Function at 0x14003f184
Capabilities:
Check if file exists
Create process on windows
Delete registry value
Get common file path
Get file attributes
Persist via command processor registry key
Set registry value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x380]
sub rsp, 0x480
mov rax, qword [0x1401e7e78]
xor rax, rsp
mov qword [rbp + 0x370], rax
mov r15, r8
mov rax, rdx
mov r13, rcx
xor esi, esi
mov ecx, esi
mov dword [rbp - 0x60], ecx
mov dword [rsp + 0x68], ecx
mov byte [rsp + 0x60], sil
mov dword [r8], 0x64
lea rbx, [r13 + 0x2f8]
lea rdx, [0x14015a140]
test rax, rax
cmovne rdx, rax
or r12, 0xffffffffffffffff
mov r8, r12
mov rcx, rbx
call fcn.140121718
mov rcx, rbx
call fcn.140058574
mov rdi, rax
mov rcx, rbx
call fcn.140058574
mov rcx, rax
call fcn.140125c74
mov qword [rbp - 0x58], rax
lea rcx, [rsp + 0x78]
call fcn.1401286a8
nop
lea rcx, [rbp - 0x50]
call fcn.1401286a8
nop
lea rcx, [rbp + 0x78]
call fcn.140120d54
nop
lea rcx, [rbp + 0x68]
call fcn.140120d54
nop
mov rcx, qword [0x14021c5d8]
add rcx, 0xaf0
call fcn.140125c18
mov rdx, rax
mov r8, r12
lea rcx, [rbp + 0x78]
call fcn.140121718
lea rcx, [rbp + 0x78]
call fcn.140058574
mov rdx, rax
mov r8, r12
lea rcx, [rbp + 0x68]
call fcn.140121718
mov rcx, qword [rbp + 0x68]
call fcn.140125bf4
test rax, rax
je 0x14003f28b
mov word [rax], si
xor r8d, r8d
lea rdx, [rsp + 0x78]
mov rcx, rdi
call fcn.14012571c
mov rbx, rax
test rax, rax
jne 0x14003f2b0
mov byte [rsp + 0x60], 1
mov dword [r15], esi
jmp 0x14003f8be
lea rcx, [rsp + 0x78]
call fcn.140058574
mov rcx, rax
call fcn.140125c18
mov rdi, rax
lea rcx, [rbp + 0x78]
call fcn.140058574
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x14003f2f7
lea rcx, [rbp + 0x68]
call fcn.140058574
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x14003f308
mov rcx, rbx
call fcn.140125c74
mov rbx, rax
mov qword [rbp - 0x58], rax
jmp 0x14003f30c
mov rbx, qword [rbp - 0x58]
mov edi, 0xfffd
test rbx, rbx
je 0x14003f361
cmp word [rbx], si
je 0x14003f361
xor r8d, r8d
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.14012571c
test rax, rax
je 0x14003f361
mov rax, qword [rsp + 0x78]
movzx ecx, word [rax]
sub cx, 0x2d
test di, cx
je 0x14003f361
lea rcx, [r13 + 0x328]
mov r8, r12
mov rdx, rbx
call fcn.140121718
mov rbx, rsi
mov qword [rbp - 0x58], rbx
mov dword [r13 + 0x33c], r12d
lea rcx, [rsp + 0x78]
call fcn.140128704
lea rcx, [rbp - 0x50]
call fcn.140128704
mov r14d, 1
test rbx, rbx
je 0x14003f8b1
cmp word [rbx], si
je 0x14003f8b1
lea rcx, [r13 + 0x308]
mov r8, r12
mov rdx, rbx
call fcn.140121718
lea r8, [rbp + 8]
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.14012571c
mov rsi, rax
mov qword [rsp + 0x68], rax
xor edi, edi
test rax, rax
je 0x14003f8b1
lea ebx, [rdi + 2]
lea rcx, [rsp + 0x78]
call fcn.1401287f0
test al, al
je 0x14004191d
add dword [r13 + 0x33c], r14d
xor r8d, r8d
lea rdx, str._autosetup
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
jne 0x14004171c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
lea rax, str._demote
mov qword [rsp + 0x28], rax
lea rax, str._interactive:
mov qword [rsp + 0x20], rax
lea r9, str._system:
lea r8, [0x1401763f0]
lea rdx, str._bypass
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
jne 0x1400411da
xor r8d, r8d
lea rdx, str._multi
lea rcx, [rsp + 0x78]
call fcn.140128860
lea rcx, [rsp + 0x78]
test al, al
je 0x14003f496
call fcn.140058574
mov rdx, rax
xor r8d, r8d
mov rcx, qword [0x14021c5d8]
call fcn.14000f318
mov rax, qword [0x14021c5d8]
mov byte [rax + 0xa20], r14b
jmp 0x14003f4d3
xor r8d, r8d
lea rdx, str._NoMulti
call fcn.140128860
lea rcx, [rsp + 0x78]
test al, al
je 0x14003f4f3
call fcn.140058574
mov rdx, rax
xor r8d, r8d
mov rcx, qword [0x14021c5d8]
call fcn.14000f318
mov rax, qword [0x14021c5d8]
mov byte [rax + 0xa20], dil
mov byte [rax + 0xa2c], r14b
cmp dword [rax + 0xa28], r14d
je 0x14003f87c
mov dword [rax + 0xa28], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._visible
call fcn.140128860
test al, al
je 0x14003f534
mov rax, qword [0x14021c5d8]
mov byte [rax + 0xa30], r14b
mov byte [rax + 0xa3c], r14b
cmp dword [rax + 0xa38], r14d
je 0x14003f87c
mov dword [rax + 0xa38], r14d
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
lea rax, str._ct2
mov qword [rsp + 0x28], rax
lea rax, str._ct1
mov qword [rsp + 0x20], rax
lea r9, str._ct0
lea r8, str._cleartype
lea rdx, [0x140176630]
lea rcx, [rsp + 0x78]
call fcn.1401288cc
lea rcx, [rsp + 0x78]
test al, al
je 0x14003f5e7
call fcn.140058574
movzx ecx, word [rax + 6]
sub ecx, 0x30
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x854], r14b
je 0x14003f5c6
cmp ecx, 1
je 0x14003f5ba
mov dword [rax + 0x848], 6
jmp 0x14003f5d0
mov dword [rax + 0x848], 4
jmp 0x14003f5d0
mov dword [rax + 0x848], 3
cmp dword [rax + 0x850], ebx
je 0x14003f87c
mov dword [rax + 0x850], ebx
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._lng
call fcn.140128860
test al, al
je 0x14003f663
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
mov rax, qword [0x14021c5d8]
cmp byte [rax + 0x834], dil
jne 0x14003f87c
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rdx, rax
mov rcx, qword [0x14021c5d8]
add rcx, 0x828
mov r8d, 4
call fcn.140041d90
lea rcx, [rbp - 0x50]
call fcn.140058574
lea rdx, str._lng
jmp 0x14003f75d
xor r8d, r8d
lea rdx, str._lngfile
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003f6e1
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
mov rax, qword [0x14021c5d8]
cmp byte [rax + 0x844], dil
jne 0x14003f87c
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rdx, rax
mov rcx, qword [0x14021c5d8]
add rcx, 0x838
mov r8d, 4
call fcn.140041d90
lea rcx, [rbp - 0x50]
call fcn.140058574
lea rdx, str._lngfile
jmp 0x14003f75d
xor r8d, r8d
lea rdx, str._Font
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003f771
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
mov rax, qword [0x14021c5d8]
cmp byte [rax + 0x864], dil
jne 0x14003f87c
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rdx, rax
mov rcx, qword [0x14021c5d8]
add rcx, 0x858
mov r8d, 4
call fcn.140041d90
lea rcx, [rbp - 0x50]
call fcn.140058574
lea rdx, str._font
mov r8, rax
mov rcx, qword [0x14021c5d8]
call fcn.14000f318
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._FontSize
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
jne 0x140041078
xor r8d, r8d
lea rdx, str._Size
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
jne 0x140041078
xor r8d, r8d
lea rdx, str._FontFile
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003f914
mov qword [rbp + 0x20], rdi
mov dword [rbp + 0x28], 4
mov byte [rbp + 0x2c], dil
mov byte [rsp + 0x20], dil
mov r9d, 0x104
lea r8, [rbp + 0x20]
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14003ead0
test al, al
je 0x1400410c3
mov rbx, qword [rbp + 0x20]
mov edi, dword [rbp + 0x28]
mov sil, byte [rbp + 0x2c]
xor ecx, ecx
test sil, sil
je 0x14003f81f
lea eax, [rdi - 4]
cmp eax, 2
ja 0x14003f81f
test rbx, rbx
je 0x14003f81f
cmp word [rbx], cx
mov r8, rbx
jne 0x14003f822
mov r8, rcx
lea rdx, str._FontFile
mov rcx, qword [0x14021c5d8]
call fcn.14000f318
test sil, sil
je 0x14003f850
lea eax, [rdi - 4]
cmp eax, 2
ja 0x14003f850
xor edi, edi
test rbx, rbx
je 0x14003f852
cmp word [rbx], di
jne 0x14003f855
jmp 0x14003f852
xor edi, edi
mov rbx, rdi
mov r8d, r14d
mov rdx, rbx
mov rcx, qword [0x14021c5c8]
call fcn.140056c18
nop
lea rcx, [rbp + 0x20]
call fcn.14003e980
nop
mov rsi, qword [rsp + 0x68]
mov ebx, 2
lea rcx, [rsp + 0x78]
call fcn.140128704
lea rcx, [rbp - 0x50]
call fcn.140128704
lea r8, [rbp + 8]
lea rdx, [rsp + 0x78]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x14003f3c5
mov rcx, r13
call fcn.140041af8
mov byte [rsp + 0x60], r14b
lea rcx, [rbp + 0x68]
call fcn.140120ddc
nop
lea rcx, [rbp + 0x78]
call fcn.140120ddc
nop
lea rcx, [rbp - 0x50]
call fcn.1401286cc
nop
lea rcx, [rsp + 0x78]
call fcn.1401286cc
mov al, byte [rsp + 0x60]
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.140139b10
mov rbx, qword [rsp + 0x4d8]
add rsp, 0x480
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor r8d, r8d
lea rdx, str._FontDir
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003f9df
mov qword [rbp + 0x30], rdi
mov dword [rbp + 0x38], 4
mov byte [rbp + 0x3c], dil
mov byte [rsp + 0x20], dil
mov r9d, 0x104
lea r8, [rbp + 0x30]
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14003ead0
test al, al
je 0x1400410d2
mov rbx, qword [rbp + 0x30]
mov edi, dword [rbp + 0x38]
mov sil, byte [rbp + 0x3c]
xor ecx, ecx
test sil, sil
je 0x14003f98a
lea eax, [rdi - 4]
cmp eax, 2
ja 0x14003f98a
test rbx, rbx
je 0x14003f98a
cmp word [rbx], cx
mov r8, rbx
jne 0x14003f98d
mov r8, rcx
lea rdx, str._FontDir
mov rcx, qword [0x14021c5d8]
call fcn.14000f318
test sil, sil
je 0x14003f9bb
lea eax, [rdi - 4]
cmp eax, 2
ja 0x14003f9bb
xor edi, edi
test rbx, rbx
je 0x14003f9bd
cmp word [rbx], di
jne 0x14003f9c0
jmp 0x14003f9bd
xor edi, edi
mov rbx, rdi
mov rdx, rbx
mov rcx, qword [0x14021c5c8]
call fcn.140052e9c
nop
lea rcx, [rbp + 0x30]
call fcn.14003e980
nop
jmp 0x14003f872
xor r8d, r8d
lea rdx, [0x1401766d8]
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fa0a
mov rax, qword [0x14021c5d8]
mov dword [rax + 0x8b8], 0x521
jmp 0x14003fa88
xor r8d, r8d
lea rdx, str._max
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fa35
mov rax, qword [0x14021c5d8]
mov dword [rax + 0x8b8], 0x520
jmp 0x14003fa88
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._normal
lea rdx, str._nor
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x14003faa6
mov rax, qword [0x14021c5d8]
mov dword [rax + 0x8b8], 0x51f
mov byte [rax + 0x8c4], r14b
cmp dword [rax + 0x8c0], ebx
je 0x14003f87c
mov dword [rax + 0x8c0], ebx
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, str._StartTSA
lea r8, str._MinTSA
lea rdx, str._min
lea rcx, [rsp + 0x78]
call fcn.1401288cc
lea rcx, [rsp + 0x78]
test al, al
je 0x14003fb4c
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x3ff8], r14b
xor r8d, r8d
lea rdx, str._min
call fcn.140128860
test al, al
jne 0x14003f87c
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x3ff9], r14b
xor r8d, r8d
lea rdx, str._MinTSA
lea rcx, [rsp + 0x78]
call fcn.140128860
mov cl, al
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x3ffa], cl
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._tray
lea rdx, str._tsa
call fcn.1401288cc
test al, al
je 0x14003fb9c
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x3ffb], r14b
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._detached
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fbe8
mov rax, qword [0x14021c5d8]
mov dword [rax + 0x7d4], ebx
mov byte [r13 + 0x578], r14b
mov byte [r13 + 0x584], r14b
cmp dword [r13 + 0x580], r14d
je 0x14003f87c
mov dword [r13 + 0x580], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._NoAutoClose
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fc27
mov byte [r13 + 0x588], r14b
mov byte [r13 + 0x594], r14b
cmp dword [r13 + 0x590], r14d
je 0x14003f87c
mov dword [r13 + 0x590], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._NoAutoEnvReload
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fc66
mov byte [r13 + 0x598], r14b
mov byte [r13 + 0x5a4], r14b
cmp dword [r13 + 0x5a0], r14d
je 0x14003f87c
mov dword [r13 + 0x5a0], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._here
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fc9f
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x7d8], r14b
xor edx, edx
mov rcx, qword [0x14021c5d8]
call fcn.140023cec
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._update
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fce5
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x918], r14b
mov byte [rax + 0x924], r14b
cmp dword [rax + 0x920], r14d
je 0x14003f87c
mov dword [rax + 0x920], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._NoUpdate
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fd2b
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x908], r14b
mov byte [rax + 0x914], r14b
cmp dword [rax + 0x910], r14d
je 0x14003f87c
mov dword [rax + 0x910], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._NoHooksWarn
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fd71
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x8f8], r14b
mov byte [rax + 0x904], r14b
cmp dword [rax + 0x900], r14d
je 0x14003f87c
mov dword [rax + 0x900], r14d
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
lea rax, str._NoKeybHooks
mov qword [rsp + 0x20], rax
lea r9, str._NoKeybHook
lea r8, str._NoKeyHooks
lea rdx, str._NoKeyHook
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x14003fdd1
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x3ffc], r14b
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._NoCloseConfirm
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fdfc
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x4001], r14b
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._NoMacro
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003fe27
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x3ffd], r14b
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._NoHotkeys
lea rdx, str._NoHotkey
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x14003fe7c
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x3ffe], r14b
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._NoDefTerm
lea rdx, str._NoDefTrm
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x14003fed1
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x3fff], r14b
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._NoRegFonts
lea rdx, str._NoRegFont
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x14003ff26
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x4000], r14b
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [0x140176950]
lea rdx, str._inside
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x14003ffc6
mov bl, dil
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x7d8], r14b
xor edx, edx
mov rcx, qword [0x14021c5d8]
call fcn.140023cec
xor r8d, r8d
lea rdx, [0x140176950]
lea rcx, [rsp + 0x78]
call fcn.140128860
xor ecx, ecx
test al, al
je 0x14003ffad
mov bl, r14b
mov rdi, qword [rsp + 0x78]
add rdi, 0x10
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8, rdi
mov dl, bl
call fcn.1400661bc
xor edi, edi
jmp 0x14003f877
xor r8d, r8d
lea rdx, str._InsidePID
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040038
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rcx, rax
mov r8d, 0xa
lea rdx, [rbp + 0x88]
call fcn.140143788
test eax, eax
je 0x14003f87c
mov qword [rsp + 0x20], rdi
mov r9d, eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1400661bc
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._InsideWnd
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x1400400f3
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
mov rcx, qword [rbp - 0x50]
movzx edx, word [rcx]
mov eax, 0x30
cmp dx, ax
jne 0x140040098
movzx eax, word [rcx + 2]
sub ax, 0x58
mov edx, 0xffdf
test dx, ax
jne 0x1400400ae
add rcx, 4
jmp 0x1400400ae
lea rax, [rcx + 2]
sub dx, 0x58
mov r8d, 0xffdf
test r8w, dx
cmove rcx, rax
mov r8d, 0x10
lea rdx, [rbp + 0x90]
call fcn.1401437b4
mov ebx, eax
test eax, eax
je 0x14003f877
mov ecx, ebx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14003f877
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1400661bc
jmp 0x14003f877
xor r8d, r8d
lea rdx, [0x140171f98]
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x1400401b3
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
mov rax, qword [0x14021c5d8]
cmp byte [rax + 0x874], dil
jne 0x14003f87c
lea rcx, [rbp - 0x50]
call fcn.14012148c
test al, al
jne 0x14003f87c
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x868], r14b
mov byte [rax + 0x874], r14b
cmp dword [rax + 0x870], r14d
je 0x140040174
mov dword [rax + 0x870], r14d
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.140127e1c
mov rcx, qword [0x14021c5d8]
add rcx, 0x15a8
mov rdx, rax
call fcn.140120e10
lea rcx, [rbp + 0x98]
call fcn.140120ddc
jmp 0x14003f87c
xor r8d, r8d
lea rdx, [0x1401769a8]
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x1400402b2
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
lea rcx, [rbp - 0x50]
call fcn.14012148c
test al, al
jne 0x14003f87c
lea rcx, [rbp - 0x18]
call fcn.140120d54
nop
mov ebx, 0x25
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rcx, rax
movzx edx, bx
call fcn.14013a9b0
test rax, rax
je 0x140040266
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140127e1c
nop
mov edi, dword [rbp - 0x60]
or edi, r14d
mov dword [rbp - 0x60], edi
mov dword [rsp + 0x68], edi
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140120e10
mov rcx, rax
call fcn.140058574
xor ecx, ecx
test rax, rax
je 0x14004026b
mov bl, r14b
jmp 0x14004026d
mov edi, dword [rbp - 0x60]
xor ecx, ecx
mov bl, cl
test r14b, dil
je 0x140040281
and edi, 0xfffffffe
mov dword [rbp - 0x60], edi
lea rcx, [rbp + 0x40]
call fcn.140120ddc
xor edi, edi
test bl, bl
lea rcx, [rbp - 0x18]
jne 0x14004028f
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rdx, rax
mov rcx, qword [0x14021c5d8]
call fcn.140023cec
nop
lea rcx, [rbp - 0x18]
call fcn.140120ddc
jmp 0x14003f877
xor r8d, r8d
lea rdx, str._UpdateJumpList
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x1400402dd
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x15d0], r14b
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
lea rax, str._log4
mov qword [rsp + 0x30], rax
lea rax, str._log3
mov qword [rsp + 0x28], rax
lea rax, str._log2
mov qword [rsp + 0x20], rax
lea r9, str._log1
lea r8, str._log0
lea rdx, [0x140176a28]
lea rcx, [rsp + 0x78]
call fcn.1401288cc
mov qword [rsp + 0x50], rdi
xor r9d, r9d
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
test al, al
je 0x1400403e9
lea r8, str._log0
lea rdx, [0x140176a28]
call fcn.1401288cc
test al, al
je 0x1400403a3
mov rax, qword [0x14021c5d8]
mov dword [rax + 0xa50], r14d
mov byte [rax + 0xa5c], r14b
cmp dword [rax + 0xa58], ebx
je 0x1400403d8
mov dword [rax + 0xa58], ebx
jmp 0x1400403d8
lea rcx, [rsp + 0x78]
call fcn.140058574
mov cl, byte [rax + 8]
sub cl, 0x30
movzx eax, cl
mov rcx, qword [0x14021c5d8]
mov dword [rcx + 0xa50], eax
mov byte [rcx + 0xa5c], r14b
cmp dword [rcx + 0xa58], ebx
je 0x1400403d8
mov dword [rcx + 0xa58], ebx
mov rcx, qword [0x14021c5d8]
call fcn.140011ec4
jmp 0x14003f87c
lea r8, str._Reuse
lea rdx, str._Single
call fcn.1401288cc
lea rcx, [rsp + 0x78]
test al, al
je 0x14004042f
call fcn.140058574
mov rdx, rax
xor r8d, r8d
mov rcx, qword [0x14021c5d8]
call fcn.14000f318
mov rax, qword [0x14021c748]
mov dword [rax + 0x11b44], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._NoSingle
call fcn.140128860
lea rcx, [rsp + 0x78]
test al, al
je 0x14004046a
call fcn.140058574
mov rdx, rax
xor r8d, r8d
mov rcx, qword [0x14021c5d8]
call fcn.14000f318
mov rax, qword [0x14021c748]
jmp 0x14004058e
xor r8d, r8d
lea rdx, str._DesktopMode
call fcn.140128860
test al, al
je 0x1400404ab
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x978], r14b
mov byte [rax + 0x984], r14b
cmp dword [rax + 0x980], r14d
je 0x14003f87c
mov dword [rax + 0x980], r14d
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, str._NoQuake
lea r8, str._QuakeAuto
lea rdx, str._Quake
lea rcx, [rsp + 0x78]
call fcn.1401288cc
lea rcx, [rsp + 0x78]
test al, al
je 0x140040599
xor r8d, r8d
lea rdx, str._Quake
call fcn.140128860
test al, al
je 0x140040524
mov rax, qword [0x14021c5d8]
mov dword [rax + 0x958], r14d
mov byte [rax + 0x964], r14b
jmp 0x140040550
xor r8d, r8d
lea rdx, str._QuakeAuto
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x964], r14b
je 0x140040567
mov dword [rax + 0x958], ebx
cmp dword [rax + 0x960], ebx
je 0x14003f87c
mov dword [rax + 0x960], ebx
jmp 0x14003f87c
mov dword [rax + 0x958], edi
cmp dword [rax + 0x960], ebx
je 0x14004057b
mov dword [rax + 0x960], ebx
mov rax, qword [0x14021c748]
cmp dword [rax + 0x11b44], edi
jne 0x14003f87c
mov dword [rax + 0x11b44], ebx
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._Frame
lea rdx, str._FrameWidth
call fcn.1401288cc
test al, al
je 0x14004062f
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
mov rax, qword [0x14021c5d8]
cmp byte [rax + 0x974], dil
jne 0x14003f87c
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rcx, qword [0x14021c5d8]
add rcx, 0x968
mov rdx, rax
mov r8d, 0xa
call fcn.140041d58
