Function at 0x14001e080
Capabilities:
Create thread
Hide graphical window
Set registry value

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x60
mov rsi, rcx
mov rax, qword [0x140035010]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov edx, 0x3ef
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x14001e218
mov rbx, qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rsi
mov edx, 0x3ef
call rbx
mov rdi, qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3ee
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f3
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f2
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3ed
call rbx
mov rcx, rax
xor edx, edx
call rdi
mov rcx, rsi
mov edx, 0x3f4
call rbx
mov rcx, rax
xor edx, edx
call rdi
lea rdx, str.ReportDuringSubmit2
lea rdi, [rsp + 0x38]
mov rcx, rdi
call fcn.140019d70
cmp qword [rdi + 0x18], 8
jb 0x14001e140
mov rdi, qword [rsp + 0x38]
mov rcx, rsi
mov edx, 0x3f6
mov r8, rdi
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x50]
cmp rax, 8
jb 0x14001e17b
mov rcx, qword [rsp + 0x38]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jae 0x14001e33b
call fcn.140020668
mov rcx, rsi
call fcn.14001d420
mov rcx, rsi
mov edx, 0x3f7
call rbx
mov rcx, rax
mov edx, 0x465
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffff0000
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rsi
mov edx, 0x3f7
call rbx
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
xor edi, edi
mov qword [0x140035438], rdi
mov qword [0x140035320], rsi
lea rsi, [0x140035320]
lea rcx, [0x140035328]
lea rdx, [0x1400353b8]
call fcn.14002b2d0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0
lea r8, [0x140019f80]
xor ecx, ecx
xor edx, edx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x140035438], rax
jmp 0x14001e325
mov rcx, rsi
mov edx, 0x3f2
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, eax
cmp qword [0x1400353f8], 8
jb 0x14001e23b
mov rdx, qword [0x1400353e0]
jmp 0x14001e242
lea rdx, [0x1400353e0]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x14001e299
xor eax, eax
test edi, edi
setne al
lea rdx, [rsp + 0x34]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x20], rdx
mov dword [rsp + 0x28], 4
lea rdx, str.IncludeURL
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rsi
mov edx, 0x3ef
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, eax
cmp qword [0x1400353f8], 8
jb 0x14001e2bc
mov rdx, qword [0x1400353e0]
jmp 0x14001e2c3
lea rdx, [0x1400353e0]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x14001e31a
xor eax, eax
test edi, edi
setne al
lea rdx, [rsp + 0x34]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x20], rdx
mov dword [rsp + 0x28], 4
lea rdx, str.SubmitCrashReport
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rsi
xor edx, edx
call qword [sym.imp.USER32.dll_EndDialog]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140021700
nop
add rsp, 0x60
pop rbx
pop rdi
pop rsi
ret
mov rdi, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rdi
cmp rcx, 0x20
jae 0x14001e35e
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rdi
jmp 0x14001e176
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3