Function at 0x140001024
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x8e8
movaps xmmword [rsp + 0x8d0], xmm6
movabs rbp, 0x8000000000000000
lea r13, [rsp + 0x590]
lea r12, [rsp + 0x88]
xorps xmm6, xmm6
lea r15, [rsp + 0x80]
lea rbx, [rsp + 0x4d0]
lea r14, str.LeagueClient.exe
call fcn.140014cbc
mov rsi, rax
mov rdi, rdx
mov edx, 0x158
mov r8d, 0x1f4
mov rcx, r15
call fcn.140014a16
movups xmm0, xmmword [rsp + 0x80]
movups xmm1, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0xf0], xmm0
mov r8d, 9
mov rcx, rbx
lea rdx, [0x140018f6e]
call fcn.140004f04
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmm1, xmmword [rsp + 0x100]
movups xmmword [r13 + 0x10], xmm6
movups xmmword [r13], xmm6
movups xmmword [r13 - 0x98], xmm6
and qword [rsp + 0x4e8], 0
mov eax, 1
mov qword [rsp + 0x4f0], rax
mov qword [rsp + 0x508], rax
and qword [rsp + 0x510], 0
mov qword [rsp + 0x518], rbp
and qword [rsp + 0x530], 0
lea rax, [rsp + 0x3d8]
movups xmmword [rax - 0x71], xmm1
and dword [rsp + 0x538], 0
movups xmmword [rax - 0x81], xmm0
and qword [rsp + 0x540], 0
mov qword [rsp + 0x548], 8
and qword [rsp + 0x550], 0
mov byte [rsp + 0x558], 0
mov rax, qword [rsp + 0x36f]
mov qword [r13 - 0x18], rax
movups xmm0, xmmword [rsp + 0x350]
movups xmm1, xmmword [rsp + 0x360]
movups xmmword [r13 - 0x27], xmm1
movups xmmword [r13 - 0x37], xmm0
mov qword [rsp + 0x580], rsi
mov qword [rsp + 0x588], rdi
and qword [rsp + 0x5b0], 0
mov r8d, 0x120
lea rcx, [rsp + 0x350]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + 0x4d0], 0x101
mov byte [rsp + 0x4d2], 1
mov byte [r13 - 0xb9], 0
and dword [r13 - 0xbd], 0
mov byte [rsp + 0x4d8], 2
lea rcx, [rsp + 0x350]
mov rdx, rbx
call fcn.140014cdd
mov rax, qword [rsp + 0x3e0]
mov rcx, qword [rsp + 0x3e8]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [rsp + 0x3f8]
mov qword [rsp + 0x4d0], rax
add rax, 0x10
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x4e0], rcx
mov word [rsp + 0x4e8], dx
mov qword [rsp + 0x4f0], r8
mov rcx, rbx
call fcn.14001469c
test rax, rax
je 0x140001279
mov rdi, rax
mov rcx, qword [rax - 0x138]
mov rdx, qword [rax - 0x130]
mov r9d, 0x10
mov r8, r14
call fcn.140005ac6
test al, al
je 0x140001244
jmp 0x140001301
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call qword [sym.imp.kernel32.dll_CreateWaitableTimerExW]
test rax, rax
je 0x1400012f1
mov rsi, rax
mov qword [rsp + 0x4d0], 0xffffffffff676980
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
mov rcx, rax
mov rdx, rbx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.kernel32.dll_SetWaitableTimer]
test eax, eax
je 0x1400012e8
mov rcx, rsi
mov edx, 0xffffffff
call qword [sym.imp.kernel32.dll_WaitForSingleObject]
mov edi, eax
mov rcx, rsi
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp edi, 0xffffffff
jne 0x1400011b6
jmp 0x1400012f1
mov rcx, rsi
call qword [sym.imp.kernel32.dll_CloseHandle]
mov ecx, 0x3e8
call qword [sym.imp.kernel32.dll_Sleep]
jmp 0x1400011b6
cmp qword [rdi - 0xf8], rbp
je 0x140004608
mov rbx, qword [rdi - 0xf0]
mov rsi, qword [rdi - 0xe8]
mov edi, dword [rdi - 0x158]
mov rcx, rsi
call fcn.14000a914
mov qword [rsp + 0x4c0], rax
mov rcx, rdx
mov qword [rsp + 0x308], rdx
mov rdx, rbx
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r13, qword [rsp + 0x3e8]
test r13, r13
je 0x1400013f9
mov rbx, qword [rsp + 0x3e0]
mov rax, qword [rsp + 0x3f8]
lea r14, [r13 + 1]
test rax, rax
je 0x1400013ce
lea rcx, [rbx + r14]
movdqa xmm0, xmmword [rbx]
pmovmskb edx, xmm0
not edx
lea r8, [rbx + 0x10]
mov word [rsp + 0x4e8], dx
mov qword [rsp + 0x4d0], rbx
mov qword [rsp + 0x4d8], r8
mov qword [rsp + 0x4e0], rcx
mov qword [rsp + 0x4f0], rax
lea rcx, [rsp + 0x4d0]
call fcn.14001469c
test rax, rax
je 0x1400013ce
add rax, 0xfffffffffffffeb0
mov rcx, rax
call fcn.140010d2a
jmp 0x1400013ac
mov rax, r14
mov ecx, 0x158
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
lea r8, [rax + r13]
add r8, 0x11
sub rbx, rax
mov edx, 0x10
mov rcx, rbx
call fcn.14000101a
mov rcx, qword [rsp + 0x350]
mov rdx, qword [rsp + 0x358]
call fcn.140004cc5
mov rcx, qword [rsp + 0x398]
cmp rcx, rbp
je 0x140001428
mov rdx, qword [rsp + 0x3a0]
call fcn.140004cc5
mov rcx, qword [rsp + 0x368]
mov rdx, qword [rsp + 0x370]
call fcn.140004cc5
mov rcx, qword [rsp + 0x380]
mov rdx, qword [rsp + 0x388]
call fcn.140004cc5
mov rcx, qword [rsp + 0x3c8]
mov rdx, qword [rsp + 0x3d0]
call fcn.1400145a1
mov rcx, qword [rsp + 0x3c0]
mov rdx, qword [rsp + 0x3c8]
call fcn.1400145f7
mov rax, qword [rsp + 0x430]
test rax, rax
lea rbx, [rsp + 0x4d0]
mov r14, qword [sym.imp.pdh.dll_PdhRemoveCounter]
je 0x1400015ea
mov rcx, qword [rsp + 0x438]
mov rdx, qword [rsp + 0x448]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb r8d, xmm0
not r8d
mov qword [rsp + 0x4d0], rax
add rax, 0x10
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x4e0], rcx
mov word [rsp + 0x4e8], r8w
mov qword [rsp + 0x4f0], rdx
mov rcx, rbx
call fcn.14001463e
test rax, rax
je 0x140001501
mov rcx, qword [rax - 8]
call r14
jmp 0x1400014eb
mov rdx, qword [rsp + 0x468]
lea rax, [rdx + 1]
cmp rax, 2
jb 0x140001530
mov rcx, rbx
call fcn.140010e72
mov rcx, qword [rsp + 0x4d0]
mov rdx, qword [rsp + 0x4d8]
call fcn.140011041
mov rcx, qword [rsp + 0x460]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x140001548
call qword [sym.imp.pdh.dll_PdhCloseQuery]
mov rdx, qword [rsp + 0x438]
test rdx, rdx
je 0x1400015ea
mov rcx, qword [rsp + 0x430]
