Function at 0x14005fc90
Capabilities:
Create pipe
Create process on windows
Create two anonymous pipes
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1210]
mov eax, 0x1310
call fcn.140096680
sub rsp, rax
mov rax, qword [0x1401339d8]
xor rax, rsp
mov qword [rbp + 0x1200], rax
mov qword [rsp + 0x68], r9
mov rdi, r8
mov r15, rdx
mov r14, rcx
call fcn.140014190
mov rcx, rax
lea r9, [0x1400e8328]
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
xor edx, edx
call fcn.14009cf00
xor r12d, r12d
mov ebx, r12d
mov qword [rsp + 0x70], rbx
call fcn.140014190
cmp byte [rax + 0x64], r12b
je 0x14005fd51
lea ecx, [r12 + 0x28]
call fcn.140095e50
mov rbx, rax
mov qword [rbp - 0x38], rax
test rax, rax
je 0x14005fd49
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
mov qword [rbx + 0x20], rax
call fcn.140014190
mov rdx, rax
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov rcx, rbx
call fcn.140098570
mov rbx, rax
jmp 0x14005fd4c
mov rbx, r12
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x60], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x118], xmm0
mov rsi, r12
mov qword [rsp + 0x60], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x48], r12
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rax
movups xmmword [rbp + 0xf8], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x50], r12
lea rcx, str._n__Start_of_parent_execution._n
call fcn.140063e20
mov dword [rbp - 0x28], SafeArrayCopy
mov dword [rbp - 0x18], 1
mov qword [rbp - 0x20], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea r13, [0x140137660]
mov qword [rsp + 0x78], r13
mov byte [rbp - 0x80], sil
mov rcx, r13
call fcn.1400745c8
test eax, eax
jne 0x140060c5f
mov byte [rbp - 0x80], 1
cmp byte [rbp + 0x1270], al
je 0x14005fe2f
call fcn.140014190
mov rcx, rax
lea r9, str.Input_text_in_execution
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 3
call fcn.14009cf00
cmp byte [0x1401337c0], 0
jne 0x14005fe28
nop dword [rax + rax]
mov rdx, r13
lea rcx, [0x1401376b0]
call fcn.140075674
cmp byte [0x1401337c0], 0
je 0x14005fe10
mov byte [0x1401337c0], 0
xor r9d, r9d
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x68]
call qword [sym.imp.api_ms_win_core_namedpipe_l1_1_0.dll_CreatePipe]
test eax, eax
jne 0x14005fe70
call fcn.140014190
mov rcx, rax
lea r9, str.StdoutRd_CreatePipe
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 5
call fcn.14009cf00
mov r13d, r12d
jmp 0x140060af1
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_SetHandleInformation]
test eax, eax
jne 0x14005fead
call fcn.140014190
mov rcx, rax
lea r9, str.Stdout_SetHandleInformation
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 5
call fcn.14009cf00
mov r13d, r12d
jmp 0x140060af1
xor r9d, r9d
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x58]
call qword [sym.imp.api_ms_win_core_namedpipe_l1_1_0.dll_CreatePipe]
test eax, eax
jne 0x14005feee
call fcn.140014190
mov rcx, rax
lea r9, str.Stdin_CreatePipe
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 5
call fcn.14009cf00
mov r13d, r12d
jmp 0x140060af1
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_SetHandleInformation]
test eax, eax
jne 0x14005ff2b
call fcn.140014190
mov rcx, rax
lea r9, str.Stdin_SetHandleInformation
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 5
call fcn.14009cf00
mov r13d, r12d
jmp 0x140060af1
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp - 0x60]
mov edx, 0x28
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_OpenProcessToken]
mov r13d, eax
test eax, eax
jne 0x14005ff63
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
lea r9, str.OpenProcessToken_failed._Error:_0x_08X
jmp 0x140060ad9
lea r8, [rbp + 0x110]
lea rdx, str.SeTcbPrivilege
xor ecx, ecx
call qword [sym.imp.api_ms_win_security_lsalookup_l2_1_0.dll_LookupPrivilegeValueW]
mov r13d, eax
test eax, eax
jne 0x14005ff99
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
lea r9, str.LookupPrivilegeValue_failed._Error:_0x_08X
jmp 0x140060ad9
mov dword [rbp + 0xf8], 1
mov rax, qword [rbp + 0x110]
mov qword [rbp + 0xfc], rax
mov dword [rbp + 0x104], 2
lea rax, [rbp + 0x108]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea r8, [rbp + 0xf8]
xor edx, edx
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_AdjustTokenPrivileges]
mov r13d, eax
test eax, eax
je 0x140060ac5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0x514
jne 0x14006002c
call fcn.140014190
mov rcx, rax
mov dword [rsp + 0x20], 0x514
lea r9, str.AdjustTokenPrivileges_failed_with_a_warning._No_problem_in_executing_other_codes._Error:_0x_08X
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 4
call fcn.14009cf00
mov eax, dword [rdi]
test eax, eax
jne 0x1400600cb
call fcn.140015f40
mov edi, eax
test eax, eax
jne 0x14006006c
call fcn.140014190
mov rcx, rax
mov dword [rsp + 0x20], r12d
lea r9, str.WTSGetActiveConsoleSessionId_failed._Error:_0x_08X
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
lea edx, [rdi + 5]
call fcn.14009cf00
mov r13d, r12d
jmp 0x140060af1
call fcn.140014190
mov rcx, rax
mov dword [rsp + 0x20], edi
lea r9, str.Current_Session_ID___d
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 2
call fcn.14009cf00
mov ecx, edi
call fcn.140015d00
mov rsi, rax
mov qword [rsp + 0x60], rax
cmp rax, 0xffffffffffffffff
jne 0x1400600f2
call fcn.140014190
mov rcx, rax
lea r9, str.GetActiveSessionToken_failed
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
lea edx, [rsi + 6]
call fcn.14009cf00
mov r13d, r12d
jmp 0x140060af1
cmp eax, 1
jne 0x1400600f2
call fcn.140015f40
lea rdx, [rbp - 0x78]
mov ecx, eax
call sub.WTSAPI32.dll_WTSQueryUserToken
test eax, eax
jne 0x14006013e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test eax, eax
jne 0x140060252
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 1
xor r8d, r8d
mov edx, 0x2000000
mov rcx, rsi
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_DuplicateTokenEx]
mov r13d, eax
test eax, eax
jne 0x1400602bb
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
lea r9, str.DuplicateTokenEx_failed._Error:_0x_08X
jmp 0x140060ad9
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0xc8]
lea edx, [r9 + 0xe]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_GetTokenInformation]
test eax, eax
je 0x1400601bd
cmp dword [rbp + 0xc8], 3
jne 0x1400601f0
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9d, 8
lea r8, [rbp - 0x30]
lea edx, [r9 + 0xb]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_GetTokenInformation]
test eax, eax
je 0x1400601ae
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [rbp - 0x30]
mov qword [rbp - 0x78], rcx
jmp 0x1400601f4
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
lea rsi, str.GetTokenInformation_with_TokenLinkedToken_failed._Error:_0x_08X
jmp 0x1400601ca
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
lea rsi, str.GetTokenInformation_with_TokenElevationType_failed._Error:_0x_08X
mov edi, eax
call fcn.140014190
mov rcx, rax
mov dword [rsp + 0x20], edi
mov r9, rsi
lea r8, str.Utils::GetElevatedUserToken
mov edx, 5
call fcn.14009cf00
test edi, edi
jne 0x140060252
mov rcx, qword [rbp - 0x78]
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0xcc]
lea edx, [r9 + 4]
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_GetTokenInformation]
test eax, eax
je 0x14006027d
cmp dword [rbp + 0xcc], 1
je 0x1400602ad
call fcn.140014190
mov rcx, rax
lea r9, str.GetTokenInformation_failed___Invalid_Handle
lea r8, str.Utils::GetElevatedUserToken
mov edx, 5
call fcn.14009cf00
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
call fcn.140014190
mov rcx, rax
lea r9, str.GetElevatedUserToken_failed
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 5
call fcn.14009cf00
mov r13d, r12d
mov esi, r13d
jmp 0x140060af1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
mov rcx, rax
mov dword [rsp + 0x20], edi
lea r9, str.GetTokenInformation_with_TokenType_failed._Error:_0x_08X
lea r8, str.Utils::GetElevatedUserToken
mov edx, 5
call fcn.14009cf00
test edi, edi
jne 0x140060248
mov rsi, qword [rbp - 0x78]
mov qword [rsp + 0x60], rsi
jmp 0x1400600f2
mov dword [rbp + 0xd0], 1
mov r9d, 4
lea r8, [rbp + 0xd0]
lea edx, [r9 + 0x16]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_SetTokenInformation]
mov r13d, eax
test eax, eax
jne 0x140060300
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
lea r9, str.SetTokenInformation__TokenUIAccess__failed._Error:_0x_08X
jmp 0x140060ad9
mov r8d, 1
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x48]
call sub.USERENV.dll_CreateEnvironmentBlock
mov r13d, eax
test eax, eax
jne 0x140060333
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
lea r9, str.CreateEnvironmentBlock_failed._Error:_0x_08X
jmp 0x140060ad9
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], rax
xorps xmm1, xmm1
movups xmmword [rbp + 0x140], xmm1
mov qword [rbp + 0x150], rax
movups xmmword [rbp + 0x14], xmm0
movups xmmword [rbp + 0x24], xmm0
movups xmmword [rbp + 0x34], xmm0
movups xmmword [rbp + 0x44], xmm0
mov qword [rbp + 0x54], rax
mov dword [rbp + 0x5c], eax
mov dword [rbp + 0x10], 0x68
mov rax, qword [rbp - 0x50]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x68], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x60], rax
psrldq xmm0, 8
movd eax, xmm0
bts eax, 8
mov dword [rbp + 0x4c], eax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rbp - 0x48]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x8000420
mov dword [rsp + 0x28], 1
lea rax, [rbp + 0x140]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x158]
mov r8, r15
mov rdx, r14
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateProcessAsUserW]
mov r13d, eax
test eax, eax
jne 0x14006040c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
lea r9, str.CreateProcessAsUser_failed._Error:_0x_08X
jmp 0x140060ad9
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
xor edx, edx
mov r8d, 0x1001
lea rcx, [rbp + 0x1f0]
call fcn.1400a57c0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x128], xmm1
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], SafeArrayGetDim
mov byte [rbp + 0x80], 0
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0xa4]
mov r8d, 0x1000
lea rdx, [rbp + 0x1f0]
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_ReadFile]
mov r14d, eax
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test r14d, r14d
je 0x140060584
nop dword [rax + rax]
mov ecx, dword [rbp + 0xa4]
test ecx, ecx
je 0x140060584
cmp rcx, 0x1001
jae 0x140060c67
mov byte [rbp + rcx + 0x1f0], 0
lea rax, [rbp + 0x1f0]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400604d1
mov rcx, qword [rbp + 0x90]
mov rdx, qword [rbp + 0x98]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x14006052c
lea rax, [rcx + rsi]
mov qword [rbp + 0x90], rax
lea rdi, [rbp + 0x80]
cmp rdx, 0x10
cmovae rdi, qword [rbp + 0x80]
add rdi, rcx
mov r8, rsi
lea rdx, [rbp + 0x1f0]
mov rcx, rdi
call fcn.1400a5110
mov byte [rdi + rsi], 0
jmp 0x14006054a
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x1f0]
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x80]
call fcn.140002900
test r14d, r14d
je 0x140060584
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0xa4]
mov r8d, 0x1000
lea rdx, [rbp + 0x1f0]
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_ReadFile]
mov r14d, eax
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test r14d, r14d
jne 0x1400604a0
lea rcx, [rbp + 0x80]
mov r14, qword [rbp + 0x80]
mov r15, qword [rbp + 0x98]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [rbp + 0x90]
cmp rsi, 0x11
jne 0x1400605c1
mov r8, rsi
lea rdx, str.Invalid_Arguments
call fcn.1400a5b30
test eax, eax
je 0x140060602
lea rdx, [rbp + 0x80]
cmp r15, 0x10
cmovae rdx, r14
cmp rsi, 6
jne 0x14006062c
mov rcx, r12
lea r8, str.Failed
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x1400605f9
cmp rcx, 6
jne 0x1400605e0
mov eax, r12d
jmp 0x1400605fe
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14006062c
call fcn.140014190
mov rcx, rax
lea r9, str.HPProgrammableKeyAppLoader_failed_to_fetch_the_app_information.
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 5
call fcn.14009cf00
mov rsi, qword [rsp + 0x68]
jmp 0x140060a20
lea r12, [rbp + 0x80]
cmp r15, 0x10
cmovae r12, r14
add r12, rsi
lea rdi, [rbp + 0x80]
cmp r15, 0x10
cmovae rdi, r14
add rdi, rsi
lea rcx, [rbp + 0x80]
cmp r15, 0x10
cmovae rcx, r14
mov r8, rdi
sub r8, rcx
mov edx, SafeArrayGetDim
call fcn.1400a5ab0
mov rcx, rdi
test rax, rax
cmovne rcx, rax
mov r8, rcx
cmp rcx, rdi
je 0x1400606ba
inc rcx
cmp rcx, rdi
je 0x1400606ba
nop dword [rax]
movzx eax, byte [rcx]
cmp al, 0xd
je 0x14006069d
mov byte [r8], al
inc r8
inc rcx
cmp rcx, rdi
jne 0x140060690
mov r15, qword [rbp + 0x98]
mov rsi, qword [rbp + 0x90]
mov r14, qword [rbp + 0x80]
lea rax, [rbp + 0x80]
cmp r15, 0x10
cmovae rax, r14
mov rdx, r8
sub rdx, rax
sub r12, r8
mov rax, rsi
sub rax, rdx
cmp rax, r12
cmovb r12, rax
lea rcx, [rbp + 0x80]
cmp r15, 0x10
cmovae rcx, r14
add rcx, rdx
sub rsi, r12
mov qword [rbp + 0x90], rsi
sub rsi, rdx
lea r8, [rsi + 1]
lea rdx, [rcx + r12]
call fcn.1400a5110
xor r12d, r12d
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xe8], r12
mov qword [rbp + SafeArrayGetDim0], 0xf
mov byte [rbp + 0xd8], r12b
mov esi, r12d
mov rax, qword [rbp + 0x90]
test rax, rax
je 0x1400608f9
mov ecx, r12d
mov qword [rbp + 0xa8], r12
mov rdx, r12
mov qword [rbp + 0xb8], rdx
mov r8d, SafeArrayGetDim
mov qword [rbp + 0xc0], r8
mov byte [rbp + 0xa8], dl
cmp rcx, rax
jae 0x140060809
lea rax, [rbp + 0x80]
mov r9, qword [rbp + 0x80]
mov r10, qword [rbp + 0x98]
cmp r10, 0x10
cmovae rax, r9
cmp byte [rax + rcx], 0xa
je 0x140060809
lea rax, [rbp + 0x80]
cmp r10, 0x10
cmovae rax, r9
movzx r9d, byte [rax + rcx]
cmp rdx, r8
jae 0x1400607d6
lea rax, [rdx + 1]
mov qword [rbp + 0xb8], rax
lea rax, [rbp + 0xa8]
cmp r8, 0x10
cmovae rax, qword [rbp + 0xa8]
mov byte [rax + rdx], r9b
mov byte [rax + rdx + 1], 0
jmp 0x1400607e9
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0xa8]
call fcn.140002790
inc esi
mov ecx, esi
cmp rcx, qword [rbp + 0x90]
jae 0x140060809
mov r8, qword [rbp + 0xc0]
mov rdx, qword [rbp + 0xb8]
jmp 0x140060771
call fcn.1400b95a0
mov r14, rax
lea rdi, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rdi, qword [rbp + 0xa8]
mov dword [rax], r12d
mov r8d, 0xa
lea rdx, [rbp - 0x38]
mov rcx, rdi
call fcn.1400c1bc4
mov r9d, eax
cmp rdi, qword [rbp - 0x38]
je 0x140060c86
cmp dword [r14], 0x22
je 0x140060c79
mov rdx, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xf0]
cmp rdx, r8
jae 0x140060890
lea rcx, [rdx + 1]
mov qword [rbp + 0xe8], rcx
lea rax, [rbp + 0xd8]
cmp r8, 0x10
cmovae rax, qword [rbp + 0xd8]
mov byte [rax + rdx], r9b
mov byte [rax + rdx + 1], 0
jmp 0x1400608a4
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0xd8]
call fcn.140002790
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x1400608e5
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400608e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140060c73
call fcn.140095e90
inc esi
mov ecx, esi
mov rax, qword [rbp + 0x90]
cmp rcx, rax
jb 0x140060744
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
movups xmmword [rbp + 0x1b0], xmm0
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], rax
lea rcx, [rbp + 0x170]
call fcn.14005e710
nop
lea r8, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0x10
cmovae r8, qword [rbp + 0xd8]
mov r9, qword [rbp + 0xe8]
add r9, r8
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x170]
call fcn.140062470
lea rdx, [rbp + 0xa8]
mov rsi, qword [rsp + 0x68]
mov rcx, rsi
call fcn.14002c700
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x1400609d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400609cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140060c6d
call fcn.140095e90
nop
lea rcx, [rbp + 0x170]
call fcn.14005ecd0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0x10
jb 0x140060a20
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140060a1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140060c93
call fcn.140095e90
mov rdi, rsi
cmp qword [rsi + 0x18], 8
jb 0x140060a2d
mov rdi, qword [rsi]
call fcn.140014190
mov rcx, rax
mov qword [rsp + 0x28], rdi
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x20], rax
lea r9, str.String_Length:__d__State_Log:__s
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 3
call fcn.14009cf00
call fcn.140014190
mov rcx, rax
lea r9, str.HPProgrammableKeyAppLoader_launched_process_finished_it_task.
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 2
call fcn.14009cf00
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140060abe
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140060ab8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140060c59
call fcn.140095e90
nop
mov rsi, qword [rsp + 0x60]
jmp 0x140060af1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
lea r9, str.AdjustTokenPrivileges_failed._Error:_0x_08X
mov dword [rsp + 0x20], edi
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 5
mov rcx, rax
call fcn.14009cf00
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x140060b00
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x140060b0f
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140060b4d
call sub.USERENV.dll_DestroyEnvironmentBlock
test eax, eax
jne 0x140060b4d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
mov rcx, rax
mov dword [rsp + 0x20], edi
lea r9, str.DestroyEnvironmentBlock__LastError___d_
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 5
call fcn.14009cf00
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x140060b5c
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test rsi, rsi
je 0x140060b6a
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140060bcc
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea r8, [rbp + 0x118]
xor edx, edx
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_AdjustTokenPrivileges]
test eax, eax
jne 0x140060bc2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
call fcn.140014190
mov rcx, rax
mov dword [rsp + 0x20], edi
lea r9, str.Reverse_AdjustTokenPrivileges__LastError___d_
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 5
call fcn.14009cf00
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov byte [0x1401337c0], 1
lea rcx, [0x1401376b0]
call fcn.140075600
call fcn.140014190
mov rcx, rax
mov dword [rsp + 0x20], r13d
lea r9, str.Return:_0x_08X
lea r8, str.ProgrammableKey::LaunchAppInfoLoader
mov edx, 1
call fcn.14009cf00
nop
lea rcx, [0x140137660]
call fcn.1400745ec
nop
test rbx, rbx
je 0x140060c2c
mov rcx, rbx
call fcn.140099040
mov edx, 0x28
mov rcx, rbx
call fcn.140095e90
mov eax, r13d
mov rcx, qword [rbp + 0x1200]
xor rcx, rsp
call fcn.1400964b0
mov rbx, qword [rsp + 0x1360]
add rsp, 0x1310
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400b1720
nop
mov ecx, eax
call fcn.140074208
nop
call fcn.1400967f4
nop
call fcn.1400b1720
nop
call fcn.1400b1720
nop
lea rcx, str.stoi_argument_out_of_range
call fcn.140072c14
int3
lea rcx, str.invalid_stoi_argument
call fcn.140072bc0
nop
call fcn.1400b1720
int3