Function at 0x140075510
Capabilities:
Create process on windows

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rsp + 0x240], rbx
mov rax, qword [0x14029e8b8]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov r14, rdx
mov r15, rcx
xor edx, edx
mov r8d, 0x88
lea rcx, [rbp + 0x60]
call fcn.1401afc90
mov rcx, qword [r14 + 0x110]
mov rax, qword [rcx]
lea rdx, [rbp + 0x60]
call qword [rax + ILClone]
nop
lea rdx, str.checkbox_AutoRun
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x1400756e3
lea rcx, [r15 + 0x58]
lea rdx, str.checkbox_AutoRun
call fcn.1400e29e0
test rax, rax
je 0x140075f7f
mov rcx, rax
call fcn.1400f0ea0
movzx ebx, al
call fcn.14000cb70
xor esi, esi
test bl, bl
sete sil
mov edx, esi
mov rcx, rax
call fcn.14003ead0
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov r8d, SafeArrayDestroy
lea rdx, str.set_autorun_
lea rcx, [rbp + 0x40]
call fcn.14000d6b0
nop
lea rax, [0x140204b18]
lea r9, [0x140204b1c]
test bl, bl
cmove r9, rax
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x140075610
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x140075659
lea rax, [rcx + rdi]
mov qword [rbp + 0x50], rax
lea rbx, [rbp + 0x40]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x40]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call fcn.1401b00b0
mov byte [rbx + rdi], 0
jmp 0x14007566d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.14000ae90
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rax, qword [rbp + 0x40]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
call fcn.140056170
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140075f7f
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400756d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075fc0
call fcn.1401606e8
jmp 0x140075f7f
lea rdx, str.checkbox_DefaultExplore
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075739
mov rbx, qword [r14 + 0x110]
mov rcx, rbx
call fcn.1400f0ea0
mov rcx, qword [r15 + 0x418]
test al, al
je 0x14007572f
mov r8b, 1
mov rdx, r15
call fcn.14006fde0
mov rax, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [rax + 0x330]
jmp 0x140075f7f
call fcn.140065110
jmp 0x140075f7f
lea rdx, str.checkbox_DesktopShortcut
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075766
mov rcx, qword [r14 + 0x110]
call fcn.1400f0ea0
movzx ecx, al
call fcn.140030070
jmp 0x140075f7f
lea rdx, str.checkbox_CurrentTab_OpenBookmark
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x1400757a8
mov rbx, qword [r14 + 0x110]
call fcn.14000cb70
mov rdi, rax
mov rcx, rbx
call fcn.1401131a0
xor esi, esi
test al, al
sete sil
mov edx, esi
mov rcx, rdi
call fcn.14003eb20
jmp 0x140075f7f
lea rdx, str.checkbox_NewWinOnLaunch
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x1400757ea
mov rbx, qword [r14 + 0x110]
call fcn.14000cb70
mov rdi, rax
mov rcx, rbx
call fcn.1401131a0
xor esi, esi
test al, al
sete sil
mov edx, esi
mov rcx, rdi
call fcn.14003ef20
jmp 0x140075f7f
lea rdx, str.Option_LanuchNew
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075834
mov rbx, qword [r14 + 0x110]
mov rcx, rbx
call fcn.1400f0ea0
test al, al
jne 0x140075f7f
mov rcx, rbx
call fcn.1400f0ea0
xor esi, esi
test al, al
sete sil
mov edx, esi
mov rcx, r15
call fcn.1400766e0
jmp 0x140075f7f
lea rdx, str.Option_LanuchLastTime
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075864
mov rcx, qword [r14 + 0x110]
call fcn.1400f0ea0
movzx edx, al
mov rcx, r15
call fcn.1400766e0
jmp 0x140075f7f
lea rdx, str.checkbox_ShowBookmarks
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x1400758af
mov rcx, qword [r14 + 0x110]
call fcn.1401131a0
xor esi, esi
test al, al
sete sil
call fcn.14000cb70
mov edx, esi
mov rcx, rax
call fcn.14003f400
call fcn.14000cd00
mov edx, esi
mov rcx, rax
call fcn.140088370
jmp 0x140075f7f
lea rdx, str.checkbox_ShowToolbar
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x1400758f9
mov rcx, qword [r14 + 0x110]
call fcn.1401131a0
xor esi, esi
test al, al
sete sil
call fcn.14000cb70
mov edx, esi
mov rcx, rax
call fcn.14003f450
mov edx, esi
mov rcx, qword [r15 + 0x418]
call fcn.140070f40
jmp 0x140075f7f
lea rdx, str.checkbox_ShowHidden
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075930
mov rcx, qword [r14 + 0x110]
call fcn.1401131a0
xor esi, esi
test al, al
sete sil
mov edx, esi
mov rcx, r15
call fcn.140076610
jmp 0x140075f7f
lea rdx, str.checkbox_ShowExtension
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075967
mov rcx, qword [r14 + 0x110]
call fcn.1401131a0
xor esi, esi
test al, al
sete sil
mov edx, esi
mov rcx, r15
call fcn.1400765a0
jmp 0x140075f7f
lea rdx, [0x140204b20]
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075aff
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x140075ac3
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8d, 0x3c
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2_settingwnd.cpp
lea rcx, [rsp + 0x30]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rbp + 0x40]
call fcn.14000d6b0
nop
mov r9d, 0x211
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.14000b740
mov rbx, rax
lea rdx, str.click_protocolLink
mov rcx, rax
call fcn.14000aa40
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rsp + 0x58]
call fcn.14000c6a0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140075a75
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075a70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075fc6
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x140075ac3
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075abe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075fcc
call fcn.1401606e8
call fcn.14002aaa0
mov dword [rsp + 0x28], 1
xor esi, esi
xor r9d, r9d
lea rdx, [0x1401f56e0]
xor ecx, ecx
mov qword [rsp + 0x20], rsi
test al, al
jne 0x140075af3
lea r8, str.http:__www.tabxexplorer.com_cms_agreement.html
jmp 0x140075f79
lea r8, str.http:__www.ludashi.com_licence.html
jmp 0x140075f79
lea rdx, str.PrivacyLink
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075c97
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x140075c5b
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8d, 0x3c
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2_settingwnd.cpp
lea rcx, [rsp + 0x30]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rbp + 0x40]
call fcn.14000d6b0
nop
mov r9d, 0x21d
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.14000b740
mov rbx, rax
lea rdx, str.click_PrivacyLink
mov rcx, rax
call fcn.14000aa40
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rsp + 0x58]
call fcn.14000c6a0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140075c0d
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075c08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075fd2
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x140075c5b
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075c56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075fd8
call fcn.1401606e8
call fcn.14002aaa0
mov dword [rsp + 0x28], 1
xor esi, esi
xor r9d, r9d
lea rdx, [0x1401f56e0]
xor ecx, ecx
mov qword [rsp + 0x20], rsi
test al, al
jne 0x140075c8b
lea r8, str.http:__www.tabxexplorer.com_cms_privacy_policy.html
jmp 0x140075f79
lea r8, str.http:__www.ludashi.com_cms_page_protocol.html
jmp 0x140075f79
lea rdx, str.QQGroup
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075dff
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x140075df3
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8d, 0x3c
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2_settingwnd.cpp
lea rcx, [rsp + 0x30]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rbp + 0x40]
call fcn.14000d6b0
nop
mov r9d, 0x229
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.14000b740
mov rbx, rax
lea rdx, str.click_QQGroup
mov rcx, rax
call fcn.14000aa40
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rsp + 0x58]
call fcn.14000c6a0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140075da5
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075da0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075fde
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x140075df3
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075dee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075fe4
call fcn.1401606e8
lea r8, str.http:__www.tabxexplorer.com_joinclub
jmp 0x140075f5e
lea rdx, str.OfficialWebsite
lea rcx, [rbp + 0x60]
call fcn.1400df660
test al, al
je 0x140075f7f
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x140075f57
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8d, 0x3c
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2_settingwnd.cpp
lea rcx, [rsp + 0x30]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rbp + 0x40]
call fcn.14000d6b0
nop
mov r9d, 0x22e
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.14000b740
mov rbx, rax
lea rdx, str.click_OfficialWebsite
mov rcx, rax
call fcn.14000aa40
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rsp + 0x58]
call fcn.14000c6a0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140075f0d
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075f08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075fea
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x140075f57
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075f52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075fba
call fcn.1401606e8
lea r8, str.http:__www.tabxexplorer.com
xor esi, esi
xor r9d, r9d
mov dword [rsp + 0x28], 1
xor ecx, ecx
lea rdx, [0x1401f56e0]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, r14
mov rcx, r15
call fcn.1400ea190
nop
lea rcx, [rbp + 0x60]
call fcn.140028e30
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.140160a40
mov rbx, qword [rsp + 0x240]
add rsp, 0x200
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
int3