Function at 0x401000
Capabilities:
Hide graphical window

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x110
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], r8
mov qword [rbp + 0x28], r9
mov eax, 0x4f
mov word [rbp - 0x26], ax
mov eax, 0x76
mov word [rbp - 0x24], ax
mov eax, 0x65
mov word [rbp - 0x22], ax
mov eax, 0x72
mov word [rbp - 0x20], ax
mov eax, 0x6c
mov word [rbp - 0x1e], ax
mov eax, 0x61
mov word [rbp - 0x1c], ax
mov eax, 0x79
mov word [rbp - 0x1a], ax
mov eax, 0x57
mov word [rbp - 0x18], ax
mov eax, 0x69
mov word [rbp - 0x16], ax
mov eax, 0x6e
mov word [rbp - 0x14], ax
mov eax, 0x64
mov word [rbp - 0x12], ax
mov eax, 0x6f
mov word [rbp - 0x10], ax
mov eax, 0x77
mov word [rbp - 0xe], ax
mov eax, 0x43
mov word [rbp - 0xc], ax
mov eax, 0x6c
mov word [rbp - 0xa], ax
mov eax, 0x61
mov word [rbp - 8], ax
mov eax, 0x73
mov word [rbp - 6], ax
mov eax, 0x73
mov word [rbp - 4], ax
mov eax, 0
mov word [rbp - 2], ax
movabs rax, 0x50
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x78]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x50
mov dword [rbp - 0x78], eax
mov eax, 3
mov dword [rbp - 0x74], eax
lea rax, [0x004012e0]
mov qword [rbp - 0x70], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x60], rax
movabs rax, 0x7f00
mov r11, rax
movabs rax, 0
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.user32.dll_LoadCursorW
mov qword [rbp - 0x50], rax
mov eax, 4
mov r10, rax
mov rcx, r10
call sub.gdi32.dll_GetStockObject
mov qword [rbp - 0x48], rax
lea rax, [rbp - 0x26]
mov qword [rbp - 0x38], rax
lea rax, [rbp - 0x78]
mov r10, rax
mov rcx, r10
call sub.user32.dll_RegisterClassExW
movabs rax, 0
mov qword [rsp + 0x58], rax
mov rax, qword [rbp + 0x10]
mov qword [rsp + 0x50], rax
movabs rax, 0
mov qword [rsp + 0x48], rax
movabs rax, 0
mov qword [rsp + 0x40], rax
mov eax, 0x258
mov qword [rsp + 0x38], rax
mov eax, 0x320
mov qword [rsp + 0x30], rax
mov eax, 0x80000000
mov qword [rsp + 0x28], rax
mov eax, 0x80000000
mov qword [rsp + 0x20], rax
mov eax, 0x90000000
mov r9, rax
lea rax, str.Overlay_Window
mov r8, rax
lea rax, [rbp - 0x26]
mov r11, rax
mov eax, 0x80008
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.user32.dll_CreateWindowExW
mov qword [rbp - 0x80], rax
mov eax, 3
mov r9, rax
mov eax, pe_nt_image_headers64
mov r8, rax
mov eax, 0
mov r11, rax
mov rax, qword [rbp - 0x80]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.user32.dll_SetLayeredWindowAttributes
mov eax, dword [rbp + 0x28]
mov r11, rax
mov rax, qword [rbp - 0x80]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.user32.dll_ShowWindow
mov rax, qword [rbp - 0x80]
mov r10, rax
mov rcx, r10
call sub.user32.dll_UpdateWindow
movabs rax, 0x30
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0xb0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov r9, rax
mov eax, 0
mov r8, rax
movabs rax, 0
mov r11, rax
lea rax, [rbp - 0xb0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.user32.dll_GetMessageW
cmp eax, 0
jle 0x4012ce
lea rax, [rbp - 0xb0]
mov r10, rax
mov rcx, r10
call sub.user32.dll_TranslateMessage
lea rax, [rbp - 0xb0]
mov r10, rax
mov rcx, r10
call sub.user32.dll_DispatchMessageW
jmp 0x40126d
mov eax, dword [rbp - 0xa0]
leave
ret