Function at 0x140003f84
Capabilities:
Hide graphical window
Inspect load icon resource
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x138]
sub rsp, 0x230
mov rax, qword [0x140037010]
xor rax, rsp
mov qword [rbp + 0x120], rax
and dword [rbp + 0x50], 0
lea rax, [0x140005680]
and dword [rbp + 0x54], 0
mov rbx, rcx
xor ecx, ecx
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x40], 0x50
mov dword [rbp + 0x44], 0x40
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, 0x65
mov rcx, rbx
mov qword [rbp + 0x58], rax
call qword [sym.imp.USER32.dll_LoadIconW]
and qword [rbp + 0x68], 0
lea rcx, [rbp + 0x40]
and qword [rbp + 0x88], 0
xorps xmm0, xmm0
mov qword [rbp + 0x60], rax
lea rax, str.SMI_MainWindow
mov qword [rbp + 0x80], rax
movdqa xmmword [rbp + 0x70], xmm0
call qword [sym.imp.USER32.dll_RegisterClassExW]
and qword [rsp + 0x58], 0
lea r8, [0x14002db28]
mov rax, qword [rbp + 0x58]
mov r9d, 0xca0000
mov rdx, qword [rbp + 0x80]
xor ecx, ecx
mov qword [rsp + 0x50], rax
mov eax, 0x64
and qword [rsp + 0x48], 0
and qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0xbc
mov dword [rsp + 0x30], 0x1f4
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140037b68], rax
call fcn.140005480
mov rcx, qword [0x140037b68]
test al, al
jne 0x1400040b2
mov r9d, 0x10
lea rdx, str.Failed_to_create_Direct3D_device
xor r8d, r8d
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140005588
mov esi, 1
jmp 0x1400046c1
mov esi, 1
mov edx, esi
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140009a24
call fcn.140009b2c
mov rbx, rax
and qword [rax + 0x18], 0
call fcn.1400248c4
call fcn.140024718
mov rbx, qword [rbx + 0xa0]
lea rcx, str.SystemDrive
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov r8, rax
mov rdx, rax
sub r8, rsi
add r8, rsi
cmp byte [r8], 0
jne 0x1400040f8
movups xmm0, xmmword [str.WindowsFontsVerdana.ttf]
mov rcx, rbx
movss xmm2, dword [0x14003295c]
movups xmmword [r8], xmm0
movsd xmm1, qword [0x14002db90]
movsd qword [r8 + 0x10], xmm1
movzx eax, word [0x14002db98]
mov word [r8 + 0x18], ax
mov al, byte [0x14002db9a]
mov byte [r8 + 0x1a], al
call fcn.14001f7ec
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
call fcn.140002504
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
lea rcx, [rbp + 0xd0]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140004199
lea rcx, [rbp + 0xd0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140004691
call fcn.1400248ac
call fcn.140024f60
call fcn.14000a9d8
call fcn.1400057e0
lea rcx, [0x140037968]
call fcn.1400028dc
test al, al
jne 0x14000421f
lea rcx, str.PopupNotification
call fcn.140011054
lea rcx, str.PopupNotification
call fcn.140011380
test al, al
je 0x14000421f
lea rcx, [0x140037968]
call fcn.140002a68
mov rcx, rax
call fcn.1400267a0
movss xmm1, dword [0x1400329a4]
lea rcx, [rsp + 0x60]
xorps xmm2, xmm2
call fcn.140003f74
mov rdx, rax
lea rcx, [0x14002dbc8]
call fcn.140026ff4
test al, al
je 0x14000421f
call fcn.140004888
call fcn.1400112d0
movss xmm2, dword [0x140032994]
lea rcx, [rsp + 0x68]
movss xmm1, dword [0x1400329ac]
call fcn.140003f74
mov rcx, rax
xor edx, edx
call fcn.140010274
xorps xmm2, xmm2
lea rcx, [rsp + 0x70]
xorps xmm1, xmm1
call fcn.140003f74
xorps xmm2, xmm2
lea rcx, [rsp + 0x78]
xorps xmm1, xmm1
mov r8, rax
call fcn.140003f74
mov rcx, rax
call fcn.140010238
lea r8d, [rdx + 0x27]
lea rcx, str.MainWindow
call fcn.14000e2f8
lea rcx, str.Module_Name:
call fcn.1400266a4
movss xmm1, dword [0x1400329d8]
xorps xmm0, xmm0
call fcn.140010690
mov rcx, qword [0x1400378c0]
test rcx, rcx
je 0x1400042b4
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov rcx, rax
call fcn.1400267a0
call fcn.14001005c
subss xmm0, dword [0x140032998]
movss xmm1, dword [0x1400329d8]
call fcn.140010690
call fcn.140026ffc
test al, al
je 0x140004305
call fcn.140005734
mov rbx, rax
test rax, rax
je 0x140004305
mov rcx, rax
call fcn.1400027f4
test al, al
je 0x1400042f9
mov qword [0x1400378c0], rbx
jmp 0x140004305
lea rdx, str.Selected_file_is_not_an_valid_NT_executable
call fcn.140002adc
lea rcx, str.Process_Name_ID:
call fcn.1400266a4
movss xmm1, dword [0x1400329d8]
xorps xmm0, xmm0
call fcn.140010690
movss xmm0, dword [0x1400329a0]
call fcn.140010738
call fcn.1400279a8
movss xmm2, dword [0x14003291c]
lea rcx, [rbp - 0x80]
xorps xmm1, xmm1
call fcn.140003f74
mov rcx, rax
call fcn.14002792c
movss xmm2, dword [0x14003296c]
lea rcx, [rbp - 0x78]
movss xmm1, dword [0x1400329a8]
call fcn.140003f74
mov rdx, rax
lea rcx, str.Inject_module
call fcn.140026ff4
test al, al
je 0x1400044b9
cmp qword [0x1400378c0], 0
jne 0x14000439a
lea rdx, str.You_must_select_a_module_to_inject
call fcn.140002adc
jmp 0x1400044b9
lea rdx, [0x140037988]
lea rcx, [rbp + 0x90]
call fcn.140002b0c
lea rcx, [rbp + 0x90]
call fcn.1400028dc
test al, al
jne 0x1400044a1
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x90]
call fcn.140004830
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x90]
mov r9, qword [rax]
call fcn.140004860
mov r8, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isdigit]
mov rdx, r9
mov rcx, qword [rax]
call fcn.140004a04
lea rcx, [rbp + 0x90]
test al, al
je 0x140004434
call fcn.140003eec
lea rcx, [rbp - 0x20]
mov edi, eax
call fcn.14000480c
mov rdx, qword [0x1400378c0]
lea rcx, [rbp - 0x40]
mov rbx, rax
call fcn.140002b0c
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.140002584
jmp 0x1400044ad
lea rdx, [rbp - 0x60]
call fcn.140004830
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x90]
mov r9, qword [rax]
call fcn.140004860
mov r8, r9
lea rcx, [rbp + 0xb0]
mov rdx, qword [rax]
call fcn.140004a60
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x20]
call fcn.1400029e8
mov rdx, qword [0x1400378c0]
lea rcx, [rbp - 0x40]
mov rbx, rax
call fcn.140002b0c
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140002584
lea rcx, [rbp + 0xb0]
call fcn.1400029c8
jmp 0x1400044ad
lea rdx, str.You_must_provide_a_process_name_id
call fcn.140002adc
lea rcx, [rbp + 0x90]
call fcn.140002ae8
lea rcx, [rbp + 0x100]
call fcn.140004aa8
lea rcx, [rbp + 0x100]
call fcn.140002a68
mov rcx, rax
call fcn.1400266a4
call fcn.14001005c
subss xmm0, dword [0x140032980]
movss xmm1, dword [0x1400329d8]
call fcn.140010690
xorps xmm2, xmm2
lea rcx, [rbp - 0x50]
xorps xmm1, xmm1
call fcn.140003f74
mov rdx, rax
lea rcx, str.About
call fcn.140026ff4
test al, al
je 0x140004521
lea rcx, str.About_SMIAboutPopup
call fcn.140011054
lea rcx, str.About_SMIAboutPopup
call fcn.140011380
test al, al
je 0x14000461b
lea rdx, str.13:26:01
lea rcx, [rbp - 0x20]
call fcn.140002b0c
lea rdx, str.Sep_10_2023
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.140002b0c
mov r8, rax
lea rcx, [rbp + 0x20]
call fcn.140004b18
mov rdx, rax
lea r8, [0x14002dd0c]
lea rcx, [rbp]
call fcn.140004b48
mov r8, rbx
lea rcx, [rbp + 0x90]
mov rdx, rax
call fcn.140004b7c
mov rdx, rax
lea r8, str._nGithub:_https:__git.io_J0HCq
lea rcx, [rbp + 0xb0]
call fcn.140004b48
lea rcx, [rbp + 0x90]
call fcn.140002ae8
lea rcx, [rbp]
call fcn.140002ae8
lea rcx, [rbp + 0x20]
call fcn.140002ae8
lea rcx, [rbp - 0x40]
call fcn.140002ae8
lea rcx, [rbp - 0x20]
call fcn.140002ae8
lea rcx, [rbp + 0xb0]
call fcn.140002a68
mov rcx, rax
call fcn.1400267a0
movss xmm1, dword [0x1400329ac]
lea rcx, [rbp - 0x48]
xorps xmm2, xmm2
call fcn.140003f74
mov rdx, rax
lea rcx, str.Close
call fcn.140026ff4
test al, al
je 0x14000460f
call fcn.1400112d0
lea rcx, [rbp + 0xb0]
call fcn.140002ae8
call fcn.14000fbb0
call fcn.14000bb54
mov rcx, qword [0x1400378c8]
lea r8, [0x1400378e0]
xor r9d, r9d
mov edx, esi
mov rax, qword [rcx]
call qword [rax + 0x108]
call fcn.140009b38
mov rcx, rax
call fcn.140023670
mov rcx, qword [0x1400378d8]
mov edx, esi
mov r8d, dword [0x1400378b0]
mov rax, qword [rcx]
call qword [rax + 0x40]
cmp eax, 0x87a0001
jne 0x14000467e
mov ecx, 0x32
mov dword [0x1400378b0], esi
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140004685
and dword [0x1400378b0], 0
lea rcx, [rbp + 0x100]
call fcn.140002ae8
cmp dword [rbp + 0xd8], 0x12
jne 0x140004158
call fcn.140024850
call fcn.140024a68
call fcn.140009a90
call fcn.140005588
mov rcx, qword [0x140037b68]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor esi, esi
mov rdx, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x80]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, esi
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.14002b2d0
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret