Function at 0x7705e0
Capabilities:
Create process on windows

Disassembly:
push rbp
push rsi
push rbx
sub rsp, 0xc0
mov rbp, rsp
mov qword [rbp + 0x48], rcx
mov byte [rbp + 0x55], r8b
mov byte [rbp + 0x56], r9b
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xe8], rdx
mov rcx, qword [rbp + 0xe8]
call fcn.00412250
nop
xor eax, eax
mov byte [rbp + 0x57], al
cmp byte [0x00808523], 0
je 0x7706af
lea rcx, [0x00770cc4]
call fcn.0075ca80
test al, al
jne 0x770c4d
cmp byte [0x00808530], 0
je 0x7706cc
lea rcx, [0x00770cf0]
call fcn.0075ca80
test al, al
jne 0x770c4d
lea rcx, [0x00770d1c]
call fcn.0075ca80
test al, al
jne 0x7709ce
lea rcx, [0x00770d44]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
call fcn.00413d90
test eax, eax
jle 0x7709ce
lea rcx, [0x00770d54]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
call fcn.00413d90
test eax, eax
jle 0x7709ce
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0xe8]
call fcn.00438eb0
mov rax, qword [rbp + 0xa8]
lea rcx, [0x00770d64]
mov rdx, rax
mov r8d, 1
call fcn.00413d90
test eax, eax
jle 0x770806
cmp byte [0x0080852d], 0
jne 0x770806
lea rcx, [rbp + 0xa0]
mov rdx, qword [rbp + 0xe8]
call fcn.00438eb0
mov rax, qword [rbp + 0xa0]
lea rcx, [0x00770d64]
mov rdx, rax
mov r8d, 1
call fcn.00413d90
mov ecx, eax
add ecx, 4
xor eax, eax
mov rdx, qword [rbp + 0xe8]
test rdx, rdx
je 0x7707ab
mov eax, dword [rdx - 4]
lea rdx, [rbp + 0xe8]
mov r8, qword [rbp + 0xe8]
mov r9d, ecx
mov rcx, rdx
mov rdx, r8
mov r8d, r9d
mov r9d, eax
call fcn.00413b80
lea rcx, [0x00770d54]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
call fcn.00413d90
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
mov r9d, eax
sub r9d, 1
call fcn.00413b80
lea rcx, [rbp + 0x98]
mov rdx, qword [rbp + 0xe8]
call fcn.00438eb0
mov rax, qword [rbp + 0x98]
lea rcx, [0x00770d7c]
mov rdx, rax
mov r8d, 1
call fcn.00413d90
test eax, eax
jle 0x7708ea
cmp byte [0x0080852d], 0
jne 0x7708ea
lea rcx, [rbp + 0x90]
mov rdx, qword [rbp + 0xe8]
call fcn.00438eb0
mov rax, qword [rbp + 0x90]
lea rcx, [0x00770d7c]
mov rdx, rax
mov r8d, 1
call fcn.00413d90
mov ecx, eax
add ecx, 4
xor eax, eax
mov rdx, qword [rbp + 0xe8]
test rdx, rdx
je 0x77088f
mov eax, dword [rdx - 4]
lea rdx, [rbp + 0xe8]
mov r8, qword [rbp + 0xe8]
mov r9d, ecx
mov rcx, rdx
mov rdx, r8
mov r8d, r9d
mov r9d, eax
call fcn.00413b80
lea rcx, [0x00770d54]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
call fcn.00413d90
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
mov r9d, eax
sub r9d, 1
call fcn.00413b80
lea rcx, [rbp + 0x88]
mov rdx, qword [rbp + 0xe8]
call fcn.00438eb0
mov rax, qword [rbp + 0x88]
lea rcx, [0x00770d94]
mov rdx, rax
mov r8d, 1
call fcn.00413d90
test eax, eax
jle 0x7709ce
cmp byte [0x0080852d], 1
jne 0x7709ce
lea rcx, [rbp + 0x80]
mov rdx, qword [rbp + 0xe8]
call fcn.00438eb0
mov rax, qword [rbp + 0x80]
lea rcx, [0x00770d94]
mov rdx, rax
mov r8d, 1
call fcn.00413d90
mov ecx, eax
add ecx, 4
xor eax, eax
mov rdx, qword [rbp + 0xe8]
test rdx, rdx
je 0x770973
mov eax, dword [rdx - 4]
lea rdx, [rbp + 0xe8]
mov r8, qword [rbp + 0xe8]
mov r9d, ecx
mov rcx, rdx
mov rdx, r8
mov r8d, r9d
mov r9d, eax
call fcn.00413b80
lea rcx, [0x00770d54]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
call fcn.00413d90
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
mov r9d, eax
sub r9d, 1
call fcn.00413b80
lea rcx, [rbp + 0xb8]
mov rdx, qword [rbp + 0xe8]
call fcn.00412780
lea rcx, [rbp + 0xb0]
call fcn.00412080
lea rcx, [0x00770dac]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
call fcn.00413d90
mov ebx, eax
test bx, bx
jne 0x770a28
lea rcx, [0x00770dc0]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
call fcn.00413d90
mov ebx, eax
lea rcx, [0x00770dd4]
call fcn.0075ca80
test al, al
jne 0x770ae2
test bx, bx
jbe 0x770ae2
movzx ebx, bx
lea rcx, [rbp + 0xb8]
mov rdx, qword [rbp + 0xe8]
mov r8d, 1
mov r9d, ebx
sub r9d, 1
call fcn.00413b80
lea rcx, [0x00770dfc]
mov rdx, qword [rbp + 0xb8]
mov r8d, 1
call fcn.00413d90
test eax, eax
jle 0x770abb
lea rcx, [rbp + 0x78]
mov rdx, qword [rbp + 0xb8]
lea r8, [0x00770dfc]
xor r9, r9
movzx rax, byte [0x00770e00]
mov byte [rsp + 0x20], al
call fcn.00448560
lea rcx, [rbp + 0xb8]
mov rdx, qword [rbp + 0x78]
call fcn.00412780
lea rcx, [rbp + 0xe8]
mov edx, 1
mov r8d, ebx
call fcn.00413be0
lea rcx, [rbp + 0xb0]
mov rdx, qword [rbp + 0xe8]
call fcn.00412780
mov bx, 1
cmp byte [0x00808523], 0
je 0x770b01
lea rcx, [0x00770e10]
call fcn.0075ca80
test al, al
jne 0x770b01
xor ebx, ebx
lea rcx, [0x00770e44]
mov rdx, qword [rbp + 0xb8]
mov r8d, 1
call fcn.00413d90
test eax, eax
jne 0x770b79
lea rcx, [rbp + 0x70]
mov rdx, qword [rbp + 0xb8]
call fcn.0075cee0
mov rcx, qword [rbp + 0x70]
mov dl, 1
call fcn.0043b0b0
test al, al
je 0x770b79
mov rcx, qword [rbp + 0x48]
mov rdx, qword [rbp + 0xb8]
mov r8, qword [rbp + 0xb0]
mov r9d, ebx
movzx rax, byte [rbp + 0x55]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0x100]
mov byte [rsp + 0x28], al
mov byte [rsp + 0x30], 1
call fcn.0076e8c0
mov byte [rbp + 0x57], al
jmp 0x770c4c
mov rcx, qword [rbp + 0xb8]
call fcn.00413590
mov rcx, qword [rbp + 0x48]
xor edx, edx
mov r8, rax
xor r9, r9
mov qword [rsp + 0x20], 0
movzx ebx, bx
mov dword [rsp + 0x28], ebx
call sub.shell32.dll_ShellExecuteW
mov al, 1
mov byte [rbp + 0x57], al
movzx rax, byte [rbp + 0x56]
test al, al
je 0x770c4c
mov rcx, qword [0x008084c0]
call fcn.00601680
mov rbx, rax
mov rcx, qword [0x00808510]
lea rdx, [rbp + 0x60]
lea r8, [0x00770e58]
lea r9, [0x00770e78]
lea rax, [0x00770e8c]
mov qword [rsp + 0x20], rax
mov rax, qword [0x00808510]
mov rsi, qword [rax]
call qword [rsi + 0x10]
lea rcx, [rbp + 0x68]
mov rdx, qword [rbp + 0x60]
xor r8, r8
call fcn.00762730
mov rcx, qword [rbp + 0x68]
call fcn.00413590
mov rsi, rax
mov rcx, qword [0x008084c0]
lea rdx, [rbp + 0x58]
call fcn.005f3140
mov rcx, qword [rbp + 0x58]
call fcn.00413590
mov rcx, rbx
mov rdx, rsi
mov r8, rax
mov r9d, 0x35
call sub.user32.dll_MessageBoxW
cmp eax, 7
jne 0x770c4c
xor eax, eax
mov byte [rbp + 0x57], al
nop
lea rcx, [rbp + 0x58]
call fcn.00412080
lea rcx, [rbp + 0x60]
mov edx, 0xc
call fcn.00412160
lea rcx, [rbp + 0xe8]
call fcn.00412080
movzx rax, byte [rbp + 0x57]
lea rsp, [rbp + 0xc0]
pop rbx
pop rsi
pop rbp
ret