Function at 0x140076f90
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x80
mov rdi, rcx
sub rdx, 9
je 0x140077213
sub rdx, 4
je 0x140077064
sub rdx, 0x16
je 0x140077002
cmp rdx, 1
je 0x140076fcc
xor al, al
jmp 0x1400772ce
lea r9, [rsp + 0x20]
mov dword [rsp + 0x30], 3
xor r8d, r8d
mov dword [rsp + 0x2c], 3
mov edx, 0x102b
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
mov edx, 0x1013
xor r8d, r8d
mov rcx, rdi
jmp 0x1400772c6
xor r9d, r9d
mov dword [rsp + 0x30], 3
xor r8d, r8d
mov dword [rsp + 0x2c], 3
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [rsp + 0x20]
mov edx, 0x102b
dec eax
mov rcx, rdi
movsxd r8, eax
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x1013
mov rcx, rdi
dec eax
movsxd r8, eax
xor r9d, r9d
jmp 0x1400772c6
cmp rdi, qword [0x14018ec80]
jne 0x140077074
mov ebx, 0x65
jmp 0x140077088
cmp rdi, qword [0x14018ec90]
mov ebx, 0x66
mov eax, 0x68
cmove ebx, eax
mov r9d, 2
mov edx, 0x100c
lea r8, [r9 - 3]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
je 0x1400772cc
xorps xmm0, xmm0
xor eax, eax
mov qword [rsp + 0x6c], rax
mov dword [rsp + 0x74], eax
movups xmmword [rsp + 0x2c], xmm0
movups xmmword [rsp + 0x3c], xmm0
movups xmmword [rsp + 0x4c], xmm0
movups xmmword [rsp + 0x5c], xmm0
cmp ebx, 0x65
jne 0x1400770d6
mov rdi, qword [0x14018ec80]
jmp 0x1400770f4
cmp ebx, 0x66
jne 0x1400770e4
mov rdi, qword [0x14018ec88]
jmp 0x1400770f4
cmp ebx, 0x68
jne 0x1400772cc
mov rdi, qword [0x14018ec90]
mov r9d, 2
mov edx, 0x100c
mov rcx, rdi
lea r8, [r9 - 3]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
je 0x1400772cc
xor esi, esi
mov dword [rsp + 0x24], eax
lea r9, [rsp + 0x20]
mov dword [rsp + 0x28], esi
xor r8d, r8d
mov dword [rsp + 0x20], 4
mov edx, 0x104b
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jne 0x1400772cc
cmp ebx, 0x65
jne 0x14007716f
mov rbx, qword [rsp + 0x48]
mov rcx, qword [0x140189c20]
mov r8, rbx
mov edx, dword [rbx + 0x24]
call fcn.140086170
mov rcx, rbx
call fcn.1400c28b0
jmp 0x1400772cc
cmp ebx, 0x66
jne 0x140077186
mov rdx, qword [rsp + 0x48]
mov rcx, rdi
call fcn.1400c25f0
jmp 0x1400772cc
cmp ebx, 0x68
jne 0x1400772cc
mov r8, qword [rsp + 0x48]
test byte [r8 + 0x100], 8
je 0x1400771c2
mov rcx, qword [0x14018ec80]
lea r9d, [rbx - 0x58]
lea r8, str.Process_Explorer_Error
lea rdx, str.Properties_not_supported_on_pagefile_backed_sections
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x1400772cc
cmp qword [r8 + 0x118], rsi
jne 0x1400771f1
mov rcx, qword [0x14018ec78]
lea r8, [0x14011f590]
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rdx, str.Not_a_valid_DLL
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x1400772cc
lock inc dword [r8 + 0x20]
mov eax, dword [0x140170720]
lea rcx, [0x1400c28d0]
xor edx, edx
mov dword [r8 + 0x24], eax
call fcn.1400f7c20
jmp 0x1400772cc
mov rbx, qword [0x14018ec80]
cmp rdi, rbx
jne 0x140077262
mov ecx, dword [0x14018df94]
test ecx, ecx
je 0x14007725b
sub ecx, 1
je 0x140077252
cmp ecx, 1
jne 0x140077248
mov rcx, qword [0x140189c20]
call fcn.140086820
mov rbx, qword [rax + 0xf8]
jmp 0x140077262
mov rbx, qword [rsp + 0x98]
jmp 0x140077262
mov rbx, qword [0x14018ec90]
jmp 0x140077262
mov rbx, qword [0x14018ec88]
mov r9d, 2
mov edx, 0x100c
mov rcx, rbx
lea r8, [r9 - 3]
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jns 0x140077282
xor esi, esi
jmp 0x14007729d
mov r9d, 2
mov edx, 0x100c
mov rcx, rbx
lea r8, [r9 - 3]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rsi, rax
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetFocus]
movsxd r8, esi
lea r9, [rsp + 0x20]
mov edx, 0x102b
mov dword [rsp + 0x30], 3
mov rcx, rbx
mov dword [rsp + 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov al, 1
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret