Function at 0x140018400
Capabilities:
Create thread
Hide graphical window
Set registry value

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x60
mov rsi, rcx
mov rax, qword [0x140034030]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov edx, 0x3ef
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14001854f
mov rcx, rsi
mov edx, 0x3f2
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, eax
cmp qword [0x1400343e0], 8
jb 0x14001844f
mov rdx, qword [0x1400343c8]
jmp 0x140018456
lea rdx, [0x1400343c8]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x1400184ad
xor eax, eax
test edi, edi
setne al
lea rdx, [rsp + 0x34]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x20], rdx
mov dword [rsp + 0x28], 4
lea rdx, str.IncludeURL
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rsi
mov edx, 0x3ef
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, eax
cmp qword [0x1400343e0], 8
jb 0x1400184d0
mov rdx, qword [0x1400343c8]
jmp 0x1400184d7
lea rdx, [0x1400343c8]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x14001852e
xor eax, eax
test edi, edi
setne al
lea rdx, [rsp + 0x34]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x20], rdx
mov dword [rsp + 0x28], 4
lea rdx, [0x14002fc74]
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rsi
xor edx, edx
call qword [sym.imp.USER32.dll_EndDialog]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400209b0
nop
add rsp, 0x60
pop rbx
pop rdi
pop rsi
ret
mov rbx, qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rsi
mov edx, 0x3ef
call rbx
mov rdi, qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3ee
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f3
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f2
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3ed
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f4
call rbx
mov rcx, rax
xor edx, edx
call rdi
lea rdx, str.ReportDuringSubmit2
lea rdi, [rsp + 0x38]
mov rcx, rdi
call fcn.140002b40
cmp qword [rdi + 0x18], 8
jb 0x1400185e3
mov rdi, qword [rsp + 0x38]
mov rcx, rsi
mov edx, 0x3f6
mov r8, rdi
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x50]
cmp rax, 8
jb 0x14001863c
mov rcx, qword [rsp + 0x38]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x140018637
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400186d9
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14001fa5c
mov rcx, rsi
call fcn.140017700
mov rcx, rsi
mov edx, 0x3f7
call rbx
mov rcx, rax
mov edx, 0x465
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffff0000
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rsi
mov edx, 0x3f7
call rbx
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
xor edi, edi
mov qword [0x140034420], rdi
mov qword [0x140034308], rsi
lea rsi, [0x140034308]
lea rcx, [0x140034310]
lea rdx, [0x1400343a0]
call fcn.14002a470
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0
lea r8, [0x140012640]
xor ecx, ecx
xor edx, edx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x140034420], rax
jmp 0x140018539
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3