Function at 0x1400ec730
Capabilities:
Check if file exists
Query environment variable

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x3f8]
sub rsp, 0x4d0
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x14028e6b0]
xor rax, rsp
mov qword [rbp + 0x3c0], rax
mov rbx, r8
mov edi, edx
mov rsi, rcx
call fcn.14000cdd0
mov r14, rax
mov rcx, rbx
shr rcx, 0x10
mov eax, 0x300
mov r12d, 0x187c
cmp cx, ax
jne 0x1400ecab1
cmp bx, r12w
jne 0x1400ecab1
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1b0]
call fcn.140187ea0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp - 0x60]
call fcn.140187ea0
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x20], rax
mov r9d, 0x104
mov r8d, InitCommonControls
mov edx, r12d
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov r8d, 0x104
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
call fcn.14000cdd0
mov rbx, qword [rax + 0x332c0]
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
xor edi, edi
test eax, eax
je 0x1400ec9a3
cmp word [rbp - 0x60], di
jne 0x1400ec82c
mov r8d, edi
jmp 0x1400ec83e
lea rax, [rbp - 0x60]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], di
jne 0x1400ec834
lea rcx, [r14 + 0x820]
lea rdx, [rbp - 0x60]
call fcn.140006f10
lea rdx, [rbp - 0x60]
mov rcx, r14
call fcn.1400d80d0
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rdi
mov word [rsp + 0x38], di
mov rcx, r14
call fcn.1400d4d00
test al, al
je 0x1400ec97d
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
mov r8d, 0x28
lea rdx, str.Please_restart_Notepad_to_take_effect.
lea rcx, [rsp + 0x58]
call fcn.140006f10
nop
lea r9, [rsp + 0x58]
lea r8, str.cloud_restart_warning
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.140070300
mov rbx, rax
lea rax, [rsp + 0x38]
cmp rax, rbx
je 0x1400ec920
mov r8, qword [rsp + 0x50]
cmp r8, 8
jb 0x1400ec8ff
inc r8
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.140007680
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rdi
mov word [rsp + 0x38], di
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140004900
nop
mov r8, qword [rbp - 0x70]
cmp r8, 8
jb 0x1400ec93c
inc r8
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x78]
call fcn.140007680
mov qword [rbp - 0x70], 7
mov qword [rbp - 0x78], rdi
mov word [rsp + 0x78], di
mov r8, qword [rsp + 0x70]
cmp r8, 8
jb 0x1400ec96a
inc r8
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x58]
call fcn.140007680
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
lea r8, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae r8, qword [rsp + 0x38]
mov edx, 0x1875
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
nop
jmp 0x1400eca77
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov edx, 0x187b
mov r8d, 0xf0
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp rax, 1
sete al
test al, al
je 0x1400ecaa7
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
mov r8d, InitCommonControls
lea rdx, str.Invalid_path.
lea rcx, [rsp + 0x58]
call fcn.140006f10
nop
lea r9, [rsp + 0x58]
lea r8, str.cloud_invalid_warning
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.140070300
nop
mov r8, qword [rsp + 0x70]
cmp r8, 8
jb 0x1400eca3b
inc r8
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x58]
call fcn.140007680
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
lea r8, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae r8, qword [rsp + 0x38]
mov edx, 0x1875
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, r14
call fcn.1400d7d50
nop
mov r8, qword [rsp + 0x50]
cmp r8, 8
jb 0x1400eca94
inc r8
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.140007680
mov word [rsp + 0x38], di
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 7
mov eax, 1
jmp 0x1400ecf79
sub edi, 0x110
je 0x1400ece09
cmp edi, 1
jne 0x1400ecf77
call fcn.14000cdd0
mov r15, qword [rax + 0x332c0]
sub rbx, 0x1877
je 0x1400ecc86
sub rbx, 4
je 0x1400ecba7
cmp rbx, 2
jne 0x1400ecf77
xor edi, edi
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
lea r8d, [rbx + 0x3f]
lea rdx, str.Select_a_folder_from_to_where_Notepad_reads_writes_its_settings
lea rcx, [rsp + 0x58]
call fcn.140006f10
nop
lea r9, [rsp + 0x58]
lea r8, str.cloud_select_folder
lea rdx, [rsp + 0x78]
mov rcx, r15
call fcn.140070300
nop
mov r8, qword [rsp + 0x70]
cmp r8, 8
jb 0x1400ecb5f
inc r8
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x58]
call fcn.140007680
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
mov qword [rsp + 0x20], rdi
mov r9d, r12d
lea r8, [rsp + 0x78]
mov rdx, qword [rsi + 0x18]
lea rcx, [rsp + 0x58]
call fcn.140029c60
lea rcx, [rsp + 0x58]
call fcn.1400037f0
nop
lea rcx, [rsp + 0x78]
call fcn.1400037f0
jmp 0x1400ecf77
xor edi, edi
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
lea r8d, [rdi + 0xd]
lea rdx, str.Invalid_path.
lea rcx, [rsp + 0x58]
call fcn.140006f10
nop
lea r9, [rsp + 0x58]
lea r8, str.cloud_invalid_warning
lea rdx, [rsp + 0x38]
mov rcx, r15
call fcn.140070300
nop
mov r8, qword [rsp + 0x70]
cmp r8, 8
jb 0x1400ecc13
inc r8
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x58]
call fcn.140007680
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
lea r8, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae r8, qword [rsp + 0x38]
mov edx, 0x1875
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov edx, r12d
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov r14d, 1
mov edx, r14d
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x187d
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, r14d
call qword [sym.imp.USER32.dll_EnableWindow]
nop
jmp 0x1400ecf47
lea rbx, [r14 + 0x820]
xor r8d, r8d
lea rdx, [0x1401d3618]
mov rcx, rbx
call fcn.140006f10
mov rcx, r14
call fcn.1400d7d50
xor edi, edi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rdi
mov word [rsp + 0x38], di
mov rcx, r14
call fcn.1400d4d00
test al, al
je 0x1400ecd8e
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
lea r8d, [rdi + 0x28]
lea rdx, str.Please_restart_Notepad_to_take_effect.
lea rcx, [rsp + 0x58]
call fcn.140006f10
nop
lea r9, [rsp + 0x58]
lea r8, str.cloud_restart_warning
lea rdx, [rsp + 0x78]
mov rcx, r15
call fcn.140070300
nop
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140003d30
nop
mov r8, qword [rbp - 0x70]
cmp r8, 8
jb 0x1400ecd4d
inc r8
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x78]
call fcn.140007680
mov qword [rbp - 0x70], 7
mov qword [rbp - 0x78], rdi
mov word [rsp + 0x78], di
mov r8, qword [rsp + 0x70]
cmp r8, 8
jb 0x1400ecd7b
inc r8
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x58]
call fcn.140007680
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rdi
mov word [rsp + 0x58], di
lea r8, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae r8, qword [rsp + 0x38]
mov edx, 0x1875
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp qword [rbx + 0x18], 8
jb 0x1400ecdb8
mov rbx, qword [rbx]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8d, [r9 + 0xc]
mov edx, r12d
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov edx, r12d
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x187d
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
nop
jmp 0x1400ecf47
xor edi, edi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rdi
mov word [rsp + 0x38], di
xor r8d, r8d
lea rdx, [0x1401d3618]
lea rcx, [rsp + 0x38]
call fcn.140006f10
nop
lea rbx, [r14 + 0x820]
cmp qword [rbx + 0x10], rdi
jbe 0x1400ece7e
lea r14d, [rdi + 1]
cmp qword [rbx + 0x18], 8
jb 0x1400ece5a
mov rcx, qword [rbx]
jmp 0x1400ece5d
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1400ece81
lea r8d, [rax + 0xc]
lea rdx, str.Invalid_path
lea rcx, [rsp + 0x38]
call fcn.140006f10
jmp 0x1400ece81
mov r14d, edi
lea r8, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae r8, qword [rsp + 0x38]
mov edx, 0x1875
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r9, rdi
test r14d, r14d
sete r9b
mov qword [rsp + 0x20], rdi
mov edx, 0x1877
mov r8d, 0xf1
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov r9, rdi
test r14d, r14d
setne r9b
mov qword [rsp + 0x20], rdi
mov edx, 0x187b
mov r8d, 0xf1
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp qword [rbx + 0x18], 8
jb 0x1400ecef3
mov rbx, qword [rbx]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8d, [r9 + 0xc]
mov edx, r12d
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov ebx, edi
test r14d, r14d
setne bl
mov edx, r12d
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, ebx
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x187d
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, ebx
call qword [sym.imp.USER32.dll_EnableWindow]
nop
mov r8, qword [rsp + 0x50]
cmp r8, 8
jb 0x1400ecf64
inc r8
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.140007680
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rdi
mov word [rsp + 0x38], di
xor eax, eax
mov rcx, qword [rbp + 0x3c0]
xor rcx, rsp
call fcn.140168660
lea r11, [rsp + 0x4d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret