Function at 0x140031af0
Capabilities:
Link many functions at runtime

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x30], 0xfffffffffffffffe
mov rdi, r9
mov rsi, r8
mov rbx, rdx
mov r14, rcx
mov rcx, qword [0x143b47618]
test rcx, rcx
je 0x140031d06
mov qword [rbp + 8], rcx
mov edx, 0xffffffff
xor r8d, r8d
call qword [sym.imp.kernel32.dll_WaitForSingleObjectEx]
mov rax, qword [0x143b47650]
test rax, rax
jne 0x140031b6a
lea rcx, [0x143b36c58]
call qword [sym.imp.kernel32.dll_LoadLibraryA]
mov qword [0x143b47650], rax
test rax, rax
je 0x140031f84
cmp byte [0x143b47620], 0
jne 0x140031f43
mov rcx, qword [0x143b47658]
test rcx, rcx
jne 0x140031ba6
lea rdx, [0x143b36c64]
mov rcx, rax
call qword [sym.imp.kernel32.dll_GetProcAddress]
test rax, rax
je 0x140031f3c
mov rcx, rax
mov qword [0x143b47658], rax
call rcx
mov ecx, eax
mov rax, qword [0x143b47660]
test rax, rax
jne 0x140031be0
mov r15d, ecx
mov rcx, qword [0x143b47650]
lea rdx, [0x143b36c72]
call qword [sym.imp.kernel32.dll_GetProcAddress]
test rax, rax
je 0x140031f3c
mov qword [0x143b47660], rax
mov ecx, r15d
or ecx, 4
call rax
mov r15, qword [0x143b47668]
test r15, r15
jne 0x140031c18
mov rcx, qword [0x143b47650]
lea rdx, [0x143b36c80]
call qword [sym.imp.kernel32.dll_GetProcAddress]
test rax, rax
je 0x140031f3c
mov r15, rax
mov qword [0x143b47668], rax
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
mov r8d, 1
call r15
mov qword [rbp + 0x10], 0
mov qword [rbp + 0x18], 2
mov qword [rbp + 0x20], 0
mov byte [rbp + 0x2f], 1
mov qword [rsp + 0x20], 2
lea rcx, [rbp + 0x10]
mov r8d, 0x400
mov r9d, 2
xor edx, edx
call fcn.140045430
mov r15, qword [rbp + 0x18]
mov r12, qword [rbp + 0x20]
lea rcx, [r15 + r12*2]
mov r8d, 0x7fe
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov word [r15 + r12*2 + 0x7fe], 0
add r12, 0x400
mov qword [rbp + 0x20], r12
mov r13, qword [0x143b47670]
test r13, r13
jne 0x140031cca
mov rcx, qword [0x143b47650]
lea rdx, [0x143b36c8f]
call qword [sym.imp.kernel32.dll_GetProcAddress]
test rax, rax
je 0x140031fa3
mov r13, rax
mov qword [0x143b47670], rax
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov rcx, rax
mov rdx, r15
mov r8d, r12d
call r13
cmp eax, 1
jne 0x140031de9
mov rcx, r15
call qword [sym.imp.kernel32.dll_lstrlenW]
test eax, eax
js 0x140031feb
mov eax, eax
cmp r12, rax
jae 0x140031e56
jmp 0x140031e5a
movups xmm0, xmmword [0x143b36168]
movaps xmmword [rbp - 0x10], xmm0
movups xmm0, xmmword [0x143b36158]
movaps xmmword [rbp - 0x20], xmm0
mov byte [rbp], 0
call qword [sym.imp.kernel32.dll_GetCurrentProcessId]
test eax, eax
je 0x140031d96
mov ecx, 0x1f
nop
cmp rcx, 0x20
ja 0x140031fd3
mov edx, eax
and dl, 0xf
lea r8d, [rdx + 0x30]
lea r9d, [rdx + 0x37]
cmp dl, 0xa
movzx edx, r8b
movzx r8d, r9b
cmovb r8d, edx
mov byte [rbp + rcx - 0x20], r8b
cmp eax, 0x10
jb 0x140031d96
mov edx, eax
shr edx, 4
and dl, 0xf
lea r8d, [rdx + 0x30]
lea r9d, [rdx + 0x37]
cmp dl, 0xa
movzx edx, r8b
movzx r8d, r9b
cmovb r8d, edx
mov byte [rbp + rcx - 0x21], r8b
mov edx, eax
shr edx, 8
add rcx, 0xfffffffffffffffe
cmp eax, 0x100
mov eax, edx
jae 0x140031d30
movzx eax, byte [rbp]
mov byte [rbp - 0x30], al
movaps xmm0, xmmword [rbp - 0x20]
movaps xmm1, xmmword [rbp - 0x10]
movaps xmmword [rbp - 0x40], xmm1
movaps xmmword [rbp - 0x50], xmm0
lea r8, [rbp - 0x50]
xor ecx, ecx
xor edx, edx
call qword [sym.imp.kernel32.dll_CreateMutexA]
test rax, rax
je 0x140031f8e
mov rcx, rax
xor eax, eax
lock cmpxchg qword [0x143b47618], rcx
je 0x140031b2f
mov r15, rax
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, r15
jmp 0x140031b2f
mov qword [rbp + 0x20], 0
mov rax, qword [rbp + 0x10]
test rax, rax
je 0x140031e10
mov word [r15], 0x2e
mov qword [rbp + 0x20], 1
cmp rax, 1
je 0x140031e39
jmp 0x140031e4a
mov byte [rbp + 0x2f], 1
lea rcx, [rbp + 0x10]
call fcn.140024f70
mov rax, qword [rbp + 0x10]
mov r15, qword [rbp + 0x18]
mov word [r15], 0x2e
mov qword [rbp + 0x20], 1
cmp rax, 1
jne 0x140031e4a
mov byte [rbp + 0x2f], 1
lea rcx, [rbp + 0x10]
call fcn.140024f70
mov r15, qword [rbp + 0x18]
mov word [r15 + 2], 0x3b
mov eax, 2
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp - 0x40], rax
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp - 0x50], xmm0
mov r15, qword [0x143b47680]
test r15, r15
jne 0x140031e9d
mov rcx, qword [0x143b47650]
lea rdx, [0x143b36cb3]
call qword [sym.imp.kernel32.dll_GetProcAddress]
test rax, rax
je 0x140031fbd
mov r15, rax
mov qword [0x143b47680], rax
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
lea rdx, [0x14002e470]
lea r8, [rbp - 0x50]
mov rcx, rax
call r15
movaps xmm0, xmmword [rbp - 0x50]
movaps xmmword [rbp - 0x20], xmm0
mov r13, qword [rbp - 0x40]
mov qword [rbp - 0x10], r13
mov r15, qword [rbp - 0x20]
cmp r13, r15
jne 0x140031eda
lea rcx, [rbp - 0x20]
call fcn.140024f70
mov r15, qword [rbp - 0x20]
mov r12, qword [rbp - 0x18]
mov word [r12 + r13*2], 0
mov r13, qword [0x143b47678]
test r13, r13
jne 0x140031f14
mov rcx, qword [0x143b47650]
lea rdx, [0x143b36ca1]
call qword [sym.imp.kernel32.dll_GetProcAddress]
test rax, rax
je 0x140031f23
mov r13, rax
mov qword [0x143b47678], rax
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov rcx, rax
mov rdx, r12
call r13
test r15, r15
je 0x140031f3c
add r15, r15
mov r8d, 2
mov rcx, r12
mov rdx, r15
call fcn.14001d4e0
mov byte [0x143b47620], 1
test r14b, 1
je 0x140031f66
mov rcx, qword [rbx + 0x10]
mov edx, dword [rbx]
mov r8d, dword [rbx + 4]
mov rax, qword [rdi + 0x20]
mov qword [rsp + 0x20], rax
mov r9, rsi
call fcn.140032100
jmp 0x140031f84
lea rcx, [rbx - 1]
test rbx, rbx
cmove rcx, rbx
mov rax, qword [rdi + 0x20]
mov qword [rsp + 0x20], rax
xor edx, edx
mov r9, rsi
call fcn.140032100
mov rcx, qword [rbp + 8]
call qword [sym.imp.kernel32.dll_ReleaseMutex]
nop
add rsp, 0xb8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rdx, qword [rbp + 0x10]
test rdx, rdx
je 0x140031f3c
add rdx, rdx
mov r8d, 2
mov rcx, r15
jmp 0x140031f37
mov r15, qword [rbp - 0x50]
test r15, r15
je 0x140031f3c
mov r12, qword [rbp - 0x48]
jmp 0x140031f28
lea r8, [0x143b361a0]
mov edx, 0x21
mov rcx, 0xffffffffffffffff
call fcn.140046210
mov byte [rbp + 0x2f], 1
lea rcx, [0x143b361b8]
lea r8, [0x143b361d8]
mov edx, 0x1a
call fcn.140046180
ud2