Function at 0x1400444ad
Capabilities:
Hide graphical window

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1b8
mov r13d, 0xfffffffb
movabs rax, 0x41c0000041b
mov qword [rsp + 0xa0], rax
movabs rax, 0x41e0000041d
mov qword [rsp + 0xa8], rax
mov eax, 1
shl rax, 0x20
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0xb0], rax
movabs rax, 0x300000002
mov qword [rsp + 0xb8], rax
mov rax, qword [str.TF_b_]
movss xmm0, dword [rax]
comiss xmm0, dword [0x1400a6f90]
ja 0x14004452f
mov r13d, 0xfffffffc
xor eax, eax
comiss xmm0, dword [0x1400a6f94]
mov ecx, 0x31
seta al
sub r13d, eax
call qword [sym.imp.USER32.dll_SetCursor]
mov dword [rsp + 0x6c], eax
cmp eax, 0x35
jg 0x14004456e
cmp eax, 0x27
jg 0x140044575
cmp eax, 0x1b
jg 0x140044582
cmp eax, 0x13
jle 0x140044589
mov ebx, 0x18
mov r12d, 0xa
jmp 0x140044590
mov ebx, 0x40
jmp 0x14004457a
mov ebx, 0x30
mov r12d, 0x14
jmp 0x140044590
mov ebx, 0x20
jmp 0x14004457a
mov ebx, dword [rsp + 0x6c]
xor r12d, r12d
lea rcx, str.ComDlg32
call fcn.1400417b7
mov rbp, qword [0x14011cf98]
mov r9d, ebx
mov r8d, 1
mov rdi, rax
mov edx, 0x241
mov rcx, rax
mov dword [rsp + 0x20], ebx
mov dword [rsp + 0x28], 0x8000
call rbp
mov rcx, rdi
mov r9d, ebx
mov r8d, 1
mov edx, 0x242
mov dword [rsp + 0x28], 0x8000
mov rsi, rax
mov dword [rsp + 0x20], ebx
call rbp
lea rcx, str.Shell32
mov rdi, rax
call fcn.1400417b7
mov r14, rax
test rdi, rdi
jne 0x140044620
mov dword [rsp + 0x20], ebx
mov r9d, ebx
mov r8d, 1
mov rcx, rax
mov dword [rsp + 0x28], 0x8000
mov edx, 0x416d
call rbp
mov rdi, rax
test rsi, rsi
jne 0x140044647
mov dword [rsp + 0x20], ebx
mov r9d, ebx
mov r8d, 1
mov rcx, r14
mov dword [rsp + 0x28], 0x8000
mov edx, 0x416e
call rbp
mov rsi, rax
mov edx, dword [rsp + 0x6c]
xor eax, eax
mov rbx, qword [sym.imp.COMCTL32.dll_ImageList_Create]
mov r9d, 1
mov r8d, 0x20020
mov dword [rsp + 0x20], eax
lea r14, [0x140118ba0]
mov ecx, edx
call rbx
mov edx, dword [rsp + 0x6c]
mov r9d, 1
mov r8d, 0x20020
mov qword [0x140118928], rax
xor eax, eax
mov ecx, edx
mov dword [rsp + 0x20], eax
call rbx
mov r8, rdi
or edx, 0xffffffff
mov rcx, qword [0x140118928]
mov rbx, qword [0x14011c238]
mov qword [0x140118920], rax
mov rdi, r14
call rbx
or edx, 0xffffffff
mov rcx, qword [0x140118920]
mov r8, rsi
call rbx
xor eax, eax
mov ecx, pe_nt_image_headers64
rep stosd dword [rdi], eax
mov ecx, 0xc2f
call fcn.14001e8f5
mov ecx, 0xc31
mov rdx, rax
mov rax, qword [0x1400b61e0]
cmp dword [rax], 0
je 0x1400446eb
mov ecx, 0xc32
call fcn.14001e8f5
or r9d, 0xffffffff
xor edx, edx
mov ecx, 0xfde9
mov r8, rax
mov dword [rsp + 0x28], pe_nt_image_headers64
xor ebp, ebp
xor r15d, r15d
mov qword [rsp + 0x20], r14
call qword [0x14011c6a0]
mov qword [rsp + 0x58], rbp
xor r8d, r8d
xor ecx, ecx
mov rax, qword [0x1400b66e0]
mov r9d, 0x56011958
lea rdx, str.ToolbarWindow32
mov rax, qword [rax]
mov qword [rsp + 0x48], 0x413
mov qword [rsp + 0x50], rax
mov rax, qword [0x1400b66d0]
mov rax, qword [rax]
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
call qword [sym.imp.USER32.dll_EndDialog]
mov rbx, qword [0x1400b6600]
xor r9d, r9d
mov rsi, qword [0x14011d030]
mov rcx, rax
mov r8d, 6
mov edx, 0x2007
mov qword [rbx], rax
call rsi
mov ecx, 0x38
xor r8d, r8d
