Function at 0x140066020
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
mov eax, 0x11d0
call fcn.140115240
sub rsp, rax
mov rax, qword [0x140185220]
xor rax, rsp
mov qword [rsp + 0x11c0], rax
mov rdi, rdx
mov rsi, rcx
mov rdx, qword [rsp + 0x1220]
sub r8d, 0xf
je 0x1400662b3
sub r8d, 1
je 0x14006629e
sub r8d, 0x3e
je 0x14006622b
sub r8d, 0xc2
je 0x1400660bc
cmp r8d, 1
jne 0x140066508
movzx edx, r9w
mov ecx, edx
sub ecx, r8d
je 0x14006609a
cmp ecx, r8d
jne 0x1400660b2
cmp byte [rsi + 0x30], 0
je 0x1400660a8
mov byte [rsi + 0x31], 1
mov qword [rsi + 0x38], rdx
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
jmp 0x14006650a
call fcn.1400e81c0
lea rcx, vtable.std::_Func_impl_no_alloc_class__protected_virtual:_long_long___int64____cdecl_CAboutDlg::DlgFunc_struct_HWND______ptr64__unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64_____ptr64::_5::_lambda_1___void___.0
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rsi
lea rcx, [rsp + 0x70]
mov qword [rsp + 0xa8], rcx
inc dword [rax + 0x48]
mov ecx, dword [rax + 0x48]
mov dword [rsp + 0x50], ecx
lea rcx, [rax + 8]
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
call fcn.1400eb220
mov eax, dword [rsp + 0x50]
mov dword [rsi + 0x50], eax
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x140066126
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov edx, 0x415
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdx, rax
lea rcx, [rsi + 0x58]
call fcn.140058660
call fcn.1400e81c0
mov rbx, rax
call fcn.1400e81c0
movzx r8d, byte [rax + 1]
mov rdx, qword [rsi + 0x10]
mov rcx, rbx
call fcn.1400e8950
call fcn.1400e81c0
call fcn.1400e81c0
mov ebx, dword [rax + 0x108]
call fcn.1400e81c0
lea r8, [rax + 0xc8]
mov r9d, ebx
mov rdx, qword [rsi + 0x10]
call fcn.1400e8850
mov r8d, 0x8d
mov rdx, rdi
mov rcx, rsi
call fcn.14004b720
call fcn.14005b9c0
mov rdx, qword [rsi + 0x10]
mov rcx, rax
call fcn.14005acd0
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x100]
call fcn.140118720
mov dword [rsp + 0x30], 0x2e
mov dword [rsp + 0x28], 0xd
mov dword [rsp + 0x20], 1
mov r9d, 2
lea r8, str.grepWinNP3__x64__version__ld._ld._ld._ld
mov edx, 0x104
lea rcx, [rsp + 0x100]
call fcn.140062710
lea r8, [rsp + 0x100]
mov edx, 0x413
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, str.2023_03_16
mov edx, 0x414
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 1
jmp 0x14006650a
cmp r9, 0x415
jne 0x140066508
mov eax, dword [rdx + 0x10]
add eax, 4
test eax, 0xfffffffd
jne 0x140066508
add rdx, 0x18
mov r8d, 0x10b8
lea rcx, [rsp + 0x100]
call fcn.140118050
cmp dword [rsp + 0x104], 0
jne 0x140066508
mov dword [rsp + 0x28], 5
xor edi, edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rsp + 0x170]
lea rdx, str.open
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x140066508
call fcn.1400e81c0
mov edx, dword [rsi + 0x50]
mov rcx, rax
call fcn.1400e86e0
jmp 0x140066508
mov rsi, qword [rcx + 0x10]
cmp qword [0x14018c300], 0
je 0x140066508
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDC]
mov rbp, rax
test rax, rax
je 0x140066508
lea rdx, [rsp + 0xb0]
mov rcx, rsi
call qword [sym.imp.USER32.dll_BeginPaint]
mov ebx, 4
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
xor edi, edi
mov ecx, dword [rbx + rdx]
cmp dword [0x14018bfa8], ecx
jle 0x140066363
lea rcx, [0x14018bfa8]
call fcn.1401147d0
cmp dword [0x14018bfa8], 0xffffffff
jne 0x140066363
mov qword [0x14018bf80], rdi
mov qword [0x14018bf88], rdi
mov qword [0x14018bf90], rdi
mov qword [0x14018bf98], rdi
mov byte [0x14018bfa0], dil
mov dword [0x14018bfa4], 0x60
lea rcx, [0x140151640]
call fcn.140114b18
lea rcx, [0x14018bfa8]
call fcn.140114770
mov rdx, rsi
lea rcx, [0x14018bf80]
call fcn.14004b410
mov edx, eax
mov ecx, 0x40
lea r8d, [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov r14d, eax
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
mov ecx, dword [rbx + rdx]
cmp dword [0x14018bfa8], ecx
jle 0x1400663f7
lea rcx, [0x14018bfa8]
call fcn.1401147d0
cmp dword [0x14018bfa8], 0xffffffff
jne 0x1400663f7
mov qword [0x14018bf80], rdi
mov qword [0x14018bf88], rdi
mov qword [0x14018bf90], rdi
mov qword [0x14018bf98], rdi
mov byte [0x14018bfa0], dil
mov dword [0x14018bfa4], 0x60
lea rcx, [0x140151640]
call fcn.140114b18
lea rcx, [0x14018bfa8]
call fcn.140114770
mov rdx, rsi
lea rcx, [0x14018bf80]
call fcn.14004b410
mov edx, eax
mov ecx, 0xc
lea r8d, [rcx + 0x54]
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov r15d, eax
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
mov r8d, dword [rbx + rdx]
cmp dword [0x14018bfa8], r8d
jle 0x14006648d
lea rcx, [0x14018bfa8]
call fcn.1401147d0
cmp dword [0x14018bfa8], 0xffffffff
jne 0x14006648d
mov qword [0x14018bf80], rdi
mov qword [0x14018bf88], rdi
mov qword [0x14018bf90], rdi
mov qword [0x14018bf98], rdi
mov byte [0x14018bfa0], dil
mov dword [0x14018bfa4], 0x60
lea rcx, [0x140151640]
call fcn.140114b18
lea rcx, [0x14018bfa8]
call fcn.140114770
mov rdx, rsi
lea rcx, [0x14018bf80]
call fcn.14004b410
mov edx, eax
mov ecx, 0xc
lea r8d, [rcx + 0x54]
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ebx, eax
mov ecx, 0xf
call qword [sym.imp.USER32.dll_GetSysColorBrush]
mov dword [rsp + 0x40], 3
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
mov r9, qword [0x14018c300]
mov r8d, ebx
mov edx, r15d
mov rcx, rbp
call qword [sym.imp.USER32.dll_DrawIconEx]
mov rdx, rbp
mov rcx, rsi
call qword [sym.imp.USER32.dll_ReleaseDC]
lea rdx, [rsp + 0xb0]
mov rcx, rsi
call qword [sym.imp.USER32.dll_EndPaint]
xor eax, eax
mov rcx, qword [rsp + 0x11c0]
xor rcx, rsp
call fcn.1401145b0
mov rbx, qword [rsp + 0x1210]
add rsp, 0x11d0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret