Function at 0x1400a4140
Capabilities:
Create process on windows
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x818]
sub rsp, 0x8e0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x140185220]
xor rax, rsp
mov qword [rbp + 0x7b0], rax
movsxd r12, edx
mov r13, rcx
xor r14d, r14d
mov edi, r14d
mov dword [rsp + 0x58], r14d
mov edx, 0x423
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x1400a41a3
mov eax, r12d
jmp 0x1400a41af
mov rax, qword [r13 + 0x198]
mov eax, dword [rax + r12*8 + 4]
cdqe
imul rdx, rax, 0x70
add rdx, qword [r13 + 0x180]
lea rcx, [rbp + 0x270]
call fcn.1400a3c40
nop
lea rdx, [rbp + 0x270]
cmp qword [rbp + 0x288], 8
setae r11b
mov r10, qword [rbp + 0x270]
cmovae rdx, r10
mov rsi, 0xffffffffffffffff
mov r9, qword [rbp + 0x280]
test r9, r9
je 0x1400a4229
lea rcx, [r9 - 1]
mov rax, rsi
cmp rcx, rax
cmovb rax, rcx
lea rcx, [rdx + rax*2]
cmp word [rcx], 0x2e
je 0x1400a4221
cmp rcx, rdx
je 0x1400a4229
sub rcx, 2
cmp word [rcx], 0x2e
jne 0x1400a4212
sub rcx, rdx
sar rcx, 1
jmp 0x1400a422c
mov rcx, rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r14
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r14w
cmp rcx, 0xffffffffffffffff
je 0x1400a430e
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], r14
cmp r9, rcx
jb 0x1400a6771
sub r9, rcx
mov r8, rsi
cmp r9, rsi
cmovb r8, r9
lea rax, [rbp + 0x270]
test r11b, r11b
cmovne rax, r10
lea rdx, [rax + rcx*2]
lea rcx, [rbp + 0x110]
call fcn.14004c390
mov edi, 0x80
mov dword [rsp + 0x58], edi
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 8
jb 0x1400a42f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a42ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67a7
call fcn.14011460c
movups xmm0, xmmword [rbp + 0x110]
movups xmmword [rbp + 0x1b0], xmm0
movups xmm1, xmmword [rbp + 0x120]
movups xmmword [rbp + 0x1c0], xmm1
cmp byte [0x14018c2e4], 0
je 0x1400a4406
lea rax, str.global
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], r14
mov dword [rbp - 0x78], r14d
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0xf0]
lea rcx, [0x14018c370]
call fcn.140061e00
mov rbx, qword [rbp + 0x100]
cmp byte [rbx + 0x19], 0
jne 0x1400a436f
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x78]
call fcn.140061ed0
test al, al
jne 0x1400a436f
mov rax, qword [0x14018c370]
jmp 0x1400a4379
mov rax, qword [0x14018c370]
mov rbx, rax
cmp rbx, rax
jne 0x1400a4387
lea rdx, [0x140162d5c]
jmp 0x1400a43c4
lea rax, str.editorcmd
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], r14
mov dword [rbp - 0x78], r14d
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x70]
lea rcx, [rbx + 0x38]
call fcn.140061350
mov rax, qword [rsp + 0x70]
cmp rax, qword [rbx + 0x38]
lea rdx, [0x140162d5c]
je 0x1400a43c4
mov rdx, qword [rax + 0x38]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], r14
mov r8, rsi
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400a43e0
lea rcx, [rbp + 0x110]
call fcn.14004c390
lea rax, [rbp + 0x110]
or edi, 1
jmp 0x1400a4558
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1a8], r14
xor r8d, r8d
lea rdx, [0x140162d5c]
lea rcx, [rbp + 0x190]
call fcn.14004c390
nop
or edi, 2
mov dword [rsp + 0x58], edi
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x188], r14
mov r8d, 0x1d
lea rdx, str.SoftwaregrepWinNP3editorcmd
lea rcx, [rbp + 0x170]
call fcn.14004c390
nop
or edi, 4
mov dword [rsp + 0x58], edi
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x2e0]
call fcn.1400627c0
nop
lea rax, vtable.CRegTypedBase_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____class_CRegStdBase_.0
mov qword [rbp + 0x2e0], rax
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x340]
call fcn.14004aff0
nop
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x360]
call fcn.14004aff0
mov qword [rbp + 0x380], r14
mov eax, 0xffffffff
mov qword [rbp + 0x388], rax
lea rax, vtable.CRegStringCommon_class_CRegStdBase_.0
mov qword [rbp + 0x2e0], rax
or edi, 8
mov dword [rsp + 0x58], edi
movzx eax, byte [rbp + 0x338]
test al, al
je 0x1400a4536
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdx, qword [rbp + 0x380]
cmp rax, rdx
jb 0x1400a4518
add rdx, qword [rbp + 0x388]
cmp rax, rdx
ja 0x1400a4518
movzx eax, byte [rbp + 0x338]
jmp 0x1400a4520
xor al, al
mov byte [rbp + 0x338], al
test al, al
je 0x1400a4536
cmp byte [rbp + 0x339], 0
jne 0x1400a4536
mov dword [rbp + 0x330], r14d
jmp 0x1400a4542
lea rcx, [rbp + 0x2e0]
call fcn.140061a30
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x250]
call fcn.14004aff0
or edi, 0x10
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], r14
mov qword [rbp + 0x208], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x200], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
test dil, 0x10
je 0x1400a45ab
and edi, 0xffffffef
lea rcx, [rbp + 0x250]
call fcn.14004b2f0
nop
test dil, 8
je 0x1400a45e5
and edi, 0xfffffff7
lea rcx, [rbp + 0x360]
call fcn.14004b2f0
lea rcx, [rbp + 0x340]
call fcn.14004b2f0
lea rcx, [rbp + 0x310]
call fcn.14004b2f0
lea rcx, [rbp + 0x2f0]
call fcn.14004b2f0
nop
test dil, 4
je 0x1400a464e
and edi, 0xfffffffb
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x1400a4634
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a462f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6777
call fcn.14011460c
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r14w
test dil, 2
je 0x1400a469e
and edi, 0xfffffffd
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 8
jb 0x1400a469e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a4698
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a677d
call fcn.14011460c
nop
test dil, 1
je 0x1400a46b0
lea rcx, [rbp + 0x110]
call fcn.14004b2f0
cmp qword [rbp + 0x200], 0
je 0x1400a4f3f
cmp byte [rbp + 0x2dc], 0
jne 0x1400a4f3f
cmp dword [rbp + 0x2d0], 1
je 0x1400a4f3f
mov edx, 0x423
mov rcx, qword [r13 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov r15d, 1
cmp eax, r15d
je 0x1400a483c
mov edx, 0x3f6
mov rcx, qword [r13 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rbx, rax
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x5a0]
call fcn.140118720
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x6c], r12d
mov dword [rbp - 0x68], r15d
mov dword [rbp - 0x70], r15d
lea rax, [rbp + 0x5a0]
mov qword [rbp - 0x58], rax
mov dword [rbp - 0x50], 0x104
lea r9, [rbp - 0x70]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x1400a4a0c
lea rcx, [rbp + 0x5a0]
call fcn.14011e280
test eax, eax
jne 0x1400a4790
lea rcx, [rbp + 0x5a0]
call fcn.1400b3b60
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], r14
lea rax, [rbp + 0x5a0]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x1400a47b2
lea rdx, [rbp + 0x5a0]
lea rcx, [rbp + 0xf0]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], r14
mov r8d, 6
lea rdx, str._line_
lea rcx, [rbp + 0x110]
call fcn.14004c390
nop
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x1f0]
call fcn.140062f00
nop
lea rcx, [rbp + 0x110]
call fcn.14004b2f0
nop
lea rcx, [rbp + 0xf0]
call fcn.14004b2f0
jmp 0x1400a4a0c
mov rax, qword [rbp + 0x298]
lea rcx, [rbp + 0x110]
cmp rax, qword [rbp + 0x2a0]
je 0x1400a490a
mov r8d, dword [rax]
lea rdx, [0x140168380]
call fcn.140062b60
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], r14
mov r8d, 6
lea rdx, str._line_
lea rcx, [rbp + 0xf0]
call fcn.14004c390
nop
mov r8, rbx
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x1f0]
call fcn.140062f00
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 8
jb 0x1400a48f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a48f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6783
call fcn.14011460c
nop
lea rcx, [rbp + 0x110]
call fcn.14004b2f0
jmp 0x1400a4a0c
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], r14
mov r8, r15
lea rdx, [0x14016562c]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], r14
mov r8d, 6
lea rdx, str._line_
lea rcx, [rbp + 0xf0]
call fcn.14004c390
nop
lea r8, [rbp + 0x110]
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x1f0]
call fcn.140062f00
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 8
jb 0x1400a49c6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a49c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6789
call fcn.14011460c
nop
mov rdx, qword [rbp + 0x128]
cmp rdx, 8
jb 0x1400a4a0c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a4a07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a678f
call fcn.14011460c
lea rdx, [rbp + 0x270]
cmp qword [rbp + 0x288], 8
cmovae rdx, qword [rbp + 0x270]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], r14
mov r8, rsi
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400a4a40
lea rcx, [rbp + 0xf0]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], r14
mov r8d, 6
lea rdx, str._path_
lea rcx, [rbp + 0x110]
call fcn.14004c390
nop
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x1f0]
call fcn.140062f00
nop
lea rcx, [rbp + 0x110]
call fcn.14004b2f0
nop
lea rcx, [rbp + 0xf0]
call fcn.14004b2f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1a8], r14
mov r8d, 2
lea rdx, [0x1401682b4]
lea rcx, [rbp + 0x190]
call fcn.14004c390
nop
cmp byte [r13 + 0x129], 0
je 0x1400a4b10
mov r8, r15
lea rdx, [0x140168388]
lea rcx, [rbp + 0x190]
call fcn.14004e040
cmp byte [r13 + 0x151], 0
je 0x1400a4b30
mov r8, r15
lea rdx, [0x14016838c]
lea rcx, [rbp + 0x190]
call fcn.14004e040
cmp byte [r13 + 0x153], 0
je 0x1400a4b50
mov r8, r15
lea rdx, [0x140168390]
lea rcx, [rbp + 0x190]
call fcn.14004e040
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rdx, qword [rbp + 0x190]
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x188], r14
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400a4b82
lea rcx, [rbp + 0x170]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], r14
mov r8d, 6
lea rdx, str._mode_
lea rcx, [rbp + 0x110]
call fcn.14004c390
nop
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x1f0]
call fcn.140062f00
nop
lea rcx, [rbp + 0x110]
call fcn.14004b2f0
nop
lea rcx, [rbp + 0x170]
call fcn.14004b2f0
add r13, 0x88
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], r14
mov rbx, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 8
jb 0x1400a4c2e
mov r13, qword [r13]
movabs r14, 0x7ffffffffffffffe
cmp rbx, r14
ja 0x1400a6795
cmp rbx, 8
jae 0x1400a4c67
mov qword [rbp + 0x100], rbx
mov qword [rbp + 0x108], 7
movups xmm0, xmmword [r13]
movups xmmword [rbp + 0xf0], xmm0
jmp 0x1400a4cbb
mov rax, rbx
or rax, 7
cmp rax, r14
ja 0x1400a4c82
mov r14, rax
mov ecx, 0xa
cmp rax, rcx
cmovb r14, rcx
lea rdx, [r14 + 1]
lea rcx, [rbp + 0xf0]
call fcn.14004b1e0
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0x100], rbx
mov qword [rbp + 0x108], r14
lea r8, [rbx*2 + 2]
mov rdx, r13
mov rcx, rax
call fcn.140118050
nop
lea rcx, [rbp + 0xf0]
call fcn.1400a3d30
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 8
cmovae rdx, qword [rbp + 0xf0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
xor ebx, ebx
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], rbx
nop dword [rax + rax]
inc rsi
cmp word [rdx + rsi*2], bx
jne 0x1400a4d00
mov r8, rsi
lea rcx, [rbp + 0x170]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], rbx
mov qword [rbp + 0x128], rbx
mov r8d, 9
lea rdx, str._pattern_
lea rcx, [rbp + 0x110]
call fcn.14004c390
nop
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x1f0]
call fcn.140062f00
nop
lea rcx, [rbp + 0x110]
call fcn.14004b2f0
nop
lea rcx, [rbp + 0x170]
call fcn.14004b2f0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x14], xmm0
movups xmmword [rbp + 0x24], xmm0
movups xmmword [rbp + 0x34], xmm0
movups xmmword [rbp + 0x44], xmm0
movups xmmword [rbp + 0x54], xmm0
movups xmmword [rbp + 0x64], xmm0
mov dword [rbp + 0x74], eax
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rax
mov dword [rbp + 0x10], 0x68
lea rdx, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 8
cmovae rdx, qword [rbp + 0x1f0]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0xf0]
call fcn.14004b2f0
nop
lea rcx, [rbp + 0x190]
call fcn.14004b2f0
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 8
jb 0x1400a4e6f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a4e6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a679b
call fcn.14011460c
mov qword [rbp + 0x200], rbx
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], bx
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 8
jb 0x1400a4ece
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a4ec9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67a1
call fcn.14011460c
mov qword [rbp + 0x1c0], rbx
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], bx
lea rcx, [rbp + 0x2b0]
call fcn.14004ab50
mov rcx, qword [rbp + 0x298]
test rcx, rcx
je 0x1400a6713
mov rdx, qword [rbp + 0x2a8]
sub rdx, rcx
and rdx, 0xfffffffffffffffc
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a66fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6759
jmp 0x1400a66fc
mov dword [rsp + 0x54], r14d
lea r8, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 8
cmovae r8, qword [rbp + 0x1b0]
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea edx, [r9 + 7]
lea ecx, [rdx - 3]
call qword [sym.imp.SHLWAPI.dll_AssocQueryStringW]
test eax, eax
jne 0x1400a50e0
cmp dword [rsp + 0x54], eax
je 0x1400a50e0
lea r8, [rbp + 0x270]
cmp qword [rbp + 0x288], 8
cmovae r8, qword [rbp + 0x270]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor edx, edx
mov rcx, qword [r13 + 0x10]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 8
jb 0x1400a5006
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a5001
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67a7
call fcn.14011460c
mov qword [rbp + 0x200], r14
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], r14w
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 8
jb 0x1400a5066
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a5061
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67ad
call fcn.14011460c
mov qword [rbp + 0x1c0], r14
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r14w
lea rcx, [rbp + 0x2b0]
call fcn.14004ab50
mov rcx, qword [rbp + 0x298]
test rcx, rcx
je 0x1400a6713
mov rdx, qword [rbp + 0x2a8]
sub rdx, rcx
and rdx, 0xfffffffffffffffc
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a50cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67b3
call fcn.14011460c
mov qword [rbp + 0x298], r14
jmp 0x1400a6708
mov dword [rsp + 0x54], r14d
lea r8, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 8
cmovae r8, qword [rbp + 0x1b0]
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r15d, 1
mov edx, r15d
lea ecx, [r9 + 4]
call qword [sym.imp.SHLWAPI.dll_AssocQueryStringW]
mov ecx, dword [rsp + 0x54]
inc rcx
mov eax, 2
mul rcx
mov rbx, rax
cmovo rbx, rsi
mov rcx, rbx
call fcn.140114b30
mov r14, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140118720
mov qword [rbp - 0x10], r14
lea r8, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 8
cmovae r8, qword [rbp + 0x1b0]
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov edx, r15d
lea ecx, [r15 + 3]
call qword [sym.imp.SHLWAPI.dll_AssocQueryStringW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
xor eax, eax
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], rax
mov r8, rsi
inc r8
cmp word [r14 + r8*2], ax
jne 0x1400a51a6
mov rdx, r14
lea rcx, [rbp + 0x130]
call fcn.14004c390
nop
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rcx, qword [rbp + 0x130]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov edi, eax
mov ecx, eax
inc rcx
mov eax, 2
mul rcx
mov rbx, rax
cmovo rbx, rsi
mov rcx, rbx
call fcn.140114b30
mov qword [rsp + 0x70], rax
mov r8, rbx
xor edx, edx
mov rbx, rax
mov rcx, rax
call fcn.140118720
mov qword [rbp - 0x10], rbx
mov rcx, r14
call fcn.14011460c
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rcx, qword [rbp + 0x130]
mov r8d, edi
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
inc rsi
cmp word [rbx + rsi*2], 0
jne 0x1400a5244
mov r8, rsi
mov rdx, rbx
lea rcx, [rbp + 0x130]
call fcn.14004ca40
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rcx, qword [rbp + 0x130]
mov qword [rsp + 0x20], 2
lea r9, [0x140168394]
xor r8d, r8d
mov rdx, qword [rbp + 0x140]
call fcn.14004e2e0
cmp rax, 0xffffffffffffffff
jne 0x1400a52af
lea rdx, [0x1401683a0]
lea rcx, [rbp + 0x130]
call fcn.14004ef90
mov edx, 0x423
mov rcx, qword [r13 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov ebx, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
xor edi, edi
mov qword [rbp + 0x220], rdi
mov qword [rbp + 0x228], 7
mov word [rbp + 0x210], di
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], rdi
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], di
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x390]
call fcn.140118720
cmp ebx, 1
je 0x1400a538a
mov edx, 0x3f6
mov rcx, qword [r13 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rcx
mov dword [rbp - 0x6c], r12d
mov dword [rbp - 0x68], r15d
mov dword [rbp - 0x70], r15d
lea rcx, [rbp + 0x390]
mov qword [rbp - 0x58], rcx
mov dword [rbp - 0x50], 0x104
lea r9, [rbp - 0x70]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x1400a53b0
mov word [rbp + 0x390], di
jmp 0x1400a53ba
mov rax, qword [rbp + 0x298]
cmp rax, qword [rbp + 0x2a0]
je 0x1400a53b0
mov r8d, dword [rax]
lea rdx, [0x140168348]
lea rcx, [rbp + 0x390]
call fcn.1400b3b80
cmp word [rbp + 0x390], 0
jne 0x1400a53d2
lea r8, [0x14016562c]
mov edx, 0x104
lea rcx, [rbp + 0x390]
call fcn.14011ca1c
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], rdi
mov qword [rbp + 0x1e8], rdi
mov rdi, qword [rbp + 0x140]
lea rsi, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rsi, qword [rbp + 0x130]
movabs r14, 0x7ffffffffffffffe
cmp rdi, r14
ja 0x1400a67b9
mov eax, 0xa
mov qword [rbp + 0x1e8], 7
cmp rdi, 8
jae 0x1400a544d
mov qword [rbp + 0x1e0], rdi
lea r8d, [rax + 6]
mov rdx, rsi
lea rcx, [rbp + 0x1d0]
call fcn.140118050
jmp 0x1400a549e
mov rbx, rdi
or rbx, 7
cmp rbx, r14
jbe 0x1400a545e
mov rbx, r14
jmp 0x1400a5465
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x1d0]
call fcn.14004b1e0
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1e0], rdi
mov qword [rbp + 0x1e8], rbx
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140118050
nop
lea rsi, [rbp + 0x1d0]
mov rdi, qword [rbp + 0x1d0]
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 8
jb 0x1400a54c4
mov rsi, rdi
mov rbx, rdi
mov rax, rdi
jmp 0x1400a54d2
lea rbx, [rbp + 0x1d0]
lea rax, [rbp + 0x1d0]
mov r12, qword [rbp + 0x1e0]
lea rax, [rax + r12*2]
cmp rbx, rax
je 0x1400a5513
sub rsi, rbx
mov rdi, rax
movzx ecx, word [rbx]
call fcn.14011cf6c
nop
mov word [rsi + rbx], ax
add rbx, 2
cmp rbx, rdi
jne 0x1400a54e8
mov rdx, qword [rbp + 0x1e8]
mov r12, qword [rbp + 0x1e0]
mov rdi, qword [rbp + 0x1d0]
lea rcx, [rbp + 0x1d0]
cmp rdx, 8
setae bl
cmovae rcx, rdi
mov qword [rsp + 0x20], 0xd
lea r9, str.notepad.exe
xor r8d, r8d
mov rdx, r12
call fcn.14004e2e0
cmp rax, 0xffffffffffffffff
je 0x1400a5601
lea r8, [rbp + 0x390]
lea rdx, str._n_s
lea rcx, [rbp + 0x250]
call fcn.140062b60
mov rbx, rax
lea rax, [rbp + 0x150]
cmp rax, rbx
je 0x1400a5be0
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x1400a55bd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a55b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67bf
call fcn.14011460c
xor eax, eax
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], ax
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 7
mov word [rbx], ax
jmp 0x1400a5be0
lea rcx, [rbp + 0x1d0]
test bl, bl
cmovne rcx, rdi
mov qword [rsp + 0x20], 0xa
lea r9, str.xemacs.exe
xor r8d, r8d
mov rdx, r12
call fcn.14004e2e0
cmp rax, 0xffffffffffffffff
je 0x1400a56aa
lea r8, [rbp + 0x390]
lea rdx, [0x1401683f0]
lea rcx, [rbp + 0x250]
call fcn.140062b60
mov rbx, rax
lea rax, [rbp + 0x150]
cmp rax, rbx
je 0x1400a5be0
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x1400a55bd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a55b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a675f
jmp 0x1400a55b8
lea rcx, [rbp + 0x1d0]
test bl, bl
cmovne rcx, rdi
mov qword [rsp + 0x20], 0xb
lea r9, str.uedit32.exe
xor r8d, r8d
mov rdx, r12
call fcn.14004e2e0
cmp rax, 0xffffffffffffffff
je 0x1400a5753
lea r8, [rbp + 0x390]
lea rdx, str._l_s
lea rcx, [rbp + 0x250]
call fcn.140062b60
mov rbx, rax
lea rax, [rbp + 0x150]
cmp rax, rbx
je 0x1400a5be0
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x1400a55bd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a55b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6765
jmp 0x1400a55b8
lea rcx, [rbp + 0x1d0]
test bl, bl
cmovne rcx, rdi
mov qword [rsp + 0x20], 0xe
lea r9, str.codewright.exe
xor r8d, r8d
mov rdx, r12
call fcn.14004e2e0
cmp rax, 0xffffffffffffffff
je 0x1400a57fc
lea r8, [rbp + 0x390]
lea rdx, str._G_s
lea rcx, [rbp + 0x250]
call fcn.140062b60
mov rbx, rax
lea rax, [rbp + 0x150]
cmp rax, rbx
je 0x1400a5be0
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x1400a55bd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a55b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a676b
jmp 0x1400a55b8
lea rcx, [rbp + 0x1d0]
test bl, bl
cmovne rcx, rdi
mov qword [rsp + 0x20], 0xc
lea r9, str.notepad2.exe
xor r8d, r8d
mov rdx, r12
call fcn.14004e2e0
cmp rax, 0xffffffffffffffff
je 0x1400a5a33
lea rdx, [r13 + 0x88]
lea rcx, [rbp + 0x190]
call fcn.14004aff0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
xor r13d, r13d
mov qword [rbp + 0x180], r13
mov qword [rbp + 0x188], r13
lea r8d, [r13 + 2]
lea rdx, [0x140162db4]
lea rcx, [rbp + 0x170]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r13
mov qword [rbp + 0x128], r13
mov r8, r15
lea rdx, [0x140162db0]
lea rcx, [rbp + 0x110]
call fcn.14004c390
nop
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x190]
call fcn.140062f00
nop
mov rdx, qword [rbp + 0x128]
cmp rdx, 8
jb 0x1400a5906
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a5900
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67c5
call fcn.14011460c
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x1400a594c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a5947
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67cb
call fcn.14011460c
lea r9, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae r9, qword [rbp + 0x190]
lea r8, [rbp + 0x390]
lea rdx, str._g__s__mr___s_
lea rcx, [rbp + 0x250]
call fcn.140062b60
mov rbx, rax
lea rax, [rbp + 0x210]
cmp rax, rbx
je 0x1400a5a15
mov rdx, qword [rbp + 0x228]
cmp rdx, 8
jb 0x1400a59d6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a59d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67d1
call fcn.14011460c
mov qword [rbp + 0x220], r13
mov qword [rbp + 0x228], 7
mov word [rbp + 0x210], r13w
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x210], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x220], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 7
mov word [rbx], r13w
lea rcx, [rbp + 0x250]
call fcn.14004b2f0
nop
lea rcx, [rbp + 0x190]
call fcn.14004b2f0
jmp 0x1400a5bef
lea rdx, str.notepad3.exe
lea rcx, [rbp + 0x1d0]
call fcn.1400b12d0
cmp rax, 0xffffffffffffffff
je 0x1400a5b50
lea rdx, [0x1401682b4]
lea rcx, [rbp + 0x110]
call fcn.14004c350
nop
cmp byte [r13 + 0x129], 0
je 0x1400a5a81
lea rdx, [0x140168388]
lea rcx, [rbp + 0x110]
call fcn.14004ef90
cmp byte [r13 + 0x151], 0
je 0x1400a5a9e
lea rdx, [0x14016838c]
lea rcx, [rbp + 0x110]
call fcn.14004ef90
cmp byte [r13 + 0x153], 0
je 0x1400a5abb
lea rdx, [0x140168390]
lea rcx, [rbp + 0x110]
call fcn.14004ef90
lea rdx, [r13 + 0x88]
lea rcx, [rbp + 0x170]
call fcn.14004aff0
nop
lea rcx, [rbp + 0x170]
call fcn.1400a3d30
lea rcx, [rbp + 0x170]
call fcn.14004b370
mov rbx, rax
lea rcx, [rbp + 0x110]
call fcn.14004b370
lea rcx, [rbp + 0x390]
mov qword [rsp + 0x20], rcx
mov r9, rbx
mov r8, rax
lea rdx, str.__s___s___g__s__
lea rcx, [rbp + 0x250]
call fcn.140062b60
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.14004c2b0
lea rcx, [rbp + 0x250]
call fcn.14004b2f0
nop
lea rcx, [rbp + 0x170]
call fcn.14004b2f0
nop
lea rcx, [rbp + 0x110]
jmp 0x1400a5be7
lea rdx, str.bowpad.exe
lea rcx, [rbp + 0x1d0]
call fcn.1400b12d0
cmp rax, 0xffffffffffffffff
jne 0x1400a5bb7
lea rdx, str.bowpad64.exe
lea rcx, [rbp + 0x1d0]
call fcn.1400b12d0
cmp rax, 0xffffffffffffffff
jne 0x1400a5bb7
lea rdx, str.code.exe
lea rcx, [rbp + 0x1d0]
call fcn.1400b12d0
cmp rax, 0xffffffffffffffff
je 0x1400a5bec
lea rdx, str.__goto
lea rcx, [rbp + 0x210]
call fcn.14004c9f0
lea rdx, [0x140168550]
jmp 0x1400a5bbe
lea rdx, str._line:_s
lea r8, [rbp + 0x390]
lea rcx, [rbp + 0x250]
call fcn.140062b60
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.14004c2b0
lea rcx, [rbp + 0x250]
call fcn.14004b2f0
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], r13
mov r8d, 4
lea rdx, str.__1_
lea rcx, [rbp + 0x230]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r13
mov qword [rbp + 0x108], r13
mov r8d, 2
lea rdx, [0x140168394]
lea rcx, [rbp + 0xf0]
call fcn.14004c390
nop
lea rcx, [rbp + 0x230]
mov rax, qword [rbp + 0x240]
cmp qword [rbp + 0x248], 8
jb 0x1400a5c81
mov r12, qword [rbp + 0x230]
lea rcx, [rax + rax]
mov qword [rsp + 0x60], rcx
lea rbx, [r12 + rcx]
jmp 0x1400a5c94
add rax, rax
mov qword [rsp + 0x60], rax
lea rbx, [rcx + rax]
lea r12, [rbp + 0x230]
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
setae byte [rsp + 0x50]
mov rax, qword [rbp + 0x140]
jb 0x1400a5cca
lea rdx, [rax + rax]
mov qword [rsp + 0x58], rdx
mov rax, qword [rbp + 0x130]
lea rsi, [rax + rdx]
mov rdi, rax
jmp 0x1400a5cdd
add rax, rax
mov qword [rsp + 0x58], rax
lea rsi, [rcx + rax]
lea rdi, [rbp + 0x130]
sub rbx, r12
mov rcx, rbx
sar rcx, 1
mov rax, rsi
sub rax, rdi
sar rax, 1
cmp rax, rcx
jl 0x1400a5d25
lea rax, [rcx + rcx]
mov r13, rsi
sub r13, rax
nop
mov r8, rbx
mov rdx, rdi
mov rcx, r12
call fcn.140118b60
test eax, eax
sete al
test al, al
jne 0x1400a5d22
cmp rdi, r13
je 0x1400a5d25
add rdi, 2
jmp 0x1400a5d00
mov rsi, rdi
lea rax, [rbp + 0x130]
movzx r9d, byte [rsp + 0x50]
test r9b, r9b
mov rdx, qword [rbp + 0x130]
cmovne rax, rdx
add rax, qword [rsp + 0x58]
cmp rsi, rax
je 0x1400a5d98
mov r8, qword [rsp + 0x60]
sar r8, 1
lea rax, [rbp + 0x130]
test r9b, r9b
cmovne rax, rdx
sub rsi, rax
sar rsi, 1
lea r9, [rbp + 0xf0]
cmp qword [rbp + 0x108], 8
cmovae r9, qword [rbp + 0xf0]
mov rax, qword [rbp + 0x100]
mov qword [rsp + 0x20], rax
mov rdx, rsi
lea rcx, [rbp + 0x130]
call fcn.140076080
mov r8d, 2
lea rdx, [0x140168394]
lea rcx, [rbp + 0x230]
call fcn.14004ca40
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
setae sil
mov rbx, qword [rbp + 0x130]
cmovae rcx, rbx
mov qword [rsp + 0x20], 0xc
lea r9, str.rundll32.exe
xor r8d, r8d
mov rdi, qword [rbp + 0x140]
mov rdx, rdi
call fcn.14004e2e0
cmp rax, 0xffffffffffffffff
jne 0x1400a5fef
lea rcx, [rbp + 0x130]
test sil, sil
cmovne rcx, rbx
mov qword [rsp + 0x20], 0x11
lea r9, str.__single_argument
