Function at 0x1400344a0
Capabilities:
Create process on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb78]
sub rsp, 0xc78
mov rax, qword [0x1400f1200]
xor rax, rsp
mov qword [rbp + 0xb60], rax
mov byte [rsp + 0x52], r9b
mov qword [rbp - 0x50], r8
mov byte [rsp + 0x51], dl
mov byte [rsp + 0x50], cl
mov qword [rbp + 0x1a0], r8
mov rax, qword [rbp + 0xbe0]
mov qword [rbp - 0x60], rax
xor ebx, ebx
mov dword [rsp + 0x58], ebx
mov eax, 1
xchg byte [0x1400f9f11], al
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rax
mov qword [rbp - 0x70], rbx
lea rcx, [rbp + 0x3f0]
call fcn.14000afe0
nop
lea r8d, [rbx + 0x22]
lea rdx, str.WinUI3AppsPowerToys.Settings.exe
lea rcx, [rbp + 0x3f0]
call fcn.14000ae00
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
mov qword [rbp + 0x300], rbx
mov qword [rbp + 0x308], rbx
lea r8d, [rbx + 0x1a]
lea rdx, str..pipepowertoys_runner_
lea rcx, [rbp + 0x2f0]
call fcn.1400075d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], rbx
mov qword [rbp + 0x2e8], rbx
lea r8d, [rbx + 0x1c]
lea rdx, str..pipepowertoys_settings_
lea rcx, [rbp + 0x2d0]
call fcn.1400075d0
nop
mov qword [rsp + 0x60], rbx
lea rcx, [rbp + 0x550]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
movabs r13, 0x7ffffffffffffffe
lea r15d, [rbx + 0xa]
cmp eax, 0x6cb
jne 0x1400346ed
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x210]
call fcn.14000be40
nop
cmp byte [rbp + 0x230], bl
je 0x1400345f8
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x6c0]
call fcn.1400072d0
nop
lea r14d, [rbx + 1]
jmp 0x140034633
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
mov qword [rbp + 0x500], rbx
mov qword [rbp + 0x508], rbx
xor r8d, r8d
lea rdx, [0x1400c73d0]
lea rcx, [rbp + 0x4f0]
call fcn.1400075d0
lea rax, [rbp + 0x4f0]
mov r14d, 2
mov dword [rsp + 0x58], r14d
lea rcx, str.UuidCreate_can_not_create_guid._
mov qword [rbp + 0x30], rcx
mov qword [rbp + 0x38], 0x22
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x20], rbx
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x1b0], xmm0
movups xmm1, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x1f0], xmm1
movsd xmm0, qword [rbp + 0x20]
movsd qword [rbp + 0x200], xmm0
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1b0]
mov r8d, 3
lea rdx, [rbp + 0x1f0]
mov rcx, qword [0x1400fc7f0]
call fcn.14000e330
nop
test r14b, 2
je 0x1400346b8
and r14d, 0xfffffffd
lea rcx, [rbp + 0x4f0]
call fcn.1400073a0
nop
test r14b, 1
je 0x1400346cf
and r14d, 0xfffffffe
lea rcx, [rbp + 0x6c0]
call fcn.1400073a0
nop
cmp byte [rbp + 0x230], 0
je 0x140034920
lea rcx, [rbp + 0x210]
call fcn.1400073a0
jmp 0x140034920
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x550]
call qword [sym.imp.RPCRT4.dll_UuidToStringW]
test eax, eax
je 0x14003491b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x80]
call fcn.14000be40
nop
xorps xmm0, xmm0
cmp byte [rbp + 0xa0], 0
je 0x1400347ed
movups xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x320], rbx
mov qword [rbp + 0x328], rbx
mov rsi, qword [rbp + 0x90]
lea r14, [rbp + 0x80]
cmp qword [rbp + 0x98], 8
cmovae r14, qword [rbp + 0x80]
cmp rsi, r13
ja 0x140035d26
mov qword [rbp + 0x328], 7
cmp rsi, 8
jae 0x14003478d
mov qword [rbp + 0x320], rsi
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x310], xmm0
jmp 0x1400347de
mov rdi, rsi
or rdi, 7
cmp rdi, r13
jbe 0x14003479e
mov rdi, r13
jmp 0x1400347a6
cmp rdi, 0xa
cmovb rdi, r15
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x310]
call fcn.140007a70
mov qword [rbp + 0x310], rax
mov qword [rbp + 0x320], rsi
mov qword [rbp + 0x328], rdi
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.14007b320
lea rax, [rbp + 0x310]
mov r14d, 4
jmp 0x140034825
movups xmmword [rbp + 0x530], xmm0
mov qword [rbp + 0x540], rbx
mov qword [rbp + 0x548], rbx
xor r8d, r8d
lea rdx, [0x1400c73d0]
lea rcx, [rbp + 0x530]
call fcn.1400075d0
lea rax, [rbp + 0x530]
mov r14d, 8
mov dword [rsp + 0x58], r14d
lea rcx, str.UuidToString_can_not_convert_to_string._
mov qword [rbp + 0xc0], rcx
mov qword [rbp + 0xc8], 0x2a
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x50], rbx
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x1e0], xmm0
movups xmm1, xmmword [rbp + 0x40]
movaps xmmword [rbp + 0x1c0], xmm1
movsd xmm0, qword [rbp + 0x50]
movsd qword [rbp + 0x1d0], xmm0
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1e0]
mov r8d, 3
lea rdx, [rbp + 0x1c0]
mov rcx, qword [0x1400fc7f0]
call fcn.14000e330
nop
test r14b, 8
je 0x1400348b3
and r14d, 0xfffffff7
lea rcx, [rbp + 0x530]
call fcn.1400073a0
nop
test r14b, 4
je 0x140034904
and r14d, 0xfffffffb
mov rdx, qword [rbp + 0x328]
cmp rdx, 8
jb 0x140034904
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400348fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d2c
call fcn.140078eb4
nop
cmp byte [rbp + 0xa0], 0
je 0x140034920
lea rcx, [rbp + 0x80]
call fcn.1400073a0
jmp 0x140034920
mov r14d, dword [rsp + 0x58]
mov r15, 0xffffffffffffffff
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x140034a99
xorps xmm0, xmm0
movups xmmword [rbp + 0x410], xmm0
mov qword [rbp + 0x420], rbx
mov qword [rbp + 0x428], rbx
mov r8, r15
inc r8
cmp word [rdx + r8*2], 0
jne 0x140034950
lea rcx, [rbp + 0x410]
call fcn.1400075d0
nop
lea rdx, [rbp + 0x410]
cmp qword [rbp + 0x428], 8
cmovae rdx, qword [rbp + 0x410]
mov r8, qword [rbp + 0x420]
lea rcx, [rbp + 0x2f0]
call fcn.14000ae00
nop
mov rdx, qword [rbp + 0x428]
cmp rdx, 8
jb 0x1400349d9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400349d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d32
call fcn.140078eb4
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
mov qword [rbp + 0x440], rbx
mov qword [rbp + 0x448], rbx
mov rdx, qword [rsp + 0x60]
mov r8, r15
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140034a00
lea rcx, [rbp + 0x430]
call fcn.1400075d0
nop
lea rdx, [rbp + 0x430]
cmp qword [rbp + 0x448], 8
cmovae rdx, qword [rbp + 0x430]
mov r8, qword [rbp + 0x440]
lea rcx, [rbp + 0x2d0]
call fcn.14000ae00
nop
mov rdx, qword [rbp + 0x448]
cmp rdx, 8
jb 0x140034a89
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034a84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d32
call fcn.140078eb4
lea rcx, [rsp + 0x60]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeW]
mov qword [rsp + 0x60], rbx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcessId]
mov edi, eax
lea rcx, [rbp + 0x560]
call fcn.14001c140
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x3a0], rbx
mov qword [rbp + 0x3a8], rbx
mov rsi, qword [rbp + 0x5b0]
lea rcx, [rbp + 0x5a0]
cmp qword [rbp + 0x5b8], 8
cmovae rcx, qword [rbp + 0x5a0]
mov qword [rbp - 0x40], rcx
cmp rsi, r13
ja 0x140035d38
cmp rsi, 8
jae 0x140034b20
mov qword [rbp + 0x3a0], rsi
mov eax, 7
mov qword [rsp + 0x58], rax
mov qword [rbp + 0x3a8], rax
movups xmm0, xmmword [rcx]
movups xmmword [rbp + 0x390], xmm0
movq qword [rbp - 0x68], xmm0
jmp 0x140034b87
mov r12, rsi
or r12, 7
cmp r12, r13
jbe 0x140034b36
mov r12, r13
mov qword [rsp + 0x58], r13
jmp 0x140034b48
cmp r12, 0xa
mov eax, 0xa
cmovb r12, rax
mov qword [rsp + 0x58], r12
lea rdx, [r12 + 1]
lea rcx, [rbp + 0x390]
call fcn.140007a70
mov qword [rbp - 0x68], rax
mov qword [rbp + 0x390], rax
mov qword [rbp + 0x3a0], rsi
mov qword [rbp + 0x3a8], r12
lea r8, [rsi*2 + 2]
mov rdx, qword [rbp - 0x40]
mov rcx, rax
call fcn.14007b320
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
mov qword [rbp + 0x3e0], rbx
mov qword [rbp + 0x3e8], rbx
mov r8d, 6
lea r12, [0x1400ca018]
mov rdx, r12
lea rcx, [rbp + 0x3d0]
call fcn.1400075d0
nop
lea r8, [rbp + 0x390]
cmp qword [rsp + 0x58], 8
setae r10b
mov r9, qword [rbp - 0x68]
cmovae r8, r9
lea r11, str.dark
cmp rsi, 4
jne 0x140034c06
mov rdx, rsi
mov rcx, r11
test rsi, rsi
je 0x140034c48
sub r8, r11
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140034c06
add rcx, 2
sub rdx, 1
jne 0x140034bf0
jmp 0x140034c48
lea rcx, [rbp + 0x390]
test r10b, r10b
cmovne rcx, r9
cmp rsi, 6
jne 0x140034c5d
test rsi, rsi
je 0x140034c38
sub rcx, r12
movzx eax, word [r12 + rcx]
cmp ax, word [r12]
jne 0x140034c5d
add r12, 2
sub rsi, 1
jne 0x140034c22
call fcn.140068250
test al, al
je 0x140034c5d
lea r11, str.dark
mov r8d, 4
mov rdx, r11
lea rcx, [rbp + 0x3d0]
call fcn.140007410
lea r12, str.true
lea rsi, str.false
mov rdx, rsi
cmp byte [rbp + 0x598], 0
cmovne rdx, r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x4d0], xmm0
mov qword [rbp + 0x4e0], rbx
mov qword [rbp + 0x4e8], rbx
mov r8, r15
inc r8
cmp word [rdx + r8*2], 0
jne 0x140034c94
lea rcx, [rbp + 0x4d0]
call fcn.1400075d0
nop
mov rdx, rsi
cmp byte [rbp + 0x59a], 0
cmovne rdx, r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x4b0], xmm0
mov qword [rbp + 0x4c0], rbx
mov qword [rbp + 0x4c8], rbx
mov r8, r15
inc r8
cmp word [rdx + r8*2], 0
jne 0x140034cd5
lea rcx, [rbp + 0x4b0]
call fcn.1400075d0
nop
mov rdx, rsi
cmp byte [rsp + 0x50], 0
cmovne rdx, r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x490], xmm0
mov qword [rbp + 0x4a0], rbx
mov qword [rbp + 0x4a8], rbx
mov r8, r15
inc r8
cmp word [rdx + r8*2], 0
jne 0x140034d14
lea rcx, [rbp + 0x490]
call fcn.1400075d0
nop
mov rdx, rsi
cmp byte [rsp + 0x51], 0
cmovne rdx, r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x470], xmm0
mov qword [rbp + 0x480], rbx
mov qword [rbp + 0x488], rbx
mov r8, r15
inc r8
cmp word [rdx + r8*2], 0
jne 0x140034d53
lea rcx, [rbp + 0x470]
call fcn.1400075d0
nop
mov rdx, rsi
cmp byte [rsp + 0x52], 0
cmovne rdx, r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x370], xmm0
mov qword [rbp + 0x380], rbx
mov qword [rbp + 0x388], rbx
mov r8, r15
inc r8
cmp word [rdx + r8*2], 0
jne 0x140034d92
lea rcx, [rbp + 0x370]
call fcn.1400075d0
nop
mov rdx, rsi
mov r12, qword [rbp - 0x50]
cmp byte [r12 + 0x20], 0
lea rax, str.true
cmovne rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
mov qword [rbp + 0x360], rbx
mov qword [rbp + 0x368], rbx
mov r8, r15
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140034de0
lea rcx, [rbp + 0x350]
call fcn.1400075d0
nop
mov rax, qword [rbp - 0x60]
cmp byte [rax + 8], 0
lea rax, str.true
cmovne rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x450], xmm0
mov qword [rbp + 0x460], rbx
mov qword [rbp + 0x468], rbx
inc r15
cmp word [rsi + r15*2], 0
jne 0x140034e23
mov r8, r15
mov rdx, rsi
lea rcx, [rbp + 0x450]
call fcn.1400075d0
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x560]
call fcn.14001aef0
nop
mov rcx, rax
call fcn.140030c00
nop
cmp qword [rsp + 0x68], 0
je 0x140034e6e
lea rcx, [rsp + 0x68]
call fcn.140019250
lea r9, [rbp + 0xb5a]
nop word [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul edi
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub di, cx
add di, 0x30
mov word [r9], di
mov edi, edx
test edx, edx
jne 0x140034e80
lea r8, [rbp + 0xb5a]
mov rdx, r9
lea rcx, [rbp + 0x510]
call fcn.14000da00
or r14d, 0x600
lea rax, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 8
cmovae rax, qword [rbp + 0x3f0]
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0x400]
mov qword [rbp + 0xd8], rax
lea rax, [rbp + 0x2f0]
cmp qword [rbp + 0x308], 8
cmovae rax, qword [rbp + 0x2f0]
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0x300]
mov qword [rbp + 0xe8], rax
lea rax, [rbp + 0x2d0]
cmp qword [rbp + 0x2e8], 8
cmovae rax, qword [rbp + 0x2d0]
mov qword [rbp + 0xf0], rax
mov rax, qword [rbp + 0x2e0]
mov qword [rbp + 0xf8], rax
lea rax, [rbp + 0x510]
cmp qword [rbp + 0x528], 8
cmovae rax, qword [rbp + 0x510]
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x520]
mov qword [rbp + 0x108], rax
lea rax, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 8
cmovae rax, qword [rbp + 0x3d0]
mov qword [rbp + 0xa8], rax
mov rax, qword [rbp + 0x3e0]
mov qword [rbp + 0xb0], rax
lea rax, [rbp + 0x4d0]
cmp qword [rbp + 0x4e8], 8
cmovae rax, qword [rbp + 0x4d0]
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x4e0]
mov qword [rbp + 0x128], rax
lea rax, [rbp + 0x4b0]
cmp qword [rbp + 0x4c8], 8
cmovae rax, qword [rbp + 0x4b0]
mov qword [rbp + 0x130], rax
mov rax, qword [rbp + 0x4c0]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae rax, qword [rbp + 0x490]
mov qword [rbp + 0x140], rax
mov rax, qword [rbp + 0x4a0]
mov qword [rbp + 0x148], rax
lea rax, [rbp + 0x470]
cmp qword [rbp + 0x488], 8
cmovae rax, qword [rbp + 0x470]
mov qword [rbp + 0x150], rax
mov rax, qword [rbp + 0x480]
mov qword [rbp + 0x158], rax
lea rax, [rbp + 0x370]
cmp qword [rbp + 0x388], 8
cmovae rax, qword [rbp + 0x370]
mov qword [rbp + 0x160], rax
mov rax, qword [rbp + 0x380]
mov qword [rbp + 0x168], rax
lea rax, [rbp + 0x350]
cmp qword [rbp + 0x368], 8
cmovae rax, qword [rbp + 0x350]
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x360]
mov qword [rbp + 0x118], rax
lea rax, [rbp + 0x450]
cmp qword [rbp + 0x468], 8
cmovae rax, qword [rbp + 0x450]
mov qword [rbp + 0x170], rax
mov rax, qword [rbp + 0x460]
mov qword [rbp + 0x178], rax
movups xmm0, xmmword [rbp + 0xd0]
movaps xmmword [rbp + 0x600], xmm0
movups xmm1, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x610], xmm1
movups xmm0, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x620], xmm0
movups xmm1, xmmword [rbp + 0x100]
movaps xmmword [rbp + 0x630], xmm1
movups xmm0, xmmword [rbp + 0xa8]
movaps xmmword [rbp + 0x640], xmm0
movups xmm1, xmmword [rbp + 0x120]
movaps xmmword [rbp + 0x650], xmm1
movups xmm0, xmmword [rbp + 0x130]
movaps xmmword [rbp + 0x660], xmm0
movups xmm1, xmmword [rbp + 0x140]
movaps xmmword [rbp + 0x670], xmm1
movups xmm0, xmmword [rbp + 0x150]
movaps xmmword [rbp + 0x680], xmm0
movups xmm1, xmmword [rbp + 0x160]
movaps xmmword [rbp + 0x690], xmm1
movups xmm0, xmmword [rbp + 0x110]
movaps xmmword [rbp + 0x6a0], xmm0
movups xmm1, xmmword [rbp + 0x170]
movaps xmmword [rbp + 0x6b0], xmm1
movabs rax, 0xdddddddddddd
mov qword [rbp + 0x180], rax
lea rax, [rbp + 0x600]
mov qword [rbp + 0x188], rax
lea rax, str._____________
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 0x25
mov qword [rbp + 0x730], rbx
lea rdi, vtable.fmt::v7::basic_memory_buffer_wchar_t__500__class_std::allocator_wchar_t__.0
mov qword [rbp + 0x720], rdi
lea rax, [rbp + 0x740]
mov qword [rbp + 0x728], rax
mov qword [rbp + 0x738], 0x1f4
movaps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp - 0x40], xmm0
movaps xmm1, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm1
mov r9, rbx
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x720]
call fcn.14000ef40
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
mov qword [rbp + 0x340], rbx
mov qword [rbp + 0x348], rbx
mov r8, qword [rbp + 0x730]
mov rdx, qword [rbp + 0x728]
lea rcx, [rbp + 0x330]
call fcn.1400075d0
or r14d, 0x180
mov qword [rbp + 0x720], rdi
lea rax, [rbp + 0x740]
mov rcx, qword [rbp + 0x728]
cmp rcx, rax
je 0x140035295
mov rax, qword [rbp + 0x738]
lea rdx, [rax + rax]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035290
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d3e
call fcn.140078eb4
or r14d, 0x40
mov dword [rsp + 0x58], r14d
lea rcx, [rbp + 0x510]
call fcn.1400073a0
cmp byte [r12 + 0x20], 0
je 0x1400352f7
mov r8d, 1
lea rdx, [0x1400cd164]
lea rcx, [rbp + 0x330]
call fcn.14000ae00
cmp byte [r12 + 0x20], 0
je 0x140035d44
mov rdx, r12
cmp qword [r12 + 0x18], 8
jb 0x1400352e6
mov rdx, qword [r12]
mov r8, qword [r12 + 0x10]
lea rcx, [rbp + 0x330]
call fcn.14000ae00
mov rdi, qword [rbp - 0x60]
cmp byte [rdi + 8], 0
je 0x1400353be
mov r8d, 1
lea rdx, [0x1400cd164]
lea rcx, [rbp + 0x330]
call fcn.14000ae00
cmp byte [rdi + 8], 0
je 0x140035d4a
mov edx, dword [rdi]
lea rcx, [rbp + 0x6e0]
call fcn.1400190f0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140035345
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x330]
call fcn.14000ae00
nop
lea rcx, [rbp + 0x6e0]
call fcn.1400073a0
mov r8d, 1
lea rdx, [0x1400cd164]
lea rcx, [rbp + 0x330]
call fcn.14000ae00
cmp byte [rdi + 8], 0
je 0x140035d50
mov edx, dword [rdi + 4]
lea rcx, [rbp + 0x700]
call fcn.1400190f0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x1400353a2
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x330]
call fcn.14000ae00
nop
lea rcx, [rbp + 0x700]
call fcn.1400073a0
mov dword [rbp + 0x240], 0x68
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
movups xmmword [rbp + 0x258], xmm0
movups xmmword [rbp + 0x268], xmm0
movups xmmword [rbp + 0x278], xmm0
