Function at 0x14000d3e0
Capabilities:
Create process on windows
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xc0
mov rbx, rcx
lea rcx, [rbp - 0x51]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::constructor_void____ptr64]
nop
lea rcx, [rbp + 0x7f]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::constructor_void____ptr64]
nop
mov rax, qword [sym.imp.Qt5Core.dll_struct_QListData::Data_const_QListData::shared_null]
mov qword [rbp + 0x77], rax
mov edx, 1
mov rcx, rbx
call fcn.14000d7c0
lea rcx, [rbp - 0x51]
call fcn.14000cd40
lea rcx, [rbp + 0x7f]
call fcn.14000cf70
xor esi, esi
mov qword [rbp + 0x6f], rsi
lea rdx, [rbp + 0x6f]
lea rcx, [0x14000cb70]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [rbp + 0x6f]
test rcx, rcx
je 0x14000d47d
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x14000d47d
lea edx, [rsi + 1]
mov rcx, qword [rbp + 0x6f]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [rbp + 0x6f]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x14000d58d
mov ecx, dword [0x14009f278]
mov rax, qword gs:[0x58]
mov edx, 4
mov rcx, qword [rax + rcx*8]
mov eax, dword [rdx + rcx]
cmp dword [0x14009f1d4], eax
jg 0x14000d624
cmp byte [0x14009f1d0], sil
jne 0x14000d551
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x59]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::constructor_class_QString_const____ptr64____ptr64]
mov rdi, rax
mov qword [rbp - 0x41], rax
lea rdx, [rbp + 0x7f]
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::constructor_class_QString_const____ptr64____ptr64]
mov rbx, rax
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x29], 0x70
mov qword [rbp - 0x21], rsi
lea rax, str.runas
mov qword [rbp - 0x19], rax
mov rcx, rbx
call qword [sym.imp.Qt5Core.dll_public:_unsigned_short_int_const____ptr64___cdecl_QString::utf16_void_const___ptr64]
mov qword [rbp - 0x11], rax
lea rax, [0x14001c568]
mov qword [rbp - 9], rax
mov rcx, rdi
call qword [sym.imp.Qt5Core.dll_public:_unsigned_short_int_const____ptr64___cdecl_QString::utf16_void_const___ptr64]
mov qword [rbp - 1], rax
mov dword [rbp + 7], 1
mov qword [rbp + 0xf], rsi
lea rcx, [rbp - 0x29]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x3f]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop
mov rcx, rbx
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
mov rcx, rdi
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
jmp 0x14000d597
mov edx, 6
lea rcx, str.__auto
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp - 0x59], rax
lea rdx, [rbp - 0x59]
lea rcx, [rbp + 0x77]
call fcn.14000d8c0
nop
lea rcx, [rbp - 0x59]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, [rbp + 0x77]
lea rcx, [rbp + 0x7f]
call qword [sym.imp.Qt5Core.dll_public:_static_bool___cdecl_QProcess::startDetached_class_QString_const____ptr64__class_QStringList_const____ptr64_]
mov rcx, rbx
call qword [sym.imp.Qt5Widgets.dll_public:_void___cdecl_QWidget::hide_void____ptr64]
nop
mov rax, qword [rbp + 0x77]
mov ecx, dword [rax]
test ecx, ecx
je 0x14000d5b8
cmp ecx, 0xffffffff
je 0x14000d5fc
mov rax, qword [rbp + 0x77]
mov ecx, 0xffffffff
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x14000d5fc
mov rsi, qword [rbp + 0x77]
movsxd rdi, dword [rsi + 8]
add rdi, 2
lea rdi, [rsi + rdi*8]
movsxd rbx, dword [rsi + 0xc]
add rbx, 2
lea rbx, [rsi + rbx*8]
cmp rbx, rdi
je 0x14000d5f2
nop dword [rax]
sub rbx, 8
mov rcx, rbx
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
cmp rbx, rdi
jne 0x14000d5e0
mov rcx, rsi
call qword [sym.imp.Qt5Core.dll_public:_static_void___cdecl_QListData::dispose_struct_QListData::Data____ptr64_]
nop
lea rcx, [rbp + 0x7f]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x51]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rbx, qword [rsp + 0xe0]
add rsp, 0xc0
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x14009f1d4]
call fcn.140014bc8
cmp dword [0x14009f1d4], 0xffffffff
jne 0x14000d4a4
call fcn.14000d120
mov byte [0x14009f1d0], al
lea rcx, [0x14009f1d4]
call fcn.140014b68
jmp 0x14000d4a4