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._ShowHideTSA
lea rdx, str._ShowHide
lea rcx, [rsp + 0x78]
call fcn.1401288cc
lea rcx, [rsp + 0x78]
test al, al
je 0x1400406ab
mov rax, qword [0x14021c748]
mov dword [rax + 0x11b44], r14d
xor r8d, r8d
lea rdx, str._ShowHide
call fcn.140128860
neg al
sbb ecx, ecx
add ecx, ebx
mov rax, qword [0x14021c748]
mov dword [rax + 0x11b48], ecx
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, str._Basic
lea r8, str._ResetDefault
lea rdx, str._Reset
call fcn.1401288cc
test al, al
je 0x14004077d
mov rax, qword [0x14021c5d8]
mov byte [rax + 0xa40], r14b
mov byte [rax + 0xa4c], r14b
cmp dword [rax + 0xa48], r14d
je 0x140040715
mov dword [rax + 0xa48], r14d
xor r8d, r8d
lea rdx, str._ResetDefault
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040740
mov rax, qword [0x14021c748]
mov byte [rax + 0x11b3f], r14b
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._Basic
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14003f87c
mov rax, qword [0x14021c748]
mov byte [rax + 0x11b3f], r14b
mov rax, qword [0x14021c748]
mov byte [rax + 0x11b3e], r14b
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._DontCascade
lea rdx, str._NoCascade
lea rcx, [rsp + 0x78]
call fcn.1401288cc
lea rcx, [rsp + 0x78]
test al, al
je 0x1400407ee
call fcn.140058574
mov rdx, rax
xor r8d, r8d
mov rcx, qword [0x14021c5d8]
call fcn.14000f318
mov rax, qword [0x14021c748]
mov byte [rax + 0x11b40], r14b
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
lea rax, str._WndHeight
mov qword [rsp + 0x30], rax
lea rax, str._WndH
mov qword [rsp + 0x28], rax
lea rax, str._WndWidth
mov qword [rsp + 0x20], rax
lea r9, str._WndW
lea r8, str._WndY
lea rdx, str._WndX
call fcn.1401288cc
lea rcx, [rsp + 0x78]
test al, al
je 0x14004093b
call fcn.140058574
movzx ecx, word [rax + 8]
mov word [rsp + 0x70], cx
mov edx, r14d
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_CharUpperBuffW]
mov qword [rbp + 0x10], rdi
mov esi, 4
mov dword [rbp + 0x18], esi
mov byte [rbp + 0x1c], dil
mov byte [rsp + 0x20], dil
lea r9d, [rsi + 0x1c]
lea r8, [rbp + 0x10]
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14003ead0
test al, al
je 0x1400410e1
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x988], r14b
movzx ecx, word [rsp + 0x70]
lea eax, [rcx - 0x58]
cmp ax, r14w
ja 0x1400408ca
mov rax, qword [0x14021c748]
mov byte [rax + 0x11b40], r14b
movzx ecx, word [rsp + 0x70]
movzx ecx, cx
sub ecx, 0x48
je 0x140040911
sub ecx, 0xf
je 0x140040901
sub ecx, 1
je 0x1400408f1
cmp ecx, 1
jne 0x14004092c
mov rcx, qword [0x14021c5d8]
add rcx, 0x9a0
jmp 0x14004091f
mov rcx, qword [0x14021c5d8]
add rcx, 0x990
jmp 0x14004091f
mov rcx, qword [0x14021c5d8]
add rcx, 0x9b0
jmp 0x14004091f
mov rcx, qword [0x14021c5d8]
add rcx, 0x9c0
mov r8d, esi
mov rdx, qword [rbp + 0x10]
call fcn.140041d90
nop
lea rcx, [rbp + 0x10]
call fcn.14003e980
nop
jmp 0x140040f62
xor r8d, r8d
lea rdx, str._Monitor
call fcn.140128860
test al, al
je 0x1400409e7
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], 4
mov byte [rbp - 0x1c], dil
mov byte [rsp + 0x20], dil
mov r9d, 0x40
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14003ead0
test al, al
je 0x1400410f0
mov rcx, qword [rbp - 0x28]
call fcn.14012f528
mov rcx, rax
mov rax, qword [0x14021c5d8]
mov qword [rax + 0x9e0], rcx
test rcx, rcx
je 0x1400409d8
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x9ec], r14b
mov rax, qword [0x14021c5d8]
mov dword [rax + 0x9e8], ebx
mov rax, qword [0x14021c5d8]
mov rcx, qword [rax + 0x9e0]
mov rax, qword [0x14021c5a0]
mov qword [rax + 0x70], rcx
lea rcx, [rbp - 0x28]
call fcn.14003e980
nop
jmp 0x140040f62
xor r8d, r8d
lea rdx, str._Theme
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040a6d
test rsi, rsi
je 0x140040a48
movzx eax, word [rsi]
sub ax, 0x2d
mov ecx, 0xfffd
test cx, ax
je 0x140040a48
mov r8, qword [0x14021c5d8]
add r8, 0x9d0
mov byte [rsp + 0x20], dil
mov r9d, 0x80
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14003ead0
mov rsi, qword [rsp + 0x68]
test al, al
jne 0x14003f87c
mov rcx, qword [0x14021c5d8]
add rcx, 0x9d0
mov r8d, 4
lea rdx, str.DarkMode_Explorer
call fcn.140041d90
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._BufferHeight
lea rdx, str._Buffer
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x140040bbb
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
mov rax, qword [0x14021c5d8]
cmp byte [rax + 0x894], dil
jne 0x14003f87c
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rdx, rax
mov rcx, qword [0x14021c5d8]
add rcx, 0x888
mov r8d, 0xa
call fcn.140041d58
mov rcx, qword [0x14021c5d8]
cmp byte [rcx + 0x894], dil
je 0x140040b4a
cmp dword [rcx + 0x890], ebx
jne 0x140040b4a
cmp dword [rcx + 0x888], edi
jge 0x140040b4a
mov eax, dword [rcx + 0x888]
neg eax
mov dword [rcx + 0x888], eax
mov byte [rcx + 0x894], r14b
cmp dword [rcx + 0x890], ebx
je 0x140040b4a
mov dword [rcx + 0x890], ebx
mov rax, qword [0x14021c5d8]
cmp byte [rax + 0x894], dil
je 0x140040b93
cmp dword [rax + 0x890], ebx
jne 0x140040b93
cmp dword [rax + 0x888], 0x12c
jl 0x140040b93
cmp dword [rax + 0x890], ebx
jne 0x14003f87c
mov ecx, 0x7ffe
cmp dword [rax + 0x888], ecx
jle 0x14003f87c
mov dword [rax + 0x888], ecx
jmp 0x140040b9d
mov dword [rax + 0x888], 0x12c
mov byte [rax + 0x894], r14b
cmp dword [rax + 0x890], ebx
je 0x14003f87c
mov dword [rax + 0x890], ebx
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._Config
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040bf1
mov r8, qword [0x14021c5d8]
add r8, 0x898
mov byte [rsp + 0x20], dil
mov r9d, 0x7f
jmp 0x140040dc8
xor r8d, r8d
lea rdx, str._Palette
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040c27
mov r8, qword [0x14021c5d8]
add r8, 0x8a8
mov byte [rsp + 0x20], dil
mov r9d, 0x104
jmp 0x140040dc8
xor r8d, r8d
lea rdx, str._LoadRegistry
lea rcx, [rsp + 0x78]
call fcn.140128860
lea rcx, [rsp + 0x78]
test al, al
je 0x140040c89
call fcn.140058574
mov rdx, rax
xor r8d, r8d
mov rcx, qword [0x14021c5d8]
call fcn.14000f318
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x8c8], r14b
mov byte [rax + 0x8d4], r14b
cmp dword [rax + 0x8d0], r14d
je 0x14003f87c
mov dword [rax + 0x8d0], r14d
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._LoadXmlFile
lea rdx, str._LoadCfgFile
call fcn.1401288cc
test al, al
je 0x140040cdf
mov r8, qword [0x14021c5d8]
add r8, 0x8d8
mov r9d, 0x104
jmp 0x140040dc3
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._SaveXmlFile
lea rdx, str._SaveCfgFile
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x140040d31
mov r8, qword [0x14021c5d8]
add r8, 0x8e8
jmp 0x140040cd4
xor r8d, r8d
lea rdx, str._GuiMacro
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040d64
mov r8, qword [0x14021c5d8]
add r8, 0x948
mov byte [rsp + 0x20], dil
mov r9d, 0x8000
jmp 0x140040dc8
xor r8d, r8d
lea rdx, str._UpdateSrcSet
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040d97
mov r8, qword [0x14021c5d8]
add r8, 0x928
mov byte [rsp + 0x20], dil
mov r9d, 0x410
jmp 0x140040dc8
xor r8d, r8d
lea rdx, str._AnsiLog
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040de2
mov r8, qword [0x14021c5d8]
add r8, 0x938
mov r9d, 0xdc
mov byte [rsp + 0x20], r14b
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14003ead0
test al, al
je 0x14003f8be
jmp 0x140040f62
xor r8d, r8d
lea rdx, str._SetDefTerm
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040e28
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x9f0], r14b
mov byte [rax + 0x9fc], r14b
cmp dword [rax + 0x9f8], r14d
je 0x14003f87c
mov dword [rax + 0x9f8], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._ZoneId
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040e6e
mov rax, qword [0x14021c5d8]
mov byte [rax + 0xa00], r14b
mov byte [rax + 0xa0c], r14b
cmp dword [rax + 0xa08], r14d
je 0x14003f87c
mov dword [rax + 0xa08], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, [0x140176dd8]
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040eb4
mov rax, qword [0x14021c5d8]
mov byte [rax + 0xa10], r14b
mov byte [rax + 0xa1c], r14b
cmp dword [rax + 0xa18], r14d
je 0x14003f87c
mov dword [rax + 0xa18], r14d
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._QuitOnClose
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040edf
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x7d9], r14b
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._Title
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040f6c
mov qword [rbp - 8], rdi
mov dword [rbp], 4
mov byte [rbp + 4], dil
mov byte [rsp + 0x20], dil
mov r9d, 0x7f
lea r8, [rbp - 8]
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14003ead0
test al, al
je 0x1400410ff
cmp byte [rbp + 4], dil
je 0x140040f48
mov eax, dword [rbp]
add eax, 0xfffffffc
cmp eax, ebx
ja 0x140040f48
mov rdx, qword [rbp - 8]
test rdx, rdx
je 0x140040f48
cmp word [rdx], di
jne 0x140040f4b
mov rdx, rdi
mov rcx, qword [0x14021c5d8]
call fcn.140022e68
nop
lea rcx, [rbp - 8]
call fcn.14003e980
nop
mov rsi, qword [rsp + 0x68]
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._Settings
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040f97
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x7da], r14b
jmp 0x14003f87c
xor r8d, r8d
lea rdx, str._FindBugMode
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140040fc2
mov rax, qword [0x14021c5d8]
mov byte [rax + 0x15d1], r14b
jmp 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, str._debugi
lea r8, str._debugw
lea rdx, str._debug
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
jne 0x14003f87c
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, str._help
lea r8, [0x140176e5c]
lea rdx, [0x140176e64]
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x14004110e
mov rcx, qword [0x14021cd28]
test rcx, rcx
je 0x140041069
xor edx, edx
call fcn.140068504
xor ecx, ecx
call fcn.140001790
mov dword [r15], r12d
jmp 0x14003f8be
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rsi, rax
test rax, rax
je 0x140041738
mov rax, qword [0x14021c5d8]
cmp byte [rax + 0x884], dil
jne 0x14003f87c
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rcx, qword [0x14021c5d8]
add rcx, 0x878
jmp 0x14004061c
lea rcx, [rbp + 0x20]
call fcn.14003e980
