Function at 0x140018230
Capabilities:
Create thread
Hide graphical window
Set registry value

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x60
mov rsi, rcx
mov rax, qword [0x140034030]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov edx, 0x3ef
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14001837f
mov rcx, rsi
mov edx, 0x3f2
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, eax
cmp qword [0x1400343e0], 8
jb 0x14001827f
mov rdx, qword [0x1400343c8]
jmp 0x140018286
lea rdx, [0x1400343c8]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x1400182dd
xor eax, eax
test edi, edi
setne al
lea rdx, [rsp + 0x34]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x20], rdx
mov dword [rsp + 0x28], 4
lea rdx, str.IncludeURL
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rsi
mov edx, 0x3ef
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, eax
cmp qword [0x1400343e0], 8
jb 0x140018300
mov rdx, qword [0x1400343c8]
jmp 0x140018307
lea rdx, [0x1400343c8]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x14001835e
xor eax, eax
test edi, edi
setne al
lea rdx, [rsp + 0x34]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x20], rdx
mov dword [rsp + 0x28], 4
lea rdx, [0x14002fcc8]
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rsi
xor edx, edx
call qword [sym.imp.USER32.dll_EndDialog]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.14001ca10
nop
add rsp, 0x60
pop rbx
pop rdi
pop rsi
ret
mov rbx, qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rsi
mov edx, 0x3ef
call rbx
mov rdi, qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3ee
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f3
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f2
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3ed
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f4
call rbx
mov rcx, rax
xor edx, edx
call rdi
lea rdx, str.ReportDuringSubmit2
lea rdi, [rsp + 0x38]
mov rcx, rdi
call fcn.140002910
cmp qword [rdi + 0x18], 8
jb 0x140018413
mov rdi, qword [rsp + 0x38]
mov rcx, rsi
mov edx, 0x3f6
mov r8, rdi
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x50]
cmp rax, 8
jb 0x14001846c
mov rcx, qword [rsp + 0x38]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x140018467
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140018509
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14001bac4
mov rcx, rsi
call fcn.140017530
mov rcx, rsi
mov edx, 0x3f7
call rbx
mov rcx, rax
mov edx, 0x465
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffff0000
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rsi
mov edx, 0x3f7
call rbx
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
xor edi, edi
mov qword [0x140034420], rdi
mov qword [0x140034308], rsi
lea rsi, [0x140034308]
lea rcx, [0x140034310]
lea rdx, [0x1400343a0]
call fcn.140028150
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0
lea r8, [0x140012470]
xor ecx, ecx
xor edx, edx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x140034420], rax
jmp 0x140018369
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3