mov rax, qword [rsp + 0x448]
test rax, rax
je 0x1400015d9
add rdx, rcx
inc rdx
movdqa xmm0, xmmword [rcx]
pmovmskb r8d, xmm0
not r8d
mov qword [rsp + 0x4d0], rcx
add rcx, 0x10
mov qword [rsp + 0x4d8], rcx
mov qword [rsp + 0x4e0], rdx
mov word [rsp + 0x4e8], r8w
mov qword [rsp + 0x4f0], rax
mov rcx, rbx
call fcn.14001463e
test rax, rax
je 0x1400015c9
mov rcx, qword [rax - 0x20]
mov rdx, qword [rax - 0x18]
call fcn.140004cc5
jmp 0x1400015ad
mov rcx, qword [rsp + 0x430]
mov rdx, qword [rsp + 0x438]
mov r8d, 0x20
mov r9d, 0x10
call fcn.140014611
test edi, edi
js 0x140004608
mov ecx, 0x100000
xor edx, edx
mov r8d, edi
call qword [sym.imp.kernel32.dll_OpenProcess]
test rax, rax
je 0x14000460a
mov rdi, rax
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.kernel32.dll_WaitForSingleObject]
test eax, eax
je 0x140001683
cmp eax, 0x102
je 0x140004608
call fcn.14000aa88
mov rbx, rax
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140001683
test rax, rax
je 0x140001683
mov r14, qword [rbx - 1]
mov r12, qword [rbx + 7]
mov rcx, r14
call qword [r12]
mov r8, qword [r12 + 8]
test r8, r8
je 0x14000166b
mov rdx, qword [r12 + 0x10]
mov rcx, r14
call fcn.14000101a
dec rbx
mov edx, 8
mov rcx, rbx
call fcn.1400047f0
lea r12, [rsp + 0x88]
mov rcx, rdi
call qword [sym.imp.kernel32.dll_CloseHandle]
lea rcx, [rsp + 0x4d0]
mov rdx, qword [rsp + 0x308]
mov r8, rsi
call fcn.140004f76
mov rsi, qword [rsp + 0x4d0]
mov rdi, qword [rsp + 0x4d8]
mov rbx, qword [rsp + 0x4e0]
mov rcx, rbx
call fcn.14000a914
mov r14, rax
mov r13, rdx
mov rcx, rdx
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x350], r14
mov qword [rsp + 0x358], r13
mov qword [rsp + 0x360], rbx
mov byte [rsp + 0x368], 0
mov eax, dword [rsp + 0x200]
mov ecx, dword [rsp + 0x203]
lea rdx, [rsp + 0x3d8]
mov dword [rdx - 0x6c], ecx
mov dword [rdx - 0x6f], eax
and qword [rsp + 0x370], 0
mov qword [rsp + 0x378], 8
and qword [rsp + 0x380], 0
mov qword [rsp + 0x388], rbp
mov rax, qword [rsp + 0x4e0]
mov qword [rdx - 0x38], rax
movdqu xmm0, xmmword [rsp + 0x4d0]
movdqu xmmword [rdx - 0x48], xmm0
mov ecx, 6
mov dword [rsp + 0x3a8], ecx
mov eax, dword [rsp + 0x88]
mov dword [rdx - 0x24], eax
mov rax, qword [rsp + 0x80]
mov qword [rdx - 0x2c], rax
mov dword [rsp + 0x3b8], ecx
mov eax, dword [rsp + 0xf8]
mov dword [rdx - 0x14], eax
mov rax, qword [rsp + 0xf0]
mov qword [rdx - 0x1c], rax
mov dword [rsp + 0x3c8], ecx
mov eax, dword [rsp + 0x240]
mov dword [rdx - 4], eax
mov rax, qword [rsp + 0x238]
mov qword [rdx - 0xc], rax
movups xmmword [rdx + 0xa], xmm6
movups xmmword [rdx], xmm6
movzx eax, word [rsp + 0x2b4]
mov word [rdx + 0x1e], ax
mov eax, dword [rsp + 0x2b0]
mov dword [rdx + 0x1a], eax
movups xmmword [rdx + 0x2e], xmm6
movups xmmword [rdx + 0x20], xmm6
mov rcx, rsi
mov rdx, rdi
call fcn.140004cc5
and dword [rsp + 0x310], 0
mov al, byte [rsp + 0x3f0]
test al, al
sete cl
mov r14, qword [rsp + 0x3e8]
test r14, r14
sete dl
and dl, cl
mov byte [rsp + 0x60], dl
je 0x140001819
xor ebx, ebx
lea r13, [rsp + 0x590]
jmp 0x14000212b
and qword [rsp + 0x170], 0
and qword [rsp + 0x180], 0
test al, al
lea r13, [rsp + 0x590]
lea rbx, [rsp + 0x4d0]
jne 0x1400019bf
call qword [sym.imp.kernel32.dll_GetEnvironmentStringsW]
mov rsi, rax
mov r13, rax
test rax, rax
je 0x14000460a
mov rdi, r13
cmp word [rdi], 0
je 0x1400019ae
mov rbx, 0xffffffffffffffff
mov rcx, 0xfffffffffffffffe
mov rax, rcx
cmp word [rdi + rbx*2 + 2], 0
lea rbx, [rbx + 1]
lea rcx, [rcx + 2]
jne 0x140001873
test rbx, rbx
je 0x140004608
lea r13, [rdi + rbx*2]
add r13, 2
xor r12d, r12d
test rax, rax
je 0x1400018b1
cmp word [rdi + r12*2 + 2], 0x3d
je 0x1400018c6
inc r12
add rax, 0xfffffffffffffffe
jmp 0x14000189a
mov rdi, r13
lea r12, [rsp + 0x88]
lea rbx, [rsp + 0x4d0]
jmp 0x14000185b
cmp r12, rbx
jae 0x140004608
lea r8, [r12 + 1]
lea rcx, [rsp + 0xf0]
mov rdx, rdi
call fcn.14000a2b4
add r12, 2
sub rbx, r12
jb 0x140004608
lea rdx, [rdi + r12*2]
lea rcx, [rsp + 0x4f0]
mov r8, rbx
call fcn.14000a2b4
movups xmm0, xmmword [rsp + 0xf0]
movups xmm1, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x4d0], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm1
movdqa xmm0, xmmword [rsp + 0x4f0]
movaps xmm1, xmmword [rsp + 0x500]
movdqa xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0xb0], xmm1
cmp qword [rsp + 0x80], rbp
lea r12, [rsp + 0x88]
lea rbx, [rsp + 0x4d0]
je 0x1400019ae
mov rcx, rbx
mov rdx, r15
call fcn.14000f11e
lea rcx, [rsp + 0xf0]
lea rdx, [rsp + 0x170]
mov r8, rbx
lea r9, [rsp + 0xa0]
call fcn.14000c4af
mov rcx, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0xf8]
call fcn.140010e01
jmp 0x140001858
mov rcx, rsi
call qword [sym.imp.kernel32.dll_FreeEnvironmentStringsW]
lea r13, [rsp + 0x590]
and qword [rsp + 0x240], 0
mov rax, qword [rsp + 0x3d8]
and qword [rsp + 0x260], 0
mov rcx, qword [rsp + 0x3e0]
xor edx, edx
test rax, rax
setne dl
mov qword [rsp + 0x238], rdx
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], rcx
mov qword [rsp + 0x258], rdx
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x270], rcx
cmove r14, rax
test r14, r14
je 0x140001fec
dec r14
mov qword [rsp + 0x278], r14
cmp qword [rsp + 0x238], 0
je 0x140004608
mov rsi, qword [rsp + 0x240]
test rsi, rsi
jne 0x140001a7e
mov rdx, qword [rsp + 0x248]
mov r8, qword [rsp + 0x250]
lea rcx, [rsp + 0x240]
call fcn.140009ddc
mov qword [rsp + 0x238], 1
mov rsi, qword [rsp + 0x240]
mov r8, qword [rsp + 0x248]
mov rbx, qword [rsp + 0x250]
movzx eax, word [rsi + 0x3d2]
cmp rbx, rax
jb 0x140001ab9
mov rax, qword [rsi + 0x160]
test rax, rax
je 0x140004608
inc r8
movzx ebx, word [rsi + 0x3d0]
mov rsi, rax
jmp 0x140001a8e
test r8, r8
je 0x140001ad8
mov rdx, qword [rsi + rbx*8 + 0x3e0]
dec r8
lea rcx, [rsp + 0x4d0]
call fcn.140009ddc
jmp 0x140001af5
lea rax, [rbx + 1]
mov qword [rsp + 0x4d0], rsi
and qword [rsp + 0x4d8], 0
mov qword [rsp + 0x4e0], rax
imul rax, rbx, 0x38
lea rdi, [rsi + rax]
add rdi, 0x168
shl rbx, 5
mov rax, qword [rsp + 0x4e0]
lea rcx, [rsp + 0x240]
mov qword [rcx + 0x10], rax
mov rax, qword [rsp + 0x4d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d8]
mov qword [rcx + 8], rax
cmp qword [rsi + rbx], rbp
jne 0x140001b97
mov rdx, qword [rsp + 0x170]
test rdx, rdx
je 0x140001b77
mov r8, qword [rsp + 0x178]
mov r9, qword [rdi + 0x28]
mov rax, qword [rdi + 0x30]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x1d0]
call fcn.14000bdb4
cmp qword [rsp + 0x1d0], 0
je 0x140001c5c
mov rsi, rbp
mov rcx, rsi
mov rdx, qword [rsp + 0x4c8]
call fcn.140010e01
lea rbx, [rsp + 0x4d0]
jmp 0x140001c4f
add rsi, rbx
mov rcx, r15
mov rdx, rdi
call fcn.14000f179
mov rbx, qword [rdi + 0x28]
mov rdi, qword [rdi + 0x30]
mov rcx, rdi
call fcn.14000972b
mov r14, rax
mov r13, rdx
lea r8, [rdi + rdi]
mov rcx, rdx
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
movdqu xmm0, xmmword [rsp + 0x80]
movups xmm1, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x4d0], xmm0
movaps xmmword [rsp + 0x4e0], xmm1
mov qword [rsp + 0x4f0], r14
mov qword [rsp + 0x4f8], r13
lea r13, [rsp + 0x590]
mov qword [rsp + 0x500], rdi
mov rcx, r15
mov rdx, rsi
call fcn.14000f179
lea rcx, [rsp + 0xf0]
lea rdx, [rsp + 0x170]
lea rbx, [rsp + 0x4d0]
mov r8, rbx
mov r9, r15
call fcn.14000c4af
mov rcx, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0xf8]
call fcn.140010e01
mov r14, qword [rsp + 0x278]
jmp 0x140001a1d
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1e8]
mov byte [rsp + 0x320], 0
test rax, rax
je 0x140001d8b
lea rcx, [rcx + rdx*8]
add rcx, 0x3d8
dec rax
lea r14, [rsp + 0x4d0]
mov rcx, qword [rcx]
movzx edx, word [rcx + 0x3d2]
sub rax, 1
jb 0x140001cb8
lea rcx, [rcx + rdx*8]
add rcx, 0x3d8
jmp 0x140001c9b
dec rdx
mov qword [rsp + 0x338], rcx
and qword [rsp + 0x340], 0
mov qword [rsp + 0x348], rdx
mov rcx, r14
lea rdx, [rsp + 0x338]
lea r8, [rsp + 0x320]
call fcn.14000be6a
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x230], rax
movups xmm0, xmmword [rsp + 0x4d0]
movups xmm1, xmmword [rsp + 0x4e0]
movups xmm2, xmmword [rsp + 0x4f0]
movaps xmmword [rsp + 0x220], xmm2
movaps xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x200], xmm0
movdqu xmm0, xmmword [r13 - 0x88]
movups xmm1, xmmword [r13 - 0x78]
movdqa xmmword [rsp + 0x190], xmm0
movaps xmmword [rsp + 0x1a0], xmm1
mov rax, qword [rsp + 0x528]
mov rdx, qword [rsp + 0x530]
mov r8, qword [rsp + 0x538]
movzx ecx, word [rax + 0x3d2]
cmp r8, rcx
jb 0x140001dc4
mov rcx, qword [rax + 0x160]
test rcx, rcx
je 0x140001dcc
inc rdx
movzx r8d, word [rax + 0x3d0]
mov rax, rcx
jmp 0x140001d63
mov qword [rsp + 0x4d0], rcx
and qword [rsp + 0x4d8], 0
mov qword [rsp + 0x4e0], rdx
mov rcx, r15
lea r14, [rsp + 0x4d0]
mov rdx, r14
lea r8, [rsp + 0x320]
call fcn.14000be6a
jmp 0x140001eed
mov rcx, rdx
mov rdx, r8
jmp 0x140001dd1
mov rcx, rax
xor eax, eax
imul r8, rdx, 0x38
mov r9, rdx
shl r9, 5
mov r10, qword [rax + r8 + 0x198]
mov qword [rsp + 0x120], r10
movups xmm0, xmmword [rax + r8 + 0x168]
movups xmm1, xmmword [rax + r8 + 0x178]
movups xmm2, xmmword [rax + r8 + 0x188]
movaps xmmword [rsp + 0x110], xmm2
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0xf0], xmm0
mov r10, qword [rsp + 0x230]
mov qword [rax + r8 + 0x198], r10
movaps xmm0, xmmword [rsp + 0x200]
movaps xmm1, xmmword [rsp + 0x210]
movaps xmm2, xmmword [rsp + 0x220]
movups xmmword [rax + r8 + 0x188], xmm2
movups xmmword [rax + r8 + 0x178], xmm1
movups xmmword [rax + r8 + 0x168], xmm0
movups xmm0, xmmword [rax + r9]
movups xmm1, xmmword [rax + r9 + 0x10]
lea r8, [rsp + 0x128]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8], xmm0
movdqa xmm0, xmmword [rsp + 0x190]
movaps xmm1, xmmword [rsp + 0x1a0]
movdqu xmmword [rax + r9], xmm0
movups xmmword [rax + r9 + 0x10], xmm1
test rcx, rcx
je 0x140001ebe
lea rdx, [rax + rdx*8]
add rdx, 0x3e0
mov rax, qword [rdx]
lea rdx, [rax + 0x3d8]
dec rcx
jne 0x140001eab
xor edx, edx
jmp 0x140001ec1
inc rdx
mov ecx, 0xb
mov rdi, r15
lea rsi, [rsp + 0xf0]
rep movsq qword [rdi], qword [rsi]
mov qword [rsp + 0xd8], rax
and qword [rsp + 0xe0], 0
mov qword [rsp + 0xe8], rdx
mov rbx, qword [rsp + 0x80]
mov ecx, 0xa
mov rdi, r14
mov rsi, r12
rep movsq qword [rdi], qword [rsi]
dec qword [rsp + 0x180]
cmp byte [rsp + 0x320], 0
je 0x140001f75
mov rcx, qword [rsp + 0x170]
test rcx, rcx
je 0x140004608
mov rax, qword [rsp + 0x178]
test rax, rax
je 0x140004608
mov rdx, qword [rcx + 0x3d8]
mov qword [rsp + 0x170], rdx
dec rax
mov qword [rsp + 0x178], rax
and qword [rdx + 0x160], 0
mov edx, 8
call fcn.1400047f0
mov ecx, 0xa
mov rdi, r15
lea rsi, [rsp + 0x4d0]
jmp 0x140001f80
mov ecx, 0xa
mov rdi, r15
mov rsi, r14
rep movsq qword [rdi], qword [rsi]
mov ecx, 0xa
lea rdi, [rsp + 0xf0]
mov rsi, r15
rep movsq qword [rdi], qword [rsi]
mov rsi, rbp
cmp rbx, rbp
je 0x140001b7a
mov qword [rsp + 0x4d0], rbx
mov ecx, 0xa
lea rdi, [rsp + 0x4d8]
lea rsi, [rsp + 0xf0]
rep movsq qword [rdi], qword [rsi]
mov rsi, qword [rsp + 0x508]
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x4c8], rax
lea rcx, [rsp + 0x4d0]
call fcn.14000b1d7
jmp 0x140001b7a
mov rsi, qword [rsp + 0x170]
mov r14, qword [rsp + 0x178]
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x2f8], rax
mov ecx, 4
call fcn.14000a914
mov dword [rdx], 0x48544150
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], 4
mov byte [rsp + 0x98], 0
mov rcx, rbx
mov rdx, r15
call fcn.14000f11e
test rsi, rsi
mov qword [rsp + 0x300], r14
mov qword [rsp + 0x168], rsi
je 0x14000211c
mov rax, rsi
mov rsi, qword [rsp + 0x4f8]
mov rdi, qword [rsp + 0x500]
mov rbx, r14
mov r14, rax
lea rcx, [r14 + 0x168]
movzx eax, word [r14 + 0x3d2]
mov qword [rsp + 0x68], rax
imul rbp, rax, 0x38
mov r13, 0xffffffffffffffff
test rbp, rbp
je 0x1400020d7
lea r12, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9, qword [rcx + 0x30]
mov rcx, rsi
mov rdx, rdi
call fcn.14000c488
add rbp, 0xffffffffffffffc8
inc r13
mov rcx, r12
lea r12, [rsp + 0x88]
cmp al, 1
je 0x14000209c
movzx eax, al
test eax, eax
jne 0x1400020dc
jmp 0x1400020fa
mov r13, qword [rsp + 0x68]
movabs rbp, 0x8000000000000000
sub rbx, 1
jb 0x140002dab
mov r14, qword [r14 + r13*8 + 0x3d8]
jmp 0x14000207d
shl r13, 5
mov rbx, qword [r14 + r13 + 8]
mov r14, qword [r14 + r13 + 0x10]
movabs rbp, 0x8000000000000000
lea r13, [rsp + 0x590]
jmp 0x14000211e
xor ebx, ebx
lea rcx, [rsp + 0x4d0]
call fcn.14000b1d7
mov rdi, qword [rsp + 0x358]
mov rsi, qword [rsp + 0x360]
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], rsi
lea rdx, str.program_path_has_no_file_name
test rsi, rsi
je 0x140002194
mov r9d, 4
mov rcx, rdi
mov rdx, rsi
lea r8, str.__UNC._
call fcn.1400090a1
test al, al
lea rax, [0x14000f1be]
lea rcx, [0x14000f1b7]
cmovne rax, rcx
mov cl, byte [rsi + rdi - 1]
call rax
lea rdx, str.program_path_has_no_file_name
test al, al
je 0x140002205
lea rdi, [rsp + 0x4d0]
mov rcx, qword [rsp + 0x168]
mov r14, rdx
mov esi, 2
cmp byte [rsp + 0x60], 0
jne 0x14000224b
test rcx, rcx
je 0x140002227
and qword [rsp + 0x4d8], 0
mov qword [rsp + 0x4e0], rcx
mov rax, qword [rsp + 0x300]
mov qword [rsp + 0x4e8], rax
and qword [rsp + 0x4f8], 0
mov qword [rsp + 0x500], rcx
mov qword [rsp + 0x508], rax
mov eax, 1
mov rcx, qword [rsp + 0x2f8]
jmp 0x14000222b
cmp rsi, 3
ja 0x140002536
mov rcx, rdi
mov rdx, rsi
call fcn.14000f1cd
test al, al
jne 0x1400025b3
jmp 0x14000272a
xor eax, eax
xor ecx, ecx
mov qword [rsp + 0x4d0], rax
mov qword [rsp + 0x4f0], rax
mov qword [rsp + 0x510], rcx
mov rcx, rdi
call fcn.14000d47f
mov rdi, qword [sym.imp.kernel32.dll_CloseHandle]
mov ecx, dword [rsp + 0x310]
mov rdx, qword [rsp + 0x318]
call fcn.1400103c8
cmp rsi, 2
je 0x140004608
mov rcx, r14
call rdi
mov rcx, qword [rsp + 0x4a8]
call rdi
test rsi, rsi
je 0x14000228e
mov rcx, qword [rsp + 0x490]
call rdi
cmp qword [rsp + 0x4a0], 0
je 0x1400022a3
mov rcx, qword [rsp + 0x488]
call rdi
cmp qword [rsp + 0x498], 0
je 0x1400022b8
mov rcx, qword [rsp + 0x480]
call rdi
mov rcx, qword [rsp + 0x350]
mov rdx, qword [rsp + 0x358]
call fcn.140004cc5
mov rsi, qword [rsp + 0x378]
mov rdi, qword [rsp + 0x380]
add rsi, 0x10
sub rdi, 1
jb 0x1400022f9
mov rcx, qword [rsi - 8]
mov rdx, qword [rsi]
call fcn.140004cc5
add rsi, 0x28
jmp 0x1400022e1
mov rcx, qword [rsp + 0x370]
imul rax, rcx, 0x28
test rcx, rcx
je 0x140002322
mov rcx, qword [rsp + 0x378]
mov qword [rsp + 0x4b8], rcx
mov qword [rsp + 0x4b0], rax
je 0x14000233e
mov edx, 8
mov rcx, qword [rsp + 0x4b8]
mov r8, qword [rsp + 0x4b0]
call fcn.14000101a
mov rax, qword [rsp + 0x3d8]
test rax, rax
je 0x140002394
mov rcx, qword [rsp + 0x3e0]
and qword [rsp + 0x4d8], 0
mov qword [rsp + 0x4e0], rax
mov qword [rsp + 0x4e8], rcx
and qword [rsp + 0x4f8], 0
mov rdi, qword [rsp + 0x3e8]
mov qword [rsp + 0x500], rax
mov qword [rsp + 0x508], rcx
mov ebx, 1
jmp 0x140002398
xor ebx, ebx
xor edi, edi
mov qword [rsp + 0x4d0], rbx
mov qword [rsp + 0x4f0], rbx
mov qword [rsp + 0x510], rdi
sub rdi, 1
jb 0x1400024f9
mov qword [rsp + 0x510], rdi
test rbx, rbx
je 0x140004608
mov rsi, qword [rsp + 0x4d8]
test rsi, rsi
jne 0x140002402
mov rdx, qword [rsp + 0x4e0]
mov r8, qword [rsp + 0x4e8]
lea rcx, [rsp + 0x4d8]
call fcn.140009ddc
mov ebx, 1
mov rsi, qword [rsp + 0x4d8]
mov r8, qword [rsp + 0x4e0]
mov r14, qword [rsp + 0x4e8]
movzx eax, word [rsi + 0x3d2]
cmp r14, rax
jb 0x14000244c
mov rcx, r15
mov rdx, rsi
call fcn.140009d96
mov rsi, qword [rsp + 0x80]
test rsi, rsi
je 0x140004608
mov r8, qword [rsp + 0x88]
mov r14, qword [rsp + 0x90]
jmp 0x140002412
test r8, r8
je 0x140002485
mov rdx, qword [rsi + r14*8 + 0x3e0]
dec r8
mov rcx, r15
call fcn.140009ddc
mov rax, qword [rsp + 0x80]
movdqu xmm0, xmmword [r12]
movdqa xmmword [rsp + 0xf0], xmm0
test rax, rax
jne 0x1400024b4
jmp 0x140004608
lea rax, [r14 + 1]
mov qword [rsp + 0x80], rsi
and qword [rsp + 0x88], 0
mov qword [rsp + 0x90], rax
movdqu xmm0, xmmword [r12]
movdqa xmmword [rsp + 0xf0], xmm0
mov rax, rsi
movdqa xmm0, xmmword [rsp + 0xf0]
movdqu xmmword [r13 - 0xb0], xmm0
mov qword [rsp + 0x4d8], rax
imul rax, r14, 0x38
lea rcx, [rsi + rax]
add rcx, 0x168
call fcn.14000b1d7
shl r14, 5
mov rcx, qword [rsi + r14]
mov rdx, qword [rsi + r14 + 8]
call fcn.140010e01
jmp 0x1400023b0
test rbx, rbx
je 0x140004374
mov rdx, qword [rsp + 0x4d8]
mov r8, qword [rsp + 0x4e0]
test rdx, rdx
jne 0x14000436a
mov rax, qword [rsp + 0x4e8]
mov rcx, r15
mov rdx, r8
mov r8, rax
call fcn.140009ddc
jmp 0x140004355
lea rax, [rdi + rsi]
add rax, 0xfffffffffffffffc
xor ecx, ecx
lea r10, str..exeprogram_not_found
mov r12, rcx
cmp rcx, 4
je 0x140002588
lea rcx, [r12 + 1]
mov dl, byte [rax + r12]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
mov dl, byte [r12 + r10]
lea r9d, [rdx - 0x41]
cmp r9b, 0x1a
setb r9b
shl r9b, 5
or r9b, dl
cmp r8b, r9b
je 0x140002547
mov rdi, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x1f8]
mov rcx, rdi
mov rdx, rsi
call fcn.14000f1cd
test al, al
je 0x1400026f4
lea r12, [rsp + 0x88]
lea rax, [rdi + rsi]
mov qword [rsp + 0x4d0], rdi
mov qword [rsp + 0x4d8], rax
and word [rsp + 0x4e0], 0
lea rcx, [rsp + 0x4d0]
call fcn.140009689
cmp ax, 1
jne 0x1400025e8
test dx, dx
jne 0x1400025d0
lea rdx, str.nul_byte_found_in_provided_data
cmp ax, 1
je 0x140002194
mov rcx, rdi
mov rdx, rsi
mov r8b, 0x2e
call fcn.14000f75d
mov byte [rsp + 0x5f], al
test rbx, rbx
je 0x1400028d2
add r14, rbx
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0xf8], r14
and word [rsp + 0x100], 0
mov byte [rsp + 0x108], 1
lea rsi, [rsp + 0x4d0]
lea rdi, [rsp + 0x1f0]
lea rbx, [rsp + 0x5f]
lea r14, [rsp + 0xf0]
mov rcx, rsi
mov rdx, r14
call fcn.14000e584
mov rcx, qword [rsp + 0x4d0]
mov rdx, qword [rsp + 0x4d8]
cmp rcx, rbp
je 0x1400028ca
mov rax, qword [rsp + 0x4e0]
test rax, rax
je 0x1400026ea
mov r8, qword [rsp + 0x4e8]
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], r8
mov qword [rsp + 0x80], rcx
lea rcx, [rsp + 0x170]
mov rdx, rdi
mov r8, rbx
mov r9, r15
call fcn.14000f77d
mov rcx, qword [rsp + 0x170]
mov rdx, qword [rsp + 0x178]
cmp rcx, rbp
jne 0x140002db2
mov rcx, rbp
call fcn.14000fdd7
jmp 0x140002655
call fcn.140004cc5
jmp 0x140002655
cmp r12, 4
jne 0x140002722
lea rcx, [rsp + 0x290]
mov rdx, rdi
mov r8, rsi
call fcn.14000f27e
lea r12, [rsp + 0x88]
lea rdi, [rsp + 0x4d0]
jmp 0x14000289f
lea r12, [rsp + 0x88]
mov rcx, rsi
call fcn.14000a914
mov rbx, rax
mov r14, rdx
mov rcx, rdx
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], rsi
mov byte [rsp + 0x98], 0
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x4e0], rax
mov al, byte [rsp + 0x98]
mov byte [rsp + 0x4e8], al
mov eax, dword [rsp + 0x99]
mov dword [rsp + 0x4e9], eax
movzx eax, word [rsp + 0x9d]
mov word [rsp + 0x4ed], ax
mov al, byte [rsp + 0x9f]
mov byte [rsp + 0x4ef], al
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x4d0], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x4d8], rax
mov r8d, 4
lea rdi, [rsp + 0x4d0]
mov rcx, rdi
lea rdx, str..exeprogram_not_found
call fcn.14000e64a
movdqa xmm0, xmmword [rsp + 0x4d0]
movaps xmm1, xmmword [rsp + 0x4e0]
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
mov rsi, qword [rsp + 0x88]
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x320]
mov rdx, rsi
call fcn.14000f1f4
cmp qword [rsp + 0x320], rbp
jne 0x14000286d
mov rcx, r15
lea rdx, str.combase.dll
xor r8d, r8d
call fcn.14000ef10
mov rsi, qword [rsp + 0x88]
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x290]
mov rdx, rsi
call fcn.14000f27e
jmp 0x14000288f
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0x2a0], rax
movdqu xmm0, xmmword [rsp + 0x320]
movdqa xmmword [rsp + 0x290], xmm0
mov rcx, qword [rsp + 0x80]
mov rdx, rsi
call fcn.140004cc5
mov rax, qword [rsp + 0x290]
mov rdx, qword [rsp + 0x298]
mov qword [rsp + 0x68], rax
cmp rax, rbp
mov rcx, qword [rsp + 0x168]
je 0x1400021a4
jmp 0x140002fba
mov rcx, rbp
call fcn.140010e01
and qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 2
and qword [rsp + 0x100], 0
mov r8d, 0x200
mov esi, 2
xor edi, edi
xor r13d, r13d
cmp r8, 0x201
jae 0x14000291c
lea rbx, [rsp + 0x4d0]
mov r12d, 0x200
mov r14, r8
jmp 0x140002962
sub r8, r13
lea rcx, [rsp + 0xf0]
mov rdx, r8
call fcn.14000a9e1
mov rdi, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xf8]
mov eax, 0xffffffff
cmp rdi, rax
mov r13d, 0xffffffff
cmovb r13, rdi
mov qword [rsp + 0x100], r13
mov rbx, rsi
mov r12, r13
mov r14, r13
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
xor ecx, ecx
mov rdx, rbx
mov r8d, r14d
call qword [sym.imp.kernel32.dll_GetModuleFileNameW]
mov ebp, eax
test eax, eax
jne 0x14000298c
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x140002a90
mov r8d, ebp
cmp r14, r8
jne 0x1400029ba
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140004608
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
cmovae r14, rax
mov r8, r14
jmp 0x140002900
movabs rbp, 0x8000000000000000
jb 0x140002900
cmp r12, r8
jb 0x140004608
mov rcx, r15
mov rdx, rbx
call fcn.14000aa9f
mov r14, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x88]
mov r13, qword [rsp + 0x90]
mov r12, qword [rsp + 0x98]
mov rcx, rdi
mov rdx, rsi
call fcn.140009e44
cmp r14, rbp
je 0x140002aad
mov rcx, rbx
mov rdx, r13
call fcn.14000ed8f
cmp r13, rdx
cmovb rdx, r13
test rax, rax
cmove rdx, r13
mov qword [rsp + 0x4d0], r14
mov qword [rsp + 0x4d8], rbx
mov qword [rsp + 0x4e0], rdx
mov qword [rsp + 0x4e8], r12
lea rcx, [rsp + 0x338]
lea rdx, [rsp + 0x1f0]
lea r8, [rsp + 0x5f]
lea r9, [rsp + 0x4d0]
call fcn.14000f77d
mov rcx, qword [rsp + 0x338]
mov rdx, qword [rsp + 0x340]
cmp rcx, rbp
jne 0x140002f35
mov rcx, rbp
call fcn.14000fdd7
jmp 0x140002ab8
call fcn.14000aa88
mov rbx, rax
mov rcx, rdi
mov rdx, rsi
call fcn.140009e44
movabs r14, 0x8000000000000000
mov rcx, r14
mov rdx, rbx
call fcn.14000a298
and qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 2
and qword [rsp + 0x100], 0
mov r8d, 0x200
mov esi, 2
xor edi, edi
xor r13d, r13d
cmp r8, 0x201
jae 0x140002b02
lea rbx, [rsp + 0x4d0]
mov r12d, 0x200
mov r14, r8
jmp 0x140002b48
sub r8, r13
lea rcx, [rsp + 0xf0]
mov rdx, r8
call fcn.14000a9e1
mov rdi, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xf8]
mov eax, 0xffffffff
cmp rdi, rax
mov r13d, 0xffffffff
cmovb r13, rdi
mov qword [rsp + 0x100], r13
mov rbx, rsi
mov r12, r13
mov r14, r13
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, rbx
mov edx, r14d
call qword [sym.imp.kernel32.dll_GetSystemDirectoryW]
mov ebp, eax
test eax, eax
jne 0x140002b70
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x140002c10
mov r8d, ebp
cmp r14, r8
jne 0x140002b9e
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140004608
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
cmovae r14, rax
mov r8, r14
jmp 0x140002ae6
movabs rbp, 0x8000000000000000
jb 0x140002ae6
cmp r12, r8
jb 0x140004608
mov rcx, r15
mov rdx, rbx
call fcn.14000a2b4
lea rcx, [rsp + 0x1d0]
lea rdx, [rsp + 0x1f0]
lea r8, [rsp + 0x5f]
mov r9, r15
call fcn.14000f77d
mov rcx, rdi
mov rdx, rsi
call fcn.140009e44
mov rcx, qword [rsp + 0x1d0]
lea rax, [rbp + 2]
cmp rcx, rax
jl 0x140002c45
mov rdx, qword [rsp + 0x1d8]
mov rbx, qword [rsp + 0x1e0]
jmp 0x140002f8d
call fcn.14000aa88
mov qword [rsp + 0x1d8], rax
movabs rax, 0x8000000000000000
inc rax
mov qword [rsp + 0x1d0], rax
mov rcx, rdi
mov rdx, rsi
call fcn.140009e44
mov rcx, qword [rsp + 0x1d0]
mov rdx, qword [rsp + 0x1d8]
call fcn.14000fdeb
and qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 2
and qword [rsp + 0x100], 0
mov r8d, 0x200
mov esi, 2
xor edi, edi
xor r13d, r13d
cmp r8, 0x201
jae 0x140002c9c
lea rbx, [rsp + 0x4d0]
mov r12d, 0x200
mov r14, r8
jmp 0x140002ce2
sub r8, r13
lea rcx, [rsp + 0xf0]
mov rdx, r8
call fcn.14000a9e1
mov rdi, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xf8]
mov eax, 0xffffffff
cmp rdi, rax
mov r13d, 0xffffffff
cmovb r13, rdi
mov qword [rsp + 0x100], r13
mov rbx, rsi
mov r12, r13
mov r14, r13
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, rbx
mov edx, r14d
call qword [sym.imp.kernel32.dll_GetWindowsDirectoryW]
mov ebp, eax
test eax, eax
jne 0x140002d0a
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x140002dbf
mov r8d, ebp
cmp r14, r8
jne 0x140002d38
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140004608
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
cmovae r14, rax
mov r8, r14
jmp 0x140002c80
movabs rbp, 0x8000000000000000
jb 0x140002c80
cmp r12, r8
jb 0x140004608
mov rcx, r15
mov rdx, rbx
call fcn.14000a2b4
lea rcx, [rsp + 0x190]
lea rdx, [rsp + 0x1f0]
lea r8, [rsp + 0x5f]
mov r9, r15
call fcn.14000f77d
mov rcx, rdi
mov rdx, rsi
call fcn.140009e44
mov rcx, qword [rsp + 0x190]
lea rax, [rbp + 2]
cmp rcx, rax
lea r12, [rsp + 0x88]
jge 0x140002f23
lea r13, [rsp + 0x590]
jmp 0x140002e05
xor ebx, ebx
jmp 0x140002112
mov rbx, qword [rsp + 0x180]
jmp 0x140002f8d
call fcn.14000aa88
mov qword [rsp + 0x198], rax
movabs rbp, 0x8000000000000000
lea rax, [rbp + 1]
mov qword [rsp + 0x190], rax
mov rcx, rdi
mov rdx, rsi
call fcn.140009e44
mov rcx, qword [rsp + 0x190]
lea r13, [rsp + 0x590]
lea r12, [rsp + 0x88]
mov rdx, qword [rsp + 0x198]
call fcn.14000fdeb
mov r8d, 4
lea rcx, [rsp + 0x238]
lea rdx, [0x1400189ed]
call fcn.14000e2c0
mov rsi, qword [rsp + 0x238]
cmp rsi, rbp
je 0x140002f52
mov rdi, qword [rsp + 0x240]
mov rax, qword [rsp + 0x248]
add rax, rdi
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0xf8], rax
and word [rsp + 0x100], 0
mov byte [rsp + 0x108], 1
lea rbx, [rsp + 0x4d0]
mov rcx, rbx
lea rdx, [rsp + 0xf0]
call fcn.14000e584
mov rcx, qword [rsp + 0x4d0]
mov rdx, qword [rsp + 0x4d8]
cmp rcx, rbp
je 0x140002f3f
mov rax, qword [rsp + 0x4e0]
test rax, rax
je 0x140002f19
mov r8, qword [rsp + 0x4e8]
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], r8
mov qword [rsp + 0x80], rcx
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x1f0]
lea r8, [rsp + 0x5f]
mov r9, r15
call fcn.14000f77d
mov rcx, qword [rsp + 0x200]
mov rax, qword [rsp + 0x208]
cmp rcx, rbp
jne 0x140002f6e
mov rcx, rbp
mov rdx, rax
call fcn.14000fdd7
jmp 0x140002e79
call fcn.140004cc5
jmp 0x140002e79
mov rdx, qword [rsp + 0x198]
mov rbx, qword [rsp + 0x1a0]
jmp 0x140002f8d
mov rbx, qword [rsp + 0x348]
jmp 0x140002f8d
mov rcx, rbp
call fcn.140010e01
mov rcx, rsi
mov rdx, rdi
call fcn.140004cc5
mov rcx, rbp
mov rdx, qword [rsp + 0x478]
call fcn.14000fdd7
lea rdx, [0x140018c58]
jmp 0x140002194
mov rbx, qword [rsp + 0x210]
mov r14, rcx
mov rcx, rsi
mov rdx, rdi
mov rsi, rax
call fcn.140004cc5
mov rcx, r14
mov rdx, rsi
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x290], rcx
mov qword [rsp + 0x298], rdx
mov qword [rsp + 0x2a0], rbx
mov qword [rsp + 0x478], rdx
lea rdi, [rsp + 0x4d0]
mov r13, qword [rsp + 0x2a0]
cmp r13, 5
mov qword [rsp + 0x70], rdx
jb 0x140002fef
lea rax, [rdx + r13*2]
add rax, 0xfffffffffffffff6
test rax, rax
je 0x140002fef
cmp word [rax], 0x2e
jne 0x140002fef
lea rax, [rdx + r13*2]
cmp word [rax - 2], 0
je 0x14000340a
mov r14, qword [rsp + 0x358]
mov rsi, qword [rsp + 0x378]
mov r13, rdi
mov bl, byte [rsp + 0x415]
mov r12, qword [rsp + 0x360]
imul rdi, qword [rsp + 0x380], 0x28
add r12, r14
and qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 2
and qword [rsp + 0x90], 0
mov rcx, r15
mov dx, 0x22
call fcn.14000dbe0
mov qword [rsp + 0x4d0], r14
