Function at 0x14001ba80
Capabilities:
Create thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x248
movaps xmmword [rsp + 0x230], xmm6
mov r14, rcx
mov rcx, qword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2b0]
mov dword [rsp + 0x68], r8d
mov dword [rsp + 0xbc], r9d
cmp byte [0x140288570], 0
jne 0x14001cbc5
mov ebp, r9d
mov ebx, r8d
mov qword [rsp + 0x70], rdx
mov rax, rcx
test rcx, rcx
mov qword [rsp + 0x140], rcx
je 0x14001bb4d
cmp rax, 0xffffffffffffffff
je 0x14001bb6c
add esi, 3
mov dword [rsp + 0x6c], esi
mov rax, qword [rsp + 0x70]
lea rsi, [rax + 2]
test byte [rax], 1
mov rcx, rsi
je 0x14001bb0d
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x10]
lea rdx, str.larges
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x14001bb7d
mov rax, qword [rsp + 0x70]
test byte [rax], 1
mov rcx, rsi
je 0x14001bb33
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x10]
lea rdx, str.unlockeds
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14001bb85
mov dword [rsp + 0x6c], 0
jmp 0x14001bb85
mov ecx, 8
call fcn.14006fb50
mov qword [rax], 0
mov qword [rsp + 0x2d0], rax
cmp rax, 0xffffffffffffffff
jne 0x14001baec
mov qword [rsp + 0x2d0], 0
jmp 0x14001baec
mov dword [rsp + 0x6c], 2
xorps xmm0, xmm0
movaps xmmword [rsp + 0x150], xmm0
mov eax, dword [r14 + 0x10]
cmp eax, ebx
jge 0x14001bb9e
mov dword [rsp + 0x68], eax
mov ebx, eax
mov qword [rsp + 0x1b0], rsi
cmp ebp, 2
setge byte [rsp + 0x67]
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], 0
mov dword [rsp + 0x14c], ebx
mov qword [rsp + 0x1f8], 0
mov ecx, 0x48
call fcn.14006fb50
xorps xmm0, xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x40], 0
mov qword [rsp + 0x78], rax
xor edx, edx
mov rsi, qword [sym.imp.KERNEL32.DLL_CreateEventA]
nop word [rax + rax]
test rdx, rdx
je 0x14001bc20
cmp qword [rax], 0
jne 0x14001bc57
jmp 0x14001bc3e
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, rax
mov rax, qword [rsp + 0x78]
mov qword [rax + 8], rcx
cmp qword [rax], 0
jne 0x14001bc57
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x10]
test rcx, rcx
jne 0x14001bc78
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, rax
mov rax, qword [rsp + 0x78]
mov qword [rax + 0x10], rcx
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x14001bc10
cmp qword [rax], 0
je 0x14001bc10
test rcx, rcx
je 0x14001bc10
lea r15, [0x14002a4a0]
mov rsi, qword [sym.imp.KERNEL32.DLL_CreateThread]
nop word [rax + rax]
mov r9, qword [rsp + 0x78]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov edx, 0x40000
xor ecx, ecx
mov r8, r15
call rsi
test rax, rax
je 0x14001bca0
mov qword [rsp + 0x1b8], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], 0
movaps xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], 0
cmp dword [rsp + 0x68], 0
jle 0x14001c10f
movabs r12, 0x1fffffffffffffff
xor r13d, r13d
mov qword [rsp + 0x168], r14
jmp 0x14001bd35
mov qword [rax + r13*8], rcx
inc r13
movsxd rax, dword [rsp + 0x68]
cmp r13, rax
jge 0x14001c10f
mov rbp, qword [r14 + 8]
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rsp + 0xb0]
cmp rdx, rax
jae 0x14001bd70
mov qword [rdx], rbp
add rdx, 8
mov qword [rsp + 0xa8], rdx
jmp 0x14001bedb
mov rcx, qword [rsp + 0xa0]
mov r15, rdx
sub r15, rcx
mov rsi, r15
sar rsi, 3
lea r8, [rsi + 1]
cmp r8, r12
ja 0x14001cbe1
sub rax, rcx
movabs r9, 0x7fffffffffffffef
add r9, 9
mov rdi, rax
shr rdi, 2
cmp rdi, r8
cmovbe rdi, r8
cmp rax, r9
cmovae rdi, r12
test rdi, rdi
je 0x14001bde5
cmp rdi, r12
ja 0x14001cc08
lea rcx, [rdi*8]
call fcn.14006fb50
mov rcx, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0xa8]
jmp 0x14001bde7
xor eax, eax
lea r8, [rax + rsi*8]
mov qword [rax + rsi*8], rbp
mov r10, rdx
sub r10, rcx
je 0x14001bead
add r10, 0xfffffffffffffff8
cmp r10, 0x98
jae 0x14001be10
mov r9, rdx
jmp 0x14001be90
add r15, rax
mov r9, rdx
sub r9, r15
cmp r9, 0x20
jae 0x14001be24
mov r9, rdx
jmp 0x14001be90
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea r14, [r11*8]
sub r8, r14
mov r9, rdx
sub r9, r14
lea r15, [rax + rsi*8]
add r15, 0xfffffffffffffff0
mov rbp, r11
neg rbp
xor r14d, r14d
nop word cs:[rax + rax]
movups xmm0, xmmword [rdx + r14*8 - 0x20]
movups xmm1, xmmword [rdx + r14*8 - 0x10]
movups xmmword [r15 + r14*8], xmm1
movups xmmword [r15 + r14*8 - 0x10], xmm0
add r14, 0xfffffffffffffffc
cmp rbp, r14
jne 0x14001be60
cmp r10, r11
mov r14, qword [rsp + 0x168]
je 0x14001bea5
nop dword [rax]
mov rdx, qword [r9 - 8]
add r9, 0xfffffffffffffff8
mov qword [r8 - 8], rdx
add r8, 0xfffffffffffffff8
cmp r9, rcx
jne 0x14001be90
mov rcx, qword [rsp + 0xa0]
lea rdx, [rax + rdi*8]
lea rax, [rax + rsi*8]
add rax, 8
mov qword [rsp + 0xa0], r8
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rdx
test rcx, rcx
je 0x14001bedb
call fcn.14006fbd0
mov ecx, 0x20
call fcn.14006fb50
mov r15, rax
mov rcx, rax
call fcn.14005e7e0
mov r8, qword [rsp + 0x88]
cmp r8, qword [rsp + 0x90]
je 0x14001bf20
mov qword [r8], r15
add r8, 8
mov qword [rsp + 0x88], r8
jmp 0x14001c08b
mov rcx, qword [rsp + 0x80]
mov rbp, r8
sub rbp, rcx
mov rsi, rbp
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r12
ja 0x14001cbfb
movabs rdx, 0x7fffffffffffffef
add rdx, 9
mov rdi, rbp
shr rdi, 2
cmp rdi, rax
cmovbe rdi, rax
cmp rbp, rdx
cmovae rdi, r12
test rdi, rdi
je 0x14001bf92
cmp rdi, r12
ja 0x14001cc12
lea rcx, [rdi*8]
call fcn.14006fb50
mov rcx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
jmp 0x14001bf94
xor eax, eax
lea rdx, [rax + rsi*8]
mov qword [rax + rsi*8], r15
mov r10, r8
sub r10, rcx
je 0x14001c05d
add r10, 0xfffffffffffffff8
cmp r10, 0x98
jae 0x14001bfbd
mov r9, r8
jmp 0x14001c040
add rbp, rax
mov r9, r8
sub r9, rbp
cmp r9, 0x20
jae 0x14001bfd1
mov r9, r8
jmp 0x14001c040
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea r14, [r11*8]
sub rdx, r14
mov r9, r8
sub r9, r14
lea r15, [rax + rsi*8]
add r15, 0xfffffffffffffff0
mov rbp, r11
neg rbp
xor r14d, r14d
nop word cs:[rax + rax]
movups xmm0, xmmword [r8 + r14*8 - 0x20]
movups xmm1, xmmword [r8 + r14*8 - 0x10]
movups xmmword [r15 + r14*8], xmm1
movups xmmword [r15 + r14*8 - 0x10], xmm0
add r14, 0xfffffffffffffffc
cmp rbp, r14
jne 0x14001c010
cmp r10, r11
mov r14, qword [rsp + 0x168]
je 0x14001c055
nop dword [rax]
mov r8, qword [r9 - 8]
add r9, 0xfffffffffffffff8
mov qword [rdx - 8], r8
add rdx, 0xfffffffffffffff8
cmp r9, rcx
jne 0x14001c040
mov rcx, qword [rsp + 0x80]
lea r8, [rax + rdi*8]
lea rax, [rax + rsi*8]
add rax, 8
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], r8
test rcx, rcx
je 0x14001c08b
call fcn.14006fbd0
test r13, r13
je 0x14001bd24
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rax + r13*8]
test r13b, 7
je 0x14001c0d0
mov edx, r13d
and edx, 7
xor r8d, r8d
nop
mov rcx, qword [rcx + 8]
inc r8
cmp rdx, r8
jne 0x14001c0b0
mov rdx, r13
sub rdx, r8
cmp r13, 8
jb 0x14001bd20
jmp 0x14001c0dd
mov rdx, r13
cmp r13, 8
jb 0x14001bd20
dec rdx
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
add rdx, 0xfffffffffffffff8
cmp rdx, 0xfffffffffffffffe
jb 0x14001c0e0
jmp 0x14001bd20
mov qword [rsp + 0x1f0], r14
mov qword [rsp + 0x220], 0
mov ecx, 0xa0
call fcn.14006fb50
lea rcx, [0x1401fce58]
mov qword [rax], rcx
lea rcx, [rsp + 0xa0]
mov qword [rax + 8], rcx
lea rcx, [rsp + 0x1f0]
mov qword [rax + 0x10], rcx
lea rcx, [rsp + 0x67]
mov qword [rax + 0x18], rcx
lea rcx, [rsp + 0x80]
mov qword [rax + 0x20], rcx
lea rcx, [rsp + 0x2c0]
mov qword [rax + 0x28], rcx
lea rcx, [rsp + 0x2b0]
mov qword [rax + 0x30], rcx
lea rcx, [rsp + 0x2b8]
mov qword [rax + 0x38], rcx
lea rcx, [rsp + 0xbc]
mov qword [rax + 0x40], rcx
lea rcx, [rsp + 0x2d0]
mov qword [rax + 0x48], rcx
lea rcx, [rsp + 0x14c]
mov qword [rax + 0x50], rcx
lea rcx, [rsp + 0x78]
mov qword [rax + 0x58], rcx
lea rcx, [rsp + 0x2d8]
mov qword [rax + 0x60], rcx
lea rcx, [rsp + 0x2e0]
mov qword [rax + 0x68], rcx
mov rcx, qword [rsp + 0x2e8]
mov qword [rax + 0x70], rcx
lea rcx, [rsp + 0x2c8]
mov qword [rax + 0x78], rcx
lea rcx, [rsp + 0x6c]
mov qword [rax + 0x80], rcx
mov rcx, qword [rsp + 0x70]
mov qword [rax + 0x88], rcx
lea rcx, [rsp + 0x1f8]
mov qword [rax + 0x90], rcx
lea rcx, [rsp + 0x68]
mov qword [rax + 0x98], rcx
mov qword [rsp + 0x220], rax
cmp dword [rsp + 0x68], 0
jle 0x14001c411
xor edi, edi
movabs r14, 0xfffffffffffffff
lea rbx, [rsp + 0x200]
jmp 0x14001c273
mov qword [r12], r13
mov qword [r12 + 8], r15
add r12, 0x10
mov qword [rsp + 0xc8], r12
inc edi
mov eax, dword [rsp + 0x68]
cmp edi, eax
jge 0x14001c3be
mov ecx, 4
call fcn.14006fb50
mov r15, rax
mov dword [rax], edi
mov ecx, 8
call fcn.14006fb50
mov r13, rax
mov rcx, rax
mov rdx, rbx
mov r8, r15
call fcn.14002a570
jmp 0x14001c2c0
mov r12, qword [rsp + 0xc8]
mov rax, qword [rsp + 0xd0]
cmp r12, rax
jb 0x14001c250
mov rsi, qword [rsp + 0xc0]
mov rbp, r12
sub rbp, rsi
sar rbp, 4
lea rcx, [rbp + 1]
cmp rcx, r14
ja 0x14001cbee
mov r8, r14
sub rax, rsi
movabs rdx, 0x7fffffffffffffef
inc rdx
mov r14, rax
shr r14, 3
cmp r14, rcx
cmovbe r14, rcx
cmp rax, rdx
cmovae r14, r8
test r14, r14
je 0x14001c33c
cmp r14, r8
ja 0x14001cc0d
mov rcx, r14
shl rcx, 4
call fcn.14006fb50
jmp 0x14001c33e
xor eax, eax
shl rbp, 4
lea rcx, [rax + rbp]
shl r14, 4
add r14, rax
mov qword [rax + rbp], r13
mov qword [rax + rbp + 8], r15
cmp r12, rsi
je 0x14001c37f
nop dword [rax + rax]
movups xmm0, xmmword [r12 - 0x10]
add r12, 0xfffffffffffffff0
movups xmmword [rcx - 0x10], xmm0
add rcx, 0xfffffffffffffff0
cmp r12, rsi
jne 0x14001c360
mov r12, qword [rsp + 0xc0]
add rax, rbp
add rax, 0x10
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], r14
test r12, r12
movabs r14, 0xfffffffffffffff
je 0x14001c265
mov rcx, r12
call fcn.14006fbd0
jmp 0x14001c265
test eax, eax
jle 0x14001c411
mov rsi, qword [rsp + 0xc0]
xor edi, edi
jmp 0x14001c3e1
inc rdi
movsxd rax, dword [rsp + 0x68]
add rsi, 0x10
cmp rdi, rax
jge 0x14001c411
mov rcx, qword [rsi]
call fcn.140074b60
mov r14, qword [rsi]
test r14, r14
je 0x14001c401
mov rcx, r14
call fcn.140074b40
mov rcx, r14
call fcn.14006fbd0
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001c3d0
call fcn.14006fbd0
jmp 0x14001c3d0
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.DLL_SetEvent]
mov rcx, qword [rsp + 0x1b8]
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp dword [rsp + 0xbc], 1
jne 0x14001c5c0
movsxd rax, dword [rsp + 0x2b0]
mov rcx, qword [0x140288290]
lea rax, [rax + rax*2]
movzx edx, byte [rsp + 0x2b8]
mov rsi, qword [rcx + rax*8]
lea rdi, [rdx + rdx*2]
cmp qword [rsi + rdi*8 + 0x10], 0
je 0x14001c5c0
lea rcx, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x70]
call fcn.1400721d0
lea rcx, [rsi + rdi*8]
mov r8d, dword [rsp + 0x68]
mov eax, dword [rsp + 0x2b0]
movzx edx, byte [rsp + 0x2b8]
mov r9, qword [rsp + 0x2c0]
movups xmm0, xmmword [rsp + 0x2d8]
mov r10, qword [rsp + 0x2e8]
mov qword [rsp + 0x58], r10
movups xmmword [rsp + 0x48], xmm0
mov r10, qword [rsp + 0x140]
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x30], r9
mov byte [rsp + 0x28], dl
mov dword [rsp + 0x20], eax
mov qword [rsp + 0x38], 4
lea rdx, [rsp + 0x1d8]
mov r9d, 2
call fcn.14001ba80
test byte [rsp + 0x1d8], 1
je 0x14001c504
mov rcx, qword [rsp + 0x1e8]
call fcn.14006fbd0
movsxd rax, dword [rsp + 0x2b0]
mov rcx, qword [0x1402882a8]
lea rax, [rax + rax*2]
movzx esi, byte [rsp + 0x2b8]
mov rdi, qword [rcx + rax*8]
lea rcx, [rsp + 0x1c0]
mov rdx, qword [rsp + 0x70]
call fcn.1400721d0
lea rax, [rsi + rsi*2]
lea rcx, [rdi + rax*8]
mov r8d, dword [rsp + 0x68]
mov eax, dword [rsp + 0x2b0]
movzx edx, byte [rsp + 0x2b8]
mov r9, qword [rsp + 0x2c0]
movups xmm0, xmmword [rsp + 0x2d8]
mov r10, qword [rsp + 0x2e8]
mov qword [rsp + 0x58], r10
movups xmmword [rsp + 0x48], xmm0
mov r10, qword [rsp + 0x140]
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x30], r9
mov byte [rsp + 0x28], dl
mov dword [rsp + 0x20], eax
mov qword [rsp + 0x38], 4
lea rdx, [rsp + 0x1c0]
mov r9d, 3
call fcn.14001ba80
test byte [rsp + 0x1c0], 1
je 0x14001c5c0
mov rcx, qword [rsp + 0x1d0]
call fcn.14006fbd0
cmp byte [rsp + 0x67], 0
je 0x14001c5de
movzx edi, byte [0x140288308]
mov ecx, edi
and cl, 1
je 0x14001c5fc
mov rdi, qword [0x140288310]
jmp 0x14001c5ff
movzx esi, byte [0x140288308]
mov ecx, esi
and cl, 1
je 0x14001c754
mov rsi, qword [0x140288310]
jmp 0x14001c757
shr rdi, 1
lea rsi, [rdi + 0x3a]
movabs rax, 0x7fffffffffffffef
cmp rsi, rax
ja 0x14001cc26
cmp rsi, 0xa
ja 0x14001c642
xorps xmm0, xmm0
movaps xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], 0
add sil, sil
mov byte [rsp + 0x120], sil
xor eax, eax
jmp 0x14001c683
mov rbx, rsi
or rbx, 7
inc rbx
js 0x14001cc21
lea rcx, [rbx + rbx]
call fcn.14006fb50
or rbx, 1
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x128], rsi
movzx ecx, byte [0x140288308]
and cl, 1
mov esi, ebx
test sil, 1
lea rsi, [rsp + 0x122]
cmovne rsi, rax
test cl, cl
je 0x14001c6a0
mov rdx, qword [0x140288318]
jmp 0x14001c6a7
lea rdx, [0x14028830a]
lea r8, [rdi + rdi]
mov rcx, rsi
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.ProgramDataAdobeExtension_Manager_CCLogsunlockeds.txt]
movups xmmword [rsi + rdi*2], xmm0
movups xmm0, xmmword [0x1401fa772]
movups xmmword [rsi + rdi*2 + 0x10], xmm0
movups xmm0, xmmword [0x1401fa782]
movups xmmword [rsi + rdi*2 + 0x20], xmm0
movups xmm0, xmmword [0x1401fa792]
movups xmmword [rsi + rdi*2 + 0x30], xmm0
movups xmm0, xmmword [0x1401fa7a2]
movups xmmword [rsi + rdi*2 + 0x40], xmm0
movups xmm0, xmmword [0x1401fa7b2]
movups xmmword [rsi + rdi*2 + 0x50], xmm0
movups xmm0, xmmword [0x1401fa7c2]
movups xmmword [rsi + rdi*2 + 0x60], xmm0
mov dword [rsi + rdi*2 + 0x70], 0x740078
mov word [rsi + rdi*2 + 0x74], 0
mov r9, qword [rsp + 0x2c8]
mov byte [rsp + 0x20], 1
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x120]
xor ecx, ecx
call fcn.140029e00
test byte [rsp + 0x120], 1
je 0x14001c970
mov rcx, qword [rsp + 0x130]
jmp 0x14001c96b
shr rsi, 1
lea rdi, [rsi + 0x2d]
movabs rax, 0x7fffffffffffffef
cmp rdi, rax
ja 0x14001cc33
mov ebx, dword [rsp + 0x6c]
cmp rdi, 0xa
ja 0x14001c79e
xorps xmm0, xmm0
movaps xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], 0
add dil, dil
mov byte [rsp + 0x100], dil
xor eax, eax
jmp 0x14001c7e0
mov r14, rdi
or r14, 7
inc r14
js 0x14001cc40
lea rcx, [r14 + r14]
call fcn.14006fb50
or r14, 1
mov qword [rsp + 0x100], r14
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x108], rdi
movzx ecx, byte [0x140288308]
and cl, 1
mov edi, r14d
test dil, 1
lea r14, [rsp + 0x102]
cmovne r14, rax
test cl, cl
je 0x14001c7fd
mov rdx, qword [0x140288318]
jmp 0x14001c804
lea rdx, [0x14028830a]
lea r8, [rsi + rsi]
mov rcx, r14
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.ProgramDataAdobeExtension_Manager_CCLogs_]
movups xmmword [r14 + rsi*2], xmm0
movups xmm0, xmmword [0x1401fa7e8]
movups xmmword [r14 + rsi*2 + 0x10], xmm0
movups xmm0, xmmword [0x1401fa7f8]
movups xmmword [r14 + rsi*2 + 0x20], xmm0
movups xmm0, xmmword [0x1401fa808]
movups xmmword [r14 + rsi*2 + 0x30], xmm0
movups xmm0, xmmword [0x1401fa818]
movups xmmword [r14 + rsi*2 + 0x40], xmm0
movups xmm0, xmmword [0x1401fa822]
movups xmmword [r14 + rsi*2 + 0x4a], xmm0
mov word [r14 + rsi*2 + 0x5a], 0
mov rax, qword [rsp + 0x70]
movzx r8d, byte [rax]
test r8b, 1
je 0x14001c87e
mov rdx, qword [rax + 0x10]
mov r8, qword [rax + 8]
jmp 0x14001c889
shr r8, 1
mov rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x100]
call fcn.140072750
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x180], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x170], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, str..txt
lea rcx, [rsp + 0x170]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1a0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x190], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov r9, qword [rsp + 0x2c8]
mov byte [rsp + 0x20], 1
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x190]
mov ecx, ebx
call fcn.140029e00
test byte [rsp + 0x190], 1
jne 0x14001c935
test byte [rsp + 0x170], 1
jne 0x14001c94c
test byte [rsp + 0x100], 1
jne 0x14001c963
jmp 0x14001c970
mov rcx, qword [rsp + 0x1a0]
call fcn.14006fbd0
test byte [rsp + 0x170], 1
je 0x14001c929
mov rcx, qword [rsp + 0x180]
call fcn.14006fbd0
test byte [rsp + 0x100], 1
je 0x14001c970
mov rcx, qword [rsp + 0x110]
call fcn.14006fbd0
movzx edi, byte [0x140288308]
mov ecx, edi
and cl, 1
je 0x14001c987
mov rdi, qword [0x140288310]
jmp 0x14001c98a
shr rdi, 1
lea rsi, [rdi + 0x36]
movabs rax, 0x7fffffffffffffef
cmp rsi, rax
ja 0x14001cc17
cmp rsi, 0xa
ja 0x14001c9cd
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], 0
add sil, sil
mov byte [rsp + 0xe0], sil
xor eax, eax
jmp 0x14001ca0e
mov rbx, rsi
or rbx, 7
inc rbx
js 0x14001cc21
lea rcx, [rbx + rbx]
call fcn.14006fb50
or rbx, 1
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xe8], rsi
movzx ecx, byte [0x140288308]
and cl, 1
mov esi, ebx
test sil, 1
lea rsi, [rsp + 0xe2]
cmovne rsi, rax
test cl, cl
je 0x14001ca2b
mov rdx, qword [0x140288318]
jmp 0x14001ca32
lea rdx, [0x14028830a]
lea r8, [rdi + rdi]
mov rcx, rsi
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.ProgramDataAdobeExtension_Manager_CCLogs_fails.txt]
movups xmmword [rsi + rdi*2], xmm0
movups xmm0, xmmword [0x1401fa84e]
movups xmmword [rsi + rdi*2 + 0x10], xmm0
movups xmm0, xmmword [0x1401fa85e]
movups xmmword [rsi + rdi*2 + 0x20], xmm0
movups xmm0, xmmword [0x1401fa86e]
movups xmmword [rsi + rdi*2 + 0x30], xmm0
movups xmm0, xmmword [0x1401fa87e]
movups xmmword [rsi + rdi*2 + 0x40], xmm0
movups xmm0, xmmword [0x1401fa88e]
movups xmmword [rsi + rdi*2 + 0x50], xmm0
movups xmm0, xmmword [0x1401fa89a]
movups xmmword [rsi + rdi*2 + 0x5c], xmm0
mov word [rsi + rdi*2 + 0x6c], 0
mov byte [rsp + 0x20], 1
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0xe0]
mov r9d, 0xa
mov ecx, 1
call fcn.140029e00
test byte [rsp + 0xe0], 1
je 0x14001cad4
mov rcx, qword [rsp + 0xf0]
call fcn.14006fbd0
mov rax, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
cmp rdx, rax
je 0x14001cb22
xor esi, esi
jmp 0x14001cb02
inc rsi
mov rcx, rdx
sub rcx, rax
sar rcx, 3
cmp rsi, rcx
jae 0x14001cb22
mov rcx, qword [rax + rsi*8]
test rcx, rcx
je 0x14001caf0
call fcn.14006fbd0
mov rax, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
jmp 0x14001caf0
mov rcx, qword [rsp + 0x2d0]
test rcx, rcx
je 0x14001cb3e
cmp rcx, qword [rsp + 0x140]
je 0x14001cb3e
call fcn.14006fbd0
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0x200]
cmp rdx, rcx
je 0x14001cb64
test rdx, rdx
je 0x14001cb72
mov rax, qword [rdx]
add rax, 0x28
mov rcx, rdx
jmp 0x14001cb70
mov rax, qword [rsp + 0x200]
add rax, 0x20
call qword [rax]
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001cb8c
mov qword [rsp + 0xa8], rcx
call fcn.14006fbd0
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x14001cb9e
call fcn.14006fbd0
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14001cbb8
mov qword [rsp + 0x88], rcx
call fcn.14006fbd0
mov rcx, qword [rsp + 0x150]
call fcn.1401f47c0
movaps xmm6, xmmword [rsp + 0x230]
add rsp, 0x248
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0xa0]
call fcn.14004a9a0
lea rcx, [rsp + 0xc0]
call fcn.14004bd20
lea rcx, [rsp + 0x80]
call fcn.14004a9c0
call fcn.140002f60
call fcn.140002f60
call fcn.140002f60
lea rcx, [rsp + 0xe0]
jmp 0x14001cc2e
call fcn.140002f60
lea rcx, [rsp + 0x120]
call fcn.140002ec0
lea rcx, [rsp + 0x100]
call fcn.140002ec0
call fcn.140002f60
jmp 0x14001cd60
mov rsi, rax
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0x200]
cmp rdx, rcx
jne 0x14001cd86
mov rax, qword [rsp + 0x200]
add rax, 0x20
jmp 0x14001cd95
test rdx, rdx
je 0x14001cd9e
mov rax, qword [rdx]
add rax, 0x28
mov rcx, rdx
call qword [rax]
jmp 0x14001cd9e
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001cdb8
mov qword [rsp + 0xa8], rcx
call fcn.14006fbd0
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x14001cdd7
mov qword [rsp + 0xc8], rcx
call fcn.14006fbd0
jmp 0x14001cdd7
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14001cdf1
mov qword [rsp + 0x88], rcx
call fcn.14006fbd0
mov rcx, qword [rsp + 0x150]
call fcn.1401f47c0
mov rcx, rsi
call fcn.14009a110
int3