Function at 0x140050a60
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
sub rsp, 0x280
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rax, qword [0x140099938]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov r12d, r9d
mov rbp, rdx
mov rbx, rcx
xor edi, edi
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x40], di
cmp qword [rcx + 8], rdi
je 0x140050ce1
cmp r8d, edi
je 0x140050bfb
mov r8d, 0x104
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [0x1400837d0]
call fcn.14005b1c0
mov r8, rax
lea rdx, [0x1400837d0]
lea rcx, [rsp + 0x38]
call fcn.140002280
lea rcx, [0x1400837cc]
call fcn.14005b1c0
mov r8, rax
lea rdx, [0x1400837cc]
lea rcx, [rsp + 0x38]
call fcn.14000362c
cmp qword [rbx + 0x30], 8
jb 0x140050b1e
mov rbx, qword [rbx + 0x18]
jmp 0x140050b22
add rbx, 0x18
mov rcx, rbx
call fcn.14005b1c0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.14000362c
lea rcx, [0x1400837cc]
call fcn.14005b1c0
mov r8, rax
lea rdx, [0x1400837cc]
lea rcx, [rsp + 0x38]
call fcn.14000362c
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rdi
lea r8, [rsp + 0x60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp rax, 0x20
ja 0x140050bc3
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, str.ShellExecute_failed__error__1_d___parameter__ls__n
lea rdx, str.CPrinterCtrlW::ViewQueue
mov ecx, 2
call fcn.140009480
jmp 0x140050ce1
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rax, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.ShellExecute_success._parameter__1_ls__2_ls___n
lea rdx, str.CPrinterCtrlW::ViewQueue
mov ecx, 2
call fcn.140009480
jmp 0x140050ce1
cmp qword [rcx + 0x30], 8
jb 0x140050c08
mov r8, qword [rcx + 0x18]
jmp 0x140050c0c
lea r8, [rcx + 0x18]
mov dword [rsp + 0x20], r9d
xor r9d, r9d
xor edx, edx
mov rcx, rbp
call qword [sym.imp.SHELL32.dll_SHInvokePrinterCommandW]
cmp eax, edi
je 0x140050c56
cmp qword [rbx + 0x30], 8
jb 0x140050c30
mov r9, qword [rbx + 0x18]
jmp 0x140050c34
lea r9, [rbx + 0x18]
lea r8, str.pPrinterName___1_ls__n
lea rdx, str.CPrinterCtrlW::ViewQueue
mov ecx, 4
call fcn.140009480
mov edi, 1
jmp 0x140050ce1
lea r8, str.SHInvokePrinterCommand_is_failed._n
lea rdx, str.CPrinterCtrlW::ViewQueue
mov ecx, 4
call fcn.140009480
cmp qword [rbx + 0x30], 8
jb 0x140050c7b
mov r8, qword [rbx + 0x18]
jmp 0x140050c7f
lea r8, [rbx + 0x18]
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea edx, [r9 + 5]
mov rcx, rbp
call qword [sym.imp.SHELL32.dll_SHInvokePrinterCommandW]
cmp eax, edi
je 0x140050cc8
cmp qword [rbx + 0x30], 8
jb 0x140050ca5
mov r9, qword [rbx + 0x18]
jmp 0x140050ca9
lea r9, [rbx + 0x18]
lea r8, str.pPrinterName___1_s__n
lea rdx, str.CPrinterCtrlW::ViewQueue
mov ecx, 4
call fcn.140009480
mov edi, 1
jmp 0x140050ce1
lea r8, str.SHInvokePrinterCommand_is_failed._n
lea rdx, str.CPrinterCtrlW::ViewQueue
mov ecx, 4
call fcn.140009480
nop
cmp qword [rsp + 0x58], 8
jb 0x140050cf3
mov rcx, qword [rsp + 0x40]
call fcn.14005ab0c
mov eax, edi
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.14005bad0
mov rbx, qword [rsp + 0x2b0]
add rsp, 0x280
pop r12
pop rdi
pop rbp
ret