Function at 0x14001c150
Capabilities:
Create process on windows
Query environment variable

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov qword [rbp - 8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov rbx, rdx
mov r15, rcx
lea rdx, [rcx + 0xc8]
lea rcx, [rbp - 0x18]
call qword [sym.imp.MFC42.dll_CControlBar::CControlBar]
nop
mov r8, rbx
lea rdx, [0x140002eb8]
lea rcx, [rbp - 0x18]
call qword [sym.imp.MFC42.dll_CPropertySection::SetFormatID]
lea rcx, [rbp + 0x48]
call qword [sym.imp.MFC42.dll_CDaoIndexFieldInfo::CDaoIndexFieldInfo]
nop
lea rcx, [rbp + 0x40]
call qword [sym.imp.MFC42.dll_CDaoIndexFieldInfo::CDaoIndexFieldInfo]
nop
lea r14, [r15 + 0xc0]
xor r8d, r8d
lea rdx, [rbp + 0x30]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov esi, eax
xor edi, edi
test eax, eax
je 0x14001c20d
mov rbx, qword [r14]
mov edx, eax
lea rcx, [rbp + 0x48]
call qword [sym.imp.MFC42.dll_CConnectionPoint::XConnPt::GetConnectionInterface]
mov rdx, rax
mov r8d, esi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov ebx, eax
or edx, 0xffffffff
lea rcx, [rbp + 0x48]
call qword [sym.imp.MFC42.dll_CTestCmdUI::SetCheck]
test ebx, ebx
je 0x14001c203
cmp ebx, esi
jle 0x14001c20d
lea rcx, [rbp + 0x48]
call qword [sym.imp.MFC42.dll_COleControlSite::EnableWindow]
mov rax, qword [rbp + 0x48]
cmp dword [rax - 8], edi
jne 0x14001c223
mov rdx, r14
lea rcx, [rbp + 0x48]
call qword [sym.imp.MFC42.dll_AfxDaoCheck]
xor r8d, r8d
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov esi, eax
test eax, eax
je 0x14001c27a
mov rbx, qword [rbp - 0x18]
mov edx, eax
lea rcx, [rbp + 0x40]
call qword [sym.imp.MFC42.dll_CConnectionPoint::XConnPt::GetConnectionInterface]
mov rdx, rax
mov r8d, esi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov ebx, eax
or edx, 0xffffffff
lea rcx, [rbp + 0x40]
call qword [sym.imp.MFC42.dll_CTestCmdUI::SetCheck]
test ebx, ebx
je 0x14001c270
cmp ebx, esi
jle 0x14001c27a
lea rcx, [rbp + 0x40]
call qword [sym.imp.MFC42.dll_COleControlSite::EnableWindow]
mov r9, qword [rbp + 0x40]
cmp dword [r9 - 8], edi
jne 0x14001c296
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x40]
call qword [sym.imp.MFC42.dll_AfxDaoCheck]
mov r9, qword [rbp + 0x40]
mov esi, 1
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
mov r8, qword [rbp + 0x48]
lea rdx, [0x140002ebc]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rbx, rax
cmp eax, 0x20
ja 0x14001c34f
lea rdx, [0x140002ec8]
lea rcx, [rbp - 0x20]
call qword [sym.imp.MFC42.dll_CCtrlView::CCtrlView]
nop
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x20]
call qword [sym.imp.MFC42.dll_Ordinal_1287]
lea rdx, [0x140002edc]
lea rcx, [rbp - 0x20]
call qword [sym.imp.MFC42.dll_Ordinal_1289]
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x20]
call qword [sym.imp.MFC42.dll_Ordinal_1287]
lea rdx, [0x140002ee0]
lea rcx, [rbp - 0x20]
call qword [sym.imp.MFC42.dll_Ordinal_1289]
mov rdx, qword [rbp - 0x20]
mov ecx, ebx
call fcn.1400285f8
mov qword [rbp - 0x10], rax
lea r9d, [rsi + 0x2f]
lea r8, [0x140002ee8]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.MFC42.dll_CRichEditView::OnEditCut]
lea rcx, [rbp - 0x10]
call fcn.140027d90
nop
lea rcx, [rbp - 0x20]
call qword [sym.imp.MFC42.dll_CDocObjectServer::XOleDocument::AddRef]
jmp 0x14001c351
mov edi, esi
lea rcx, [rbp + 0x40]
call qword [sym.imp.MFC42.dll_CDocObjectServer::XOleDocument::AddRef]
nop
lea rcx, [rbp + 0x48]
call qword [sym.imp.MFC42.dll_CDocObjectServer::XOleDocument::AddRef]
nop
lea rcx, [rbp - 0x18]
call qword [sym.imp.MFC42.dll_CDocObjectServer::XOleDocument::AddRef]
mov eax, edi
mov rbx, qword [rsp + 0x88]
add rsp, 0x50
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret