Function at 0x140026db0
Capabilities:
Create process on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x290]
sub rsp, 0x390
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x3e0], rbx
mov rax, qword [0x140195088]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov r14, rdx
mov r15, rcx
cmp dx, 2
jne 0x140026e0d
mov edx, 2
call fcn.1400277a0
mov eax, 1
jmp 0x1400270e8
mov eax, 0xb2
cmp r14w, ax
jne 0x140026e4f
lea r8, str.https:__www.ergonis.com
mov ebx, 1
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [0x1401a1138], rax
jmp 0x1400270e6
mov eax, 0xb0
cmp r14w, ax
jne 0x140026e63
lea r8, str.https:__www.ergonis.com_products_popcharwin_faq.html
jmp 0x140026e1f
mov eax, 0xac
cmp r14w, ax
jne 0x140026e77
lea r8, str.https:__store.ergonis.com_products_popcharwin
jmp 0x140026e1f
mov rcx, qword [rcx + 8]
mov r13, qword [rcx + 0x18]
call fcn.140038ba0
mov esi, dword [rax + 0x38]
lea r12, [0x140097ddc]
test esi, esi
jne 0x140026ec8
xor ecx, ecx
call fcn.140067508
mov rcx, rax
call fcn.140067458
call fcn.14006742c
mov esi, eax
mov eax, 0x68db8bad
imul esi
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x2710
sub esi, ecx
lea r12, [0x1400af60c]
mov rcx, qword [r15 + 8]
call fcn.140038ca0
mov rdi, rax
mov rcx, qword [r15 + 8]
call fcn.140038d90
mov rbx, rax
mov rcx, qword [r15 + 8]
call fcn.140038930
mov r9, rax
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
lea r8, str._s__20v_s__20__s__s_d__20
mov edx, 0x3f
lea rcx, [rbp]
call fcn.140004720
mov rcx, qword [r15 + 8]
call fcn.140038c90
mov esi, eax
mov edx, 0xf
mov rcx, r13
call fcn.140057cd0
mov edi, eax
mov edx, 0xb
mov rcx, r13
call fcn.140057cd0
mov ebx, eax
mov rcx, qword [r15 + 8]
call fcn.140038e60
mov r9d, eax
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
lea r8, str.R_02X__20L_02X__20C_02X__20F_02X__20
mov edx, 0x3f
lea rcx, [rbp - 0x80]
call fcn.140004720
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
mov edx, 0x80
lea rcx, [rsp + 0x48]
call fcn.140033c10
nop
lea rcx, [rsp + 0x48]
call fcn.140034950
mov eax, 0xad
cmp r14w, ax
jne 0x140027060
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov edx, 0x80
lea rcx, [rsp + 0x60]
call fcn.140033c10
nop
mov edx, 0x278e
lea rcx, [rsp + 0x60]
call fcn.140033cf0
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp]
mov qword [rsp + 0x20], rax
lea r9, str.mailto:popcharwin_support_ergonis.com
lea r8, str._s_subject_sbody_s__20_s__0D__0A_s:__0D__0A
mov edx, 0xff
lea rcx, [rbp + 0x80]
call fcn.140004720
mov rcx, qword [r15 + 8]
call fcn.140038930
mov ebx, 1
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], 0
mov r9, rax
lea r8, [rbp + 0x80]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [0x1401a1138], rax
lea rcx, [rsp + 0x60]
call fcn.140033ca0
jmp 0x1400270dc
mov eax, 0xae
cmp r14w, ax
jne 0x1400270da
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp]
mov qword [rsp + 0x20], rax
lea r9, str.mailto:popcharwin_ergonis.com
lea r8, str._s_subject_sbody_s__20_s
mov edx, 0xff
lea rcx, [rbp + 0x80]
call fcn.140004720
mov ebx, 1
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0x80]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [0x1401a1138], rax
jmp 0x1400270dc
xor ebx, ebx
lea rcx, [rsp + 0x48]
call fcn.140033ca0
mov eax, ebx
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.14005d680
mov rbx, qword [rsp + 0x3e0]
add rsp, 0x390
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret