Function at 0x1400c68f0
Capabilities:
Hide graphical window

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x318
lea rbp, [rsp + 0x70]
lea rdi, [rsp + 0x70]
mov ecx, 0x7a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x338]
mov rax, qword [0x140254140]
xor rax, rbp
mov qword [rbp + 0x298], rax
lea rcx, [0x14026b545]
call fcn.1400a9448
call qword [sym.imp.COMCTL32.dll_InitCommonControls]
mov rax, qword [rbp + 0x2c8]
mov rdx, qword [rax + 8]
lea rcx, [rbp + 0x158]
call fcn.1400a5677
mov qword [rbp + 0x288], rax
mov rdx, qword [rbp + 0x288]
lea rcx, [0x1402558e8]
call fcn.1400a6270
lea rcx, [rbp + 0x158]
call fcn.1400a5c3a
mov rax, qword [rbp + 0x2c8]
mov rdx, qword [rax + 8]
lea rcx, [rbp + 0x198]
call fcn.1400a941b
mov qword [rbp + 0x288], rax
mov rdx, qword [rbp + 0x288]
lea rcx, [0x140255910]
call fcn.1400a6270
lea rcx, [rbp + 0x198]
call fcn.1400a5c3a
mov rax, qword [rbp + 0x2c8]
mov rax, qword [rax + 8]
mov qword [0x140255988], rax
mov rax, qword [rbp + 0x2c0]
mov qword [0x140255990], rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp + 8]
mov ecx, dword [rbp + 0x10]
sub ecx, eax
mov eax, ecx
mov dword [rbp + 0x34], eax
mov eax, dword [rbp + 0xc]
mov ecx, dword [rbp + 0x14]
sub ecx, eax
mov eax, ecx
mov dword [rbp + 0x54], eax
mov eax, dword [rbp + 0x34]
sub eax, 0x16
mov dword [0x140255a24], eax
mov ecx, 0xebebeb
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x140255998], rax
mov ecx, 0xb4a773
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x1402559a0], rax
mov ecx, 0xfafafa
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x1402559a8], rax
mov ecx, 0xc8c8c8
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x1402559b0], rax
mov ecx, 0x2311e8
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x1402559b8], rax
mov ecx, 0x7a70f1
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x1402559c0], rax
mov ecx, 0xe29d52
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x1402559c8], rax
mov ecx, 0xa0935f
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x1402559d0], rax
mov edx, 0x7d1
mov rax, qword [rbp + 0x2c8]
mov rcx, qword [rax + 8]
call fcn.1400a6e82
mov qword [0x140255a00], rax
mov edx, 0x7d2
mov rax, qword [rbp + 0x2c8]
mov rcx, qword [rax + 8]
call fcn.1400a6e82
mov qword [0x140255a08], rax
mov edx, 0x7d3
mov rax, qword [rbp + 0x2c8]
mov rcx, qword [rax + 8]
call fcn.1400a6e82
mov qword [0x140255a10], rax
mov edx, 0x7d4
mov rax, qword [rbp + 0x2c8]
mov rcx, qword [rax + 8]
call fcn.1400a6e82
mov qword [0x140255a18], rax
lea rax, str.Arial
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2bc
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x1402559d8], rax
lea rax, str.Arial
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x16
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x1402559e0], rax
lea rax, str.Arial
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2bc
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x12
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x1402559e8], rax
lea rax, str.Arial
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x12
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x1402559f0], rax
lea rax, str.Arial
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x1402559f8], rax
mov eax, dword [rbp + 0x34]
sub eax, 0x32
mov dword [rsp + 0x20], 0x27
mov r9d, 0x31
mov r8d, 1
mov edx, eax
lea rcx, [0x140255880]
call fcn.1400a5f55
mov dword [rbp + 0x78], 0x96
mov dword [rbp + 0x7c], 0x28
mov eax, dword [rbp + 0x54]
mov ecx, dword [rbp + 0x7c]
lea eax, [rax + rcx - 0x46]
mov ecx, dword [rbp + 0x34]
mov edx, dword [rbp + 0x78]
lea ecx, [rcx + rdx - 0x140]
mov edx, dword [rbp + 0x54]
sub edx, 0x46
mov r8d, dword [rbp + 0x34]
sub r8d, 0x140
mov dword [rbp + 0x284], r8d
mov dword [rsp + 0x28], 0xa
mov dword [rsp + 0x20], 0xa
mov r9d, eax
mov r8d, ecx
mov eax, dword [rbp + 0x284]
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov rdx, rax
lea rcx, [0x140255940]
call fcn.1400a77dd
lea rdx, str.__Back
lea rcx, [rbp + 0x1d8]
call fcn.1400a6f6d
nop
lea rdx, [rbp + 0x1d8]
lea rcx, [0x140255940]
call fcn.1400a6261
nop
lea rcx, [rbp + 0x1d8]
call fcn.1400a5c3a
xor r8d, r8d
mov edx, 1
lea rcx, [0x140255940]
call fcn.1400a8c9b
mov eax, dword [rbp + 0x54]
mov ecx, dword [rbp + 0x7c]
lea eax, [rax + rcx - 0x46]
mov ecx, dword [rbp + 0x34]
mov edx, dword [rbp + 0x78]
lea ecx, [rcx + rdx - 0xa0]
mov edx, dword [rbp + 0x54]
sub edx, 0x46
mov r8d, dword [rbp + 0x34]
sub r8d, 0xa0
mov dword [rbp + 0x284], r8d
mov dword [rsp + 0x28], 0xa
mov dword [rsp + 0x20], 0xa
mov r9d, eax
mov r8d, ecx
mov eax, dword [rbp + 0x284]
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov rdx, rax
lea rcx, [0x140255830]
call fcn.1400a77dd
lea rdx, str.Next__
lea rcx, [rbp + 0x218]
call fcn.1400a6f6d
nop
lea rdx, [rbp + 0x218]
lea rcx, [0x140255830]
call fcn.1400a6261
nop
lea rcx, [rbp + 0x218]
call fcn.1400a5c3a
mov eax, dword [rbp + 0x54]
sub eax, 0x140
mov ecx, dword [rbp + 0x34]
sub ecx, 0x14
mov qword [rsp + 0x58], 0
mov rdx, qword [rbp + 0x2c8]
mov rdx, qword [rdx + 8]
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], 0x3e9
mov rdx, qword [rbp + 0x2c0]
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], 0xb4
mov dword [rsp + 0x20], 0xa
mov r9d, 0x50a00804
lea r8, [0x140203073]
lea rdx, str.edit
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov edx, 0x3e9
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov r8, qword [0x1402559f8]
mov edx, 0x30
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageA]
mov r8d, 0xbb9
mov rax, qword [rbp + 0x2c8]
mov rdx, qword [rax + 8]
lea rcx, [rbp + 0x258]
call fcn.1400a6c93
mov qword [rbp + 0x288], rax
mov rcx, qword [rbp + 0x288]
call fcn.1400a55e6
mov qword [rbp + 0x290], rax
mov edx, 0x3e9
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, qword [rbp + 0x290]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowTextA]
lea rcx, [rbp + 0x258]
call fcn.1400a5c3a
mov edx, 0x3e9
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [rbp + 0x34]
sub eax, 0x28
mov qword [rsp + 0x58], 0
mov rcx, qword [rbp + 0x2c8]
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], 0x7d1
mov rcx, qword [rbp + 0x2c0]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x19
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0xa0
mov dword [rsp + 0x20], 0x14
mov r9d, 0x50000003
lea r8, str.Add_Desktop_Shortcut
lea rdx, str.button
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov edx, 0x7d1
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov r8, qword [0x1402559f0]
mov edx, 0x30
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageA]
mov edx, 0x7d1
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov r8d, 1
mov edx, 0xf1
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageA]
mov edx, 0x7d1
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [rbp + 0x34]
sub eax, 0x28
mov qword [rsp + 0x58], 0
mov rcx, qword [rbp + 0x2c8]
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], 0x7d2
mov rcx, qword [rbp + 0x2c0]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x19
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0xbe
mov dword [rsp + 0x20], 0x14
mov r9d, 0x50000003
lea r8, str.Add_Start_Menu_Shortcuts
lea rdx, str.button
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov edx, 0x7d2
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov r8, qword [0x1402559f0]
mov edx, 0x30
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageA]
mov edx, 0x7d2
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov r8d, 1
mov edx, 0xf1
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageA]
mov edx, 0x7d2
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xor r9d, r9d
mov r8d, 0xa
mov edx, 1
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_SetTimer]
xor r9d, r9d
mov r8d, 0x12c
mov edx, 2
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_SetTimer]
mov eax, 1
mov edi, eax
lea rcx, [rbp - 0x70]
lea rdx, [0x1402047f0]
call fcn.1400a8836
mov eax, edi
mov rcx, qword [rbp + 0x298]
xor rcx, rbp
call fcn.1400a714d
lea rsp, [rbp + reloc.SHELL32.dll_IsUserAnAdmin]
pop rdi
pop rbp
ret