movups xmmword [rbp + 0x288], xmm0
movups xmmword [rbp + 0x298], xmm0
lea rdx, [rbp + 0x330]
cmp qword [rbp + 0x348], 8
cmovae rdx, qword [rbp + 0x330]
lea rcx, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 8
cmovae rcx, qword [rbp + 0x3f0]
lea rax, [rbp - 0x18]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateProcessW]
lea rdi, [0x1400fbde0]
test eax, eax
je 0x14003594f
mov eax, ebx
xchg byte [0x1400f9f11], al
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp - 0x70]
mov edx, 8
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_OpenProcessToken]
test eax, eax
je 0x14003594f
mov qword [rbp - 0x30], rdi
mov byte [rbp - 0x28], 0
mov rcx, rdi
call fcn.140075980
test eax, eax
jne 0x140035d56
mov byte [rbp - 0x28], 1
lea ecx, [rax + 8]
call fcn.140078e70
mov r15, rax
mov qword [rbp - 0x50], rax
lea rax, [rbp + 0x2b0]
mov qword [rbp - 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], rbx
mov qword [rbp + 0x2c8], rbx
mov rsi, qword [rbp + 0x2e0]
lea r14, [rbp + 0x2d0]
cmp qword [rbp + 0x2e8], 8
cmovae r14, qword [rbp + 0x2d0]
cmp rsi, r13
ja 0x140035d5e
mov qword [rbp + 0x2c8], 7
cmp rsi, 8
jae 0x140035527
mov qword [rbp + 0x2c0], rsi
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x2b0], xmm0
jmp 0x14003557d
mov rdi, rsi
or rdi, 7
cmp rdi, r13
jbe 0x140035538
mov rdi, r13
jmp 0x140035545
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x2b0]
call fcn.140007a70
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 0x2c0], rsi
mov qword [rbp + 0x2c8], rdi
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.14007b320
lea rax, [rbp + 0x2b0]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
mov rsi, qword [rbp + 0x300]
lea r14, [rbp + 0x2f0]
cmp qword [rbp + 0x308], 8
cmovae r14, qword [rbp + 0x2f0]
cmp rsi, r13
ja 0x140035d64
mov qword [rbp - 0x78], 7
cmp rsi, 8
jae 0x1400355dc
mov qword [rbp - 0x80], rsi
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x70], xmm0
jmp 0x140035628
mov rdi, rsi
or rdi, 7
cmp rdi, r13
jbe 0x1400355ed
mov rdi, r13
jmp 0x1400355fa
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x70]
call fcn.140007a70
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], rdi
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.14007b320
lea rax, [rsp + 0x70]
mov qword [rbp - 0x40], rax
mov ecx, 0x288
call fcn.140078e70
mov rsi, rax
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x3b0]
mov qword [rbp - 0x68], rax
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x3b0]
call fcn.1400072d0
mov rdi, rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x58]
call fcn.1400072d0
nop
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call fcn.1400060f0
nop
mov qword [r15], rax
lea rcx, [rsp + 0x70]
call fcn.1400073a0
nop
lea rcx, [rbp + 0x2b0]
call fcn.1400073a0
nop
mov qword [0x1400f9f30], r15
mov rdx, qword [rbp - 0x70]
mov rcx, qword [r15]
call fcn.140006250
nop
lea rdi, [0x1400fbde0]
mov rcx, rdi
call fcn.1400759a4
mov eax, dword [rbp - 8]
mov dword [0x1400f9f38], eax
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140035714
mov edx, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x14003594f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea r8, str.PowerToys___runner
lea rcx, str.Couldnt_wait_on_the_Settings_Window_to_close.
call fcn.140024070
jmp 0x14003594f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x58]
call fcn.14000be40
nop
xorps xmm0, xmm0
cmp byte [rbp + 0x78], 0
je 0x1400357eb
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], rbx
mov qword [rbp + 0x2c8], rbx
mov rdi, qword [rbp + 0x68]
lea rsi, [rbp + 0x58]
cmp qword [rbp + 0x70], 8
cmovae rsi, qword [rbp + 0x58]
cmp rdi, r13
ja 0x140035d6a
mov qword [rbp + 0x2c8], 7
cmp rdi, 8
jae 0x140035787
mov qword [rbp + 0x2c0], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x2b0], xmm0
jmp 0x1400357db
mov rax, rdi
or rax, 7
cmp rax, r13
ja 0x1400357a3
mov r13, rax
cmp rax, 0xa
mov eax, 0xa
cmovb r13, rax
lea rdx, [r13 + 1]
lea rcx, [rbp + 0x2b0]
call fcn.140007a70
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 0x2c0], rdi
mov qword [rbp + 0x2c8], r13
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.14007b320
lea rax, [rbp + 0x2b0]
mov edi, dword [rsp + 0x58]
or edi, 0x10
jmp 0x140035824
movups xmmword [rbp + 0x3b0], xmm0
mov qword [rbp + 0x3c0], rbx
mov qword [rbp + 0x3c8], rbx
xor r8d, r8d
lea rdx, [0x1400c73d0]
lea rcx, [rbp + 0x3b0]
call fcn.1400075d0
lea rax, [rbp + 0x3b0]
mov edi, dword [rsp + 0x58]
or edi, 0x20
mov dword [rsp + 0x58], edi
lea rcx, str.Process_handle_is_empty._
mov qword [rbp], rcx
mov qword [rbp + 8], 0x1b
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
movups xmm1, xmmword [rbp - 0x30]
movaps xmmword [rsp + 0x70], xmm1
movsd xmm0, qword [rbp - 0x20]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
lea r9, [rbp]
mov r8d, 4
lea rdx, [rsp + 0x70]
mov rcx, qword [0x1400fc7f0]
call fcn.14000e330
nop
test dil, 0x20
je 0x1400358ec
and edi, 0xffffffdf
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 8
jb 0x1400358d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400358ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d70
call fcn.140078eb4
mov qword [rbp + 0x3c0], rbx
mov qword [rbp + 0x3c8], 7
mov word [rbp + 0x3b0], bx
test dil, 0x10
je 0x140035939
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 8
jb 0x140035939
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035933
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d76
call fcn.140078eb4
nop
cmp byte [rbp + 0x78], 0
je 0x140035948
lea rcx, [rbp + 0x58]
call fcn.1400073a0
lea rdi, [0x1400fbde0]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14003595e
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x14003596d
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbp + 0x190], rdi
mov byte [rbp + 0x198], 0
mov rcx, rdi
call fcn.140075980
test eax, eax
jne 0x140035d7c
mov byte [rbp + 0x198], 1
mov rcx, qword [0x1400f9f30]
test rcx, rcx
je 0x140035a83
mov rcx, qword [rcx]
call fcn.1400063f0
mov r14, qword [0x1400f9f30]
test r14, r14
je 0x140035a7c
mov rsi, qword [r14]
test rsi, rsi
je 0x140035a6f
lea rcx, [rsi + 0x250]
call fcn.1400073a0
lea rcx, [rsi + 0x200]
call fcn.140075930
cmp dword [rsi + 0x1f8], 0
jne 0x140035d8a
cmp dword [rsi + 0x1e8], 0
jne 0x140035d8a
cmp dword [rsi + 0x1d8], 0
jne 0x140035d8a
lea rcx, [rsi + 0x1b0]
call fcn.1400073a0
lea rcx, [rsi + 0x190]
call fcn.1400073a0
