Function at 0x140007940
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
sub rsp, 0xb70
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x1400781a0]
xor rax, rsp
mov qword [rsp + 0xb60], rax
mov r13, rdx
mov qword [rsp + 0x58], rdx
xor ebp, ebp
or rsi, 0xffffffffffffffff
mov rbx, qword [0x1400803d0]
test rbx, rbx
jne 0x140007a47
mov ecx, 0x310
call fcn.14001f560
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140007a3d
call fcn.14002b6f8
mov rdx, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x1400079ce
mov ecx, 0x80004005
call fcn.140002210
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbx], rax
mov word [rbx + 0x64], 0
xor eax, eax
mov rcx, rsi
lea rdi, [0x1400660dc]
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, [0x1400660dc]
mov rcx, rbx
call fcn.140005c50
lea rcx, [rbx + 8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbx + 0x30]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbx + 0x26c]
mov word [rcx], 0
lea r8, [0x1400660e0]
mov edx, 0x50
call fcn.140036860
nop
jmp 0x140007a40
mov rbx, rbp
mov qword [0x1400803d0], rbx
lea rdx, str.Entering_CHpePrintApp::ShowWebServicesPage
mov rcx, rbx
call fcn.14000f840
mov dword [rsp + 0x7a], ebp
call fcn.14002b6f8
mov rdx, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x140007a79
mov ecx, 0x80004005
call fcn.140002210
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
call fcn.14002b6f8
mov rdx, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x140007aaa
mov ecx, 0x80004005
call fcn.140002210
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
mov rdi, qword [r13]
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rdi - 8], 0
jl 0x140007ae4
cmp rax, qword [rdi - 0x18]
jne 0x140007ae4
lea rbx, [rdi - 0x18]
lock add dword [rdi - 8], 1
jmp 0x140007b22
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [rdi - 0x10]
call qword [rax]
mov rbx, rax
test rax, rax
jne 0x140007b00
call fcn.140002340
int3
mov eax, dword [rdi - 0x10]
mov dword [rbx + 8], eax
mov eax, dword [rdi - 0x10]
add eax, 1
movsxd rdx, eax
lea r9, [rdx + rdx]
mov r8, rdi
add rdx, rdx
lea rcx, [rbx + 0x18]
call fcn.140034f40
lea rax, [rbx + 0x18]
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140004670
test eax, eax
je 0x140007cb1
mov rbx, qword [rsp + 0x40]
cmp dword [rbx - 0x10], 0
jne 0x140007b6b
call fcn.14000f410
mov rcx, rax
lea rdx, str.CHpePrintApp::ShowWebServicesPage___error_parsing_IP_address
call fcn.14000f840
jmp 0x140007cc5
call fcn.14000f410
mov rcx, rax
lea rdx, str.CHpePrintApp::ShowWebServicesPage___success_parsing_IP_address__printer_is_ePrint_ready__launching_web_services_setup_page
call fcn.14000f840
call fcn.14002b6f8
mov rdx, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x140007b9e
mov ecx, 0x80004005
call fcn.140002210
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
call fcn.14002b6f8
mov rdx, rax
mov ecx, ebp
test rax, rax
setne cl
test ecx, ecx
jne 0x140007bcf
mov ecx, 0x80004005
call fcn.140002210
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x30], rdi
lea rdx, str.http:___s_SSI_Auth_set_config_webServices.htm
test rdx, 0xffffffffffff0000
jne 0x140007c19
movzx r12d, dx
mov ecx, r12d
call fcn.14002e7b8
test rax, rax
je 0x140007c3a
mov r8d, r12d
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140009ce0
mov rdi, qword [rsp + 0x30]
jmp 0x140007c3a
xor eax, eax
mov rcx, rsi
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rcx, [rsp + 0x30]
call fcn.140005c50
mov rdi, qword [rsp + 0x30]
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x38]
call fcn.140002540
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbp
mov r9, qword [rsp + 0x38]
lea r8, str.iexplore.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140007c8f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140007cc5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140007cc5
call fcn.14000f410
mov rcx, rax
lea rdx, str.CHpePrintApp::ShowWebServicesPage___error_getting_IP_address
call fcn.14000f840
mov rbx, qword [0x1400803d0]
test rbx, rbx
jne 0x140007d84
mov ecx, 0x310
call fcn.14001f560
mov rbx, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140007d7a
call fcn.14002b6f8
mov rcx, rax
test rax, rax
setne bpl
test ebp, ebp
jne 0x140007d0e
mov ecx, 0x80004005
call fcn.140002210
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbx], rax
mov word [rbx + 0x64], 0
xor eax, eax
mov rcx, rsi
lea rdi, [0x1400660dc]
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, [0x1400660dc]
mov rcx, rbx
call fcn.140005c50
lea rcx, [rbx + 8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbx + 0x30]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbx + 0x26c]
mov word [rcx], 0
lea r8, [0x1400660e0]
mov edx, 0x50
call fcn.140036860
nop
jmp 0x140007d7d
mov rbx, rbp
mov qword [0x1400803d0], rbx
lea rdx, str.Exiting_CHpePrintApp::ShowWebServicesPage
mov rcx, rbx
call fcn.14000f840
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140007db5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140007dd6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [r13]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], esi
add esi, 0xffffffff
test esi, esi
jg 0x140007df3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0xb60]
xor rcx, rsp
call fcn.140034e40
lea r11, [rsp + 0xb70]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r13
pop r12
pop rdi
ret