Function at 0x14001c690
Capabilities:
Create thread
Hide graphical window
Set registry value

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x60
mov rsi, rcx
mov rax, qword [0x140036030]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov edx, 0x3ef
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x14001c846
mov rbx, qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rsi
mov edx, 0x3ef
call rbx
mov rdi, qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3ee
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f3
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f2
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3ed
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f4
call rbx
mov rcx, rax
xor edx, edx
call rdi
lea rdx, str.ReportDuringSubmit2
lea rdi, [rsp + 0x38]
mov rcx, rdi
call fcn.140018560
cmp qword [rdi + 0x18], 8
jb 0x14001c750
mov rdi, qword [rsp + 0x38]
mov rcx, rsi
mov edx, 0x3f6
mov r8, rdi
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x50]
cmp rax, 8
jb 0x14001c7a9
mov rcx, qword [rsp + 0x38]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14001c7a4
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14001c969
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14001ebb8
mov rcx, rsi
call fcn.14001bab0
mov rcx, rsi
mov edx, 0x3f7
call rbx
mov rcx, rax
mov edx, 0x465
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffff0000
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rsi
mov edx, 0x3f7
call rbx
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
xor edi, edi
mov qword [0x140036438], rdi
mov qword [0x140036320], rsi
lea rsi, [0x140036320]
lea rcx, [0x140036328]
lea rdx, [0x1400363b8]
call fcn.14002a9c0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0
lea r8, [0x140018970]
xor ecx, ecx
xor edx, edx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x140036438], rax
jmp 0x14001c953
mov rcx, rsi
mov edx, 0x3f2
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, eax
cmp qword [0x1400363f8], 8
jb 0x14001c869
mov rdx, qword [0x1400363e0]
jmp 0x14001c870
lea rdx, [0x1400363e0]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x14001c8c7
xor eax, eax
test edi, edi
setne al
lea rdx, [rsp + 0x34]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x20], rdx
mov dword [rsp + 0x28], 4
lea rdx, str.IncludeURL
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rsi
mov edx, 0x3ef
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, eax
cmp qword [0x1400363f8], 8
jb 0x14001c8ea
mov rdx, qword [0x1400363e0]
jmp 0x14001c8f1
lea rdx, [0x1400363e0]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x14001c948
xor eax, eax
test edi, edi
setne al
lea rdx, [rsp + 0x34]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x20], rdx
mov dword [rsp + 0x28], 4
lea rdx, [0x140031a0c]
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rsi
xor edx, edx
call qword [sym.imp.USER32.dll_EndDialog]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.14001fad0
nop
add rsp, 0x60
pop rbx
pop rdi
pop rsi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3