mov edx, 0x430
lea rax, [rsp + 0xd0]
mov r9, qword [0x140118928]
mov qword [rsp + 0x70], rax
mov rdi, qword [rsp + 0x70]
xor eax, eax
rep stosd dword [rdi], eax
mov rcx, qword [rbx]
mov qword [rsp + 0xe8], r14
mov dword [rsp + 0xd4], 0x404
mov word [rsp + 0xd8], 0x5004
call rsi
xor r9d, r9d
mov rcx, qword [rbx]
mov r8d, 0x20
mov edx, 0x41e
call rsi
mov r9, qword [rsp + 0x70]
mov r8d, 1
mov rcx, qword [rbx]
mov edx, 0x444
call rsi
mov rcx, qword [rsp + 0x200]
mov edx, 0x404
call qword [sym.imp.USER32.dll_MessageBeep]
lea r8, [rsp + 0xc0]
mov rdx, r8
mov qword [rsp + 0x78], r8
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xor ecx, ecx
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x200]
mov r9d, 2
call qword [0x14011cfb0]
xor r8d, r8d
mov rcx, qword [rbx]
mov edx, 0x463
lea rax, [rsp + 0x98]
mov r9, rax
mov qword [rsp + 0x80], rax
call rsi
xor eax, eax
mov r9d, dword [rsp + 0xc4]
mov r8d, dword [rsp + 0xc0]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0xcc]
add r8d, r13d
sub eax, r9d
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x20], eax
mov rax, qword [0x1400b6740]
mov rcx, qword [rbx]
mov rdx, qword [rax]
call qword [0x14011d070]
mov ecx, 0xc2f
call fcn.14001e8f5
mov rcx, qword [rbx]
mov rdx, rax
call fcn.1400419a6
mov ecx, 0xc30
call fcn.14001e8f5
mov ecx, 0xc31
mov rdx, rax
mov rax, qword [0x1400b61f0]
cmp dword [rax], 0
je 0x1400448ea
mov ecx, 0xc32
call fcn.14001e8f5
or r9d, 0xffffffff
xor edx, edx
mov ecx, 0xfde9
lea r10, [0x140118ca0]
mov r8, rax
mov dword [rsp + 0x28], pe_nt_image_headers64
mov qword [rsp + 0x20], r10
call qword [0x14011c6a0]
xor ecx, ecx
xor r8d, r8d
mov r9d, 0x56011958
mov rbp, qword [0x1400b66e0]
mov qword [rsp + 0x58], rcx
xor ecx, ecx
lea rdx, str.ToolbarWindow32
mov r15, qword [0x1400b66d0]
mov r14, qword [sym.imp.USER32.dll_EndDialog]
mov rax, qword [rbp]
mov qword [rsp + 0x48], 0x414
mov qword [rsp + 0x50], rax
mov rax, qword [r15]
mov dword [rsp + 0x38], r8d
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], r8d
xor r8d, r8d
mov qword [rsp + 0x40], rax
call r14
mov rsi, qword [0x1400b6610]
mov rbx, qword [0x14011d030]
xor r9d, r9d
mov rcx, rax
mov r8d, 6
mov edx, 0x2007
mov qword [rsi], rax
call rbx
mov ecx, 0x38
xor r8d, r8d
mov edx, 0x430
lea rax, [rsp + 0xd0]
lea r10, [0x140118ca0]
mov r9, qword [0x140118928]
mov qword [rsp + 0x78], rax
mov rdi, qword [rsp + 0x78]
xor eax, eax
rep stosd dword [rdi], eax
mov qword [rsp + 0xe8], r10
mov rcx, qword [rsi]
mov dword [rsp + 0xd4], 0x405
mov word [rsp + 0xd8], 0x5004
call rbx
mov rcx, qword [rsi]
xor r9d, r9d
mov r8d, 0x20
mov edx, 0x41e
call rbx
mov r9, qword [rsp + 0x70]
mov rcx, qword [rsi]
mov r8d, 1
mov edx, 0x444
call rbx
mov rcx, qword [rsp + 0x200]
mov edx, 0x405
call qword [sym.imp.USER32.dll_MessageBeep]
lea r8, [rsp + 0xc0]
mov rdx, r8
mov qword [rsp + 0x88], r8
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xor ecx, ecx
mov r8, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x200]
mov r9d, 2
call qword [0x14011cfb0]
mov rcx, qword [rsi]
xor r8d, r8d
mov edx, 0x463
mov r9, qword [rsp + 0x80]
call rbx
mov r9d, dword [rsp + 0xc4]
mov eax, dword [rsp + 0xcc]
xor r10d, r10d
mov r8d, dword [rsp + 0xc0]
