea rdx, [rbp + 0x1d28]
lea rcx, [rbp + 0x1458]
call fcn.1400182d8
nop
lea rcx, [rbp + 0x1d28]
call fcn.140011668
movzx r8d, word [rbp + 0x13f4]
lea rdx, [rbp + 0x1418]
lea rcx, [rbp + 0x1d68]
call fcn.1400182d8
mov qword [rbp + 0x1ed8], rax
mov rax, qword [rbp + 0x1ed8]
mov qword [rbp + 0x1ee0], rax
mov rcx, qword [rbp + 0x1ee0]
call fcn.1400174c8
mov dword [rbp + 0x1494], eax
lea rcx, [rbp + 0x1d68]
call fcn.140011668
cmp dword [rbp + 0x1494], 0
jne 0x1400185e2
mov dword [rbp + 0x1da4], 1
lea rcx, [rbp + 0x1458]
call fcn.140011668
nop
lea rcx, [rbp + 0x1418]
call fcn.140011668
mov eax, dword [rbp + 0x1da4]
jmp 0x14001875d
movzx r8d, word [rbp + 0x13f4]
lea rdx, [rbp + 0x1458]
lea rcx, [rbp + 0x1de8]
call fcn.1400182d8
mov qword [rbp + 0x1ed8], rax
mov rcx, qword [rbp + 0x1ed8]
call fcn.140011271
xor r9d, r9d
lea r8, [rbp + 0x14c0]
mov edx, 0x104
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
jne 0x140018638
mov dword [rbp + 0x1ee0], 1
jmp 0x140018642
mov dword [rbp + 0x1ee0], 0
mov al, byte [rbp + 0x1ee0]
mov byte [rbp + 0x1dc4], al
lea rcx, [rbp + 0x1de8]
call fcn.140011668
movzx eax, byte [rbp + 0x1dc4]
test eax, eax
je 0x140018693
mov dword [rbp + 0x1e24], 1
lea rcx, [rbp + 0x1458]
call fcn.140011668
nop
lea rcx, [rbp + 0x1418]
call fcn.140011668
mov eax, dword [rbp + 0x1e24]
jmp 0x14001875d
lea rdx, [rbp + 0x14c0]
lea rcx, [rbp + 0x1e68]
call fcn.140011262
nop
lea rdx, [rbp + 0x1e68]
mov ecx, dword [rbp + 0x1494]
call fcn.1400176cc
movzx eax, al
test eax, eax
jne 0x1400186cc
mov dword [rbp + 0x1ed4], 1
jmp 0x1400186d6
mov dword [rbp + 0x1ed4], 0
mov al, byte [rbp + 0x1ed4]
mov byte [rbp + 0x1e44], al
lea rcx, [rbp + 0x1e68]
call fcn.140011668
movzx eax, byte [rbp + 0x1e44]
test eax, eax
je 0x140018724
mov dword [rbp + 0x1ea4], 1
lea rcx, [rbp + 0x1458]
call fcn.140011668
nop
lea rcx, [rbp + 0x1418]
call fcn.140011668
mov eax, dword [rbp + 0x1ea4]
jmp 0x14001875d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
call fcn.1400175f4
mov dword [rbp + 0x1ec4], 0
lea rcx, [rbp + 0x1458]
call fcn.140011668
nop
lea rcx, [rbp + 0x1418]
call fcn.140011668
mov eax, dword [rbp + 0x1ec4]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x1400225b0]
call fcn.140011622
mov rax, rdi
mov rcx, qword [rbp + 0x1ee8]
xor rcx, rbp
call fcn.14001138e
lea rsp, [rbp + 0x1ef8]
pop rdi
pop rbp
ret