Function at 0x1400c5f30
Capabilities:
Check if file exists
Create process on windows
Create shortcut via ishelllink
Create thread
Delete file
Get file attributes
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6c0]
sub rsp, 0x7c0
movzx eax, byte [rbp + 0x710]
mov r10, r9
mov r9d, r8d
mov byte [rsp + 0x20], al
mov r8d, edx
mov rsi, rcx
mov rcx, qword [rcx + 0x1270]
mov rdx, r10
call fcn.14017b2e0
mov r12, rax
test rax, rax
je 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], 8
jb 0x1400c5fa3
mov r8, qword [rax]
mov edi, 9
cmp qword [rax + 0x10], rdi
jne 0x1400c5fd8
lea rcx, str.hide_tile
mov edx, edi
sub r8, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x1400c5fd8
add rcx, 2
sub rdx, 1
jne 0x1400c5fc0
mov bl, 1
jmp 0x1400c5fda
xor bl, bl
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1400c601c
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6017
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7df6
call fcn.14017b7ac
mov qword [rbp], 5
mov r13, 0xffffffffffffffff
lea r15d, [r13 + 8]
lea r14d, [r13 + 9]
test bl, bl
je 0x1400c6076
mov rcx, qword [rsi + 0x1210]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [rsi + 0x1210]
test al, al
sete bl
movzx edx, bl
mov rax, qword [rcx]
call qword [rax + 0x120]
call fcn.14008f2f0
mov byte [rax + 0x39], bl
call fcn.14008f2f0
mov rcx, rax
call fcn.1400c9570
jmp 0x1400c76d1
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], r14
jb 0x1400c608f
mov r8, qword [rax]
cmp qword [rax + 0x10], 0xa
jne 0x1400c60bd
lea rcx, str.hide_group
mov edx, 0xa
sub r8, rcx
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x1400c60bd
add rcx, 2
sub rdx, 1
jne 0x1400c60a5
mov bl, 1
jmp 0x1400c60bf
xor bl, bl
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x1400c6100
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c60fb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7dfc
call fcn.14017b7ac
test bl, bl
je 0x1400c6143
mov rcx, qword [rsi + 0x1218]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [rsi + 0x1218]
test al, al
sete bl
movzx edx, bl
mov rax, qword [rcx]
call qword [rax + 0x120]
call fcn.14008f2f0
mov byte [rax + 0x3a], bl
call fcn.14008f2f0
mov rcx, rax
call fcn.1400c9570
jmp 0x1400c76d1
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], r14
jb 0x1400c615c
mov r8, qword [rax]
cmp qword [rax + 0x10], r14
jne 0x1400c6188
lea rcx, str.hide_tag
mov rdx, r14
sub r8, rcx
nop
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x1400c6188
add rcx, 2
sub rdx, 1
jne 0x1400c6170
mov bl, 1
jmp 0x1400c618a
xor bl, bl
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x1400c61cb
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c61c6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e02
call fcn.14017b7ac
test bl, bl
je 0x1400c6221
mov rcx, qword [rsi + 0x1248]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [rsi + 0x1248]
test al, al
sete bl
movzx edx, bl
mov rax, qword [rcx]
call qword [rax + 0x120]
mov rcx, qword [rsi + 0x1220]
movzx edx, bl
mov rax, qword [rcx]
call qword [rax + 0x120]
call fcn.14008f2f0
mov byte [rax + 0x3b], bl
call fcn.14008f2f0
mov rcx, rax
call fcn.1400c9570
jmp 0x1400c76d1
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], r14
jb 0x1400c623a
mov r8, qword [rax]
mov ebx, InitCommonControls
cmp qword [rax + 0x10], rbx
jne 0x1400c626a
lea rcx, str.change_absolute
mov edx, ebx
sub r8, rcx
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400c626a
add rcx, 2
sub rdx, 1
jne 0x1400c6251
mov dil, 1
jmp 0x1400c626d
xor dil, dil
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x1400c62ae
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c62a9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e08
call fcn.14017b7ac
test dil, dil
je 0x1400c62cf
call fcn.14008f210
mov rcx, rax
call fcn.1400860a0
xor edx, edx
mov rcx, rsi
call fcn.1400c3510
jmp 0x1400c76cc
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov rdx, rax
cmp qword [rax + 0x18], r14
jb 0x1400c62e8
mov rdx, qword [rax]
cmp qword [rax + 0x10], rbx
jne 0x1400c6317
lea rcx, str.change_relative
sub rdx, rcx
nop dword [rax + rax]
movzx eax, word [rcx]
cmp word [rdx + rcx], ax
jne 0x1400c6317
add rcx, 2
sub rbx, 1
jne 0x1400c6300
mov bl, 1
jmp 0x1400c6319
xor bl, bl
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x1400c635a
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6355
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e0e
call fcn.14017b7ac
test bl, bl
je 0x1400c637a
call fcn.14008f210
mov rcx, rax
call fcn.1400875d0
xor edx, edx
mov rcx, rsi
call fcn.1400c3510
jmp 0x1400c76cc
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], r14
jb 0x1400c6393
mov r8, qword [rax]
mov ebx, 6
cmp qword [rax + 0x10], rbx
jne 0x1400c63c9
lea rcx, str.update
mov edx, ebx
sub r8, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400c63c9
add rcx, 2
sub rdx, 1
jne 0x1400c63b0
mov dil, 1
jmp 0x1400c63cc
xor dil, dil
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x1400c640d
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6408
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e14
call fcn.14017b7ac
test dil, dil
je 0x1400c6444
lea rbx, [0x1401ed8f0]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rbx
lea r8, str.https:__www.yuque.com_lucy_lucy_record
mov r9, rbx
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x1400c76cc
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], r14
jb 0x1400c645d
mov r8, qword [rax]
cmp qword [rax + 0x10], 4
jne 0x1400c648c
lea rcx, str.help
mov edx, 4
sub r8, rcx
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400c648c
add rcx, 2
sub rdx, 1
jne 0x1400c6473
mov dil, 1
jmp 0x1400c648f
xor dil, dil
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x1400c64d0
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c64cb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e1a
call fcn.14017b7ac
test dil, dil
je 0x1400c6507
lea rax, [0x1401ed8f0]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rax
lea r8, str.https:__www.yuque.com_lucy_lucy
mov r9, rax
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x1400c76cc
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov rdx, rax
cmp qword [rax + 0x18], r14
jb 0x1400c6520
mov rdx, qword [rax]
cmp qword [rax + 0x10], rbx
jne 0x1400c6547
lea rcx, str.hotkey
sub rdx, rcx
movzx eax, word [rcx]
cmp word [rdx + rcx], ax
jne 0x1400c6547
add rcx, 2
sub rbx, 1
jne 0x1400c6530
mov bl, 1
jmp 0x1400c6549
xor bl, bl
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x1400c658a
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6585
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e20
call fcn.14017b7ac
test bl, bl
je 0x1400c66d8
mov ecx, 0x370
call fcn.14017b770
mov rdi, rax
test rax, rax
je 0x1400c6605
lea rax, [0x1401d5c80]
xor edx, edx
mov qword [rdi + 8], rax
mov rcx, rdi
lea rax, vtable.nbase::SupportWeakCallback.0
mov qword [rdi + 0x358], rax
xor eax, eax
mov qword [rdi + 0x360], rax
mov qword [rdi + 0x368], rax
call fcn.14003f800
lea rax, vtable.CHotKeyWnd.0
mov qword [rdi], rax
lea rax, vtable.CHotKeyWnd.1.0
mov qword [rdi + 0x348], rax
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
lea rax, vtable.CHotKeyWnd.2.0
mov qword [rcx + rdi + 8], rax
jmp 0x1400c6609
xor ecx, ecx
mov edi, ecx
mov qword [rsi + 0x1278], rdi
lea rdx, [rsp + 0x60]
mov rax, qword [rdi]
xorps xmm0, xmm0
mov rcx, rdi
movdqu xmmword [rbp - 0x20], xmm0
call qword [rax]
mov r14, rax
cmp qword [rax + 0x18], 8
jb 0x1400c6632
mov r14, qword [rax]
mov rbx, qword [rdi]
mov rcx, rsi
call fcn.140026de0
mov rdx, rax
mov r9d, 0x80000000
lea rax, [rbp - 0x20]
mov r8, r14
mov qword [rsp + 0x30], rax
mov rcx, rdi
mov byte [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x80
call qword [rbx + ILCombine]
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1400c66a7
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c66a2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e26
call fcn.14017b7ac
mov rcx, rdi
call fcn.140027650
mov rcx, rdi
call fcn.1400274c0
mov rcx, rdi
mov ebx, eax
call fcn.1400a32c0
xor eax, eax
mov qword [rsi + 0x1278], rax
cmp ebx, 1
je 0x1400c76c6
jmp 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], r14
jb 0x1400c66f1
mov r8, qword [rax]
cmp qword [rax + 0x10], r15
jne 0x1400c671c
lea rcx, str.setting
mov rdx, r15
sub r8, rcx
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400c671c
add rcx, 2
sub rdx, 1
jne 0x1400c6704
mov bl, 1
jmp 0x1400c671e
xor bl, bl
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x1400c675f
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c675a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e2c
call fcn.14017b7ac
test bl, bl
je 0x1400c76cc
call fcn.14008f2f0
mov ecx, 0x388
movzx r15d, byte [rax + 0x90]
call fcn.14017b770
mov rdi, rax
test rax, rax
je 0x1400c67e7
lea rax, [0x1401d5220]
xor edx, edx
mov qword [rdi + 8], rax
mov rcx, rdi
lea rax, vtable.nbase::SupportWeakCallback.0
mov qword [rdi + 0x370], rax
xor eax, eax
mov qword [rdi + 0x378], rax
mov qword [rdi + 0x380], rax
call fcn.14003f800
lea rax, vtable.CSettingWnd.0
mov qword [rdi], rax
lea rax, vtable.CSettingWnd.1.0
mov qword [rdi + 0x348], rax
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
lea rax, vtable.CSettingWnd.2.0
mov qword [rcx + rdi + 8], rax
jmp 0x1400c67ea
mov rdi, rax
mov qword [rsi + 0x1278], rdi
lea rdx, [rsp + 0x60]
mov rax, qword [rdi]
xorps xmm0, xmm0
mov rcx, rdi
movdqu xmmword [rbp - 0x20], xmm0
call qword [rax]
mov r14, rax
cmp qword [rax + 0x18], 8
jb 0x1400c6813
mov r14, qword [rax]
mov rbx, qword [rdi]
mov rcx, rsi
call fcn.140026de0
mov rdx, rax
mov r9d, 0x80000000
lea rax, [rbp - 0x20]
mov r8, r14
mov qword [rsp + 0x30], rax
mov rcx, rdi
mov byte [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x80
call qword [rbx + ILCombine]
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1400c6888
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6883
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e32
call fcn.14017b7ac
mov rcx, rdi
call fcn.140027650
mov rcx, rdi
call fcn.1400274c0
mov rcx, rdi
mov ebx, eax
call fcn.1400a32c0
xor r14d, r14d
mov qword [rsi + 0x1278], r14
cmp ebx, 1
jne 0x1400c7dcd
call fcn.14008f2f0
mov rcx, rsi
mov edx, dword [rax + 0x10c]
call fcn.14002b520
call fcn.14008f2f0
cmp qword [rax + 0xc8], r14
je 0x1400c6910
call fcn.14008f2f0
lea rcx, [rax + 0xb8]
call fcn.140096150
mov rcx, rsi
call fcn.14002aa00
movzx edx, bl
mov rcx, rax
mov r8, qword [rax]
call qword [r8 + 0x58]
mov rax, qword [rsi + 0x1270]
movzx edx, bl
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx]
call qword [rax + 0x58]
call fcn.14008f2f0
mov rcx, rsi
cmp byte [rax + 0x40], r14b
je 0x1400c6988
call fcn.140026de0
mov rcx, rax
lea rdx, [rbp - 0x20]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea r8, [rbp - 0x20]
xor edx, edx
mov rcx, rsi
call fcn.1400a5670
mov rcx, rsi
call fcn.140026de0
xor r9d, r9d
mov rcx, rax
lea edx, [r9 + 1]
lea r8d, [r9 + 0x64]
call qword [sym.imp.USER32.dll_SetTimer]
mov ecx, dword [rsi + 0x384]
call qword [sym.imp.WINMM.dll_timeKillEvent]
mov edx, 1
mov dword [rsp + 0x20], 1
mov r9, rsi
lea r8, [0x1400a73b0]
lea ecx, [rdx + 4]
call qword [sym.imp.WINMM.dll_timeSetEvent]
jmp 0x1400c69aa
call fcn.140026de0
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [rsi + 0x384]
call qword [sym.imp.WINMM.dll_timeKillEvent]
mov eax, r14d
mov rcx, rsi
mov dword [rsi + 0x384], eax
call fcn.140026de0
mov ebx, 7
mov rcx, rax
mov edx, ebx
call qword [sym.imp.USER32.dll_KillTimer]
call fcn.14008f2f0
cmp byte [rax + 0x53], r14b
je 0x1400c69fc
lea edx, [rbx - 6]
mov rcx, rsi
call fcn.1400ce330
mov rcx, rsi
call fcn.140026de0
mov rcx, rax
xor r9d, r9d
mov r8d, 0x3e8
mov edx, ebx
call qword [sym.imp.USER32.dll_SetTimer]
jmp 0x1400c6a75
movdqa xmm0, xmmword [0x1401f8bd0]
lea rdx, [0x1401ed8f0]
xor r8d, r8d
mov word [rbp - 0x80], r14w
lea rcx, [rbp - 0x80]
movdqu xmmword [rbp - 0x70], xmm0
call fcn.140003280
mov rcx, qword [rsi + 0x1230]
lea rdx, [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x2a8]
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400c6a75
mov rcx, qword [rbp - 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6a70
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e38
call fcn.14017b7ac
movdqa xmm0, xmmword [0x1401f8bd0]
lea rdx, str.btn_search
mov r8d, 0xa
mov word [rbp - 0x80], r14w
lea rcx, [rbp - 0x80]
movdqu xmmword [rbp - 0x70], xmm0
call fcn.140003280
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.14002ab20
mov rbx, rax
mov rdi, qword [rax]
call fcn.14008f2f0
mov rcx, rbx
movzx edx, byte [rax + 0x54]
call qword [rdi + 0x120]
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400c6b01
mov rcx, qword [rbp - 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6afc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e3e
call fcn.14017b7ac
movdqa xmm0, xmmword [0x1401f8bd0]
lea rdx, str.btn_menu
mov word [rbp - 0x80], r14w
lea rcx, [rbp - 0x80]
mov r14d, 8
mov r8d, r14d
movdqu xmmword [rbp - 0x70], xmm0
call fcn.140003280
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.14002ab20
mov rbx, rax
mov rdi, qword [rax]
call fcn.14008f2f0
mov rcx, rbx
movzx edx, byte [rax + 0x55]
call qword [rdi + 0x120]
mov rdx, qword [rbp - 0x68]
cmp rdx, r14
jb 0x1400c6b8f
mov rcx, qword [rbp - 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6b8a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e44
call fcn.14017b7ac
movdqa xmm0, xmmword [0x1401f8bd0]
lea rdx, str.titlebox
xor ebx, ebx
lea rcx, [rbp - 0x80]
mov r8, r14
mov word [rbp - 0x80], bx
movdqu xmmword [rbp - 0x70], xmm0
call fcn.140003280
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.14002ab20
mov dl, 1
mov rcx, rax
mov r8, qword [rax]
call qword [r8 + 0x58]
mov rdx, qword [rbp - 0x68]
cmp rdx, r14
jb 0x1400c6c0c
mov rcx, qword [rbp - 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6c07
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e4a
call fcn.14017b7ac
call fcn.14008f2f0
mov rcx, rsi
movzx edx, byte [rax + 0x3e]
call fcn.140041840
call fcn.14008f2f0
mov rcx, qword [rsi + 0x1248]
mov r9b, 1
movzx r8d, r9b
mov edx, dword [rax + 0x84]
call fcn.14002e380
mov rcx, qword [rsi + 0x1240]
test rcx, rcx
je 0x1400c6d5b
mov rax, qword [rcx]
call qword [rax + 0x2b8]
mov edi, eax
call fcn.14008f2f0
mov r14d, dword [rax + 0x7c]
call fcn.14008f2f0
cmp byte [rax + 0x80], bl
je 0x1400c6cc9
xor r8d, r8d
lea rdx, [rbp - 0x20]
mov rcx, rsi
call fcn.1400282c0
mov ecx, dword [rax + 8]
sub ecx, dword [rax]
mov eax, r14d
imul eax, edi
cmp eax, ecx
jge 0x1400c6cc9
xor r8d, r8d
lea rdx, [rbp - 0x20]
mov rcx, rsi
call fcn.1400282c0
mov dword [rbp + 0x6f4], 0x1e
mov ecx, dword [rax + 8]
sub ecx, dword [rax]
lea eax, [rcx - 4]
mov rcx, qword [rsi + 0x1240]
cdq
idiv edi
mov dword [rbp + 0x6f0], eax
mov r14d, eax
mov rdx, qword [rcx]
call qword [rdx + 0x318]
jmp 0x1400c6cf1
call fcn.14008f2f0
mov dword [rbp + 0x6f4], 0x1e
mov ecx, dword [rax + 0x7c]
mov dword [rbp + 0x6f0], ecx
mov rcx, qword [rsi + 0x1240]
mov rax, qword [rcx]
call qword [rax + 0x318]
lea r9, vtable.type_info.0
mov dword [rsp + 0x20], ebx
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll___RTDynamicCast
mov r8b, 1
lea rdx, [rbp + 0x6f0]
mov rcx, rax
call fcn.140043af0
test edi, edi
jle 0x1400c6d51
mov rcx, qword [rsi + 0x1240]
mov rdx, rbx
mov rax, qword [rcx]
call qword [rax + 0x2a0]
mov r9b, 1
mov edx, r14d
movzx r8d, r9b
mov rcx, rax
call fcn.14002e380
inc rbx
sub rdi, 1
jne 0x1400c6d23
xor edx, edx
mov rcx, rsi
call fcn.1400c2250
call fcn.14008f2f0
cmp byte [rax + 0x90], r15b
je 0x1400c6f72
call fcn.14008f2f0
movdqa xmm0, xmmword [0x1401f8bd0]
lea rdx, str.tag_lnk_box
xor r14d, r14d
lea rcx, [rbp - 0x60]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r14w
lea r8d, [r14 + 0xb]
cmp byte [rax + 0x90], r14b
je 0x1400c6e8c
call fcn.140003280
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.14002ab20
mov rcx, rax
mov dword [rsp + 0x20], r14d
lea r9, vtable.type_info.0
xor edx, edx
lea r8, vtable.type_info.0
call sub.msvcrt.dll___RTDynamicCast
mov rdx, qword [rbp - 0x48]
mov rbx, rax
cmp rdx, 8
jb 0x1400c6e14
mov rcx, qword [rbp - 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6e0f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e50
call fcn.14017b7ac
movdqa xmm0, xmmword [0x1401f8bd0]
xor edx, edx
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r14w
mov rcx, rbx
mov rax, qword [rbx]
call qword [rax + 0x2f0]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x2e0]
mov rax, qword [rbx]
mov dl, 1
mov rcx, rbx
call qword [rax + 0x2f0]
mov rax, qword [rbx]
mov rcx, rbx
mov rdx, qword [rsi + 0x1250]
call qword [rax + 0x2c0]
mov rax, qword [rbx]
mov rcx, rbx
mov rdx, qword [rsi + 0x1220]
call qword [rax + 0x2c0]
mov rax, qword [rbx]
mov rcx, rbx
mov rdx, qword [rsi + 0x1248]
call qword [rax + 0x2c0]
jmp 0x1400c6f75
call fcn.140003280
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.14002ab20
mov rcx, rax
mov dword [rsp + 0x20], r14d
lea r9, vtable.type_info.0
xor edx, edx
lea r8, vtable.type_info.0
call sub.msvcrt.dll___RTDynamicCast
mov rdx, qword [rbp - 0x48]
mov rbx, rax
cmp rdx, 8
jb 0x1400c6efd
mov rcx, qword [rbp - 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c6ef8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7e56
call fcn.14017b7ac
movdqa xmm0, xmmword [0x1401f8bd0]
xor edx, edx
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r14w
mov rcx, rbx
mov rax, qword [rbx]
call qword [rax + 0x2f0]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x2e0]
mov rax, qword [rbx]
mov dl, 1
mov rcx, rbx
call qword [rax + 0x2f0]
mov rax, qword [rbx]
mov rcx, rbx
mov rdx, qword [rsi + 0x1248]
call qword [rax + 0x2c0]
mov rax, qword [rbx]
mov rcx, rbx
mov rdx, qword [rsi + 0x1220]
call qword [rax + 0x2c0]
mov rax, qword [rbx]
mov rcx, rbx
mov rdx, qword [rsi + 0x1250]
call qword [rax + 0x2c0]
jmp 0x1400c6f75
xor r14d, r14d
call fcn.14008f2f0
movzx ecx, byte [rsi + 0x12e8]
cmp byte [rax + 0x52], 0
je 0x1400c6fa6
test cl, cl
je 0x1400c6fc0
lea rdx, [rsi + 0x12f0]
mov ecx, 2
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [rsi + 0x12e8], 0
jmp 0x1400c6fc0
test cl, cl
jne 0x1400c6fc0
lea rdx, [rsi + 0x12f0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [rsi + 0x12e8], 1
xor r8d, r8d
xor edx, edx
mov cx, 6
call fcn.140012600
test al, al
lea rcx, str._USERPROFILE__
lea rdi, str._APPDATA_MicrosoftWindowsStart_MenuProgramsStartupLucy.lnk
mov r8d, 0x104
cmove rdi, rcx
lea rdx, [rbp + 0x50]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
call fcn.14008f2f0
cmp byte [rax + 0x38], 0
je 0x1400c73a1
mov r15d, 7
mov qword [rbp - 0x30], r14
xor r8d, r8d
mov qword [rbp - 0x28], r15
mov edx, 0x104
mov word [rbp - 0x40], r14w
lea rcx, [rbp - 0x40]
call fcn.140003180
cmp qword [rbp - 0x28], 8
lea rbx, [rbp - 0x40]
cmovae rbx, qword [rbp - 0x40]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r8d, dword [rbp - 0x30]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov r8, r13
lea rdx, [0x1401ed8f4]
lea rcx, [rbp - 0x40]
call fcn.140081fa0
movdqa xmm0, xmmword [0x1401f8bd0]
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
mov word [rbp - 0x60], r14w
movdqu xmmword [rbp - 0x50], xmm0
lea r8, [rax + 1]
cmp qword [rbp - 0x30], r8
cmovb r8, qword [rbp - 0x30]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
call fcn.140003280
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400c7299
and eax, 0x10
test al, al
jne 0x1400c7299
lea rax, [rbp + 0x6f0]
mov qword [rbp + 0x6f0], r14
lea r9, [0x1401e4e30]
mov qword [rsp + 0x20], rax
xor edx, edx
lea r8d, [r15 - 6]
lea rcx, [0x1401e4e80]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x1400c7299
mov rcx, qword [rbp + 0x6f0]
lea r8, [rbp - 0x20]
lea rdx, [0x1401e4ea0]
mov rax, qword [rcx]
call qword [rax]
test eax, eax
js 0x1400c728c
mov rcx, qword [rbp - 0x20]
xor r8d, r8d
mov rdx, rdi
mov rax, qword [rcx]
call qword [rax + 0x28]
test eax, eax
js 0x1400c7282
mov rcx, qword [rbp + 0x6f0]
lea r9, [rbp + 0x470]
mov r8d, 0x104
mov dword [rsp + 0x20], 4
lea rdx, [rbp + 0x260]
mov rax, qword [rcx]
call qword [rax + ILCombine]
test eax, eax
jne 0x1400c7282
movdqa xmm0, xmmword [0x1401f8bd0]
lea rax, [rbp + 0x260]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r14w
mov r8, r13
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1400c7170
lea rdx, [rbp + 0x260]
lea rcx, [rbp - 0x80]
call fcn.140003280
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x30]
call fcn.140001620
lea rdx, [rbp - 0x40]
mov rbx, rax
lea rcx, [rbp + 0x10]
call fcn.140001620
mov rcx, rax
mov rdx, rbx
call fcn.1400065a0
mov rdx, qword [rbp + 0x28]
movzx ebx, al
cmp rdx, 8
jb 0x1400c71f6
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c71f1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7df0
call fcn.14017b7ac
mov rdx, qword [rbp + 0x48]
movdqa xmm0, xmmword [0x1401f8bd0]
mov word [rbp + 0x10], r14w
movdqu xmmword [rbp + 0x20], xmm0
cmp rdx, 8
jb 0x1400c7248
mov rcx, qword [rbp + 0x30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c7243
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c7df0
call fcn.14017b7ac
mov r8, qword [rbp - 0x68]
movdqa xmm0, xmmword [0x1401f8bd0]
mov word [rbp + 0x30], r14w
movdqu xmmword [rbp + 0x40], xmm0
cmp r8, 8
jb 0x1400c7274
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x80]
inc r8
call fcn.140003490
test bl, bl
je 0x1400c7282
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
mov rcx, qword [rbp + 0x6f0]
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400c72b3
and eax, 0x10
test al, al
je 0x1400c7359
xor edx, edx
lea rax, [rbp + 0x6f0]
lea r9, [0x1401e4e30]
mov qword [rsp + 0x20], rax
lea rcx, [0x1401e4e80]
lea r8d, [rdx + 1]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x1400c7359
mov rcx, qword [rbp + 0x6f0]
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
mov rax, qword [rcx]
call qword [rax + 0xa0]
mov rcx, qword [rbp + 0x6f0]
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x6f0]
lea r8, [rbp - 0x20]
lea rdx, [0x1401e4ea0]
mov rax, qword [rcx]
call qword [rax]
test eax, eax
js 0x1400c734c
mov rcx, qword [rbp - 0x20]
lea rdx, [rbp + 0x50]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
mov rcx, qword [rbp + 0x6f0]
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
mov r8, qword [rbp - 0x48]
cmp r8, 8
jb 0x1400c7373
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x60]
inc r8
call fcn.140003490
mov r8, qword [rbp - 0x28]
movdqa xmm0, xmmword [0x1401f8bd0]
mov word [rbp - 0x60], r14w
movdqu xmmword [rbp - 0x50], xmm0
cmp r8, 8
jb 0x1400c73b1
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
inc r8
call fcn.140003490
jmp 0x1400c73b1
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r15d, 7
mov ebx, dword [rsi + 0x1700]
test ebx, ebx
je 0x1400c73d5
mov rcx, rsi
call fcn.140026de0
mov rcx, rax
mov edx, ebx
call qword [sym.imp.USER32.dll_UnregisterHotKey]
mov dword [rsi + 0x1700], r14d
call fcn.14008f2f0
mov ecx, dword [rax + 0x68]
test ecx, ecx
je 0x1400c74e2
movzx ebx, cl
shr ecx, 8
movzx r14d, cl
lea rcx, str.LucyHotKey
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomW]
movzx edi, ax
add edi, 0xffff4000
mov dword [rsi + 0x1700], edi
je 0x1400c74e2
test ebx, ebx
je 0x1400c74e2
test r14d, r14d
je 0x1400c74e2
cmp ebx, 5
je 0x1400c742c
cmp ebx, 6
jne 0x1400c743a
call fcn.14008f2f0
mov byte [rax], 1
mov edi, dword [rsi + 0x1700]
mov rcx, rsi
call fcn.140026de0
mov rcx, rax
mov r9d, ebx
mov r8d, r14d
mov edx, edi
call qword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
jne 0x1400c74e2
mov r8d, ebx
lea rcx, [rbp - 0x80]
mov edx, r14d
call fcn.140095550
cmp qword [rbp - 0x68], 8
lea r8, [rbp - 0x80]
lea rdx, [0x1401d6718]
cmovae r8, qword [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1400015b0
cmp qword [rax + 0x18], 8
jb 0x1400c7493
mov rax, qword [rax]
mov r9d, 0x40010
lea r8, [0x1401d64c0]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov r8, qword [rsp + 0x78]
cmp r8, 8
jb 0x1400c74c8
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
inc r8
call fcn.140003490
mov r8, qword [rbp - 0x68]
cmp r8, 8
jb 0x1400c74e2
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x80]
inc r8
call fcn.140003490
mov ebx, dword [rsi + 0x1704]
test ebx, ebx
je 0x1400c7507
mov rcx, rsi
call fcn.140026de0
mov rcx, rax
mov edx, ebx
call qword [sym.imp.USER32.dll_UnregisterHotKey]
xor eax, eax
mov dword [rsi + 0x1704], eax
call fcn.14008f2f0
mov ecx, dword [rax + 0x100]
test ecx, ecx
je 0x1400c7617
movzx ebx, cl
shr ecx, 8
movzx r14d, cl
lea rcx, str.LucySearchHotKey
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomW]
movzx edi, ax
add edi, 0xffff4000
mov dword [rsi + 0x1704], edi
je 0x1400c7617
test ebx, ebx
je 0x1400c7617
test r14d, r14d
je 0x1400c7617
cmp ebx, 5
je 0x1400c7561
cmp ebx, 6
jne 0x1400c756f
call fcn.14008f2f0
mov byte [rax], 1
mov edi, dword [rsi + 0x1704]
mov rcx, rsi
call fcn.140026de0
mov rcx, rax
mov r9d, ebx
mov r8d, r14d
mov edx, edi
call qword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
jne 0x1400c7617
mov r8d, ebx
lea rcx, [rbp - 0x80]
mov edx, r14d
call fcn.140095550
cmp qword [rbp - 0x68], 8
lea r8, [rbp - 0x80]
lea rdx, [0x1401d6718]
cmovae r8, qword [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1400015b0
cmp qword [rax + 0x18], 8
jb 0x1400c75c8
mov rax, qword [rax]
mov r9d, 0x40010
lea r8, [0x1401d64c0]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov r8, qword [rsp + 0x78]
cmp r8, 8
jb 0x1400c75fd
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
inc r8
call fcn.140003490
mov r8, qword [rbp - 0x68]
cmp r8, 8
jb 0x1400c7617
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x80]
inc r8
call fcn.140003490
mov rcx, rsi
call fcn.140026de0
mov rbx, rax
call fcn.14008f2f0
mov qword [rax + 0x10], rbx
call fcn.14008f2f0
cmp byte [rax + 0x4b], 0
jne 0x1400c7689
call fcn.14008f2f0
cmp byte [rax + 0x4c], 0
jne 0x1400c7689
call fcn.14008f2f0
cmp byte [rax + 0x4a], 0
jne 0x1400c7689
call fcn.14008f2f0
cmp byte [rax + 0x49], 0