mov dword [rsp + 0x30], r10d
sub eax, r9d
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x98]
add r8d, r13d
mov dword [rsp + 0x20], eax
mov rax, qword [0x1400b6630]
mov rcx, qword [rsi]
mov rdx, qword [rax]
call qword [0x14011d070]
mov ecx, 0xc30
call fcn.14001e8f5
mov rcx, qword [rsi]
xor esi, esi
mov rdx, rax
call fcn.1400419a6
xor r11d, r11d
xor r8d, r8d
mov r9d, 0x56011958
mov qword [rsp + 0x58], r11
mov rax, qword [rbp]
xor ecx, ecx
xor edi, edi
mov qword [rsp + 0x48], 0x417
lea rdx, str.ToolbarWindow32
mov qword [rsp + 0x50], rax
mov rax, qword [r15]
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
mov qword [rsp + 0x40], rax
call r14
mov rsi, qword [0x1400b66f0]
mov edx, dword [rsp + 0x6c]
mov r9d, 8
mov r8d, 0x20020
lea r14, str.yz
mov qword [rsi], rax
mov ecx, edx
mov dword [rsp + 0x20], edi
xor edi, edi
call qword [sym.imp.COMCTL32.dll_ImageList_Create]
mov r15, qword [sym.imp.USER32.dll_DispatchMessageW]
mov r13, rax
xor eax, eax
mov edx, r12d
add edx, dword [r14 + rdi*4]
mov r8d, 0xa
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x94]
movzx edx, dx
lea r9, str.toolbar_icon
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp]
call fcn.1400371fc
xor edx, edx
mov r8d, 1
mov r9d, 0x30000
mov dword [rsp + 0x30], edx
mov rcx, rax
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], edx
mov edx, dword [rsp + 0x94]
call r15
mov r8, rax
mov rax, qword [0x1400b69c0]
cmp dword [rax], 0
je 0x140044bd3
test rdi, rdi
jne 0x140044bd3
mov rcx, r8
call fcn.14003fba7
mov r8, rax
inc rdi
mov qword [rsp + 0x80], r8
or edx, 0xffffffff
mov rcx, r13
call qword [0x14011c238]
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.USER32.dll_FlashWindowEx]
cmp rdi, 4
jne 0x140044b5a
xor r8d, r8d
mov rcx, qword [rsi]
mov r9, r13
mov edx, 0x430
call rbx
mov rcx, qword [rsi]
xor r9d, r9d
mov r8d, 0x20
mov edx, 0x41e
call rbx
mov rdi, qword [rsp + 0x78]
xor eax, eax
mov ecx, 0x38
mov r8d, 7
rep stosd dword [rdi], eax
mov rax, qword [0x1400b6240]
cmp dword [rax], 0
je 0x140044c61
mov dword [rsp + 0xa8], 0x41e
mov r8d, 5
mov dword [rsp + 0xb8], 3
mov rax, qword [str.TF_b_]
movss xmm0, dword [0x1400a6f98]
lea r9, [0x1400a6b4e]
comiss xmm0, dword [rax]
jbe 0x140044c83
lea r9, [0x1400a6b4c]
mov rax, qword [rsp + 0x78]
xor edx, edx
test dl, 1
jne 0x140044cb5
mov ecx, edx
mov byte [rax + 9], 0
sar ecx, 1
mov byte [rax + 8], 4
movsxd rcx, ecx
mov r10d, dword [rsp + rcx*4 + 0xa0]
mov ecx, dword [rsp + rcx*4 + 0xb0]
mov dword [rax + 4], r10d
mov dword [rax], ecx
jmp 0x140044cc7
mov byte [rax + 9], 0x10
mov byte [rax + 8], 0x10
mov dword [rax], 0xfffffffe
mov qword [rax + 0x18], r9
inc edx
add rax, 0x20
cmp r8d, edx
jne 0x140044c8a
mov r9, qword [rsp + 0x70]
mov rcx, qword [rsi]
and r8d, 7
mov edx, 0x444
call rbx
mov eax, dword [0x140118904]
xor r8d, r8d
mov rcx, qword [rsi]
movzx r9d, word [rsp + 0x6c]
mov edx, 0x41f
shl eax, 0x10
or r9d, eax
call rbx
mov ecx, 0xcf3
call fcn.14001e8f5
mov rcx, qword [rsi]
mov rdx, rax
call fcn.1400419a6
mov rax, qword [0x1400b6710]
mov edx, 0xfffffffc
lea r8, [0x140041189]
mov rcx, qword [rax]
call qword [0x14011d068]
mov qword [0x140118da0], rax
add rsp, 0x1b8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret