Function at 0x14001107d
Capabilities:
Hide graphical window

Disassembly:
jmp 0x140014730
push rbp
push rsi
push rdi
sub rsp, 0x160
lea rbp, [rsp + 0x60]
lea rcx, [0x14001c40e]
call fcn.140011109
nop
mov dword [rbp + 0x50], 0x50
mov dword [rbp + 0x54], 2
lea rax, [0x14001108c]
mov qword [rbp + 0x58], rax
mov dword [rbp + 0x60], 0
mov dword [rbp + 0x64], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
lea rax, [rbp + 0xb0]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xb1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xb0]
movzx r8d, byte [rbp + 0xb1]
movzx edx, byte [rbp + 0xb2]
lea rcx, [rbp + 0xa0]
call fcn.140013f80
mov rcx, rax
call fcn.14001100a
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], 0
lea rax, [0x140018220]
lea rcx, [rbp + 0x50]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x50
rep movsb byte [rdi], byte [rsi]
lea rcx, [0x140018220]
call qword [sym.imp.USER32.dll_RegisterClassExA]
nop
mov rax, qword [0x140018238]
mov qword [rbp + 0xd8], rax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rbp + 0xe0], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rbp + 0xe4], eax
lea rax, [rbp + 0xd0]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xd1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xd0]
movzx r8d, byte [rbp + 0xd1]
movzx edx, byte [rbp + 0xd2]
lea rcx, [rbp + 0xc0]
call fcn.140014000
mov rcx, rax
call fcn.14001100a
mov qword [rbp + 0xe8], rax
mov rax, qword [0x140018260]
mov qword [rbp + 0xf0], rax
mov qword [rsp + 0x58], 0
mov rax, qword [rbp + 0xd8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov eax, dword [rbp + 0xe0]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0xe4]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x80000000
mov r8, qword [rbp + 0xe8]
mov rdx, qword [rbp + 0xf0]
mov ecx, 8
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x140018208], rax
mov edx, 0xa
mov rcx, qword [0x140018208]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
mov rcx, qword [0x140018208]
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
mov r8d, 0x80028
mov edx, 0xffffffec
mov rcx, qword [0x140018208]
call qword [sym.imp.USER32.dll_SetWindowLongA]
nop
mov dword [rbp], 0xffffffff
lea rax, [rbp + 4]
mov rdi, rax
xor eax, eax
mov ecx, 0xc
rep stosb byte [rdi], al
mov rax, qword [0x140018050]
mov qword [rbp + 0xd8], rax
lea rdx, [rbp]
mov rcx, qword [0x140018208]
call qword [rbp + pe_nt_image_headers64]
nop
call fcn.1400110a0
movzx eax, al
test eax, eax
jne 0x1400149c9
mov rdx, qword [0x140018238]
mov rcx, qword [0x140018260]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
xor al, al
jmp 0x140014a3c
lea rax, [0x1400181c8]
mov qword [rsp + 0x58], rax
lea rax, [0x140017084]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x40], 4
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x2bc
xor r8d, r8d
mov edx, 0xf
mov rcx, qword [0x140018290]
call fcn.140011028
nop
lea rax, [0x1400110aa]
mov qword [0x1400181d8], rax
mov al, 1
lea rsp, [rbp + 0x100]
pop rdi
pop rsi
pop rbp
ret