nop
jmp 0x14003f8be
lea rcx, [rbp + 0x30]
call fcn.14003e980
nop
jmp 0x14003f8be
lea rcx, [rbp + 0x10]
call fcn.14003e980
nop
jmp 0x14003f8be
lea rcx, [rbp - 0x28]
call fcn.14003e980
nop
jmp 0x14003f8be
lea rcx, [rbp - 8]
call fcn.14003e980
nop
jmp 0x14003f8be
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
lea rbx, [0x140176e70]
mov qword [rsp + 0x20], rbx
lea r9, [0x140171fa8]
lea r8, str._runlist
lea rdx, [0x140171fb8]
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
je 0x14004191d
mov rcx, qword [r13 + 0x308]
test rcx, rcx
je 0x14004117a
mov rax, qword [rbp + 8]
sub rax, qword [rbp - 0x58]
sar rax, 1
mov word [rcx + rax*2], di
mov rcx, rsi
call fcn.140125c74
mov rdx, rax
lea rcx, [r13 + 0x328]
mov r8, r12
call fcn.140121718
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8, rbx
lea rdx, str._runlist
lea rcx, [rsp + 0x78]
call fcn.1401288cc
mov byte [r13 + 0x338], al
jmp 0x14003f8b1
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rbx, rax
test rax, rax
je 0x140041235
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [0x140171fa8]
lea rdx, [0x140171fb8]
lea rcx, [rbp - 0x50]
call fcn.1401288cc
test al, al
mov rdx, rbx
jne 0x140041238
mov rdx, rsi
lea rdi, [r13 + 0x328]
mov r8, r12
mov rcx, rdi
call fcn.140121718
mov rcx, rdi
call fcn.14012148c
xor ebx, ebx
test al, al
je 0x1400412c9
lea rcx, [rsp + 0x78]
call fcn.140058574
mov r8, rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, str._exists__command_line_is_empty
lea rdx, str.Invalid_command_line._
lea rcx, [rbp - 0x18]
call fcn.140120be0
nop
lea rcx, [rbp - 0x18]
call fcn.140058574
mov rcx, rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
call fcn.14011f550
nop
lea rcx, [rbp - 0x18]
call fcn.140120ddc
jmp 0x14003f8be
mov ebx, 0x68
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0xb0]
call fcn.14013b230
mov dword [rbp + 0xb0], ebx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
mov dword [rbp + 0xec], r14d
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [0x1401763f0]
lea rdx, str._demote
lea rcx, [rsp + 0x78]
call fcn.1401288cc
test al, al
mov word [rbp + 0xf0], r14w
jne 0x14004134c
mov word [rbp + 0xf0], bx
xor edx, edx
mov r8d, 0x20a
lea rcx, [rbp + 0x160]
call fcn.14013b230
lea rdx, [rbp + 0x160]
mov ecx, 0x105
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [rsp + 0x70], ebx
mov sil, bl
lea rcx, [rsp + 0x78]
call fcn.140058574
mov r9, rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
lea rax, [0x1401681a8]
mov qword [rsp + 0x30], rax
mov rax, qword [rdi]
mov qword [rsp + 0x28], rax
lea rax, [0x140176490]
mov qword [rsp + 0x20], rax
lea r8, [0x140176498]
lea rdx, str.Starting_process
lea rcx, [rbp - 0x18]
call fcn.140120be0
nop
lea rcx, [rbp - 0x18]
call fcn.140058574
mov rcx, rax
mov r8b, r14b
mov dl, r14b
call fcn.14002b004
nop
lea rcx, [rbp - 0x18]
call fcn.140120ddc
xor r8d, r8d
lea rdx, str._demote
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x140041454
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x160]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x20
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r13 + 0x328]
call fcn.140043278
jmp 0x1400414cb
xor r8d, r8d
lea rdx, str._system:
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x1400414d5
mov rcx, qword [rsp + 0x78]
add rcx, 0x10
xor edx, edx
lea r8d, [rdx + 0xa]
call fcn.1401437b4
mov qword [rsp + 0x50], rbx
lea rcx, [rbp + 0x50]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x160]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [r13 + 0x328]
mov ecx, eax
call fcn.140043bb8
mov ebx, eax
xor r13d, r13d
jmp 0x1400415b9
xor r8d, r8d
lea rdx, str._interactive:
lea rcx, [rsp + 0x78]
call fcn.140128860
test al, al
je 0x14004155d
mov rcx, qword [rsp + 0x78]
add rcx, 0x1a
xor edx, edx
lea r8d, [rdx + 0xa]
call fcn.1401437b4
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], rcx
lea rcx, [rbp + 0x50]
mov qword [rsp + 0x50], rcx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0x160]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x20
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, qword [r13 + 0x328]
xor edx, edx
mov ecx, eax
call fcn.1400434a4
mov ebx, eax
xor r13d, r13d
jmp 0x1400415b6
lea rax, [rbp + 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [r13 + 0x328]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov ebx, eax
xor r13d, r13d
test eax, eax
je 0x1400415ac
mov eax, r13d
jmp 0x1400415b2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x70], eax
mov sil, r14b
lea rcx, [rbp - 0x28]
call fcn.140120d54
nop
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [rbp + 0x120]
call fcn.14013b230
test ebx, ebx
je 0x140041600
mov rax, qword [rbp + 0x60]
test eax, eax
je 0x1400415f7
mov r8d, eax
lea rdx, str.__PID_u
lea rcx, [rbp + 0x120]
call fcn.140001190
lea rdx, str.Process_was_created_successfully
jmp 0x14004161f
mov r8d, dword [rsp + 0x70]
lea rdx, str.__ErrorCode_u
lea rcx, [rbp + 0x120]
call fcn.140001190
lea rdx, str.Failed_to_start_process
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp + 0x120]
lea rcx, [rbp + 0x40]
call fcn.140120be0
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140120e10
lea rcx, [rbp + 0x40]
call fcn.140120ddc
lea rcx, [rbp - 0x28]
call fcn.140058574
mov rcx, rax
mov r8b, r14b
mov dl, r14b
call fcn.14002b004
nop
lea rcx, [rbp - 0x28]
call fcn.140120ddc
cmp dword [rsp + 0x70], r13d
je 0x1400416ac
mov rcx, rdi
call fcn.140058574
mov rcx, rax
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rsp + 0x70]
call fcn.14011f550
test sil, sil
je 0x1400416ce
mov r8b, r14b
mov dl, r14b
lea rcx, str.Sleeping_for_5_seconds
call fcn.14002b004
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
test ebx, ebx
je 0x1400416d5
mov dword [r15], r13d
mov rcx, qword [rbp + 0x50]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400416f2
mov qword [rbp + 0x50], r13
cmp rcx, r12
je 0x1400416f2
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x58]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14003f8be
mov qword [rbp + 0x58], r13
cmp rcx, r12
je 0x14003f8be
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14003f8be
mov edi, r14d
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14012571c
mov rbx, rax
xor esi, esi
test rax, rax
jne 0x140041744
mov dword [r15], 0x65
jmp 0x14003f8be
xor r8d, r8d
lea rdx, [0x140176380]
lea rcx, [rbp - 0x50]
call fcn.1401211e0
test eax, eax
jne 0x14004175f
mov edi, esi
jmp 0x1400417b0
xor r8d, r8d
lea rdx, [0x140176384]
lea rcx, [rbp - 0x50]
call fcn.1401211e0
test eax, eax
jne 0x140041738
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.14012571c
mov rbx, rax
test rax, rax
je 0x140041738
lea rcx, [rbp - 0x50]
call fcn.140058574
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140041911
test al, 0x10
jne 0x140041911
mov qword [rbp - 0x58], rsi
lea rax, [rsp + 0x68]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftCommand_Processor
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x140041802
mov dword [r15], 0x67
jmp 0x14003f8be
test edi, edi
je 0x1400418db
lea rcx, [rbp - 0x50]
call fcn.140121404
mov rsi, rax
xor ecx, ecx
mov edi, ecx
cmp word [rbx], cx
je 0x140041831
mov rdi, rbx
mov rax, r12
inc rax
cmp word [rbx + rax*2], cx
jne 0x140041825
add rsi, rax
mov edx, 2
lea rcx, [rsi + 0x10]
call fcn.14012005c
mov rbx, rax
lea rax, [0x14016b508]
lea rdx, [0x14015a140]
mov rcx, rdx
test rdi, rdi
cmovne rcx, rax
mov rax, rdx
cmovne rax, rdi
lea r8, [0x140176388]
cmovne rdx, r8
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov r9, qword [rbp - 0x50]
lea r8, str.__s__s_s_s
lea rdx, [rsi + 0x10]
mov rcx, rbx
call fcn.14012091c
xor edi, edi
inc r12
cmp word [rbx + r12*2], di
jne 0x140041894
lea eax, [r12*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, r14d
xor r8d, r8d
lea rdx, [0x140171908]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
mov edi, 0x64
cmove edi, r14d
mov rcx, rbx
call fcn.14012008c
jmp 0x1400418f7
lea rdx, [0x140171908]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edi, 0x64
test eax, eax
cmove edi, r14d
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, r13
call fcn.140041bc8
mov dword [r15], edi
jmp 0x14003f8be
mov dword [r15], 0x66
jmp 0x14003f8be
mov r15, qword [rbp + 8]
mov rax, r15
test rax, rax
je 0x14003f8b1
mov edx, r14d
mov rcx, qword [0x14021c740]
call fcn.140087888
lea r13, [0x140172c80]
test eax, eax
je 0x1400419a8
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r13
mov r9, r15
lea r8, [0x140176ea0]
lea rdx, [0x140167d54]
lea rcx, [rbp - 0x28]
call fcn.140120be0
nop
lea rcx, [rbp - 0x28]
call fcn.140058574
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x14021c5d8]
call fcn.140016cd0
nop
lea rcx, [rbp - 0x28]
call fcn.140120ddc
lea rcx, [rbp - 0x18]
call fcn.140120d54
nop
movzx eax, word [r15]
sub ax, 0x2d
mov ecx, 0xfffd
test cx, ax
je 0x1400419c9
mov rbx, r15
jmp 0x1400419dd
lea rbx, [r15 + 2]
movzx eax, word [rbx]
sub ax, 0x2d
test cx, ax
jne 0x1400419dd
lea rbx, [r15 + 4]
mov esi, 0xb
mov r8d, esi
lea rdx, str.new_console
mov rcx, rbx
call fcn.140120274
test eax, eax
je 0x140041a0e
mov r8d, esi
lea rdx, str.cur_console
mov rcx, rbx
call fcn.140120274
test eax, eax
jne 0x140041a5d
xor edx, edx
lea ecx, [rdx + 0x41]
call fcn.140068cf4
mov r8, rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov rdx, r13
lea rcx, [rbp + 0x40]
call fcn.140120be0
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140120e10
lea rcx, [rbp + 0x40]
call fcn.140120ddc
xor edx, edx
lea ecx, [rdx + 0x40]
call fcn.140068cf4
mov rsi, rax
xor edx, edx
lea ecx, [rdx + 0x3f]
call fcn.140068cf4
mov rbx, rax
lea rcx, [rbp - 0x18]
call fcn.140058574
mov rdi, rax
xor edx, edx
lea ecx, [rdx + 0x3e]
call fcn.140068cf4
mov rdx, rax
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rsi
lea rax, str._r_nhttps:__conemu.github.io_en_ConEmuArgs.html_r_n_r_n
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rdi
mov r9, r15
mov r8, r13
lea rcx, [rbp - 8]
call fcn.140120be0
nop
lea rcx, [rbp - 8]
call fcn.140058574
mov rcx, rax
mov byte [rsp + 0x20], r14b
mov r9, r12
xor r8d, r8d
lea edx, [r8 + 0x40]
call fcn.14002b0f8
nop
lea rcx, [rbp - 8]
call fcn.140120ddc
nop
jmp 0x1400412bb