Function at 0x14009dbf0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
push rdi
push r14
push r15
sub rsp, 0xd0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov r14d, r9d
mov esi, r8d
mov ebp, edx
mov rbx, rcx
mov eax, edx
and eax, 0xffffff00
cmp eax, 0x21020200
jne 0x14009dd0e
mov rcx, qword [rcx + 0xd8]
test rcx, rcx
jne 0x14009dcf4
mov ecx, 0x398
call fcn.1400f48fc
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14009dc62
mov rcx, rax
call fcn.14009e910
mov rdi, rax
jmp 0x14009dc64
xor edi, edi
mov qword [rbx + 0xd8], rdi
test rdi, rdi
jne 0x14009dc8f
lea r8, str.c:userschunyung_source_repos_rtkngui_rtknguimicsettingui.cpp
mov edx, 0x26e
lea rcx, str._VCpl__RETURN_FALSE_ON_FALSE:_Line___d__File___s_n
call fcn.140052e90
xor eax, eax
jmp 0x14009e443
lea rdx, [rbx - 0x248]
lea rcx, [rdi + 0x380]
call fcn.140014890
mov rcx, qword [rbx + 0xd8]
mov rax, qword [rbx - 0x238]
mov qword [rcx + 0x390], rax
mov rcx, qword [rbx + 0xd8]
mov rax, qword [rbx + 0x90]
mov qword [rcx + 0x178], rax
mov rcx, qword [rbx + 0xd8]
mov rax, qword [0x1403db8b0]
mov qword [rcx + 0x388], rax
mov rcx, qword [rbx + 0xd8]
call fcn.14009eea0
mov rcx, qword [rbx + 0xd8]
add rcx, 0xe8
mov rax, qword [rcx]
mov r9d, r14d
mov r8d, esi
mov edx, ebp
call qword [rax + 0x28]
jmp 0x14009e443
cmp ebp, 0x21020120
ja 0x14009e405
je 0x14009e2f9
add ebp, 0xdefdffe0
cmp ebp, 0xe3
ja case.0x14009dd4b.553779237
lea rdx, [0x140000000]
movzx eax, byte [rdx + rbp + 0x9e48c]
mov ecx, dword [rdx + rax*4 + 0x9e460]
add rcx, rdx
jmp rcx
lea rdi, [rbx + 0xa8]
mov dword [rdi], esi
mov edx, esi
cmp dword [rbx - 0x220], 0
je 0x14009dd93
add rbx, 0xfffffffffffffda8
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x48]
test eax, eax
jne 0x14009ddb3
mov rax, qword [rbx]
mov rdx, rdi
mov rcx, rbx
call qword [rax + 0x40]
mov rcx, rbx
call fcn.14009d4e0
mov eax, 1
jmp 0x14009e443
add rbx, 0xfffffffffffffda8
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x28]
test eax, eax
jne 0x14009ddb3
mov rax, qword [rbx]
mov rdx, rdi
mov rcx, rbx
call qword [rax + 0x20]
mov rcx, rbx
call fcn.14009d4e0
mov eax, 1
jmp 0x14009e443
lea rdi, [rbx - 0x258]
mov rax, qword [rdi]
mov edx, esi
mov rcx, rdi
call qword [rax + 0x38]
mov ebx, eax
mov rcx, rdi
call fcn.14009d4e0
mov eax, ebx
jmp 0x14009e443
mov dword [rbx + 0xb0], esi
lea r14, [rbx - 0x258]
mov rax, qword [r14]
mov edx, esi
mov rcx, r14
call qword [rax + 0x48]
test eax, eax
jne 0x14009de14
mov rax, qword [r14]
lea rdx, [rbx + 0xb0]
mov rcx, r14
call qword [rax + 0x40]
mov rcx, qword [rbx + 0x90]
test dword [rcx + 0x30], 0x2000
je 0x14009de7b
add rcx, 0x558
mov rdx, qword [rbx - 0x238]
call fcn.140084b00
test eax, eax
je 0x14009de7b
mov rcx, qword [rbx + 0x90]
add rcx, 0x558
mov rdx, qword [rbx - 0x238]
call fcn.140084bc0
test eax, eax
jne 0x14009de7b
xor edi, edi
cmp dword [rbx + 0xb0], edi
setne dil
lea r9d, [rax + 1]
mov r8d, edi
lea rdx, [0x1403232b0]
mov rcx, r14
call fcn.14000f280
cmp dword [rbx + 0xb0], 0
je 0x14009dea5
cmp dword [rbx + 0xb8], 0
je 0x14009dea5
mov r9d, 1
xor r8d, r8d
lea rdx, [0x1403235b0]
mov rcx, r14
call fcn.14000f280
mov rcx, r14
call fcn.14009d4e0
mov eax, 1
jmp 0x14009e443
lea rcx, [rbx - 0x258]
mov rax, qword [rcx]
mov edx, esi
call qword [rax + 0x68]
jmp 0x14009e443
cmp dword [rbx - 0x1fc], 0
jne 0x14009dedd
cmp dword [rbx + 0xa0], 0
je 0x14009def6
cmp esi, 1
jne 0x14009def6
mov rax, qword [rbx]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x21020022
mov rcx, rbx
call qword [rax + 0x28]
xor edi, edi
test esi, esi
setne dil
mov r8d, edi
lea rdx, [0x1403235b0]
jmp 0x14009e431
lea rdx, [0x140323598]
jmp 0x14009e431
lea r14, [rbx - 0x258]
mov r9d, 1
lea rdx, [0x140323238]
mov rcx, r14
call fcn.14000f280
mov r15d, eax
mov rcx, qword [rbx + 0x90]
test rcx, rcx
je 0x14009e015
test byte [rcx + 0x194], 0x40
je 0x14009e015
test esi, esi
je 0x14009dff7
sub esi, 1
je 0x14009dfaf
cmp esi, 1
jne 0x14009e0f1
mov rax, qword [rbx]
xor r9d, r9d
mov edx, 0x21020020
mov r8d, esi
mov rcx, rbx
call qword [rax + 0x28]
mov rax, qword [rbx]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x21020021
mov rcx, rbx
call qword [rax + 0x28]
xor r8d, r8d
mov edx, 0x21020022
mov rax, qword [rbx]
xor r9d, r9d
mov rcx, rbx
call qword [rax + 0x28]
mov eax, r15d
jmp 0x14009e443
mov rax, qword [rbx]
xor r9d, r9d
mov edx, 0x21020020
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [rax + 0x28]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x21020021
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x28]
mov edx, 0x21020022
mov r8d, 1
mov rax, qword [rbx]
xor r9d, r9d
mov rcx, rbx
call qword [rax + 0x28]
mov eax, r15d
jmp 0x14009e443
mov rax, qword [rbx]
xor r9d, r9d
mov edx, 0x21020020
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [rax + 0x28]
xor r9d, r9d
lea r8d, [r9 + 1]
jmp 0x14009dfca
xor edi, edi
mov ebp, edi
test esi, esi
sete bpl
mov rax, qword [r14]
mov rcx, r14
call qword [rax + VarBstrFromDisp]
test eax, eax
jne 0x14009e034
cmp dword [rbx - 0x200], edi
je 0x14009e049
mov rax, qword [rbx]
xor r9d, r9d
mov edx, 0x21020020
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [rax + 0x28]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x78]
test eax, eax
jne 0x14009e05e
cmp dword [rbx - 0x1f8], edi
je 0x14009e073
mov rax, qword [rbx]
xor r9d, r9d
mov edx, 0x21020021
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [rax + 0x28]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x80]
test eax, eax
jne 0x14009e08b
cmp dword [rbx - 0x1fc], edi
je 0x14009e09f
mov rax, qword [rbx]
xor r9d, r9d
mov r8d, ebp
mov edx, 0x21020022
mov rcx, rbx
call qword [rax + 0x28]
mov rax, qword [rbx - 0x238]
test rax, rax
jne 0x14009e0cb
lea r8, str.c:userschunyung_source_repos_rtkngui_rtknguimicsetting.cpp
mov edx, 0x507
lea rcx, str._VCpl__RETURN_FALSE_ON_FALSE:_Line___d__File___s_n
call fcn.140052e90
mov eax, r15d
jmp 0x14009e443
test dword [rax + 0x320], 0x200
je 0x14009e0f1
test esi, esi
setne dil
mov r8d, edi
mov edx, 0x21020027
mov rax, qword [rbx]
xor r9d, r9d
mov rcx, rbx
call qword [rax + 0x28]
mov eax, r15d
jmp 0x14009e443
lea r14, [rbx - 0x258]
xor edi, edi
test esi, esi
setne dil
mov r9d, 1
mov r8d, edi
lea rdx, [0x140323250]
mov rcx, r14
call fcn.14000f280
test eax, eax
je case.0x14009dd4b.553779237
mov rcx, r14
test esi, esi
jne 0x14009e1f5
call fcn.14009bd50
mov rax, qword [r14]
mov rcx, r14
call qword [rax + VarBstrFromDisp]
test eax, eax
jne 0x14009e14d
cmp dword [rbx - 0x200], eax
je 0x14009e158
mov rax, qword [r14]
xor edx, edx
mov rcx, r14
call qword [rax + 0x28]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x78]
test eax, eax
jne 0x14009e16d
cmp dword [rbx - 0x1f8], eax
je 0x14009e178
mov rax, qword [r14]
xor edx, edx
mov rcx, r14
call qword [rax + 0x38]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x80]
test eax, eax
jne 0x14009e190
cmp dword [rbx - 0x1fc], eax
je 0x14009e19b
mov rax, qword [r14]
xor edx, edx
mov rcx, r14
call qword [rax + 0x48]
mov rax, qword [rbx - 0x238]
test rax, rax
jne 0x14009e1c6
lea r8, str.c:userschunyung_source_repos_rtkngui_rtknguimicsetting.cpp
mov edx, 0x507
lea rcx, str._VCpl__RETURN_FALSE_ON_FALSE:_Line___d__File___s_n
call fcn.140052e90
xor eax, eax
jmp 0x14009e443
test dword [rax + 0x320], 0x200
je case.0x14009dd4b.553779237
mov r9d, 1
xor r8d, r8d
lea rdx, [0x1403235b0]
mov rcx, r14
call fcn.14000f280
xor eax, eax
jmp 0x14009e443
call fcn.14009be40
xor eax, eax
jmp 0x14009e443
xor edx, edx
lea r8d, [rdx + 0x70]
lea rcx, [rsp + 0x60]
call fcn.1402841a0
mov dword [rsp + 0x60], VarBstrFromDisp
xor edi, edi
mov qword [rsp + 0x68], rdi
lea rax, str.open
mov qword [rsp + 0x70], rax
lea rax, str.http:__www.fortemedia.com
mov qword [rsp + 0x78], rax
mov eax, 3
mov dword [rsp + 0x90], eax
lea rcx, [rsp + 0x60]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
lea eax, [rdi + 1]
jmp 0x14009e443
test esi, esi
jne 0x14009e28a
add rbx, 0xfffffffffffffda8
mov rax, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [rax + 0x28]
mov rax, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [rax + 0x48]
mov rax, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [rax + 0x38]
xor eax, eax
jmp 0x14009e443
mov r9d, 1
lea r8, str.LastSelectedRtkMicMuxTech
lea rdx, str.General
lea rcx, [0x1403dd120]
call fcn.140102880
sub eax, 1
je 0x14009e2e5
sub eax, 1
je 0x14009e2d1
cmp eax, 1
jne case.0x14009dd4b.553779237
lea rcx, [rbx - 0x258]
mov rax, qword [rcx]
mov edx, esi
call qword [rax + 0x48]
jmp 0x14009e443
lea rcx, [rbx - 0x258]
mov rax, qword [rcx]
mov edx, esi
call qword [rax + 0x38]
jmp 0x14009e443
lea rcx, [rbx - 0x258]
mov rax, qword [rcx]
mov edx, esi
call qword [rax + 0x28]
jmp 0x14009e443
mov ecx, 0x21020120
call fcn.140025c30
lea rbp, [rbx - 0x258]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [0x140322af8]
xor edx, edx
lea r8d, [rdi + 1]
lea rcx, [0x140322b08]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x14009e381
mov r9d, eax
lea r8, str.c:userschunyung_source_repos_rtkngui_rtkngui_apopolicycfgclient.cpp
mov edx, 0x97
lea rcx, str._VCpl__RETURN_FALSE_ON_ERROR:_Line___d__File___s__hr__0x_X_n
call fcn.140052e90
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14009e401
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x14009e443
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x20], rdx
lea r9, [0x140323eb0]
mov r8d, 1
mov rdx, qword [rbp + 0x10]
call qword [rax + 0x50]
test eax, eax
js 0x14009e366
lea rcx, [rsp + 0x38]
cmp word [rsp + 0x38], 0x13
je 0x14009e3c0
call qword [sym.imp.ole32.dll_PropVariantClear]
jmp 0x14009e366
mov ebx, dword [rsp + 0x40]
call qword [sym.imp.ole32.dll_PropVariantClear]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14009e3db
mov rax, qword [rcx]
call qword [rax + 0x10]
test esi, esi
je 0x14009e3e4
and ebx, 0xfffffffb
jmp 0x14009e3e7
or ebx, 4
mov r9d, 1
mov r8d, ebx
lea rdx, [0x140323eb0]
mov rcx, rbp
call fcn.14000f280
mov edi, eax
mov eax, edi
jmp 0x14009e443
cmp ebp, 0x21020121
jne case.0x14009dd4b.553779237
mov ecx, ebp
call fcn.140025c30
mov eax, 3
mov r8d, 1
cmp esi, 2
cmovne r8d, eax
lea rdx, [0x140323f10]
mov r9d, 1
lea rcx, [rbx - 0x258]
call fcn.14000f280
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret