Function at 0x140010920
Capabilities:
Check for time delay via gettickcount
Create process on windows
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x710]
sub rsp, 0x810
mov rax, qword [0x140026080]
xor rax, rsp
mov qword [rbp + 0x700], rax
mov r12, r9
mov qword [rsp + 0x50], r9
mov rbx, r8
mov qword [rsp + 0x78], rbx
movzx edi, dl
mov r14, rcx
mov qword [rbp], rcx
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], r9
xor esi, esi
mov r15b, 1
xor edx, edx
mov r8d, 0x250
lea rcx, [rbp + 0xa0]
call sub.VCRUNTIME140.dll_memset
mov rcx, r14
cmp qword [r14 + 0x18], 7
jbe 0x140010998
mov rcx, qword [r14]
lea rdx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
je 0x140010cbd
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x2f0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x60], 0x208
mov dword [rsp + 0x64], esi
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionApp_PathsAcroRd32.exe
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140010a46
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x64]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
sete r15b
mov rbx, qword [rsp + 0x78]
mov byte [rsp + 0x40], r15b
test dil, dil
jne 0x140010be5
mov rcx, qword [r14 + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 1
jb 0x140011608
mov rax, r14
cmp qword [r14 + 0x18], 7
jbe 0x140010a7c
mov rax, qword [r14]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea r9, [0x14001d394]
mov r8, r14
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x38]
call fcn.14000dd10
nop
mov rcx, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140010ade
lea rax, [rcx + 1]
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x38]
cmp rdx, 7
cmova rax, qword [rbp + 0x38]
mov dword [rax + rcx*2], 0x22
lea rax, [rbp + 0x38]
jmp 0x140010afe
mov qword [rsp + 0x20], 1
lea r9, [0x14001d394]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0x38]
call fcn.140004eb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rdx, [rbp + 0x18]
mov rcx, r14
call fcn.14000e0c0
mov rdx, qword [rbp + 0x30]
cmp rdx, 7
jbe 0x140010b6c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010b66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010b66
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019098
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 7
jbe 0x140010bb0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010baa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010baa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019098
nop
mov r9, r14
cmp qword [r14 + 0x18], 7
jbe 0x140010bbd
mov r9, qword [r14]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x2f0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x1400115b3
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
movdqa xmm1, xmmword [0x14001dee0]
movdqu xmmword [rbp + 0x68], xmm1
mov word [rbp + 0x58], si
lea r8, [rbp + 0x58]
mov rdx, rbx
mov rcx, r14
call fcn.1400132f0
xorps xmm0, xmm0
test al, al
jne 0x140010f70
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
mov dword [rbp - 0x70], 0x70
mov dword [rbp - 0x6c], 0x540
lea rax, [rbp + 0x2f0]
mov qword [rbp - 0x58], rax
mov dword [rbp - 0x40], 5
lea rcx, [rbp - 0x70]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x140010cde
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 7
jbe 0x140010cac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010ca6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010ca6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019098
nop
movdqa xmm0, xmmword [0x14001dee0]
movdqu xmmword [rbp + 0x68], xmm0
mov word [rbp + 0x58], si
mov rcx, r14
call fcn.14000b360
nop
mov rcx, rbx
call fcn.14000b360
nop
mov rcx, r12
call fcn.14000b360
xor al, al
jmp 0x1400115d3
call fcn.140001ed0
mov rcx, rax
test rax, rax
je 0x14001160e
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001c8a0]
add rax, 0x18
mov qword [rsp + 0x70], rax
mov rbx, r14
cmp qword [r14 + 0x18], 7
jbe 0x140010d12
mov rbx, qword [r14]
call fcn.140001ed0
mov rcx, rax
test rax, rax
je 0x1400115fd
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001c8a0]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, str._FileOpenUntitled__
mov rdi, 0xffffffffffffffff
cmp rdx, 0x10000
jae 0x140010d5f
movzx edx, dx
lea rcx, [rsp + 0x58]
call fcn.140002310
jmp 0x140010d78
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140010d62
lea rcx, [rsp + 0x58]
call fcn.140012b00
nop
mov r8, rbx
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x78]
call fcn.14000e160
nop
lea r8, [0x14001e0d0]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000e160
nop
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14000e020
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140010dd1
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14001c8a0]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140010df6
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14001c8a0]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140010e1b
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14001c8a0]
xor r15b, r15b
mov dword [rsp + 0x44], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [fcn.140012d40]
lea rcx, [rsp + 0x44]
call sub.USER32.dll_DdeInitializeW
mov rbx, qword [rsp + 0x70]
test eax, eax
jne 0x140010f49
xor r8d, r8d
lea rdx, str.AcroviewR24
mov ecx, dword [rsp + 0x44]
call sub.USER32.dll_DdeCreateStringHandleW
mov r12, rax
xor r8d, r8d
lea rdx, str.Control
mov ecx, dword [rsp + 0x44]
call sub.USER32.dll_DdeCreateStringHandleW
mov r13, rax
xor r9d, r9d
mov r8, rax
mov rdx, r12
mov ecx, dword [rsp + 0x44]
call sub.USER32.dll_DdeConnect
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x48], eax
test rsi, rsi
jne 0x140010ed5
mov ecx, dword [rsp + 0x44]
call sub.USER32.dll_DdeGetLastError
xor r9d, r9d
mov r8, r13
mov rdx, r12
mov ecx, dword [rsp + 0x44]
call sub.USER32.dll_DdeConnect
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rsp + 0x48]
cmp eax, 0xea60
jbe 0x140010e91
test rsi, rsi
jne 0x140010ed5
mov ecx, dword [rsp + 0x44]
call sub.USER32.dll_DdeGetLastError
jmp 0x140010f23
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [rax*2 + 2]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x2710
mov dword [rsp + 0x28], 0x4050
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8, rsi
mov rcx, rbx
call sub.USER32.dll_DdeClientTransaction
test rax, rax
setne r15b
mov rcx, rsi
call sub.USER32.dll_DdeDisconnect
mov rdx, r12
mov ecx, dword [rsp + 0x44]
call sub.USER32.dll_DdeFreeStringHandle
mov rdx, r13
mov ecx, dword [rsp + 0x44]
call sub.USER32.dll_DdeFreeStringHandle
mov ecx, dword [rsp + 0x44]
call sub.USER32.dll_DdeUninitialize
mov r12, qword [rsp + 0x50]
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14001156f
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14001c8a0]
jmp 0x14001156f
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], si
lea rcx, [rbp + 0x78]
call fcn.1400070c0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], rsi
mov r8d, 0x1a
lea rdx, str.openedfrombrowserextension
lea rcx, [rbp + 0x38]
call fcn.140003d30
nop
mov rdi, 0xffffffffffffffff
cmp qword [rbp + 0x48], 0
je 0x14001120c
cmp qword [rbp + 0x28], 0
jne 0x140011027
mov rax, qword [rbp + 0x30]
cmp rax, 3
jb 0x140011007
mov qword [rbp + 0x28], 3
lea rbx, [rbp + 0x18]
cmp rax, 7
cmova rbx, qword [rbp + 0x18]
lea r8d, [rdi + 7]
lea rdx, [0x14001e0d8]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + 6], si
jmp 0x140011027
mov qword [rsp + 0x20], 3
lea r9, [0x14001e0d8]
xor r8d, r8d
lea edx, [r8 + 3]
lea rcx, [rbp + 0x18]
call fcn.140004eb0
lea r9, [rbp + 0x38]
mov r13, qword [rbp + 0x50]
cmp r13, 7
cmova r9, qword [rbp + 0x38]
mov rsi, rdi
nop dword [rax + rax]
inc rsi
cmp word [r9 + rsi*2], 0
jne 0x140011040
mov r12, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
sub rax, r12
cmp rsi, rax
ja 0x14001108f
lea rax, [r12 + rsi]
mov qword [rbp + 0x28], rax
lea rbx, [rbp + 0x18]
cmp rcx, 7
cmova rbx, qword [rbp + 0x18]
lea rcx, [rbx + r12*2]
lea r8, [rsi + rsi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r12 + rsi]
xor esi, esi
mov word [rbx + rax*2], si
jmp 0x1400110a9
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x18]
call fcn.140004eb0
mov r13, qword [rbp + 0x50]
xor esi, esi
cmp qword [r15 + 0x10], 0
je 0x1400111ab
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1400110e6
lea rax, [rcx + 1]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x18]
cmp rdx, 7
cmova rax, qword [rbp + 0x18]
mov dword [rax + rcx*2], 0x3d
jmp 0x140011106
mov qword [rsp + 0x20], 1
lea r9, [0x14001e094]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0x18]
call fcn.140004eb0
cmp qword [r15 + 0x18], 7
jbe 0x140011110
mov r15, qword [r15]
mov rsi, rdi
inc rsi
cmp word [r15 + rsi*2], 0
jne 0x140011113
mov r12, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
sub rax, r12
cmp rsi, rax
ja 0x140011162
lea rax, [rsi + r12]
mov qword [rbp + 0x28], rax
lea rbx, [rbp + 0x18]
cmp rcx, 7
cmova rbx, qword [rbp + 0x18]
lea rcx, [rbx + r12*2]
lea r8, [rsi + rsi]
mov rdx, r15
call sub.VCRUNTIME140.dll_memmove
lea rax, [r12 + rsi]
xor esi, esi
mov word [rbx + rax*2], si
jmp 0x14001117b
mov qword [rsp + 0x20], rsi
mov r9, r15
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x18]
call fcn.140004eb0
xor esi, esi
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1400111ea
lea rax, [rcx + 1]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x18]
cmp rdx, 7
cmova rax, qword [rbp + 0x18]
mov dword [rax + rcx*2], 0x26
mov r12, qword [rsp + 0x50]
cmp r13, 7
jbe 0x140011218
lea rdx, [r13*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011212
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011212
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rsp + 0x20], 1
lea r9, [0x14001e0e0]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0x18]
call fcn.140004eb0
jmp 0x1400111ab
mov r13, qword [rbp + 0x50]
jmp 0x1400111b0
call fcn.140019098
nop
mov rdx, qword [rbp + 0x90]
cmp rdx, 7
jbe 0x14001125f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011259
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011259
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019098
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], rsi
mov r8d, 8
lea rdx, str.opentool
lea rcx, [rbp + 0x38]
call fcn.140003d30
nop
cmp qword [rbp + 0x48], 0
je 0x140011499
cmp qword [rbp + 0x28], 0
jne 0x1400112f1
mov rax, qword [rbp + 0x30]
cmp rax, 3
jb 0x1400112d1
mov qword [rbp + 0x28], 3
lea rbx, [rbp + 0x18]
cmp rax, 7
cmova rbx, qword [rbp + 0x18]
mov r8d, 6
lea rdx, [0x14001e0d8]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + 6], si
jmp 0x1400112f1
mov qword [rsp + 0x20], 3
lea r9, [0x14001e0d8]
xor r8d, r8d
lea edx, [r8 + 3]
lea rcx, [rbp + 0x18]
call fcn.140004eb0
lea r9, [rbp + 0x38]
mov r15, qword [rbp + 0x50]
cmp r15, 7
cmova r9, qword [rbp + 0x38]
mov rsi, rdi
inc rsi
cmp word [r9 + rsi*2], 0
jne 0x140011305
mov r12, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
sub rax, r12
cmp rsi, rax
ja 0x140011354
lea rax, [rsi + r12]
mov qword [rbp + 0x28], rax
lea rbx, [rbp + 0x18]
cmp rcx, 7
cmova rbx, qword [rbp + 0x18]
lea rcx, [rbx + r12*2]
lea r8, [rsi + rsi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r12 + rsi]
xor esi, esi
mov word [rbx + rax*2], si
jmp 0x14001136e
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x18]
call fcn.140004eb0
mov r15, qword [rbp + 0x50]
xor esi, esi
mov r12, qword [rsp + 0x50]
cmp qword [r12 + 0x10], 0
je 0x14001149d
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1400113b1
lea rax, [rcx + 1]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x18]
cmp rdx, 7
cmova rax, qword [rbp + 0x18]
mov dword [rax + rcx*2], 0x3d
jmp 0x1400113d1
mov qword [rsp + 0x20], 1
lea r9, [0x14001e094]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0x18]
call fcn.140004eb0
mov r9, r12
cmp qword [r12 + 0x18], 7
jbe 0x1400113e0
mov r9, qword [r12]
inc rdi
cmp word [r9 + rdi*2], 0
jne 0x1400113e0
mov rsi, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x14001142f
lea rax, [rdi + rsi]
mov qword [rbp + 0x28], rax
lea rbx, [rbp + 0x18]
cmp rcx, 7
cmova rbx, qword [rbp + 0x18]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + rdi]
xor esi, esi
mov word [rbx + rax*2], si
jmp 0x140011445
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp + 0x18]
call fcn.140004eb0
xor esi, esi
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140011477
lea rax, [rcx + 1]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x18]
cmp rdx, 7
cmova rax, qword [rbp + 0x18]
mov dword [rax + rcx*2], 0x26
jmp 0x14001149d
mov qword [rsp + 0x20], 1
lea r9, [0x14001e0e0]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0x18]
call fcn.140004eb0
jmp 0x14001149d
mov r15, qword [rbp + 0x50]
cmp r15, 7
jbe 0x1400114dd
lea rdx, [r15*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400114d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400114d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019098
nop
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x18]
call fcn.14000e470
lea r9, [rbp + 0x18]
cmp qword [rbp + 0x30], 7
cmova r9, qword [rbp + 0x18]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x2f0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
mov r15d, esi
movzx ecx, byte [rsp + 0x40]
cmp eax, 0x20
cmovg r15d, ecx
mov rdx, qword [rbp + 0x30]
cmp rdx, 7
jbe 0x14001156f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011569
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011569
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019098
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 7
jbe 0x1400115b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400115ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400115ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019098
nop
mov rcx, r14
call fcn.14000b360
nop
mov rcx, qword [rsp + 0x78]
call fcn.14000b360
nop
mov rcx, r12
call fcn.14000b360
movzx eax, r15b
mov rcx, qword [rbp + 0x700]
xor rcx, rsp
call fcn.140019140
mov rbx, qword [rsp + 0x858]
add rsp, 0x810
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140001d50
nop
call fcn.140003580
nop
mov ecx, 0x80004005
call fcn.140001d50
int3