lea rcx, [rsi + 0x140]
call fcn.1400752d0
lea rcx, [rsi + 0x118]
call fcn.140007050
lea rcx, [rsi + 0xc8]
call fcn.140075930
lea rcx, [rsi + 0x78]
call fcn.1400752d0
lea rcx, [rsi + 0x50]
call fcn.140007050
mov rcx, rsi
call fcn.140075930
mov edx, 0x288
mov rcx, rsi
call fcn.140078eb4
lea rdi, [0x1400fbde0]
mov edx, 8
mov rcx, r14
call fcn.140078eb4
mov qword [0x1400f9f30], rbx
mov rcx, rdi
call fcn.1400759a4
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x140035a9a
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov dword [0x1400f9f38], ebx
lea rcx, [rbp + 0x330]
call fcn.1400073a0
nop
lea rcx, [rbp + 0x450]
call fcn.1400073a0
nop
mov rdx, qword [rbp + 0x368]
cmp rdx, 8
jb 0x140035b00
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035afb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d84
call fcn.140078eb4
mov qword [rbp + 0x360], rbx
mov qword [rbp + 0x368], 7
mov word [rbp + 0x350], bx
mov rdx, qword [rbp + 0x388]
cmp rdx, 8
jb 0x140035b5f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035b5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d90
call fcn.140078eb4
mov qword [rbp + 0x380], rbx
mov qword [rbp + 0x388], 7
mov word [rbp + 0x370], bx
lea rcx, [rbp + 0x470]
call fcn.1400073a0
nop
lea rcx, [rbp + 0x490]
call fcn.1400073a0
nop
lea rcx, [rbp + 0x4b0]
call fcn.1400073a0
nop
lea rcx, [rbp + 0x4d0]
call fcn.1400073a0
nop
lea rcx, [rbp + 0x3d0]
call fcn.1400073a0
nop
lea rcx, [rbp + 0x390]
call fcn.1400073a0
nop
lea rcx, [rbp + 0x5e0]
call fcn.1400073a0
lea rcx, [rbp + 0x5c0]
call fcn.1400073a0
lea rcx, [rbp + 0x5a0]
call fcn.1400073a0
mov r8, qword [rbp + 0x588]
mov r8, qword [r8 + 8]
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x588]
call fcn.140020850
mov edx, 0x48
mov rcx, qword [rbp + 0x588]
call fcn.140078eb4
lea rcx, [rbp + 0x568]
call fcn.1400073a0
nop
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 8
jb 0x140035c6c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035c67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d96
call fcn.140078eb4
mov qword [rbp + 0x2e0], rbx
mov qword [rbp + 0x2e8], 7
mov word [rbp + 0x2d0], bx
mov rdx, qword [rbp + 0x308]
cmp rdx, 8
jb 0x140035cc7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035cc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035d20
call fcn.140078eb4
mov qword [rbp + 0x300], rbx
mov qword [rbp + 0x308], 7
mov word [rbp + 0x2f0], bx
lea rcx, [rbp + 0x3f0]
call fcn.1400073a0
nop
cmp byte [r12 + 0x20], 0
je 0x140035cfd
mov rcx, r12
call fcn.1400073a0
mov rcx, qword [rbp + 0xb60]
xor rcx, rsp
call fcn.140078e50
add rsp, 0xc78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14007fed8
nop
call fcn.140005d50
int3
call fcn.14007fed8
nop
call fcn.14007fed8
nop
call fcn.140005d50
nop
call fcn.14007fed8
nop
call fcn.140021490
int3
call fcn.140021490
int3
call fcn.140021490
int3
mov ecx, eax
call fcn.14007548c
nop
call fcn.140005d50
nop
call fcn.140005d50
nop
call fcn.140005d50
nop
call fcn.14007fed8
nop
call fcn.14007fed8
nop
mov ecx, eax
call fcn.14007548c
nop
call fcn.14007fed8
nop
call fcn.14007fa9c
nop
call fcn.14007fed8
nop
call fcn.14007fed8
int3