Function at 0x140068780
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x38
cmp qword [0x1401e5b98], 0
mov qword [rsp + 0x48], rsi
mov esi, ecx
jne 0x1400687b1
call fcn.140067350
mov rcx, rax
lea rdx, str.WIMCreateFile
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5b98], rax
cmp qword [0x1401e5c80], 0
jne 0x1400687d7
call fcn.140067350
mov rcx, rax
lea rdx, str.WIMSetTemporaryPath
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5c80], rax
cmp qword [0x1401e5750], 0
jne 0x1400687fd
call fcn.140067350
mov rcx, rax
lea rdx, str.WIMLoadImage
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5750], rax
cmp qword [0x1401e5c78], 0
jne 0x140068823
call fcn.140067350
mov rcx, rax
lea rdx, str.WIMApplyImage
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5c78], rax
cmp qword [0x1401e5968], 0
jne 0x140068849
call fcn.140067350
mov rcx, rax
lea rdx, str.WIMExtractImagePath
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5968], rax
cmp qword [0x1401e5c60], 0
jne 0x14006886f
call fcn.140067350
mov rcx, rax
lea rdx, str.WIMGetImageInformation
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5c60], rax
cmp qword [0x1401e5c68], 0
jne 0x140068895
call fcn.140067350
mov rcx, rax
lea rdx, str.WIMRegisterMessageCallback
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5c68], rax
cmp qword [0x1401e5c50], 0
jne 0x1400688bb
call fcn.140067350
mov rcx, rax
lea rdx, str.WIMUnregisterMessageCallback
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5c50], rax
mov rax, qword [0x1401e5c90]
test rax, rax
jne 0x1400688e3
call fcn.140067350
mov rcx, rax
lea rdx, str.WIMCloseHandle
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5c90], rax
cmp qword [0x1401e5b98], 0
je 0x140068917
cmp qword [0x1401e5c80], 0
je 0x140068917
cmp qword [0x1401e5750], 0
je 0x140068917
cmp qword [0x1401e5968], 0
je 0x140068917
test rax, rax
je 0x140068917
or byte [0x1401d05dd], 1
mov qword [rsp + 0x40], rbx
lea r9, [0x1401e5a80]
mov r8d, 1
mov qword [rsp + 0x30], rdi
lea rdx, [0x140171948]
mov dword [rsp + 0x20], 0x104
mov rcx, 0xffffffff80000001
call fcn.140067930
test eax, eax
jne 0x140068979
lea r9, [0x1401e5a80]
mov dword [rsp + 0x20], 0x104
mov r8d, 1
lea rdx, [0x140171948]
mov rcx, 0xffffffff80000002
call fcn.140067930
test eax, eax
je 0x1400689d6
mov r9, 0xffffffffffffffff
lea r8, str.7z.exe
mov edx, 0x104
lea rcx, [0x1401e5a80]
call fcn.1400e8d6c
lea rcx, [0x1401e5a80]
call fcn.140067550
xor edx, edx
mov rcx, rax
mov rbx, rax
call fcn.14010a89c
mov edi, eax
test rbx, rbx
je 0x1400689c0
mov rcx, rbx
call fcn.1400e8c70
cmp edi, 0xffffffff
je 0x1400689d6
movzx eax, byte [0x1401d05dd]
or al, 2
mov byte [0x1401d05dd], al
jmp 0x1400689dd
movzx eax, byte [0x1401d05dd]
test al, 1
je 0x140068a07
cmp qword [0x1401e5c78], 0
je 0x140068a07
cmp qword [0x1401e5c68], 0
je 0x140068a07
cmp qword [0x1401e5c50], 0
je 0x140068a07
or al, 4
mov byte [0x1401d05dd], al
test esi, esi
mov rsi, qword [rsp + 0x48]
jne 0x140068a80
lea r8, [0x1401564ce]
lea rbx, str.NONE
test al, 2
je 0x140068a2b
lea rdx, [0x140171bc4]
jmp 0x140068a34
test al, 1
mov rdx, rbx
cmovne rdx, r8
test al, 1
lea rcx, [0x140171bc0]
mov r9, r8
lea rdi, str.wimgapi.dll
cmovne r9, rdi
and al, 3
cmp al, 3
cmove r8, rcx
lea rcx, str.WIM_extraction_method_s__supported:__s_s_s
call fcn.14004f2f0
test byte [0x1401d05dd], 4
lea rcx, str.WIM_apply_method_supported:__s
cmovne rbx, rdi
mov rdx, rbx
call fcn.14004f2f0
movzx eax, byte [0x1401d05dd]
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x40]
add rsp, 0x38
ret