xor r8d, r8d
mov rdx, rdi
call fcn.14004e2e0
cmp rax, 0xffffffffffffffff
jne 0x1400a5fef
mov r12, qword [rbp + 0x280]
mov rax, r14
sub rax, r12
cmp rax, 1
jb 0x1400a67d7
lea r13, [rbp + 0x270]
cmp qword [rbp + 0x288], 8
cmovae r13, qword [rbp + 0x270]
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
xor eax, eax
mov qword [rbp + 0x1a0], rax
mov qword [rbp + 0x1a8], rax
lea rsi, [r12 + 1]
mov ebx, 7
lea rdi, [rbp + 0x190]
cmp rsi, rbx
jbe 0x1400a5ec4
mov rbx, rsi
or rbx, 7
cmp rbx, r14
jbe 0x1400a5e9d
mov rbx, r14
jmp 0x1400a5eaa
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x190]
call fcn.14004b1e0
mov rdi, rax
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x1a0], rsi
mov qword [rbp + 0x1a8], rbx
movzx ecx, word [0x140162db0]
mov word [rdi], cx
lea rcx, [rdi + 2]
lea r8, [r12 + r12]
mov rdx, r13
call fcn.140118050
xor r13d, r13d
mov word [rdi + rsi*2], r13w
lea rdx, [0x140162db0]
lea rcx, [rbp + 0x190]
call fcn.14004ef90
movups xmm6, xmmword [rax]
movups xmmword [rbp + 0x110], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x120], xmm7
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rbp + 0x108]
cmp rdx, 8
jb 0x1400a5f72
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a5f6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67dd
call fcn.14011460c
movups xmmword [rbp + 0xf0], xmm6
movups xmmword [rbp + 0x100], xmm7
mov qword [rbp + 0x120], r13
mov qword [rbp + 0x128], 7
mov word [rbp + 0x110], r13w
lea rcx, [rbp + 0x110]
call fcn.14004b2f0
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 8
jb 0x1400a6019
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a5fe8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67e3
call fcn.14011460c
jmp 0x1400a6019
lea rdx, [rbp + 0x270]
cmp qword [rbp + 0x288], 8
cmovae rdx, qword [rbp + 0x270]
mov r8, qword [rbp + 0x280]
lea rcx, [rbp + 0xf0]
call fcn.14004ca40
mov rdi, qword [rbp + 0x220]
test rdi, rdi
je 0x1400a61bd
mov rax, r14
sub rax, rdi
cmp rax, 1
jb 0x1400a67e9
lea r13, [rbp + 0x210]
cmp qword [rbp + 0x228], 8
cmovae r13, qword [rbp + 0x210]
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
xor eax, eax
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x188], rax
lea r12, [rdi + 1]
mov ebx, 7
lea rsi, [rbp + 0x170]
cmp r12, rbx
jbe 0x1400a60b7
mov rbx, r12
or rbx, 7
cmp rbx, r14
jbe 0x1400a6090
mov rbx, r14
jmp 0x1400a609d
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x170]
call fcn.14004b1e0
mov rsi, rax
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], rbx
lea rbx, [rdi + rdi]
mov r8, rbx
mov rdx, r13
mov rcx, rsi
call fcn.140118050
movzx ecx, word [0x1401685ac]
mov word [rsi + rbx], cx
xor ebx, ebx
mov word [rsi + r12*2], bx
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 8
cmovae rdx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0x100]
lea rcx, [rbp + 0x170]
call fcn.14004e040
movups xmm6, xmmword [rax]
movups xmmword [rbp + 0x110], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x120], xmm7
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
mov rdx, qword [rbp + 0x108]
cmp rdx, 8
jb 0x1400a617d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a6178
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67ef
call fcn.14011460c
movups xmmword [rbp + 0xf0], xmm6
movups xmmword [rbp + 0x100], xmm7
mov qword [rbp + 0x120], rbx
mov qword [rbp + 0x128], 7
mov word [rbp + 0x110], bx
lea rcx, [rbp + 0x110]
call fcn.14004b2f0
nop
lea rcx, [rbp + 0x170]
call fcn.14004b2f0
lea rcx, [rbp + 0x230]
mov rsi, qword [rbp + 0x240]
lea rax, [rsi + rsi]
mov qword [rsp + 0x68], rax
cmp qword [rbp + 0x248], 8
jb 0x1400a61eb
mov r14, qword [rbp + 0x230]
lea r12, [rax + r14]
jmp 0x1400a61f6
lea r12, [rcx + rax]
lea r14, [rbp + 0x230]
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
setae byte [rsp + 0x50]
mov r13, qword [rbp + 0x130]
mov rdi, qword [rbp + 0x140]
lea rax, [rdi + rdi]
mov qword [rsp + 0x58], rax
jb 0x1400a622b
add rax, r13
mov rbx, r13
jmp 0x1400a6235
add rax, rcx
lea rbx, [rbp + 0x130]
mov qword [rsp + 0x60], rax
cmp rdi, rsi
jl 0x1400a6265
sub r12, r14
mov r8, r12
mov rdx, rbx
mov rcx, r14
call fcn.140118b60
test eax, eax
sete al
test al, al
jne 0x1400a626a
add rbx, 2
dec rdi
cmp rdi, rsi
jge 0x1400a6242
mov rbx, qword [rsp + 0x60]
lea rax, [rbp + 0x130]
movzx edx, byte [rsp + 0x50]
test dl, dl
cmovne rax, r13
add rax, qword [rsp + 0x58]
cmp rbx, rax
je 0x1400a62da
mov r8, qword [rsp + 0x68]
sar r8, 1
lea rax, [rbp + 0x130]
test dl, dl
cmovne rax, r13
sub rbx, rax
sar rbx, 1
lea r9, [rbp + 0xf0]
cmp qword [rbp + 0x108], 8
cmovae r9, qword [rbp + 0xf0]
mov rax, qword [rbp + 0x100]
mov qword [rsp + 0x20], rax
mov rdx, rbx
lea rcx, [rbp + 0x130]
call fcn.140076080
mov r13, qword [rbp + 0x130]
mov r8, qword [rbp + 0x160]
test r8, r8
je 0x1400a6376
lea rdx, [rbp + 0x150]
mov r9, qword [rbp + 0x150]
mov r10, qword [rbp + 0x168]
cmp r10, 8
cmovae rdx, r9
cmp r8, 1
jb 0x1400a632c
lea rcx, [0x1401685b0]
sub rdx, rcx
movzx eax, word [rcx + rdx]
cmp ax, word [rcx]
jne 0x1400a632c
add rcx, 2
sub r15, 1
jne 0x1400a6317
jmp 0x1400a6354
lea rdx, [0x1401685ac]
lea rcx, [rbp + 0x130]
call fcn.14004ef90
mov r10, qword [rbp + 0x168]
mov r8, qword [rbp + 0x160]
mov r9, qword [rbp + 0x150]
lea rdx, [rbp + 0x150]
cmp r10, 8
cmovae rdx, r9
lea rcx, [rbp + 0x130]
call fcn.14004e040
mov r13, qword [rbp + 0x130]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x84], xmm0
movups xmmword [rbp + 0x94], xmm0
movups xmmword [rbp + 0xa4], xmm0
movups xmmword [rbp + 0xb4], xmm0
movups xmmword [rbp + 0xc4], xmm0
movups xmmword [rbp + 0xd4], xmm0
mov dword [rbp + 0xe4], eax
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rax
mov dword [rbp + 0x80], 0x68
lea rdx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rdx, r13
lea rax, [rbp - 8]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x40], rax
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 8
jb 0x1400a6463
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a645d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67f5
call fcn.14011460c
nop
mov rdx, qword [rbp + 0x248]
cmp rdx, 8
jb 0x1400a64a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a64a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a67fb
call fcn.14011460c
mov qword [rbp + 0x240], rbx
mov qword [rbp + 0x248], 7
mov word [rbp + 0x230], bx
lea rcx, [rbp + 0x1d0]
call fcn.14004b2f0
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x1400a6515
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a6510
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6801
call fcn.14011460c
mov qword [rbp + 0x160], rbx
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], bx
mov rdx, qword [rbp + 0x228]
cmp rdx, 8
jb 0x1400a6574
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a656f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6807
call fcn.14011460c
mov qword [rbp + 0x220], rbx
mov qword [rbp + 0x228], 7
mov word [rbp + 0x210], bx
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x1400a65d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a65ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a680d
call fcn.14011460c
mov qword [rbp + 0x140], rbx
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], bx
mov rcx, qword [rsp + 0x70]
call fcn.14011460c
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 8
jb 0x1400a663d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a6638
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6813
call fcn.14011460c
mov qword [rbp + 0x200], rbx
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], bx
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 8
jb 0x1400a669c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a6697
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6819
call fcn.14011460c
mov qword [rbp + 0x1c0], rbx
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], bx
lea rcx, [rbp + 0x2b0]
call fcn.14004ab50
mov rcx, qword [rbp + 0x298]
test rcx, rcx
je 0x1400a6713
mov rdx, qword [rbp + 0x2a8]
sub rdx, rcx
and rdx, 0xfffffffffffffffc
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a66fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a6753
call fcn.14011460c
mov qword [rbp + 0x298], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2a0], xmm0
lea rcx, [rbp + 0x270]
call fcn.14004b2f0
mov rcx, qword [rbp + 0x7b0]
xor rcx, rsp
call fcn.1401145b0
lea r11, [rsp + 0x8e0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14011c9a4
int3
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
int3
call fcn.14011c9a4
nop
call fcn.14004e0d0
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14004b290
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14004b290
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
int3
call fcn.14011c9a4
nop
call fcn.14004b290
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
int3
call fcn.14004b290
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
int3