Function at 0x14019c5c0
Capabilities:
Check if file exists
Create process on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
sub rsp, 0x840
mov qword [rsp + 0x700], 0xfffffffffffffffe
mov rax, qword [rsp + 0x858]
mov qword [rsp + 0x708], rax
cmp qword [rsp + 0x708], 0x8089
ja 0x14019c660
cmp qword [rsp + 0x708], 0x8089
je 0x14019cbe1
cmp qword [rsp + 0x708], 0x50b
je 0x14019c6ad
cmp qword [rsp + 0x708], 0x8011
je 0x14019ccb2
cmp qword [rsp + 0x708], 0x8012
je 0x14019d19e
cmp qword [rsp + 0x708], 0x8087
je 0x14019c705
jmp 0x14019d2d1
cmp qword [rsp + 0x708], 0x809c
je 0x14019ce70
cmp qword [rsp + 0x708], 0x809e
je 0x14019d007
cmp qword [rsp + 0x708], 0x80ea
je 0x14019d1e3
cmp qword [rsp + 0x708], 0x80ec
je 0x14019d2a2
jmp 0x14019d2d1
lea rdx, [0x14024dab8]
lea rcx, [rsp + 0x5f0]
call fcn.1400ef320
mov qword [rsp + 0x710], rax
mov rax, qword [rsp + 0x710]
mov qword [rsp + 0x718], rax
mov rcx, qword [rsp + 0x718]
call fcn.14000f8f0
xor edx, edx
mov rcx, rax
call fcn.1400f0790
nop
lea rcx, [rsp + 0x5f0]
call fcn.140001490
xor eax, eax
jmp 0x14019d2d6
mov dword [rsp + 0x70], 0
mov edx, 0xa
lea rcx, [rsp + 0x30]
call fcn.14008d608
nop
lea rcx, [rsp + 0x5f8]
call fcn.140001000
mov qword [rsp + 0x720], rax
mov rax, qword [rsp + 0x720]
mov qword [rsp + 0x728], rax
lea r8, str.Log.txt
mov rdx, qword [rsp + 0x728]
lea rcx, [rsp + 0x600]
call fcn.1400010b0
mov qword [rsp + 0x730], rax
mov rax, qword [rsp + 0x730]
mov qword [rsp + 0x738], rax
mov rdx, qword [rsp + 0x738]
lea rcx, [rsp + 0x30]
call fcn.14008d7f4
nop
lea rcx, [rsp + 0x600]
call fcn.140001490
nop
lea rcx, [rsp + 0x5f8]
call fcn.140001490
lea rcx, [rsp + 0x608]
call fcn.140001000
mov qword [rsp + 0x740], rax
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x748], rax
lea r8, str..ini
mov rdx, qword [rsp + 0x748]
lea rcx, [rsp + 0x610]
call fcn.1400010b0
mov qword [rsp + 0x750], rax
mov rax, qword [rsp + 0x750]
mov qword [rsp + 0x758], rax
mov rdx, qword [rsp + 0x758]
lea rcx, [rsp + 0x30]
call fcn.14008d7f4
nop
lea rcx, [rsp + 0x610]
call fcn.140001490
nop
lea rcx, [rsp + 0x608]
call fcn.140001490
lea rcx, [rsp + 0x618]
call fcn.140001000
mov qword [rsp + 0x760], rax
mov rax, qword [rsp + 0x760]
mov qword [rsp + 0x768], rax
lea r8, str..xml
mov rdx, qword [rsp + 0x768]
lea rcx, [rsp + 0x620]
call fcn.1400010b0
mov qword [rsp + 0x770], rax
mov rax, qword [rsp + 0x770]
mov qword [rsp + 0x778], rax
mov rdx, qword [rsp + 0x778]
lea rcx, [rsp + 0x30]
call fcn.14008d7f4
nop
lea rcx, [rsp + 0x620]
call fcn.140001490
nop
lea rcx, [rsp + 0x618]
call fcn.140001490
lea rcx, [rsp + 0x628]
call fcn.140001000
mov qword [rsp + 0x780], rax
mov rax, qword [rsp + 0x780]
mov qword [rsp + 0x788], rax
lea r8, str.LogSubmit.zip
mov rdx, qword [rsp + 0x788]
lea rcx, [rsp + 0x68]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x628]
call fcn.140001490
lea rcx, [rsp + 0x630]
call fcn.140001000
mov qword [rsp + 0x790], rax
mov rax, qword [rsp + 0x790]
mov qword [rsp + 0x798], rax
lea rcx, [rsp + 0x68]
call fcn.14000f8f0
mov rbx, rax
mov rcx, qword [rsp + 0x798]
call fcn.14000f8f0
lea r9, [rsp + 0x70]
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14018a200
nop
lea rcx, [rsp + 0x630]
call fcn.140001490
lea rcx, [rsp + 0x78]
call fcn.140002de0
nop
lea rcx, [rsp + 0x638]
call fcn.140002160
mov qword [rsp + 0x7a0], rax
mov rax, qword [rsp + 0x7a0]
mov qword [rsp + 0x7a8], rax
mov r9, qword [rsp + 0x7a8]
mov r9, qword [r9]
lea r8, [0x14024db20]
lea rdx, str.http:__www.youngzsoft.net_submit.php_product_sversion3.0._srefprog
lea rcx, [rsp + 0x78]
call fcn.140002c70
nop
lea rcx, [rsp + 0x638]
call fcn.140001490
lea r11, [rsp + 0x640]
mov qword [rsp + 0x648], r11
lea rdx, str.bugreportsurl
mov rcx, qword [rsp + 0x648]
call fcn.140002100
mov qword [rsp + 0x7b0], rax
mov rdx, qword [rsp + 0x7b0]
lea rcx, [rsp + 0x80]
call fcn.14019a300
nop
lea rcx, [rsp + 0x80]
call fcn.140006eb0
movzx eax, al
test eax, eax
jne 0x14019ca29
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x78]
call fcn.140002db0
lea rcx, [rsp + 0x68]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14019cb80
lea r8, [rsp + 0x68]
lea rdx, str._n__select__
lea rcx, [rsp + 0x650]
call fcn.140006c90
mov qword [rsp + 0x7b8], rax
mov rax, qword [rsp + 0x7b8]
mov qword [rsp + 0x7c0], rax
lea r8, [0x14024a6cc]
mov rdx, qword [rsp + 0x7c0]
lea rcx, [rsp + 0x658]
call fcn.1400010b0
mov qword [rsp + 0x7c8], rax
mov rcx, qword [rsp + 0x7c8]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
mov r9, rax
lea r8, str.explorer.exe
lea rdx, [0x14024dc20]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x658]
call fcn.140001490
nop
lea rcx, [rsp + 0x650]
call fcn.140001490
lea rcx, [rsp + 0x88]
call fcn.140002de0
nop
lea rdx, str.Please_attach_the__s_file_to_a_ticket_in_our_support_page_and_submit_for_troubleshooting._Thank_you_
lea rcx, [rsp + 0x660]
call fcn.1400ef320
mov qword [rsp + 0x7d0], rax
mov rax, qword [rsp + 0x7d0]
mov qword [rsp + 0x7d8], rax
mov rcx, qword [rsp + 0x7d8]
call fcn.14000f8f0
mov r8, qword [rsp + 0x68]
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.140002c70
nop
lea rcx, [rsp + 0x660]
call fcn.140001490
lea rcx, [rsp + 0x88]
call fcn.14000f8f0
xor r8d, r8d
mov edx, 0x40
mov rcx, rax
call fcn.1400ef950
nop
lea rcx, [rsp + 0x88]
call fcn.140001490
lea rcx, [rsp + 0x78]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x80]
call fcn.140001490
nop
lea rcx, [rsp + 0x78]
call fcn.140001490
nop
lea rcx, [rsp + 0x68]
call fcn.140001490
nop
lea rcx, [rsp + 0x30]
call fcn.14008d7a8
xor eax, eax