jne 0x1400c7689
call fcn.14008f2f0
cmp byte [rax], 0
jne 0x1400c7689
call fcn.14008f2f0
cmp qword [rax + 8], 0
je 0x1400c767c
call fcn.14008f2f0
mov rcx, qword [rax + 8]
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
call fcn.14008f2f0
xor ecx, ecx
mov qword [rax + 8], rcx
jmp 0x1400c76bc
call fcn.14008f2f0
cmp qword [rax + 8], 0
jne 0x1400c76bc
mov r8, qword [rsi + 0x12e0]
lea rdx, [0x1400b1f40]
xor r9d, r9d
lea ecx, [r9 + 0xe]
call qword [sym.imp.USER32.dll_SetWindowsHookExW]
mov rbx, rax
call fcn.14008f2f0
mov qword [rax + 8], rbx
xor edx, edx
mov rcx, rsi
call fcn.1400c3510
mov r14d, 8
mov edi, 9
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], 8
jb 0x1400c76eb
mov r8, qword [rax]
cmp qword [rax + 0x10], 0xa
jne 0x1400c7719
lea rcx, str.small_icon
mov edx, 0xa
sub r8, rcx
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400c7719
add rcx, 2
sub rdx, 1
jne 0x1400c7701
mov bl, 1
jmp 0x1400c771b
xor bl, bl
mov r8, qword [rsp + 0x78]
cmp r8, 8
jb 0x1400c7738
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
inc r8
call fcn.140003490
test bl, bl
je 0x1400c775d
call fcn.14008f210
mov rcx, rax
mov edx, 1
call fcn.14008f4c0
xor edx, edx
mov rcx, rsi
call fcn.1400c3510
jmp 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], 8
jb 0x1400c7777
mov r8, qword [rax]
cmp qword [rax + 0x10], 8
jne 0x1400c77a8
lea rcx, str.big_icon
mov rdx, r14
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400c77a8
add rcx, 2
sub rdx, 1
jne 0x1400c7790
mov bl, 1
jmp 0x1400c77aa
xor bl, bl
lea rcx, [rsp + 0x60]
call fcn.1400034d0
test bl, bl
je 0x1400c77d6
call fcn.14008f210
mov rcx, rax
xor edx, edx
call fcn.14008f4c0
xor edx, edx
mov rcx, rsi
call fcn.1400c3510
jmp 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], 8
jb 0x1400c77f0
mov r8, qword [rax]
cmp qword [rax + 0x10], 0xa
jne 0x1400c781e
lea rcx, str.large_icon
mov edx, 0xa
sub r8, rcx
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400c781e
add rcx, 2
sub rdx, 1
jne 0x1400c7806
mov bl, 1
jmp 0x1400c7820
xor bl, bl
lea rcx, [rsp + 0x60]
call fcn.1400034d0
test bl, bl
je 0x1400c784f
call fcn.14008f210
mov rcx, rax
mov edx, 2
call fcn.14008f4c0
xor edx, edx
mov rcx, rsi
call fcn.1400c3510
jmp 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], 8
jb 0x1400c7869
mov r8, qword [rax]
cmp qword [rax + 0x10], 9
jne 0x1400c7898
lea rcx, str.view_list
mov rdx, rdi
sub r8, rcx
nop dword [rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400c7898
add rcx, 2
sub rdx, 1
jne 0x1400c7880
mov bl, 1
jmp 0x1400c789a
xor bl, bl
lea rcx, [rsp + 0x60]
call fcn.1400034d0
test bl, bl
je 0x1400c78b4
call fcn.14008f210
mov edx, 1
jmp 0x1400c790e
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x1400c78ce
mov rdx, qword [rax]
cmp qword [rax + 0x10], 9
jne 0x1400c78f7
lea rcx, str.view_tile
sub rdx, rcx
nop
movzx eax, word [rcx]
cmp word [rdx + rcx], ax
jne 0x1400c78f7
add rcx, 2
sub rdi, 1
jne 0x1400c78e0
mov bl, 1
jmp 0x1400c78f9
xor bl, bl
lea rcx, [rsp + 0x60]
call fcn.1400034d0
test bl, bl
je 0x1400c7925
call fcn.14008f210
xor edx, edx
mov rcx, rax
call fcn.14008f760
xor edx, edx
mov rcx, rsi
call fcn.1400c3510
jmp 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x1400c793f
mov rdx, qword [rax]
cmp qword [rax + 0x10], 5
jne 0x1400c7968
lea rcx, str.close
sub rdx, rcx
movzx eax, word [rcx]
cmp word [rdx + rcx], ax
jne 0x1400c7968
add rcx, 2
sub qword [rbp], 1
jne 0x1400c7950
mov bl, 1
jmp 0x1400c796a
xor bl, bl
lea rcx, [rsp + 0x60]
call fcn.1400034d0
test bl, bl
je 0x1400c7988
mov rax, qword [rsi]
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
jmp 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov r8, rax
cmp qword [rax + 0x18], 8
jb 0x1400c79a2
mov r8, qword [rax]
mov ebx, InitCommonControls
cmp qword [rax + 0x10], rbx
jne 0x1400c79d9
lea rcx, str.refresh_all_icon
mov edx, ebx
sub r8, rcx
nop dword [rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400c79d9
add rcx, 2
sub rdx, 1
jne 0x1400c79c0
mov dil, 1
jmp 0x1400c79dc
xor dil, dil
lea rcx, [rsp + 0x60]
call fcn.1400034d0
test dil, dil
je 0x1400c7a07
call fcn.14008f210
mov rcx, rax
call fcn.14008d590
xor edx, edx
mov rcx, rsi
call fcn.1400c3510
jmp 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x1400c7a21
mov rdx, qword [rax]
cmp qword [rax + 0x10], 8
jne 0x1400c7a4a
lea rcx, str.clean_db
sub rdx, rcx
movzx eax, word [rcx]
cmp word [rdx + rcx], ax
jne 0x1400c7a4a
add rcx, 2
sub r14, 1
jne 0x1400c7a32
mov dil, 1
jmp 0x1400c7a4d
xor dil, dil
lea rcx, [rsp + 0x60]
call fcn.1400034d0
test dil, dil
je 0x1400c7a7b
call fcn.14008f190
mov rcx, rax
call fcn.14007db40
call fcn.14008f210
mov rcx, rax
call fcn.140088cd0
jmp 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x1400c7a95
mov rdx, qword [rax]
cmp qword [rax + 0x10], rbx
jne 0x1400c7abc
lea rcx, str.refresh_sys_icon
sub rdx, rcx
movzx eax, word [rcx]
cmp word [rdx + rcx], ax
jne 0x1400c7abc
add rcx, 2
sub rbx, 1
jne 0x1400c7aa5
mov bl, 1
jmp 0x1400c7abe
xor bl, bl
lea rcx, [rsp + 0x60]
call fcn.1400034d0
test bl, bl
je 0x1400c7b52
lea rcx, [rsp + 0x60]
call fcn.14007e5b0
mov rdx, rax
lea r8, [0x1401d6bd8]
lea rcx, [rbp - 0x60]
call fcn.14000e8b0
lea rcx, [rsp + 0x60]
call fcn.1400034d0
cmp qword [rbp - 0x48], 8
lea rcx, [rbp - 0x60]
cmovae rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400c7b44
cmp qword [rbp - 0x48], 8
lea rax, [0x1401ed8f0]
lea r8, [rbp - 0x60]
mov dword [rsp + 0x28], 0xa
cmovae r8, qword [rbp - 0x60]
lea rdx, str.open
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov r9, rax
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp - 0x60]
call fcn.1400034d0
jmp 0x1400c7dcd
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.14002e2b0
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x1400c7b6c
mov rdx, qword [rax]
cmp qword [rax + 0x10], 7
jne 0x1400c7b97
lea rcx, str.SysFunc
sub rdx, rcx
nop dword [rax]
movzx eax, word [rcx]
cmp word [rdx + rcx], ax
jne 0x1400c7b97
add rcx, 2
sub r15, 1
jne 0x1400c7b80
mov bl, 1
jmp 0x1400c7b99
xor bl, bl
lea rcx, [rsp + 0x60]
call fcn.1400034d0
test bl, bl
je 0x1400c7dcd
movsxd rax, dword [r12 + 0x80]
mov r8, r13
movdqa xmm0, xmmword [0x1401f8bd0]
imul rdi, rax, 0x38
movdqu xmmword [rsp + 0x70], xmm0
lea rax, [0x1402264a0]
add rdi, rax
xor r14d, r14d
mov word [rsp + 0x60], r14w
mov rdx, qword [rdi + 0x28]
nop
inc r8
cmp word [rdx + r8*2], r14w
jne 0x1400c7be0
lea rcx, [rsp + 0x60]
call fcn.140003280
movdqa xmm0, xmmword [0x1401f8bd0]
lea rbx, [0x1401ed8f0]
mov rdx, rbx
mov word [rbp - 0x20], r14w
xor r8d, r8d
lea rcx, [rbp - 0x20]
movdqu xmmword [rbp - 0x10], xmm0
call fcn.140003280
movdqa xmm0, xmmword [0x1401f8bd0]
lea rcx, [rbp - 0x40]
xor r8d, r8d
mov word [rbp - 0x40], r14w
mov rdx, rbx
movdqu xmmword [rbp - 0x30], xmm0
call fcn.140003280
movdqa xmm0, xmmword [0x1401f8bd0]
mov r8, r13
mov rdx, qword [rdi + 0x20]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r14w
inc r8
cmp word [rdx + r8*2], r14w
jne 0x1400c7c56
lea rcx, [rbp - 0x60]
call fcn.140003280
movdqa xmm0, xmmword [0x1401f8bd0]
mov r8, r13
mov rdx, qword [rdi + 0x10]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r14w
inc r8
cmp word [rdx + r8*2], r14w
jne 0x1400c7c82
lea rcx, [rbp - 0x80]
call fcn.140003280
movdqa xmm0, xmmword [0x1401f8bd0]
mov r8, r13
mov rdx, qword [rdi + 0x18]
movdqu xmmword [rbp + 0x20], xmm0
mov word [rbp + 0x10], r14w
nop
inc r8
cmp word [rdx + r8*2], r14w
jne 0x1400c7cb0
lea rcx, [rbp + 0x10]
call fcn.140003280
movdqa xmm0, xmmword [0x1401f8bd0]
mov rdx, qword [rdi + 8]
movdqu xmmword [rbp + 0x40], xmm0
mov word [rbp + 0x30], r14w
nop dword [rax]
inc r13
cmp word [rdx + r13*2], r14w
jne 0x1400c7ce0
mov r8, r13
lea rcx, [rbp + 0x30]
call fcn.140003280
mov r8d, dword [rdi]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x50], rax
lea r9, [rbp + 0x30]
lea rax, [rbp - 0x20]
mov rcx, rsi
mov qword [rsp + 0x48], rax
lea rdx, [rbp]
mov byte [rsp + 0x40], r14b
lea rax, [rbp - 0x40]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
call fcn.1400b24e0
mov rdx, rax
lea rcx, [rsi + 0x11d8]
call fcn.14009e730
lea rcx, [rbp]
call fcn.140008ee0
lea rcx, [rbp + 0x30]
call fcn.1400034d0
lea rcx, [rbp + 0x10]
call fcn.1400034d0
lea rcx, [rbp - 0x80]
call fcn.1400034d0
lea rcx, [rbp - 0x60]
call fcn.1400034d0
lea rcx, [rbp - 0x40]
call fcn.1400034d0
lea rcx, [rbp - 0x20]
call fcn.1400034d0
lea rcx, [rsp + 0x60]
call fcn.1400034d0
mov r9, qword [rsi + 0x11d8]
test r9, r9
je 0x1400c7dcd
mov qword [rsp + 0x28], r14
lea r8, [0x1400cbfc0]
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r11, [rsp + 0x7c0]
mov al, 1
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3
call fcn.1401b08a0
int3