Function at 0x140153df0
Capabilities:
Create directory
Get common file path

Disassembly:
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x2060
call fcn.1401da720
sub rsp, rax
mov qword [rsp + 0x1670], 0xfffffffffffffffe
mov rax, qword [0x1402aa5c0]
xor rax, rsp
mov qword [rsp + 0x2050], rax
mov edx, 0x400
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov edx, 1
mov rcx, qword [rsp + 0x2070]
call fcn.14007c754
lea rdx, [0x14023bd00]
lea rcx, [rsp + 0x40]
call fcn.140002100
nop
lea rcx, [rsp + 0x30]
call fcn.140005560
nop
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1118]
call fcn.14011d190
mov qword [rsp + 0x1678], rax
mov rax, qword [rsp + 0x1678]
mov qword [rsp + 0x1680], rax
lea r8, [0x14023bd20]
mov rdx, qword [rsp + 0x1680]
lea rcx, [rsp + 0x1120]
call fcn.1400010b0
mov qword [rsp + 0x1688], rax
mov rcx, qword [rsp + 0x1688]
call fcn.14000f8f0
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.140005720
test eax, eax
jne 0x140153ef0
mov dword [rsp + 0x1690], 1
jmp 0x140153efb
mov dword [rsp + 0x1690], 0
movzx eax, byte [rsp + 0x1690]
mov byte [rsp + 0x1110], al
lea rcx, [rsp + 0x1120]
call fcn.140001490
nop
lea rcx, [rsp + 0x1118]
call fcn.140001490
movzx edx, byte [rsp + 0x1110]
test edx, edx
je 0x140153f78
mov dword [rsp + 0x850], 1
lea r8, [rsp + 0x850]
lea rdx, [0x14023bd40]
lea rcx, [rsp + 0x30]
call fcn.1400057b0
mov r8d, dword [rsp + 0x850]
lea rdx, [0x14023bd50]
lea rcx, [rsp + 0x40]
call fcn.140002c70
lea rcx, [rsp + 0x30]
call fcn.1400055f0
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1130]
call fcn.14011d190
mov qword [rsp + 0x1698], rax
lea rdx, [0x14023baa4]
mov rcx, qword [rsp + 0x1698]
call fcn.140006d90
mov byte [rsp + 0x1128], al
lea rcx, [rsp + 0x1130]
call fcn.140001490
movzx edx, byte [rsp + 0x1128]
test edx, edx
je 0x14015406d
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1138]
call fcn.14011d190
mov qword [rsp + 0x16a0], rax
mov rax, qword [rsp + 0x16a0]
mov qword [rsp + 0x16a8], rax
lea r8, str.SYSTEMCurrentControlSet
mov rdx, qword [rsp + 0x16a8]
lea rcx, [rsp + 0x1140]
call fcn.1400010b0
mov qword [rsp + 0x16b0], rax
mov rax, qword [rsp + 0x16b0]
mov qword [rsp + 0x16b8], rax
mov rcx, qword [rsp + 0x16b8]
call fcn.14000f8f0
mov rcx, rax
call fcn.14011cf60
nop
lea rcx, [rsp + 0x1140]
call fcn.140001490
nop
lea rcx, [rsp + 0x1138]
call fcn.140001490
mov dword [rsp + 0x28], 0
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rcx, rax
call fcn.14000cd60
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x20], 0
je 0x140157635
mov eax, dword [rsp + 0x28]
add eax, 1
mov dword [rsp + 0x28], eax
mov edi, dword [rsp + 0x28]
imul edi, edi, 0x64
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rcx, rax
call fcn.140019cd0
mov ecx, eax
xor edx, edx
mov eax, edi
div ecx
mov rcx, qword [rsp + 0x2070]
add rcx, 0x2c8
mov edx, eax
call fcn.140014a40
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x20]
mov rcx, rax
call fcn.140082e54
test eax, eax
je 0x14015760a
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x20]
mov rcx, rax
call fcn.14000cce0
mov qword [rsp + 0x858], rax
cmp qword [rsp + 0x858], 0
je 0x14015760a
mov eax, dword [rsp + 0x28]
add eax, 1
mov dword [rsp + 0x28], eax
mov edi, dword [rsp + 0x28]
imul edi, edi, 0x64
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rcx, rax
call fcn.140019cd0
mov ecx, eax
xor edx, edx
mov eax, edi
div ecx
mov rcx, qword [rsp + 0x2070]
add rcx, 0x2c8
mov edx, eax
call fcn.140014a40
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
mov r9d, 2
mov r8, qword [rsp + 0x858]
lea rdx, [rsp + 0x860]
call fcn.1400f72a0
nop
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
mov r9d, 1
mov r8, qword [rsp + 0x858]
lea rdx, [rsp + 0x878]
call fcn.1400f72a0
nop
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.140082fa4
test eax, eax
jne 0x1401547ab
lea rcx, [rsp + 0x8a0]
call fcn.140005560
nop
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1150]
call fcn.14011d190
mov qword [rsp + 0x16c0], rax
mov rax, qword [rsp + 0x16c0]
mov qword [rsp + 0x16c8], rax
lea r8, [0x14023bda8]
mov rdx, qword [rsp + 0x16c8]
lea rcx, [rsp + 0x1158]
call fcn.1400010b0
mov qword [rsp + 0x16d0], rax
mov rax, qword [rsp + 0x16d0]
mov qword [rsp + 0x16d8], rax
lea r8, [rsp + 0x860]
mov rdx, qword [rsp + 0x16d8]
lea rcx, [rsp + 0x1160]
call fcn.140006bd0
mov qword [rsp + 0x16e0], rax
mov rcx, qword [rsp + 0x16e0]
call fcn.14000f8f0
mov r9d, 0x2001f
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x8a0]
call fcn.140005720
test eax, eax
jne 0x1401542f3
mov dword [rsp + 0x16e8], 1
jmp 0x1401542fe
mov dword [rsp + 0x16e8], 0
movzx eax, byte [rsp + 0x16e8]
mov byte [rsp + 0x1148], al
lea rcx, [rsp + 0x1160]
call fcn.140001490
nop
lea rcx, [rsp + 0x1158]
call fcn.140001490
nop
lea rcx, [rsp + 0x1150]
call fcn.140001490
movzx edx, byte [rsp + 0x1148]
test edx, edx
je 0x1401543f5
mov dword [rsp + 0x8b4], 0
lea r8, [rsp + 0x8b4]
lea rdx, [0x14023bdd0]
lea rcx, [rsp + 0x8a0]
call fcn.1400057b0
xor r8d, r8d
lea rdx, [0x14023bde8]
lea rcx, [rsp + 0x8a0]
call fcn.140005aa0
lea rcx, [rsp + 0x8a0]
call fcn.1400055f0
cmp dword [rsp + 0x8b4], 0
jne 0x1401543f5
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000cca0
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x8a0]
call fcn.140005590
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x140154140
mov dword [rsp + 0x8b0], 0
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rcx, rax
call fcn.14000cd60
mov qword [rsp + 0x898], rax
cmp qword [rsp + 0x898], 0
je 0x1401545e5
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x898]
mov rcx, rax
call fcn.140082e54
test eax, eax
je 0x1401545b4
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x898]
mov rcx, rax
call fcn.14000cce0
mov qword [rsp + 0x8b8], rax
cmp qword [rsp + 0x8b8], 0
je 0x1401545a8
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x8b8]
mov rcx, rax
call fcn.140082fa4
cmp eax, 1
jne 0x140154577
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
mov r9d, 1
mov r8, qword [rsp + 0x8b8]
lea rdx, [rsp + 0x1170]
call fcn.1400f72a0
mov qword [rsp + 0x16f0], rax
mov rax, qword [rsp + 0x16f0]
mov qword [rsp + 0x16f8], rax
lea rcx, [rsp + 0x878]
call fcn.14000f8f0
mov rdx, rax
mov rcx, qword [rsp + 0x16f8]
call fcn.140006180
test eax, eax
jne 0x140154537
mov dword [rsp + 0x1700], 1
jmp 0x140154542
mov dword [rsp + 0x1700], 0
movzx eax, byte [rsp + 0x1700]
mov byte [rsp + 0x1168], al
lea rcx, [rsp + 0x1170]
call fcn.140001490
movzx edx, byte [rsp + 0x1168]
test edx, edx
je 0x140154577
mov dword [rsp + 0x8b0], 1
jmp 0x1401545a8
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x8b8]
mov rcx, rax
call fcn.14000cca0
mov qword [rsp + 0x8b8], rax
jmp 0x14015448b
cmp dword [rsp + 0x8b0], 0
je 0x1401545b4
jmp 0x1401545e5
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x898]
mov rcx, rax
call fcn.14000cca0
mov qword [rsp + 0x898], rax
jmp 0x140154424
cmp dword [rsp + 0x8b0], 0
jne 0x140154751
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1178]
call fcn.14011d190
mov qword [rsp + 0x1708], rax
mov rax, qword [rsp + 0x1708]
mov qword [rsp + 0x1710], rax
lea r8, [0x14023be18]
mov rdx, qword [rsp + 0x1710]
lea rcx, [rsp + 0x1180]
call fcn.1400010b0
mov qword [rsp + 0x1718], rax
mov rax, qword [rsp + 0x1718]
mov qword [rsp + 0x1720], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1720]
lea rcx, [rsp + 0x1188]
call fcn.140006bd0
mov qword [rsp + 0x1728], rax
mov rax, qword [rsp + 0x1728]
mov qword [rsp + 0x1730], rax
lea r8, [0x14023be00]
mov rdx, qword [rsp + 0x1730]
lea rcx, [rsp + 0x1190]
call fcn.1400010b0
mov qword [rsp + 0x1738], rax
mov rax, qword [rsp + 0x1738]
mov qword [rsp + 0x1740], rax
lea r8, [rsp + 0x878]
mov rdx, qword [rsp + 0x1740]
lea rcx, [rsp + 0x1198]
call fcn.140006bd0
mov qword [rsp + 0x1748], rax
mov rax, qword [rsp + 0x1748]
mov qword [rsp + 0x1750], rax
mov rcx, qword [rsp + 0x1750]
call fcn.14000f8f0
mov rcx, rax
call fcn.14011cf60
nop
lea rcx, [rsp + 0x1198]
call fcn.140001490
nop
lea rcx, [rsp + 0x1190]
call fcn.140001490
nop
lea rcx, [rsp + 0x1188]
call fcn.140001490
nop
lea rcx, [rsp + 0x1180]
call fcn.140001490
nop
lea rcx, [rsp + 0x1178]
call fcn.140001490
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000cca0
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x8a0]
call fcn.140005590
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x140154140
mov dword [rsp + 0x890], 0
lea r9, [rsp + 0x890]
lea r8, [0x14023bb3c]
lea rdx, [rsp + 0x11a0]
lea rcx, [rsp + 0x860]
call fcn.1400065a0
mov qword [rsp + 0x1758], rax
mov rax, qword [rsp + 0x1758]
mov qword [rsp + 0x1760], rax
mov rdx, qword [rsp + 0x1760]
lea rcx, [rsp + 0x860]
call fcn.140002db0
nop
lea rcx, [rsp + 0x11a0]
call fcn.140001490
lea rcx, [rsp + 0x860]
call fcn.140006eb0
movzx eax, al
test eax, eax
je 0x140154875
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000cca0
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x140154140
lea rcx, [rsp + 0x868]
call fcn.140005560
nop
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x11b0]
call fcn.14011d190
mov qword [rsp + 0x1768], rax
mov rax, qword [rsp + 0x1768]
mov qword [rsp + 0x1770], rax
lea r8, [0x14023be28]
mov rdx, qword [rsp + 0x1770]
lea rcx, [rsp + 0x11b8]
call fcn.1400010b0
mov qword [rsp + 0x1778], rax
mov rax, qword [rsp + 0x1778]
mov qword [rsp + 0x1780], rax
lea r8, [rsp + 0x860]
mov rdx, qword [rsp + 0x1780]
lea rcx, [rsp + 0x11c0]
call fcn.140006bd0
mov qword [rsp + 0x1788], rax
mov rcx, qword [rsp + 0x1788]
call fcn.14000f8f0
mov r9d, 0x2001f
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x868]
call fcn.140005720
test eax, eax
jne 0x14015494b
mov dword [rsp + 0x1790], 1
jmp 0x140154956
mov dword [rsp + 0x1790], 0
movzx eax, byte [rsp + 0x1790]
mov byte [rsp + 0x11a8], al
lea rcx, [rsp + 0x11c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x11b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x11b0]
call fcn.140001490
movzx edx, byte [rsp + 0x11a8]
test edx, edx
je 0x140154bf4
mov dword [rsp + 0x8c0], 0
lea r8, [rsp + 0x8c0]
lea rdx, [0x14023be50]
lea rcx, [rsp + 0x868]
call fcn.1400057b0
mov r8d, 1
lea rdx, [0x14023be68]
lea rcx, [rsp + 0x868]
call fcn.140005aa0
lea rcx, [rsp + 0x868]
call fcn.1400055f0
cmp dword [rsp + 0x8c0], 1
jne 0x140154bf4
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x11c8]
call fcn.14011d190
mov qword [rsp + 0x1798], rax
mov rax, qword [rsp + 0x1798]
mov qword [rsp + 0x17a0], rax
lea r8, [0x14023beb8]
mov rdx, qword [rsp + 0x17a0]
lea rcx, [rsp + 0x11d0]
call fcn.1400010b0
mov qword [rsp + 0x17a8], rax
mov rax, qword [rsp + 0x17a8]
mov qword [rsp + 0x17b0], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x17b0]
lea rcx, [rsp + 0x11d8]
call fcn.140006bd0
mov qword [rsp + 0x17b8], rax
mov rax, qword [rsp + 0x17b8]
mov qword [rsp + 0x17c0], rax
lea r8, [0x14023bea0]
mov rdx, qword [rsp + 0x17c0]
lea rcx, [rsp + 0x11e0]
call fcn.1400010b0
mov qword [rsp + 0x17c8], rax
mov rax, qword [rsp + 0x17c8]
mov qword [rsp + 0x17d0], rax
lea r8, [rsp + 0x878]
mov rdx, qword [rsp + 0x17d0]
lea rcx, [rsp + 0x11e8]
call fcn.140006bd0
mov qword [rsp + 0x17d8], rax
mov rax, qword [rsp + 0x17d8]
mov qword [rsp + 0x17e0], rax
lea r8, str.StartOverride
mov rdx, qword [rsp + 0x17e0]
lea rcx, [rsp + 0x11f0]
call fcn.1400010b0
mov qword [rsp + 0x17e8], rax
mov rax, qword [rsp + 0x17e8]
mov qword [rsp + 0x17f0], rax
mov rcx, qword [rsp + 0x17f0]
call fcn.14000f8f0
mov rcx, rax
call fcn.14011cf60
nop
lea rcx, [rsp + 0x11f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x11e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x11e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x11d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x11d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x11c8]
call fcn.140001490
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000cca0
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x868]
call fcn.140005590
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x140154140
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x11f8]
call fcn.14011d190
mov qword [rsp + 0x17f8], rax
mov rax, qword [rsp + 0x17f8]
mov qword [rsp + 0x1800], rax
lea r8, [0x14023bee0]
mov rdx, qword [rsp + 0x1800]
lea rcx, [rsp + 0x1200]
call fcn.1400010b0
mov qword [rsp + 0x1808], rax
mov rax, qword [rsp + 0x1808]
mov qword [rsp + 0x1810], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1810]
lea rcx, [rsp + 0x1208]
call fcn.140006bd0
mov qword [rsp + 0x1818], rax
mov rax, qword [rsp + 0x1818]
mov qword [rsp + 0x1820], rax
lea r8, str.Services
mov rdx, qword [rsp + 0x1820]
lea rcx, [rsp + 0x1210]
call fcn.1400010b0
mov qword [rsp + 0x1828], rax
mov rax, qword [rsp + 0x1828]
mov qword [rsp + 0x1830], rax
mov rcx, qword [rsp + 0x1830]
call fcn.14000f8f0
mov rcx, rax
call fcn.14011c8a0
nop
lea rcx, [rsp + 0x1210]
call fcn.140001490
nop
lea rcx, [rsp + 0x1208]
call fcn.140001490
nop
lea rcx, [rsp + 0x1200]
call fcn.140001490
nop
lea rcx, [rsp + 0x11f8]
call fcn.140001490
lea rcx, [0x14023bef0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rdi, eax
lea rcx, [rsp + 0x860]
call fcn.14000f8f0
mov r8, rdi
lea rdx, str.ven_10de
mov rcx, rax
call fcn.1400ab814
test eax, eax
jne 0x140154fa6
mov rcx, qword [rsp + 0x2070]
call fcn.140152a00
mov eax, eax
and rax, 0xffff
movzx eax, ax
and rax, 0xff
movzx eax, al
cmp eax, 6
jae 0x140154fa6
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1218]
call fcn.14011d190
mov qword [rsp + 0x1838], rax
mov rax, qword [rsp + 0x1838]
mov qword [rsp + 0x1840], rax
lea r8, [0x14023bf48]
mov rdx, qword [rsp + 0x1840]
lea rcx, [rsp + 0x1220]
call fcn.1400010b0
mov qword [rsp + 0x1848], rax
mov rax, qword [rsp + 0x1848]
mov qword [rsp + 0x1850], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1850]
lea rcx, [rsp + 0x1228]
call fcn.140006bd0
mov qword [rsp + 0x1858], rax
mov rax, qword [rsp + 0x1858]
mov qword [rsp + 0x1860], rax
lea r8, str.ServicesNVENETFD
mov rdx, qword [rsp + 0x1860]
lea rcx, [rsp + 0x1230]
call fcn.1400010b0
mov qword [rsp + 0x1868], rax
mov rax, qword [rsp + 0x1868]
mov qword [rsp + 0x1870], rax
mov rcx, qword [rsp + 0x1870]
call fcn.14000f8f0
mov rcx, rax
call fcn.14011cf60
nop
lea rcx, [rsp + 0x1230]
call fcn.140001490
nop
lea rcx, [rsp + 0x1228]
call fcn.140001490
nop
lea rcx, [rsp + 0x1220]
call fcn.140001490
nop
lea rcx, [rsp + 0x1218]
call fcn.140001490
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1238]
call fcn.14011d190
mov qword [rsp + 0x1878], rax
mov rax, qword [rsp + 0x1878]
mov qword [rsp + 0x1880], rax
lea r8, [0x14023bf80]
mov rdx, qword [rsp + 0x1880]
lea rcx, [rsp + 0x1240]
call fcn.1400010b0
mov qword [rsp + 0x1888], rax
mov rax, qword [rsp + 0x1888]
mov qword [rsp + 0x1890], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1890]
lea rcx, [rsp + 0x1248]
call fcn.140006bd0
mov qword [rsp + 0x1898], rax
mov rax, qword [rsp + 0x1898]
mov qword [rsp + 0x18a0], rax
lea r8, str.Services_nvnetbus
mov rdx, qword [rsp + 0x18a0]
lea rcx, [rsp + 0x1250]
call fcn.1400010b0
mov qword [rsp + 0x18a8], rax
mov rax, qword [rsp + 0x18a8]
mov qword [rsp + 0x18b0], rax
mov rcx, qword [rsp + 0x18b0]
call fcn.14000f8f0
mov rcx, rax
call fcn.14011cf60
nop
lea rcx, [rsp + 0x1250]
call fcn.140001490
nop
lea rcx, [rsp + 0x1248]
call fcn.140001490
nop
lea rcx, [rsp + 0x1240]
call fcn.140001490
nop
lea rcx, [rsp + 0x1238]
call fcn.140001490
lea rcx, [rsp + 0x880]
call fcn.140005560
nop
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1260]
call fcn.14011d190
mov qword [rsp + 0x18b8], rax
mov rax, qword [rsp + 0x18b8]
mov qword [rsp + 0x18c0], rax
lea r8, [0x14023bfa8]
mov rdx, qword [rsp + 0x18c0]
lea rcx, [rsp + 0x1268]
call fcn.1400010b0
mov qword [rsp + 0x18c8], rax
mov rax, qword [rsp + 0x18c8]
mov qword [rsp + 0x18d0], rax
lea r8, [rsp + 0x860]
mov rdx, qword [rsp + 0x18d0]
lea rcx, [rsp + 0x1270]
call fcn.140006bd0
mov qword [rsp + 0x18d8], rax
mov rax, qword [rsp + 0x18d8]
mov qword [rsp + 0x18e0], rax
lea r8, [0x14023bf90]
mov rdx, qword [rsp + 0x18e0]
lea rcx, [rsp + 0x1278]
call fcn.1400010b0
mov qword [rsp + 0x18e8], rax
mov rcx, qword [rsp + 0x18e8]
call fcn.14000f8f0
mov r9d, 0x2001f
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x880]
call fcn.140005720
test eax, eax
jne 0x1401550b0
mov dword [rsp + 0x18f0], 1
jmp 0x1401550bb
mov dword [rsp + 0x18f0], 0
movzx eax, byte [rsp + 0x18f0]
mov byte [rsp + 0x1258], al
lea rcx, [rsp + 0x1278]
call fcn.140001490
nop
lea rcx, [rsp + 0x1270]
call fcn.140001490
nop
lea rcx, [rsp + 0x1268]
call fcn.140001490
nop
lea rcx, [rsp + 0x1260]
call fcn.140001490
movzx edx, byte [rsp + 0x1258]
test edx, edx
je 0x140157188
xor eax, eax
mov word [rsp + 0x8e0], ax
lea rdi, [rsp + 0x8e2]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov dword [rsp + 0x8d0], 0x400
lea r9, [rsp + 0x8d0]
lea r8, [rsp + 0x8e0]
lea rdx, [0x14023bfd0]
lea rcx, [rsp + 0x880]
call fcn.140005830
lea rdx, [0x14023bfe8]
lea rcx, [rsp + 0x880]
call fcn.1400055b0
mov r9d, 2
lea r8, [rsp + 0x8e0]
lea rdx, [0x14023c000]
lea rcx, [rsp + 0x880]
call fcn.140005b00
mov dx, VarDateFromDisp
lea rcx, [rsp + 0x8e0]
call fcn.140001460
add rax, 2
mov qword [rsp + 0x8c8], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1280]
call fcn.140005ec0
mov qword [rsp + 0x18f8], rax
mov rax, qword [rsp + 0x18f8]
mov qword [rsp + 0x1900], rax
lea r8, [0x14023c040]
mov rdx, qword [rsp + 0x1900]
lea rcx, [rsp + 0x1288]
call fcn.1400010b0
mov qword [rsp + 0x1908], rax
mov rax, qword [rsp + 0x1908]
mov qword [rsp + 0x1910], rax
lea r8, [0x14023c018]
mov rdx, qword [rsp + 0x1910]
lea rcx, [rsp + 0x1290]
call fcn.1400010b0
mov qword [rsp + 0x1918], rax
mov rcx, qword [rsp + 0x1918]
call fcn.14000f8f0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rsp + 0x1290]
call fcn.140001490
nop
lea rcx, [rsp + 0x1288]
call fcn.140001490
nop
lea rcx, [rsp + 0x1280]
call fcn.140001490
mov rcx, qword [rsp + 0x2070]
call fcn.140152a00
mov eax, eax
and rax, 0xffff
movzx eax, ax
and rax, 0xff
movzx eax, al
cmp eax, 6
jb 0x14015650f
mov rcx, qword [rsp + 0x2070]
call fcn.140152a00
mov eax, eax
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
test eax, eax
jne 0x140155742
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1298]
call fcn.140005ec0
mov qword [rsp + 0x1920], rax
mov rax, qword [rsp + 0x1920]
mov qword [rsp + 0x1928], rax
lea r8, [0x14023c080]
mov rdx, qword [rsp + 0x1928]
lea rcx, [rsp + 0x12a0]
call fcn.1400010b0
mov qword [rsp + 0x1930], rax
mov rax, qword [rsp + 0x1930]
mov qword [rsp + 0x1938], rax
lea r8, [0x14023c058]
mov rdx, qword [rsp + 0x1938]
lea rcx, [rsp + 0x12a8]
call fcn.1400010b0
mov qword [rsp + 0x1940], rax
mov rax, qword [rsp + 0x1940]
mov qword [rsp + 0x1948], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1948]
lea rcx, [rsp + 0x12b0]
call fcn.1400010b0
mov qword [rsp + 0x1950], rax
mov rax, qword [rsp + 0x1950]
mov qword [rsp + 0x1958], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x12b8]
call fcn.140005ec0
mov qword [rsp + 0x1960], rax
mov rax, qword [rsp + 0x1960]
mov qword [rsp + 0x1968], rax
lea r8, [0x14023c0d0]
mov rdx, qword [rsp + 0x1968]
lea rcx, [rsp + 0x12c0]
call fcn.1400010b0
mov qword [rsp + 0x1970], rax
mov rax, qword [rsp + 0x1970]
mov qword [rsp + 0x1978], rax
lea r8, [0x14023c098]
mov rdx, qword [rsp + 0x1978]
lea rcx, [rsp + 0x12c8]
call fcn.1400010b0
mov qword [rsp + 0x1980], rax
mov rax, qword [rsp + 0x1980]
mov qword [rsp + 0x1988], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1988]
lea rcx, [rsp + 0x12d0]
call fcn.1400010b0
mov qword [rsp + 0x1990], rax
mov rcx, qword [rsp + 0x1958]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1990]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x12d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x12c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x12c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x12b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x12b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x12a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x12a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1298]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x12d8]
call fcn.140005ec0
mov qword [rsp + 0x1998], rax
mov rax, qword [rsp + 0x1998]
mov qword [rsp + 0x19a0], rax
lea r8, [0x14023c120]
mov rdx, qword [rsp + 0x19a0]
lea rcx, [rsp + 0x12e0]
call fcn.1400010b0
mov qword [rsp + 0x19a8], rax
mov rax, qword [rsp + 0x19a8]
mov qword [rsp + 0x19b0], rax
lea r8, [0x14023c0f0]
mov rdx, qword [rsp + 0x19b0]
lea rcx, [rsp + 0x12e8]
call fcn.1400010b0
mov qword [rsp + 0x19b8], rax
mov rax, qword [rsp + 0x19b8]
mov qword [rsp + 0x19c0], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x19c0]
lea rcx, [rsp + 0x12f0]
call fcn.1400010b0
mov qword [rsp + 0x19c8], rax
mov rax, qword [rsp + 0x19c8]
mov qword [rsp + 0x19d0], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x12f8]
call fcn.140005ec0
mov qword [rsp + 0x19d8], rax
mov rax, qword [rsp + 0x19d8]
mov qword [rsp + 0x19e0], rax
lea r8, [0x14023c170]
mov rdx, qword [rsp + 0x19e0]
lea rcx, [rsp + 0x1300]
call fcn.1400010b0
mov qword [rsp + 0x19e8], rax
mov rax, qword [rsp + 0x19e8]
mov qword [rsp + 0x19f0], rax
lea r8, [0x14023c138]
mov rdx, qword [rsp + 0x19f0]
lea rcx, [rsp + 0x1308]
call fcn.1400010b0
mov qword [rsp + 0x19f8], rax
mov rax, qword [rsp + 0x19f8]
mov qword [rsp + 0x1a00], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1a00]
lea rcx, [rsp + 0x1310]
call fcn.1400010b0
mov qword [rsp + 0x1a08], rax
mov rcx, qword [rsp + 0x19d0]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1a08]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x1310]
call fcn.140001490
nop
lea rcx, [rsp + 0x1308]
call fcn.140001490
nop
lea rcx, [rsp + 0x1300]
call fcn.140001490
nop
lea rcx, [rsp + 0x12f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x12f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x12e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x12e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x12d8]
call fcn.140001490
mov rcx, qword [rsp + 0x2070]
call fcn.140152a00
mov eax, eax
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 1
jne 0x140155bda
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1318]
call fcn.140005ec0
mov qword [rsp + 0x1a10], rax
mov rax, qword [rsp + 0x1a10]
mov qword [rsp + 0x1a18], rax
lea r8, [0x14023c1b8]
mov rdx, qword [rsp + 0x1a18]
lea rcx, [rsp + 0x1320]
call fcn.1400010b0
mov qword [rsp + 0x1a20], rax
mov rax, qword [rsp + 0x1a20]
mov qword [rsp + 0x1a28], rax
lea r8, [0x14023c190]
mov rdx, qword [rsp + 0x1a28]
lea rcx, [rsp + 0x1328]
call fcn.1400010b0
mov qword [rsp + 0x1a30], rax
mov rax, qword [rsp + 0x1a30]
mov qword [rsp + 0x1a38], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1a38]
lea rcx, [rsp + 0x1330]
call fcn.1400010b0
mov qword [rsp + 0x1a40], rax
mov rax, qword [rsp + 0x1a40]
mov qword [rsp + 0x1a48], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1338]
call fcn.140005ec0
mov qword [rsp + 0x1a50], rax
mov rax, qword [rsp + 0x1a50]
mov qword [rsp + 0x1a58], rax
lea r8, [0x14023c208]
mov rdx, qword [rsp + 0x1a58]
lea rcx, [rsp + 0x1340]
call fcn.1400010b0
mov qword [rsp + 0x1a60], rax
mov rax, qword [rsp + 0x1a60]
mov qword [rsp + 0x1a68], rax
lea r8, [0x14023c1d0]
mov rdx, qword [rsp + 0x1a68]
lea rcx, [rsp + 0x1348]
call fcn.1400010b0
mov qword [rsp + 0x1a70], rax
mov rax, qword [rsp + 0x1a70]
mov qword [rsp + 0x1a78], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1a78]
lea rcx, [rsp + 0x1350]
call fcn.1400010b0
mov qword [rsp + 0x1a80], rax
mov rcx, qword [rsp + 0x1a48]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1a80]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x1350]
call fcn.140001490
nop
lea rcx, [rsp + 0x1348]
call fcn.140001490
nop
lea rcx, [rsp + 0x1340]
call fcn.140001490
nop
lea rcx, [rsp + 0x1338]
call fcn.140001490
nop
lea rcx, [rsp + 0x1330]
call fcn.140001490
nop
lea rcx, [rsp + 0x1328]
call fcn.140001490
nop
lea rcx, [rsp + 0x1320]
call fcn.140001490
nop
lea rcx, [rsp + 0x1318]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1358]
call fcn.140005ec0
mov qword [rsp + 0x1a88], rax
mov rax, qword [rsp + 0x1a88]
mov qword [rsp + 0x1a90], rax
lea r8, [0x14023c258]
mov rdx, qword [rsp + 0x1a90]
lea rcx, [rsp + 0x1360]
call fcn.1400010b0
mov qword [rsp + 0x1a98], rax
mov rax, qword [rsp + 0x1a98]
mov qword [rsp + 0x1aa0], rax
lea r8, [0x14023c228]
mov rdx, qword [rsp + 0x1aa0]
lea rcx, [rsp + 0x1368]
call fcn.1400010b0
mov qword [rsp + 0x1aa8], rax
mov rax, qword [rsp + 0x1aa8]
mov qword [rsp + 0x1ab0], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1ab0]
lea rcx, [rsp + 0x1370]
call fcn.1400010b0
mov qword [rsp + 0x1ab8], rax
mov rax, qword [rsp + 0x1ab8]
mov qword [rsp + 0x1ac0], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1378]
call fcn.140005ec0
mov qword [rsp + 0x1ac8], rax
mov rax, qword [rsp + 0x1ac8]
mov qword [rsp + 0x1ad0], rax
lea r8, [0x14023c2a8]
mov rdx, qword [rsp + 0x1ad0]
lea rcx, [rsp + 0x1380]
call fcn.1400010b0
mov qword [rsp + 0x1ad8], rax
mov rax, qword [rsp + 0x1ad8]
mov qword [rsp + 0x1ae0], rax
lea r8, [0x14023c270]
mov rdx, qword [rsp + 0x1ae0]
lea rcx, [rsp + 0x1388]
call fcn.1400010b0
mov qword [rsp + 0x1ae8], rax
mov rax, qword [rsp + 0x1ae8]
mov qword [rsp + 0x1af0], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1af0]
lea rcx, [rsp + 0x1390]
call fcn.1400010b0
mov qword [rsp + 0x1af8], rax
mov rcx, qword [rsp + 0x1ac0]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1af8]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x1390]
call fcn.140001490
nop
lea rcx, [rsp + 0x1388]
call fcn.140001490
nop
lea rcx, [rsp + 0x1380]
call fcn.140001490
nop
lea rcx, [rsp + 0x1378]
call fcn.140001490
nop
lea rcx, [rsp + 0x1370]
call fcn.140001490
nop
lea rcx, [rsp + 0x1368]
call fcn.140001490
nop
lea rcx, [rsp + 0x1360]
call fcn.140001490
nop
lea rcx, [rsp + 0x1358]
call fcn.140001490
mov rcx, qword [rsp + 0x2070]
call fcn.140152a00
mov eax, eax
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 2
jne 0x140156072
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1398]
call fcn.140005ec0
mov qword [rsp + 0x1b00], rax
mov rax, qword [rsp + 0x1b00]
mov qword [rsp + 0x1b08], rax
lea r8, [0x14023c2f0]
mov rdx, qword [rsp + 0x1b08]
lea rcx, [rsp + 0x13a0]
call fcn.1400010b0
mov qword [rsp + 0x1b10], rax
mov rax, qword [rsp + 0x1b10]
mov qword [rsp + 0x1b18], rax
lea r8, [0x14023c2c8]
mov rdx, qword [rsp + 0x1b18]
lea rcx, [rsp + 0x13a8]
call fcn.1400010b0
mov qword [rsp + 0x1b20], rax
mov rax, qword [rsp + 0x1b20]
mov qword [rsp + 0x1b28], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1b28]
lea rcx, [rsp + 0x13b0]
call fcn.1400010b0
mov qword [rsp + 0x1b30], rax
mov rax, qword [rsp + 0x1b30]
mov qword [rsp + 0x1b38], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x13b8]
call fcn.140005ec0
mov qword [rsp + 0x1b40], rax
mov rax, qword [rsp + 0x1b40]
mov qword [rsp + 0x1b48], rax
lea r8, [0x14023c340]
mov rdx, qword [rsp + 0x1b48]
lea rcx, [rsp + 0x13c0]
call fcn.1400010b0
mov qword [rsp + 0x1b50], rax
mov rax, qword [rsp + 0x1b50]
mov qword [rsp + 0x1b58], rax
lea r8, [0x14023c308]
mov rdx, qword [rsp + 0x1b58]
lea rcx, [rsp + 0x13c8]
call fcn.1400010b0
mov qword [rsp + 0x1b60], rax
mov rax, qword [rsp + 0x1b60]
mov qword [rsp + 0x1b68], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1b68]
lea rcx, [rsp + 0x13d0]
call fcn.1400010b0
mov qword [rsp + 0x1b70], rax
mov rcx, qword [rsp + 0x1b38]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1b70]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x13d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x13c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x13c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x13b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x13b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x13a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x13a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1398]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x13d8]
call fcn.140005ec0
mov qword [rsp + 0x1b78], rax
mov rax, qword [rsp + 0x1b78]
mov qword [rsp + 0x1b80], rax
lea r8, [0x14023c390]
mov rdx, qword [rsp + 0x1b80]
lea rcx, [rsp + 0x13e0]
call fcn.1400010b0
mov qword [rsp + 0x1b88], rax
mov rax, qword [rsp + 0x1b88]
mov qword [rsp + 0x1b90], rax
lea r8, [0x14023c360]
mov rdx, qword [rsp + 0x1b90]
lea rcx, [rsp + 0x13e8]
call fcn.1400010b0
mov qword [rsp + 0x1b98], rax
mov rax, qword [rsp + 0x1b98]
mov qword [rsp + 0x1ba0], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1ba0]
lea rcx, [rsp + 0x13f0]
call fcn.1400010b0
mov qword [rsp + 0x1ba8], rax
mov rax, qword [rsp + 0x1ba8]
mov qword [rsp + 0x1bb0], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x13f8]
call fcn.140005ec0
mov qword [rsp + 0x1bb8], rax
mov rax, qword [rsp + 0x1bb8]
mov qword [rsp + 0x1bc0], rax
lea r8, [0x14023c3e0]
mov rdx, qword [rsp + 0x1bc0]
lea rcx, [rsp + 0x1400]
call fcn.1400010b0
mov qword [rsp + 0x1bc8], rax
mov rax, qword [rsp + 0x1bc8]
mov qword [rsp + 0x1bd0], rax
lea r8, [0x14023c3a8]
mov rdx, qword [rsp + 0x1bd0]
lea rcx, [rsp + 0x1408]
call fcn.1400010b0
mov qword [rsp + 0x1bd8], rax
mov rax, qword [rsp + 0x1bd8]
mov qword [rsp + 0x1be0], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1be0]
lea rcx, [rsp + 0x1410]
call fcn.1400010b0
mov qword [rsp + 0x1be8], rax
mov rcx, qword [rsp + 0x1bb0]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1be8]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x1410]
call fcn.140001490
nop
lea rcx, [rsp + 0x1408]
call fcn.140001490
nop
lea rcx, [rsp + 0x1400]
call fcn.140001490
nop
lea rcx, [rsp + 0x13f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x13f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x13e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x13e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x13d8]
call fcn.140001490
mov rcx, qword [rsp + 0x2070]
call fcn.140152a00
mov eax, eax
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 3
jne 0x14015650a
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1418]
call fcn.140005ec0
mov qword [rsp + 0x1bf0], rax
mov rax, qword [rsp + 0x1bf0]
mov qword [rsp + 0x1bf8], rax
lea r8, [0x14023c428]
mov rdx, qword [rsp + 0x1bf8]
lea rcx, [rsp + 0x1420]
call fcn.1400010b0
mov qword [rsp + 0x1c00], rax
mov rax, qword [rsp + 0x1c00]
mov qword [rsp + 0x1c08], rax
lea r8, [0x14023c400]
mov rdx, qword [rsp + 0x1c08]
lea rcx, [rsp + 0x1428]
call fcn.1400010b0
mov qword [rsp + 0x1c10], rax
mov rax, qword [rsp + 0x1c10]
mov qword [rsp + 0x1c18], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1c18]
lea rcx, [rsp + 0x1430]
call fcn.1400010b0
mov qword [rsp + 0x1c20], rax
mov rax, qword [rsp + 0x1c20]
mov qword [rsp + 0x1c28], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1438]
call fcn.140005ec0
mov qword [rsp + 0x1c30], rax
mov rax, qword [rsp + 0x1c30]
mov qword [rsp + 0x1c38], rax
lea r8, [0x14023c478]
mov rdx, qword [rsp + 0x1c38]
lea rcx, [rsp + 0x1440]
call fcn.1400010b0
mov qword [rsp + 0x1c40], rax
mov rax, qword [rsp + 0x1c40]
mov qword [rsp + 0x1c48], rax
lea r8, str.CCBootPnPWin10CCBootPnP_
mov rdx, qword [rsp + 0x1c48]
lea rcx, [rsp + 0x1448]
call fcn.1400010b0
mov qword [rsp + 0x1c50], rax
mov rax, qword [rsp + 0x1c50]
mov qword [rsp + 0x1c58], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1c58]
lea rcx, [rsp + 0x1450]
call fcn.1400010b0
mov qword [rsp + 0x1c60], rax
mov rcx, qword [rsp + 0x1c28]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1c60]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x1450]
call fcn.140001490
nop
lea rcx, [rsp + 0x1448]
call fcn.140001490
nop
lea rcx, [rsp + 0x1440]
call fcn.140001490
nop
lea rcx, [rsp + 0x1438]
call fcn.140001490
nop
lea rcx, [rsp + 0x1430]
call fcn.140001490
nop
lea rcx, [rsp + 0x1428]
call fcn.140001490
nop
lea rcx, [rsp + 0x1420]
call fcn.140001490
nop
lea rcx, [rsp + 0x1418]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1458]
call fcn.140005ec0
mov qword [rsp + 0x1c68], rax
mov rax, qword [rsp + 0x1c68]
mov qword [rsp + 0x1c70], rax
lea r8, [0x14023c4c8]
mov rdx, qword [rsp + 0x1c70]
lea rcx, [rsp + 0x1460]
call fcn.1400010b0
mov qword [rsp + 0x1c78], rax
mov rax, qword [rsp + 0x1c78]
mov qword [rsp + 0x1c80], rax
lea r8, [0x14023c498]
mov rdx, qword [rsp + 0x1c80]
lea rcx, [rsp + 0x1468]
call fcn.1400010b0
mov qword [rsp + 0x1c88], rax
mov rax, qword [rsp + 0x1c88]
mov qword [rsp + 0x1c90], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1c90]
lea rcx, [rsp + 0x1470]
call fcn.1400010b0
mov qword [rsp + 0x1c98], rax
mov rax, qword [rsp + 0x1c98]
mov qword [rsp + 0x1ca0], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1478]
call fcn.140005ec0
mov qword [rsp + 0x1ca8], rax
mov rax, qword [rsp + 0x1ca8]
mov qword [rsp + 0x1cb0], rax
lea r8, [0x14023c518]
mov rdx, qword [rsp + 0x1cb0]
lea rcx, [rsp + 0x1480]
call fcn.1400010b0
mov qword [rsp + 0x1cb8], rax
mov rax, qword [rsp + 0x1cb8]
mov qword [rsp + 0x1cc0], rax
lea r8, [0x14023c4e0]
mov rdx, qword [rsp + 0x1cc0]
lea rcx, [rsp + 0x1488]
call fcn.1400010b0
mov qword [rsp + 0x1cc8], rax
mov rax, qword [rsp + 0x1cc8]
mov qword [rsp + 0x1cd0], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1cd0]
lea rcx, [rsp + 0x1490]
call fcn.1400010b0
mov qword [rsp + 0x1cd8], rax
mov rcx, qword [rsp + 0x1ca0]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1cd8]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x1490]
call fcn.140001490
nop
lea rcx, [rsp + 0x1488]
call fcn.140001490
nop
lea rcx, [rsp + 0x1480]
call fcn.140001490
nop
lea rcx, [rsp + 0x1478]
call fcn.140001490
nop
lea rcx, [rsp + 0x1470]
call fcn.140001490
nop
lea rcx, [rsp + 0x1468]
call fcn.140001490
nop
lea rcx, [rsp + 0x1460]
call fcn.140001490
nop
lea rcx, [rsp + 0x1458]
call fcn.140001490
jmp 0x140156979
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1498]
call fcn.140005ec0
mov qword [rsp + 0x1ce0], rax
mov rax, qword [rsp + 0x1ce0]
mov qword [rsp + 0x1ce8], rax
lea r8, [0x14023c560]
mov rdx, qword [rsp + 0x1ce8]
lea rcx, [rsp + 0x14a0]
call fcn.1400010b0
mov qword [rsp + 0x1cf0], rax
mov rax, qword [rsp + 0x1cf0]
mov qword [rsp + 0x1cf8], rax
lea r8, str._system32drivers_
mov rdx, qword [rsp + 0x1cf8]
lea rcx, [rsp + 0x14a8]
call fcn.1400010b0
mov qword [rsp + 0x1d00], rax
mov rax, qword [rsp + 0x1d00]
mov qword [rsp + 0x1d08], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1d08]
lea rcx, [rsp + 0x14b0]
call fcn.1400010b0
mov qword [rsp + 0x1d10], rax
mov rax, qword [rsp + 0x1d10]
mov qword [rsp + 0x1d18], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x14b8]
call fcn.140005ec0
mov qword [rsp + 0x1d20], rax
mov rax, qword [rsp + 0x1d20]
mov qword [rsp + 0x1d28], rax
lea r8, [0x14023c5b0]
mov rdx, qword [rsp + 0x1d28]
lea rcx, [rsp + 0x14c0]
call fcn.1400010b0
mov qword [rsp + 0x1d30], rax
mov rax, qword [rsp + 0x1d30]
mov qword [rsp + 0x1d38], rax
lea r8, str.CCBootPnPXPCCBootPnP_
mov rdx, qword [rsp + 0x1d38]
lea rcx, [rsp + 0x14c8]
call fcn.1400010b0
mov qword [rsp + 0x1d40], rax
mov rax, qword [rsp + 0x1d40]
mov qword [rsp + 0x1d48], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1d48]
lea rcx, [rsp + 0x14d0]
call fcn.1400010b0
mov qword [rsp + 0x1d50], rax
mov rcx, qword [rsp + 0x1d18]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1d50]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x14d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x14c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x14c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x14b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x14b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x14a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x14a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1498]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x14d8]
call fcn.140005ec0
mov qword [rsp + 0x1d58], rax
mov rax, qword [rsp + 0x1d58]
mov qword [rsp + 0x1d60], rax
lea r8, [0x14023c600]
mov rdx, qword [rsp + 0x1d60]
lea rcx, [rsp + 0x14e0]
call fcn.1400010b0
mov qword [rsp + 0x1d68], rax
mov rax, qword [rsp + 0x1d68]
mov qword [rsp + 0x1d70], rax
lea r8, [0x14023c5d0]
mov rdx, qword [rsp + 0x1d70]
lea rcx, [rsp + 0x14e8]
call fcn.1400010b0
mov qword [rsp + 0x1d78], rax
mov rax, qword [rsp + 0x1d78]
mov qword [rsp + 0x1d80], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1d80]
lea rcx, [rsp + 0x14f0]
call fcn.1400010b0
mov qword [rsp + 0x1d88], rax
mov rax, qword [rsp + 0x1d88]
mov qword [rsp + 0x1d90], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x14f8]
call fcn.140005ec0
mov qword [rsp + 0x1d98], rax
mov rax, qword [rsp + 0x1d98]
mov qword [rsp + 0x1da0], rax
lea r8, [0x14023c650]
mov rdx, qword [rsp + 0x1da0]
lea rcx, [rsp + 0x1500]
call fcn.1400010b0
mov qword [rsp + 0x1da8], rax
mov rax, qword [rsp + 0x1da8]
mov qword [rsp + 0x1db0], rax
lea r8, [0x14023c618]
mov rdx, qword [rsp + 0x1db0]
lea rcx, [rsp + 0x1508]
call fcn.1400010b0
mov qword [rsp + 0x1db8], rax
mov rax, qword [rsp + 0x1db8]
mov qword [rsp + 0x1dc0], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1dc0]
lea rcx, [rsp + 0x1510]
call fcn.1400010b0
mov qword [rsp + 0x1dc8], rax
mov rcx, qword [rsp + 0x1d90]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1dc8]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x1510]
call fcn.140001490
nop
lea rcx, [rsp + 0x1508]
call fcn.140001490
nop
lea rcx, [rsp + 0x1500]
call fcn.140001490
nop
lea rcx, [rsp + 0x14f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x14f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x14e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x14e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x14d8]
call fcn.140001490
mov rcx, qword [rsp + 0x2070]
call fcn.140152a00
mov eax, eax
and rax, 0xffff
movzx eax, ax
and rax, 0xff
movzx eax, al
cmp eax, 6
jae 0x14015717b
lea rcx, [rsp + 0x10e0]
call fcn.1400767b0
nop
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1520]
call fcn.140005ec0
mov qword [rsp + 0x1dd0], rax
mov rax, qword [rsp + 0x1dd0]
mov qword [rsp + 0x1dd8], rax
lea r8, [0x14023c6b8]
mov rdx, qword [rsp + 0x1dd8]
lea rcx, [rsp + 0x1528]
call fcn.1400010b0
mov qword [rsp + 0x1de0], rax
mov rax, qword [rsp + 0x1de0]
mov qword [rsp + 0x1de8], rax
lea r8, [0x14023c670]
mov rdx, qword [rsp + 0x1de8]
lea rcx, [rsp + 0x1530]
call fcn.1400010b0
mov qword [rsp + 0x1df0], rax
mov rax, qword [rsp + 0x1df0]
mov qword [rsp + 0x1df8], rax
mov rcx, qword [rsp + 0x1df8]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x10e0]
call fcn.1400768b4
mov dword [rsp + 0x1518], eax
lea rcx, [rsp + 0x1530]
call fcn.140001490
nop
lea rcx, [rsp + 0x1528]
call fcn.140001490
nop
lea rcx, [rsp + 0x1520]
call fcn.140001490
cmp dword [rsp + 0x1518], 0
je 0x14015716e
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1538]
call fcn.140005ec0
mov qword [rsp + 0x1e00], rax
mov rax, qword [rsp + 0x1e00]
mov qword [rsp + 0x1e08], rax
lea r8, [0x14023c710]
mov rdx, qword [rsp + 0x1e08]
lea rcx, [rsp + 0x1540]
call fcn.1400010b0
mov qword [rsp + 0x1e10], rax
mov rax, qword [rsp + 0x1e10]
mov qword [rsp + 0x1e18], rax
lea r8, str._system32driversNVNRM.SYS
mov rdx, qword [rsp + 0x1e18]
lea rcx, [rsp + 0x1548]
call fcn.1400010b0
mov qword [rsp + 0x1e20], rax
mov rax, qword [rsp + 0x1e20]
mov qword [rsp + 0x1e28], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1550]
call fcn.140005ec0
mov qword [rsp + 0x1e30], rax
mov rax, qword [rsp + 0x1e30]
mov qword [rsp + 0x1e38], rax
lea r8, [0x14023c778]
mov rdx, qword [rsp + 0x1e38]
lea rcx, [rsp + 0x1558]
call fcn.1400010b0
mov qword [rsp + 0x1e40], rax
mov rax, qword [rsp + 0x1e40]
mov qword [rsp + 0x1e48], rax
lea r8, str.CCBootPnPXPCCBootPnPNVNRM.SYS
mov rdx, qword [rsp + 0x1e48]
lea rcx, [rsp + 0x1560]
call fcn.1400010b0
mov qword [rsp + 0x1e50], rax
mov rcx, qword [rsp + 0x1e28]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1e50]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x1560]
call fcn.140001490
nop
lea rcx, [rsp + 0x1558]
call fcn.140001490
nop
lea rcx, [rsp + 0x1550]
call fcn.140001490
nop
lea rcx, [rsp + 0x1548]
call fcn.140001490
nop
lea rcx, [rsp + 0x1540]
call fcn.140001490
nop
lea rcx, [rsp + 0x1538]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1568]
call fcn.140005ec0
mov qword [rsp + 0x1e58], rax
mov rax, qword [rsp + 0x1e58]
mov qword [rsp + 0x1e60], rax
lea r8, [0x14023c7d8]
mov rdx, qword [rsp + 0x1e60]
lea rcx, [rsp + 0x1570]
call fcn.1400010b0
mov qword [rsp + 0x1e68], rax
mov rax, qword [rsp + 0x1e68]
mov qword [rsp + 0x1e70], rax
lea r8, str._system32CCBootPnPNVNRM.SYS
mov rdx, qword [rsp + 0x1e70]
lea rcx, [rsp + 0x1578]
call fcn.1400010b0
mov qword [rsp + 0x1e78], rax
mov rax, qword [rsp + 0x1e78]
mov qword [rsp + 0x1e80], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1580]
call fcn.140005ec0
mov qword [rsp + 0x1e88], rax
mov rax, qword [rsp + 0x1e88]
mov qword [rsp + 0x1e90], rax
lea r8, [0x14023c838]
mov rdx, qword [rsp + 0x1e90]
lea rcx, [rsp + 0x1588]
call fcn.1400010b0
mov qword [rsp + 0x1e98], rax
mov rax, qword [rsp + 0x1e98]
mov qword [rsp + 0x1ea0], rax
lea r8, [0x14023c7f0]
mov rdx, qword [rsp + 0x1ea0]
lea rcx, [rsp + 0x1590]
call fcn.1400010b0
mov qword [rsp + 0x1ea8], rax
mov rcx, qword [rsp + 0x1e80]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1ea8]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x1590]
call fcn.140001490
nop
lea rcx, [rsp + 0x1588]
call fcn.140001490
nop
lea rcx, [rsp + 0x1580]
call fcn.140001490
nop
lea rcx, [rsp + 0x1578]
call fcn.140001490
nop
lea rcx, [rsp + 0x1570]
call fcn.140001490
nop
lea rcx, [rsp + 0x1568]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1598]
call fcn.140005ec0
mov qword [rsp + 0x1eb0], rax
mov rax, qword [rsp + 0x1eb0]
mov qword [rsp + 0x1eb8], rax
lea r8, [0x14023c898]
mov rdx, qword [rsp + 0x1eb8]
lea rcx, [rsp + 0x15a0]
call fcn.1400010b0
mov qword [rsp + 0x1ec0], rax
mov rax, qword [rsp + 0x1ec0]
mov qword [rsp + 0x1ec8], rax
lea r8, str._system32driversNVSNPU.SYS
mov rdx, qword [rsp + 0x1ec8]
lea rcx, [rsp + 0x15a8]
call fcn.1400010b0
mov qword [rsp + 0x1ed0], rax
mov rax, qword [rsp + 0x1ed0]
mov qword [rsp + 0x1ed8], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x15b0]
call fcn.140005ec0
mov qword [rsp + 0x1ee0], rax
mov rax, qword [rsp + 0x1ee0]
mov qword [rsp + 0x1ee8], rax
lea r8, [0x14023c8f8]
mov rdx, qword [rsp + 0x1ee8]
lea rcx, [rsp + 0x15b8]
call fcn.1400010b0
mov qword [rsp + 0x1ef0], rax
mov rax, qword [rsp + 0x1ef0]
mov qword [rsp + 0x1ef8], rax
lea r8, [0x14023c8b0]
mov rdx, qword [rsp + 0x1ef8]
lea rcx, [rsp + 0x15c0]
call fcn.1400010b0
mov qword [rsp + 0x1f00], rax
mov rcx, qword [rsp + 0x1ed8]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1f00]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x15c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x15b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x15b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x15a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x15a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1598]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x15c8]
call fcn.140005ec0
mov qword [rsp + 0x1f08], rax
mov rax, qword [rsp + 0x1f08]
mov qword [rsp + 0x1f10], rax
lea r8, str.:Windows
mov rdx, qword [rsp + 0x1f10]
lea rcx, [rsp + 0x15d0]
call fcn.1400010b0
mov qword [rsp + 0x1f18], rax
mov rax, qword [rsp + 0x1f18]
mov qword [rsp + 0x1f20], rax
lea r8, str._system32CCBootPnPNVSNPU.SYS
mov rdx, qword [rsp + 0x1f20]
lea rcx, [rsp + 0x15d8]
call fcn.1400010b0
mov qword [rsp + 0x1f28], rax
mov rax, qword [rsp + 0x1f28]
mov qword [rsp + 0x1f30], rax
mov r8d, 1
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x15e0]
call fcn.140005ec0
mov qword [rsp + 0x1f38], rax
mov rax, qword [rsp + 0x1f38]
mov qword [rsp + 0x1f40], rax
lea r8, [0x14023c9b8]
mov rdx, qword [rsp + 0x1f40]
lea rcx, [rsp + 0x15e8]
call fcn.1400010b0
mov qword [rsp + 0x1f48], rax
mov rax, qword [rsp + 0x1f48]
mov qword [rsp + 0x1f50], rax
lea r8, str.CCBootPnPXPCCBootPnPNVSNPU.SYS
mov rdx, qword [rsp + 0x1f50]
lea rcx, [rsp + 0x15f0]
call fcn.1400010b0
mov qword [rsp + 0x1f58], rax
mov rcx, qword [rsp + 0x1f30]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1f58]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011beb0
lea rcx, [rsp + 0x15f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x15e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x15e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x15d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x15d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x15c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x10e0]
call fcn.14007680c
lea rcx, [rsp + 0x880]
call fcn.1400055f0
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x15f8]
call fcn.14011d190
mov qword [rsp + 0x1f60], rax
mov rax, qword [rsp + 0x1f60]
mov qword [rsp + 0x1f68], rax
lea r8, [0x14023c9f0]
mov rdx, qword [rsp + 0x1f68]
lea rcx, [rsp + 0x1600]
call fcn.1400010b0
mov qword [rsp + 0x1f70], rax
mov rax, qword [rsp + 0x1f70]
mov qword [rsp + 0x1f78], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1f78]
lea rcx, [rsp + 0x1608]
call fcn.140006bd0
mov qword [rsp + 0x1f80], rax
mov rax, qword [rsp + 0x1f80]
mov qword [rsp + 0x1f88], rax
lea r8, [0x14023c9d8]
mov rdx, qword [rsp + 0x1f88]
lea rcx, [rsp + 0x1610]
call fcn.1400010b0
mov qword [rsp + 0x1f90], rax
mov rax, qword [rsp + 0x1f90]
mov qword [rsp + 0x1f98], rax
lea r8, [rsp + 0x878]
mov rdx, qword [rsp + 0x1f98]
lea rcx, [rsp + 0x1618]
call fcn.140006bd0
mov qword [rsp + 0x1fa0], rax
mov rax, qword [rsp + 0x1fa0]
mov qword [rsp + 0x1fa8], rax
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1620]
call fcn.14011d190
mov qword [rsp + 0x1fb0], rax
mov rax, qword [rsp + 0x1fb0]
mov qword [rsp + 0x1fb8], rax
lea r8, [0x14023ca18]
mov rdx, qword [rsp + 0x1fb8]
lea rcx, [rsp + 0x1628]
call fcn.1400010b0
mov qword [rsp + 0x1fc0], rax
mov rax, qword [rsp + 0x1fc0]
mov qword [rsp + 0x1fc8], rax
lea r8, [rsp + 0x860]
mov rdx, qword [rsp + 0x1fc8]
lea rcx, [rsp + 0x1630]
call fcn.140006bd0
mov qword [rsp + 0x1fd0], rax
mov rax, qword [rsp + 0x1fd0]
mov qword [rsp + 0x1fd8], rax
lea r8, [0x14023ca00]
mov rdx, qword [rsp + 0x1fd8]
lea rcx, [rsp + 0x1638]
call fcn.1400010b0
mov qword [rsp + 0x1fe0], rax
mov rax, qword [rsp + 0x1fe0]
mov qword [rsp + 0x1fe8], rax
mov rcx, qword [rsp + 0x1fa8]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x1fe8]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011cad0
nop
lea rcx, [rsp + 0x1638]
call fcn.140001490
nop
lea rcx, [rsp + 0x1630]
call fcn.140001490
nop
lea rcx, [rsp + 0x1628]
call fcn.140001490
nop
lea rcx, [rsp + 0x1620]
call fcn.140001490
nop
lea rcx, [rsp + 0x1618]
call fcn.140001490
nop
lea rcx, [rsp + 0x1610]
call fcn.140001490
nop
lea rcx, [rsp + 0x1608]
call fcn.140001490
nop
lea rcx, [rsp + 0x1600]
call fcn.140001490
nop
lea rcx, [rsp + 0x15f8]
call fcn.140001490
mov rax, qword [rsp + 0x2070]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1640]
call fcn.14011d190
mov qword [rsp + 0x1ff0], rax
mov rax, qword [rsp + 0x1ff0]
mov qword [rsp + 0x1ff8], rax
lea r8, [0x14023ca78]
mov rdx, qword [rsp + 0x1ff8]
lea rcx, [rsp + 0x1648]
call fcn.1400010b0
mov qword [rsp + 0x2000], rax
mov rax, qword [rsp + 0x2000]
mov qword [rsp + 0x2008], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x2008]
lea rcx, [rsp + 0x1650]
call fcn.140006bd0
mov qword [rsp + 0x2010], rax
mov rax, qword [rsp + 0x2010]
mov qword [rsp + 0x2018], rax
lea r8, [0x14023ca60]
mov rdx, qword [rsp + 0x2018]
lea rcx, [rsp + 0x1658]
call fcn.1400010b0
mov qword [rsp + 0x2020], rax
mov rax, qword [rsp + 0x2020]
mov qword [rsp + 0x2028], rax
lea r8, [rsp + 0x878]
mov rdx, qword [rsp + 0x2028]
lea rcx, [rsp + 0x1660]
call fcn.140006bd0
mov qword [rsp + 0x2030], rax
mov rax, qword [rsp + 0x2030]
mov qword [rsp + 0x2038], rax
lea r8, [0x14023ca40]
mov rdx, qword [rsp + 0x2038]
lea rcx, [rsp + 0x1668]
call fcn.1400010b0
mov qword [rsp + 0x2040], rax
mov rax, qword [rsp + 0x2040]
mov qword [rsp + 0x2048], rax
mov rcx, qword [rsp + 0x2048]
call fcn.14000f8f0
mov rcx, rax
call fcn.14011cf60
nop
lea rcx, [rsp + 0x1668]
call fcn.140001490
nop
lea rcx, [rsp + 0x1660]
call fcn.140001490
nop
lea rcx, [rsp + 0x1658]
call fcn.140001490
nop
lea rcx, [rsp + 0x1650]
call fcn.140001490
nop
lea rcx, [rsp + 0x1648]
call fcn.140001490
nop
lea rcx, [rsp + 0x1640]
call fcn.140001490
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000cca0
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x880]
call fcn.140005590
nop
lea rcx, [rsp + 0x868]
call fcn.140005590
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x140154140
mov rcx, qword [rsp + 0x2070]
add rcx, 0x370
call fcn.140019b70
mov rdx, qword [rsp + 0x20]
mov rcx, rax
call fcn.14000cca0
mov qword [rsp + 0x20], rax
jmp 0x140154096
mov rcx, qword [rsp + 0x2070]
call fcn.1400818d4
nop
lea rcx, [rsp + 0x30]
call fcn.140005590
nop
lea rcx, [rsp + 0x40]
call fcn.140001490
mov rcx, qword [rsp + 0x2050]
xor rcx, rsp
call fcn.1400a8790
add rsp, 0x2060
pop rdi
ret