Function at 0x14007d2f0
Capabilities:
Acquire debug privileges

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rbp, rcx
lea rcx, [rsp + 0x40]
mov ebx, r9d
mov rdi, r8
call fcn.140061940
or r8d, 0xffffffff
lea esi, [r8 + 2]
mov r12d, r8d
lea r14d, [r8 + 1]
test sil, bl
lea rdx, [rsp + 0x98]
lea rcx, [0x14011b138]
cmovne r12d, esi
test bl, 2
cmovne r12d, r14d
call fcn.14006439c
movzx eax, word [0x14013518c]
lea r15d, [rsi + 3]
mov bl, r14b
test r15b, al
jne 0x14007d380
or ax, r15w
lea edx, [rsi + 1]
lea rcx, [0x1401145f0]
xor r8d, r8d
mov bl, sil
mov word [0x14013518c], ax
call fcn.14001bd24
mov rdx, qword [rsp + 0x98]
mov eax, pe_nt_image_headers64
cmp ax, word [rdx]
jne 0x14007d55b
cmp ax, word [rdx + 2]
jne 0x14007d422
lea r8, [rsp + 0x40]
add rdx, r15
xor r9d, r9d
mov rcx, rbp
mov byte [rsp + 0x20], sil
call fcn.140078dc8
mov r11, qword [rsp + 0x40]
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x98], r11
mov dword [rsp + 0xa8], r14d
call fcn.140071a90
movsxd rdi, dword [rsp + 0xa8]
cmp rdi, r14
jne 0x14007d681
cmp bl, r14b
je 0x14007d416
mov eax, 0xfffb
lea rcx, [0x1401145f0]
xor r8d, r8d
and word [0x14013518c], ax
mov edx, r15d
call fcn.14001bd24
mov rsi, 0xffffffff80070057
jmp 0x14007d648
cmp ax, word [rdx]
jne 0x14007d55b
lea r8, [rsp + 0x40]
add rdx, 2
xor r9d, r9d
mov rcx, rbp
mov byte [rsp + 0x20], sil
call fcn.140078dc8
mov r13, qword [rsp + 0x40]
lea rcx, [rsp + 0x98]
call fcn.140061940
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x48]
xor r8d, r8d
mov qword [rsp + 0x48], r13
call fcn.140065830
lea rdx, [rsp + 0x98]
xor r8d, r8d
mov rcx, rbp
call fcn.14000395c
mov r11, qword [rsp + 0x98]
lea rcx, [0x140119514]
mov rdx, r11
call fcn.14005aa28
cmp al, r14b
je 0x14007d4b1
lea rcx, [rsp + 0x98]
call fcn.140059370
jmp 0x14007d5a0
cmp word [r11], r14w
je 0x14007d49f
lea r13, [0x140135110]
mov rcx, r13
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov rax, r14
mov rdi, qword [rbp + 0x40]
cmp rdi, r14
je 0x14007d4f2
cmp rdi, rax
je 0x14007d4f2
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rdi + 0x110]
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
cmp eax, r14d
je 0x14007d540
mov rbp, qword [rbp + 0x38]
mov rax, rdi
cmp rbp, r14
jne 0x14007d4ca
mov rcx, r13
call qword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea rcx, [rsp + 0x98]
call fcn.140059370
cmp bl, r14b
je 0x14007d648
mov eax, 0xfffb
lea rcx, [0x1401145f0]
xor r8d, r8d
and word [0x14013518c], ax
mov edx, r15d
call fcn.14001bd24
jmp 0x14007d648
mov rcx, r13
call qword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea rcx, [rsp + 0x98]
call fcn.140059370
jmp 0x14007d60d
add rdx, 2
mov eax, 0x5c
cmp ax, word [rdx]
jne 0x14007d57b
cmp word [rdx + 2], r14w
jne 0x14007d57b
add rdx, 2
cmp r12d, r14d
cmovl r12d, esi
lea r8, [rsp + 0x40]
xor r9d, r9d
mov rcx, rbp
mov byte [rsp + 0x20], sil
call fcn.140078dc8
mov r13, qword [rsp + 0x40]
cmp word [r13], r14w
jne 0x14007d65a
cmp rdi, r14
je 0x14007d61b
bt dword [rdi + 0xb8], 0xf
jae 0x14007d5e9
mov rax, qword [rdi + 0x270]
mov rcx, qword [rax + 0x38]
jmp 0x14007d5d8
lea rax, [0x1401340d0]
cmp rcx, rax
je 0x14007d5dd
cmp qword [rcx + 0x40], r14
je 0x14007d5d4
cmp rdi, qword [rcx + 0x40]
jne 0x14007d5dd
mov rcx, qword [rcx + 0x38]
cmp rcx, r14
jne 0x14007d5bc
cmp qword [rcx + 0x40], r14
je 0x14007d5e9
mov rdi, qword [rcx + 0x40]
jmp 0x14007d5a5
mov rcx, qword [rdi + 0x20]
mov dword [rsp + 0x30], 0x97
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.DLL_SetWindowPos]
mov rcx, qword [rdi + 0x20]
mov edx, 0x43c
jmp 0x14007d6ac
cmp word [r13], r14w
jne 0x14007d65a
cmp bl, r14b
je 0x14007d645
mov eax, 0xfffb
lea rcx, [0x1401145f0]
xor r8d, r8d
and word [0x14013518c], ax
mov edx, r15d
call fcn.14001bd24
mov rsi, r14
lea rcx, [rsp + 0x40]
call fcn.140059370
mov rax, rsi
jmp 0x14007d6f4
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
call fcn.1400dc9a0
mov rdi, rax
mov dword [rsp + 0x30], 0x97
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.DLL_SetWindowPos]
mov edx, 0x10
mov rcx, rdi
xor r9d, r9d
xor r8d, r8d
cmp r12d, r14d
jle 0x14007d6bf
call qword [sym.imp.USER32.DLL_PostMessageW]
jmp 0x14007d6c5
call qword [sym.imp.USER32.DLL_SendMessageW]
cmp bl, r14b
je 0x14007d6e8
mov eax, 0xfffb
lea rcx, [0x1401145f0]
xor r8d, r8d
and word [0x14013518c], ax
mov edx, r15d
call fcn.14001bd24
lea rcx, [rsp + 0x40]
call fcn.140059370
xor eax, eax
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret