Function at 0x14000c1c0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x47]
sub rsp, 0xb0
mov qword [rbp - 0x51], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, r9
mov rbx, rcx
cmp dword [rbp + 0x7f], 0
jne 0x14000c718
cmp r8d, 0x110
jne 0x14000c22e
lea rcx, [rbp + 0x7f]
mov qword [rsp + 0x20], rcx
mov r9, qword [rbp + 0x6f]
mov r8, rax
mov edx, 0x110
mov rcx, rbx
call fcn.14000bf80
mov rcx, qword [rbp + 0x77]
mov qword [rcx], rax
mov eax, 1
jmp 0x14000c71a
cmp r8d, 0x111
jne 0x14000c507
mov esi, 1
cmp si, ax
je 0x14000c252
mov ecx, 2
cmp cx, ax
jne 0x14000c267
mov rcx, rbx
call fcn.14000aa80
xor edi, edi
mov rax, qword [rbp + 0x77]
mov qword [rax], rdi
mov eax, esi
jmp 0x14000c71a
mov ecx, 0x3eb
xor edi, edi
cmp cx, ax
mov rcx, rax
jne 0x14000c2bf
shr rcx, 0x10
cmp di, cx
jne 0x14000c2c3
call qword [0x1400234f0]
mov r10, qword [rax]
mov rcx, qword [rbx + 8]
mov qword [rsp + 0x20], rcx
lea r9, [0x14000a9b0]
xor r8d, r8d
mov rdx, qword [rbx + 0x78]
mov rcx, rax
call qword [r10 + 0xc8]
mov rcx, rbx
call fcn.14000aa80
mov rax, qword [rbp + 0x77]
mov qword [rax], rdi
mov eax, esi
jmp 0x14000c71a
shr rcx, 0x10
mov edx, 0x3ee
cmp dx, ax
jne 0x14000c443
cmp di, cx
jne 0x14000c443
mov dword [rbp + 0x7f], edi
call qword [0x1400234f0]
mov r8, qword [rax]
lea rdx, [rbp + 0x7f]
mov rcx, rax
call qword [r8 + 0x58]
mov rbx, rax
lea rcx, [rbp - 0x41]
call fcn.140007ea0
nop
mov r8d, dword [rbp + 0x7f]
mov rdx, rbx
lea rcx, [rbp - 0x41]
call fcn.1400098e0
call qword [0x1400234f0]
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x60]
call qword [sym.imp.user32.dll_GetActiveWindow]
mov rbx, rax
mov rax, qword [rbp - 0x19]
test rax, rax
jne 0x14000c34c
call fcn.14000d894
mov qword [rbp - 0x19], rax
test rax, rax
jne 0x14000c34c
lea ecx, [rax + 0xe]
call qword [sym.imp.kernel32.dll_SetLastError]
jmp 0x14000c3bc
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.14000d9c4
lea rax, [rbp - 0x41]
mov qword [rbp - 0x31], rax
call qword [sym.imp.kernel32.dll_GetCurrentThreadId]
mov dword [rbp - 0x29], eax
lea rcx, [0x1400340a8]
call qword [sym.imp.kernel32.dll_EnterCriticalSection]
mov rax, qword [0x1400340d0]
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x31]
mov qword [0x1400340d0], rax
lea rcx, [0x1400340a8]
call qword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov qword [rsp + 0x20], rdi
lea r9, [0x140005830]
mov r8, rbx
mov edx, 0xd0
mov rcx, qword [0x140034280]
call qword [sym.imp.user32.dll_DialogBoxParamW]
nop
mov r8, qword [rbp + 0xf]
test r8, r8
je 0x14000c427
mov rcx, qword [rbp + 0x1f]
sub rcx, r8
movabs rax, 0xf83e0f83e0f83e1
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x420
mov rax, r8
cmp rdx, 0x1000
jb 0x14000c413
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c737
mov rcx, r8
call fcn.14000dd7c
mov qword [rbp + 0xf], rdi
mov qword [rbp + 0x17], rdi
mov qword [rbp + 0x1f], rdi
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x14000c435
call fcn.14000d964
mov rax, qword [rbp + 0x77]
mov qword [rax], rdi
mov eax, esi
jmp 0x14000c71a
mov edx, 0x405
cmp dx, ax
jne 0x14000c4c9
cmp di, cx
jne 0x14000c4c9
mov r15d, edi
mov rax, qword [rbx + 0x88]
sub rax, qword [rbx + 0x80]
sar rax, 3
test rax, rax
je 0x14000c435
mov r14, rdi
nop
mov r8, qword [rbx + 0x80]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9, [0x140023678]
mov r8, qword [r14 + r8]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.shell32.dll_ShellExecuteW]
inc r15d
lea r14, [r14 + 8]
mov rcx, qword [rbx + 0x88]
sub rcx, qword [rbx + 0x80]
sar rcx, 3
movsxd rax, r15d
cmp rax, rcx
jb 0x14000c470
mov rax, qword [rbp + 0x77]
mov qword [rax], rdi
mov eax, esi
jmp 0x14000c71a
mov r8d, 0x406
cmp r8w, ax
jne 0x14000c718
cmp di, cx
jne 0x14000c718
xor edx, edx
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x6f]
mov rcx, rbx
call fcn.14000baa0
mov rcx, qword [rbp + 0x77]
mov qword [rcx], rax
mov eax, esi
jmp 0x14000c71a
cmp r8d, 0x138
jne 0x14000c587
mov rax, qword [rcx + 0x30]
mov esi, 1
mov dword [rax + 0x34], esi
mov rdi, qword [rbp + 0x6f]
mov rcx, rdi
call qword [sym.imp.user32.dll_IsWindow]
test eax, eax
je 0x14000c562
mov edx, 0x401
mov rcx, qword [rbx + 8]
call qword [sym.imp.user32.dll_GetDlgItem]
cmp rax, rdi
je 0x14000c555
mov edx, 0x402
mov rcx, qword [rbx + 8]
call qword [sym.imp.user32.dll_GetDlgItem]
cmp rax, rdi
jne 0x14000c562
xor ecx, ecx
call qword [0x140023060]
mov rdi, rax
jmp 0x14000c56b
mov rax, qword [rbx + 0x30]
xor edi, edi
mov dword [rax + 0x34], edi
mov rax, qword [rbp + 0x77]
mov qword [rax], rdi
mov rax, qword [rbx + 0x30]
cmp dword [rax + 0x34], 0
je 0x14000c718
mov eax, esi
jmp 0x14000c71a
cmp r8d, 0x113
jne 0x14000c5f1
mov esi, 1
cmp eax, esi
jne 0x14000c5e1
mov edx, esi
mov rcx, qword [rcx + 8]
call qword [sym.imp.user32.dll_KillTimer]
mov rcx, qword [rbx + 8]
call qword [sym.imp.user32.dll_IsWindowVisible]
test eax, eax
je 0x14000c5e1
mov rax, qword [rbx + 0x88]
cmp qword [rbx + 0x80], rax
jne 0x14000c5e1
call qword [0x1400234f0]
mov r9, qword [rax]
mov r8, qword [rbx + 8]
lea rdx, [0x14000a820]
mov rcx, rax
call qword [r9 + 0xa0]
xor edi, edi
mov rax, qword [rbp + 0x77]
mov qword [rax], rdi
mov eax, esi
jmp 0x14000c71a
cmp r8d, 0x401
jne 0x14000c647
mov esi, 1
test rax, rax
je 0x14000c5e1
call qword [0x1400234f0]
mov r9, qword [rax]
mov r8, qword [rbx + 8]
lea rdx, [0x14000a820]
mov rcx, rax
call qword [r9 + 0xa0]
xor r9d, r9d
mov r8d, 0x1388
mov edx, esi
mov rcx, qword [rbx + 8]
call qword [sym.imp.user32.dll_SetTimer]
xor edi, edi
mov rax, qword [rbp + 0x77]
mov qword [rax], rdi
mov eax, esi
jmp 0x14000c71a
cmp r8d, 0x402
jne 0x14000c6a0
mov byte [rcx + 0x98], 1
mov rcx, qword [rcx + 8]
call qword [sym.imp.user32.dll_IsWindowVisible]
test eax, eax
jne 0x14000c692
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 8]
xor edx, edx
mov rcx, qword [rbx + 8]
call qword [sym.imp.user32.dll_GetWindowThreadProcessId]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x12]
mov ecx, eax
call qword [sym.imp.user32.dll_PostThreadMessageW]
xor edi, edi
mov rax, qword [rbp + 0x77]
mov qword [rax], rdi
lea eax, [rdi + 1]
jmp 0x14000c71a
cmp r8d, 0x403
jne 0x14000c6d4
lea rcx, [rbp + 0x7f]
mov qword [rsp + 0x20], rcx
mov r9, qword [rbp + 0x6f]
mov r8, rax
mov edx, 0x403
mov rcx, rbx
call fcn.14000bc60
mov rcx, qword [rbp + 0x77]
mov qword [rcx], rax
mov eax, 1
jmp 0x14000c71a
cmp r8d, 0x404
jne 0x14000c718
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 8]
xor edx, edx
mov rcx, qword [rbx + 8]
call qword [sym.imp.user32.dll_GetWindowThreadProcessId]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x12]
mov ecx, eax
call qword [sym.imp.user32.dll_PostThreadMessageW]
xor edi, edi
mov rax, qword [rbp + 0x77]
mov qword [rax], rdi
lea eax, [rdi + 1]
jmp 0x14000c71a
xor eax, eax
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14001240c
int3