jmp 0x14019d2d6
lea rdx, str.https:__www.facebook.com_ccboot
lea rcx, [rsp + 0x98]
call fcn.140002100
nop
lea rax, [rsp + 0x668]
mov qword [rsp + 0x670], rax
lea rdx, str.facebookurl
mov rcx, qword [rsp + 0x670]
call fcn.140002100
mov qword [rsp + 0x7e0], rax
mov rdx, qword [rsp + 0x7e0]
lea rcx, [rsp + 0x90]
call fcn.14019a300
nop
lea rcx, [rsp + 0x90]
call fcn.140006eb0
movzx eax, al
test eax, eax
jne 0x14019cc61
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x98]
call fcn.140002db0
lea rcx, [rsp + 0x98]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x90]
call fcn.140001490
nop
lea rcx, [rsp + 0x98]
call fcn.140001490
xor eax, eax
jmp 0x14019d2d6
lea rdx, [0x14024dd68]
lea rcx, [rsp + 0x680]
call fcn.1400ef320
mov qword [rsp + 0x7e8], rax
lea rdx, [0x14024dd58]
mov rcx, qword [rsp + 0x7e8]
call fcn.140006d90
mov byte [rsp + 0x678], al
lea rcx, [rsp + 0x680]
call fcn.140001490
movzx r11d, byte [rsp + 0x678]
test r11d, r11d
je 0x14019cd89
lea rdx, [0x14024dd78]
lea rcx, [rsp + 0xb0]
call fcn.1400ef320
lea rdx, str.HelpPageURL
lea rcx, [rsp + 0xb0]
call fcn.140006d90
movzx eax, al
test eax, eax
je 0x14019cd65
lea rcx, [rsp + 0xb0]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [rsp + 0x688], 0
lea rcx, [rsp + 0xb0]
call fcn.140001490
mov eax, dword [rsp + 0x688]
jmp 0x14019d2d6
lea rdx, str.http:__www.ccboot.com_wiki.htm_refprog
lea rcx, [rsp + 0xa8]
call fcn.140002100
nop
lea rax, [rsp + 0x690]
mov qword [rsp + 0x698], rax
lea rdx, str.helpurl
mov rcx, qword [rsp + 0x698]
call fcn.140002100
mov qword [rsp + 0x7f0], rax
mov rdx, qword [rsp + 0x7f0]
lea rcx, [rsp + 0xa0]
call fcn.14019a300
nop
lea rcx, [rsp + 0xa0]
call fcn.140006eb0
movzx eax, al
test eax, eax
jne 0x14019ce09
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xa8]
call fcn.140002db0
lea rcx, [rsp + 0xa8]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [rsp + 0x6a0], 0
lea rcx, [rsp + 0xa0]
call fcn.140001490
nop
lea rcx, [rsp + 0xa8]
call fcn.140001490
mov eax, dword [rsp + 0x6a0]
jmp 0x14019d2d6
lea rdx, [0x14024de40]
lea rcx, [rsp + 0x6a8]
call fcn.1400ef320
mov qword [rsp + 0x7f8], rax
lea rdx, [0x14024de20]
mov rcx, qword [rsp + 0x7f8]
call fcn.140006d90
mov byte [rsp + 0x6a4], al
lea rcx, [rsp + 0x6a8]
call fcn.140001490
movzx r11d, byte [rsp + 0x6a4]
test r11d, r11d
je 0x14019cf20
lea rdx, str.UserForumURL
lea rcx, [rsp + 0x6b0]
call fcn.1400ef320
mov qword [rsp + 0x800], rax
mov rcx, qword [rsp + 0x800]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x6b0]
call fcn.140001490
xor eax, eax
jmp 0x14019d2d6
lea rdx, str.http:__forum.icafeman.com__refprog
lea rcx, [rsp + 0xc0]
call fcn.140002100
nop
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x6c0], rax
lea rdx, str.userforumurl
mov rcx, qword [rsp + 0x6c0]
call fcn.140002100
mov qword [rsp + 0x808], rax
mov rdx, qword [rsp + 0x808]
lea rcx, [rsp + 0xb8]
call fcn.14019a300
nop
lea rcx, [rsp + 0xb8]
call fcn.140006eb0
movzx eax, al
test eax, eax
jne 0x14019cfa0
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xc0]
call fcn.140002db0
lea rcx, [rsp + 0xc0]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [rsp + 0x6c8], 0
lea rcx, [rsp + 0xb8]
call fcn.140001490
nop
lea rcx, [rsp + 0xc0]
call fcn.140001490
mov eax, dword [rsp + 0x6c8]
jmp 0x14019d2d6
lea rdx, [0x14024dee8]
lea rcx, [rsp + 0x6d0]
call fcn.1400ef320
mov qword [rsp + 0x810], rax
lea rdx, [0x14024dda8]
mov rcx, qword [rsp + 0x810]
call fcn.140006d90
mov byte [rsp + 0x6cc], al
lea rcx, [rsp + 0x6d0]
call fcn.140001490
movzx r11d, byte [rsp + 0x6cc]
test r11d, r11d
je 0x14019d0b7
lea rdx, str.HomePageURL
lea rcx, [rsp + 0x6d8]
call fcn.1400ef320
mov qword [rsp + 0x818], rax
mov rcx, qword [rsp + 0x818]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x6d8]
call fcn.140001490
xor eax, eax
jmp 0x14019d2d6
lea rdx, str.http:__www.ccboot.com__refprog
lea rcx, [rsp + 0xd0]
call fcn.140002100
nop
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x6e8], rax
lea rdx, str.homepageurl
mov rcx, qword [rsp + 0x6e8]
call fcn.140002100
mov qword [rsp + 0x820], rax
mov rdx, qword [rsp + 0x820]
lea rcx, [rsp + 0xc8]
call fcn.14019a300
nop
lea rcx, [rsp + 0xc8]
call fcn.140006eb0
movzx eax, al
test eax, eax
jne 0x14019d137
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0xd0]
call fcn.140002db0
lea rcx, [rsp + 0xd0]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [rsp + 0x6f0], 0
lea rcx, [rsp + 0xc8]
call fcn.140001490
nop
lea rcx, [rsp + 0xd0]
call fcn.140001490
mov eax, dword [rsp + 0x6f0]
jmp 0x14019d2d6
lea rcx, [rsp + 0xe0]
call fcn.140195f60
nop
lea rcx, [rsp + 0xe0]
call fcn.140082174
mov r11, qword [rsp + 0x850]
mov eax, dword [rsp + 0x31c]
mov dword [r11 + 0x15ec], eax
lea rcx, [rsp + 0xe0]
call fcn.140005cc0
xor eax, eax
jmp 0x14019d2d6
lea rcx, [rsp + 0x320]
call fcn.140002de0
nop
lea rcx, [rsp + 0x6f8]
call fcn.140001000
mov qword [rsp + 0x828], rax
mov rax, qword [rsp + 0x828]
mov qword [rsp + 0x830], rax
mov r8, qword [rsp + 0x830]
mov r8, qword [r8]
lea rdx, str._s_Manual.chm
lea rcx, [rsp + 0x320]
call fcn.140002c70
nop
lea rcx, [rsp + 0x6f8]
call fcn.140001490
lea rcx, [rsp + 0x320]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14019d291
lea rcx, [rsp + 0x320]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x320]
call fcn.140001490
xor eax, eax
jmp 0x14019d2d6
xor edx, edx
lea rcx, [rsp + 0x330]
call fcn.14014aca0
nop
lea rcx, [rsp + 0x330]
call fcn.140082174
nop
lea rcx, [rsp + 0x330]
call fcn.14014ac50
xor eax, eax
jmp 0x14019d2d6
mov eax, 1
add rsp, 0x840
pop rbx
ret