mov qword [rsp + 0x4d8], r12
and word [rsp + 0x4e0], 0
mov rcx, r15
mov rdx, r13
call fcn.14000dbbb
mov rcx, r15
mov dx, 0x22
call fcn.14000dbe0
test rdi, rdi
je 0x1400030c8
lea r12, [rsi + 0x28]
mov rcx, r15
mov dx, 0x20
call fcn.14000dbe0
mov rcx, r15
mov rdx, rsi
mov r8d, ebx
call fcn.14000fe07
add rdi, 0xffffffffffffffd8
mov rsi, r12
test rax, rax
je 0x140003077
mov r14, rax
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
call fcn.140009e44
lea r13, [rsp + 0x590]
jmp 0x1400030e8
mov rax, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
cmp rax, rbp
lea r13, [rsp + 0x590]
jne 0x140003114
mov r14, rdi
lea r12, [rsp + 0x88]
lea rdi, [rsp + 0x4d0]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
call fcn.140009e44
mov rcx, qword [rsp + 0x168]
jmp 0x1400021a7
mov rcx, qword [rsp + 0x90]
mov dl, 1
mov dword [rsp + 0x188], edx
mov dword [rsp + 0x158], 0
mov rbx, qword [rsp + 0x68]
mov r14, qword [rsp + 0x70]
lea r12, [rsp + 0x88]
lea rsi, [rsp + 0x310]
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a0], rcx
lea rcx, [rsp + 0x190]
xor edx, edx
call fcn.14000dbe0
cmp byte [rsp + 0x414], 0
mov ecx, 0x608
mov eax, 0x400
cmove ecx, eax
or ecx, dword [rsp + 0x410]
mov dword [rsp + 0x18c], ecx
mov eax, 2
mov qword [rsp + 0x150], rax
mov edx, 0
mov ecx, 0
cmp byte [rsp + 0x60], 0
mov rdi, qword [rsp + 0x300]
jne 0x140003487
mov qword [rsp + 0x78], rbx
and qword [rsp + 0x200], 0
mov qword [rsp + 0x208], 2
and qword [rsp + 0x210], 0
mov rsi, qword [rsp + 0x2f8]
test rsi, rsi
lea r13, [rsp + 0x200]
mov rcx, qword [rsp + 0x168]
jne 0x140003210
mov rcx, r13
xor edx, edx
call fcn.14000dbe0
mov rcx, qword [rsp + 0x168]
xor eax, eax
test rcx, rcx
setne al
mov rdx, rcx
mov rcx, rsi
cmove rcx, rdx
mov qword [rsp + 0x4d0], rax
and qword [rsp + 0x4d8], 0
mov qword [rsp + 0x4e0], rdx
mov qword [rsp + 0x4e8], rdi
mov qword [rsp + 0x4f0], rax
and qword [rsp + 0x4f8], 0
mov qword [rsp + 0x500], rdx
mov qword [rsp + 0x508], rdi
mov qword [rsp + 0x510], rcx
lea rsi, [rsp + 0x4d0]
mov rcx, r15
mov rdx, rsi
call fcn.140009be0
mov rax, qword [rsp + 0x80]
test rax, rax
je 0x140003437
mov rdx, qword [rsp + 0x90]
imul r8, rdx, 0x38
mov rcx, qword [rax + r8 + 0x168]
cmp rcx, rbp
je 0x140003437
add r8, rax
add r8, 0x168
shl rdx, 5
lea r9, [rax + rdx]
mov r13, qword [r8 + 0x20]
mov rdi, qword [r8 + 0x28]
mov r10, r12
mov r12, rbp
mov rbp, qword [r8 + 0x30]
mov rbx, qword [rax + rdx]
mov rsi, qword [rax + rdx + 8]
movups xmm0, xmmword [r9 + 0x10]
movaps xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x80], rcx
mov rax, qword [r8 + 0x18]
mov qword [r10 + 0x10], rax
movdqu xmm0, xmmword [r8 + 8]
movdqu xmmword [r10], xmm0
lea rcx, [rsp + 0xf0]
mov rdx, r15
call fcn.14000ff6a
mov rcx, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0xf8]
cmp rcx, r12
je 0x1400038ff
call fcn.140004cc5
lea rcx, [rsp + 0x200]
mov rdx, rdi
mov r8, rbp
call fcn.140009e01
mov rcx, r13
lea r13, [rsp + 0x200]
mov rdx, rdi
call fcn.140009e44
mov rcx, r13
mov dx, 0x3d
call fcn.14000dbe0
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], rsi
movdqa xmm0, xmmword [rsp + 0x1d0]
lea rax, [rsp + 0xa0]
movdqu xmmword [rax - 0x10], xmm0
lea rcx, [rsp + 0xf0]
mov rdx, r15
call fcn.14000ff6a
mov rsi, qword [rsp + 0xf0]
mov rdi, qword [rsp + 0xf8]
cmp rsi, r12
mov rbp, r12
je 0x14000391f
mov rax, qword [rsp + 0x100]
add rax, rdi
mov qword [rsp + 0x238], rdi
mov qword [rsp + 0x240], rax
and word [rsp + 0x248], 0
mov rcx, r13
lea rdx, [rsp + 0x238]
call fcn.14000dbbb
mov rcx, rsi
mov rdx, rdi
call fcn.140004cc5
mov rcx, r13
xor edx, edx
call fcn.14000dbe0
lea r12, [rsp + 0x88]
jmp 0x14000326c
movzx ecx, word [rax - 8]
cmp ecx, 0x42
je 0x140003586
cmp ecx, 0x43
je 0x1400035a8
cmp ecx, 0x62
je 0x140003586
cmp ecx, 0x63
je 0x1400035a8
jmp 0x140002fef
mov rcx, rsi
call fcn.14000d47f
mov rcx, r13
xor edx, edx
call fcn.14000dbe0
mov rcx, qword [rsp + 0x200]
mov rax, qword [rsp + 0x208]
mov rdx, rax
cmp rcx, rbp
lea r13, [rsp + 0x590]
lea rsi, [rsp + 0x310]
mov rbx, qword [rsp + 0x78]
jne 0x140003487
mov qword [rsp + 0x60], rax
mov rdi, qword [sym.imp.kernel32.dll_CloseHandle]
jmp 0x14000430d
mov qword [rsp + 0x470], rdx
mov qword [rsp + 0x2f0], rcx
mov qword [rsp + 0x1c8], rax
mov eax, 0
mov qword [rsp + 0x60], rax
mov edx, 0
cmp qword [rsp + 0x388], rbp
jne 0x140003566
mov qword [rsp + 0x2e8], rdx
mov qword [rsp + 0x78], rbx
movaps xmmword [rsp + 0x200], xmm6
and qword [rsp + 0x210], 0
lea rcx, [0x14001c0f0]
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
and qword [rsp + 0x2b0], 0
and qword [rsp + 0x2c0], 0
and qword [rsp + 0x2d0], 0
cmp dword [rsp + 0x3a8], 6
lea rcx, [rsp + 0x3a8]
cmove rcx, rsi
cmp dword [rsp + 0x3c8], 6
mov edi, dword [rsp + 0x3b8]
mov rbx, rsi
lea rsi, [rsp + 0x3c8]
cmove rsi, rbx
mov edx, 0xfffffff6
lea r8, [rsp + 0x2b0]
call fcn.14001010d
test rax, rax
je 0x1400038b6
mov rdi, qword [sym.imp.kernel32.dll_CloseHandle]
mov rsi, qword [rsp + 0x150]
mov rbx, rdx
jmp 0x140004288
lea rcx, [rsp + 0x388]
call fcn.14000fff3
test rax, rax
je 0x140003967
mov qword [rsp + 0x60], rdx
jmp 0x1400039ce
movzx edx, word [rax - 6]
or edx, 0x20
cmp edx, 0x61
jne 0x14000359e
movzx edx, word [rax - 4]
or edx, 0x20
cmp edx, 0x74
je 0x1400035c8
cmp cx, 0x43
jne 0x140002fef
movzx ecx, word [rax - 6]
or ecx, 0x20
cmp ecx, 0x6d
jne 0x140002fef
movzx eax, word [rax - 4]
or eax, 0x20
cmp eax, 0x64
jne 0x140002fef
and qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 2
and qword [rsp + 0x90], 0
mov esi, 0x200
mov eax, 2
mov qword [rsp + 0x158], rax
xor ebx, ebx
xor ebp, ebp
cmp rsi, 0x201
jae 0x140003618
lea rdi, [rsp + 0x4d0]
mov r12d, 0x200
mov r14, rsi
jmp 0x14000365d
sub rsi, rbp
mov rcx, r15
mov rdx, rsi
call fcn.14000a9e1
mov rbx, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
mov eax, 0xffffffff
cmp rbx, rax
mov ebp, 0xffffffff
cmovb rbp, rbx
mov qword [rsp + 0x90], rbp
mov qword [rsp + 0x158], rdi
mov r12, rbp
mov r14, rbp
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, rdi
mov edx, r14d
call qword [sym.imp.kernel32.dll_GetSystemDirectoryW]
mov esi, eax
test eax, eax
jne 0x140003685
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x1400039da
mov esi, esi
cmp r14, rsi
jne 0x1400036b2
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140004608
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
cmovae r14, rax
mov rsi, r14
jmp 0x1400035fc
jb 0x1400035fc
cmp r12, rsi
jb 0x140004608
mov rcx, rsi
call fcn.14000972b
mov rbx, rax
mov r14, rdx
lea r8, [rsi + rsi]
mov rcx, rdx
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
call fcn.140009e44
movabs rbp, 0x8000000000000000
cmp rbx, rbp
lea r12, [rsp + 0x88]
je 0x140003a04
mov qword [rsp + 0xf0], rbx
mov eax, 1
mov qword [rsp + 0x4d0], rax
and qword [rsp + 0x4d8], 0
mov qword [rsp + 0x4e0], rax
and word [rsp + 0x4e8], 0
mov qword [rsp + 0xf8], r14
mov qword [rsp + 0x100], rsi
lea rax, [0x140018cb2]
mov qword [rsp + 0x4f0], rax
lea rcx, [0x140018cba]
mov qword [rsp + 0x4f8], rcx
and word [rsp + 0x500], 0
mov rcx, qword [rsp + 0x68]
test rax, rax
je 0x1400037a7
lea rcx, [rsp + 0x4f0]
call fcn.140009a6b
test ax, ax
je 0x140003799
mov edi, edx
mov rcx, qword [rsp + 0x68]
jmp 0x1400037df
and qword [rsp + 0x4f0], 0
mov rcx, qword [rsp + 0x68]
cmp qword [rsp + 0x4d0], 0
je 0x140003a53
mov rax, qword [rsp + 0x4d8]
cmp qword [rsp + 0x4e0], rax
je 0x140003a53
inc rax
mov qword [rsp + 0x4d8], rax
movzx edi, word [rsp + 0x4e8]
cmp rsi, qword [rsp + 0xf0]
jne 0x140003899
mov rcx, qword [rsp + 0x4d0]
mov rdx, qword [rsp + 0x4f0]
test rdx, rdx
je 0x140003857
mov rax, qword [rsp + 0x4f8]
sub rax, rdx
movzx r8d, word [rsp + 0x500]
add rax, 2
xor edx, edx
mov r9d, 3
div r9
cmp r8w, 1
sbb rax, 0xffffffffffffffff
test rcx, rcx
je 0x140003870
mov rdx, qword [rsp + 0x4e0]
sub rdx, qword [rsp + 0x4d8]
mov rcx, 0xffffffffffffffff
add rax, rdx
jb 0x140003852
mov rcx, rax
mov rax, rcx
jmp 0x140003870
test rcx, rcx
je 0x14000386e
mov rax, qword [rsp + 0x4e0]
sub rax, qword [rsp + 0x4d8]
jmp 0x140003870
xor eax, eax
mov rdx, 0xffffffffffffffff
inc rax
je 0x14000387f
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.1400097dc
mov r14, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x68]
mov word [r14 + rsi*2], di
inc rsi
mov qword [rsp + 0x100], rsi
mov rax, qword [rsp + 0x4f0]
jmp 0x140003779
mov qword [rsp + 0x288], rdx
cmp edi, 6
lea rcx, [rsp + 0x3b8]
cmove rcx, rbx
mov edx, 0xfffffff5
lea r8, [rsp + 0x2c0]
call fcn.14001010d
mov rbx, rdx
test rax, rax
je 0x140003a1e
mov rdi, qword [sym.imp.kernel32.dll_CloseHandle]
mov rsi, qword [rsp + 0x150]
jmp 0x14000427e
mov qword [rsp + 0x60], rdx
mov rcx, rbx
mov rdx, rsi
call fcn.140004cc5
mov rcx, r13
mov rdx, rdi
call fcn.140009e44
mov rbp, r12
jmp 0x140003924
mov qword [rsp + 0x60], rdi
lea r13, [rsp + 0x590]
lea r12, [rsp + 0x88]
lea rcx, [rsp + 0x4d0]
mov rdi, qword [sym.imp.kernel32.dll_CloseHandle]
call fcn.14000d47f
mov rcx, qword [rsp + 0x200]
mov rdx, qword [rsp + 0x208]
call fcn.140009e44
mov rbx, qword [rsp + 0x78]
jmp 0x14000430d
mov rax, qword [rdx + 8]
mov rcx, qword [rdx + 0x10]
add rcx, rax
mov qword [rsp + 0x4d0], rax
mov qword [rsp + 0x4d8], rcx
and word [rsp + 0x4e0], 0
mov rcx, r15
lea rdx, [rsp + 0x4d0]
call fcn.14001004c
mov rcx, r15
xor edx, edx
call fcn.14000dbe0
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
mov rax, rcx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x150], rcx
cmp rdx, rbp
jne 0x1400034bc
mov rdi, qword [sym.imp.kernel32.dll_CloseHandle]
jmp 0x1400042f8
call fcn.14000aa88
mov r14, rax
mov rcx, rbx
mov rdx, qword [rsp + 0x158]
call fcn.140009e44
movabs rbp, 0x8000000000000000
lea r12, [rsp + 0x88]
mov rdx, qword [rsp + 0x70]
lea r13, [rsp + 0x590]
lea rdi, [rsp + 0x4d0]
jmp 0x1400030fd
mov qword [rsp + 0x1c0], rbx
mov rcx, rsi
mov edx, 0xfffffff4
lea r8, [rsp + 0x2d0]
call fcn.14001010d
test rax, rax
mov rdi, qword [sym.imp.kernel32.dll_CloseHandle]
je 0x140003b1d
mov rbx, rdx
jmp 0x14000426c
mov rbx, qword [rsp + 0xf0]
mov r14, qword [rsp + 0xf8]
cmp rbx, rbp
jne 0x140003a82
lea r13, [rsp + 0x590]
lea rdi, [rsp + 0x4d0]
mov rdx, qword [rsp + 0x70]
jmp 0x140003102
mov rsi, qword [rsp + 0x378]
mov rdi, qword [rsp + 0x380]
mov al, byte [rsp + 0x415]
mov byte [rsp + 0x150], al
test al, al
setne byte [rsp + 0x158]
lea rax, str.cmd.exe__d__c__
mov qword [rsp + 0x4d0], rax
lea rax, [0x140018ad9]
mov qword [rsp + 0x4d8], rax
and word [rsp + 0x4e0], 0
mov rcx, r15
lea rdx, [rsp + 0x4d0]
call fcn.140009952
mov rcx, r15
mov dx, 0x22
call fcn.14000dbe0
lea rax, [r13*2]
xor ecx, ecx
mov r8, qword [rsp + 0x70]
cmp rax, rcx
je 0x140003c27
cmp word [r8 + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x140003afc
lea rdi, str.Windows_file_names_may_not_contain_____or_end_with___
jmp 0x140003d41
movups xmmword [r12 + 0x2c], xmm6
movups xmmword [r12 + 0x20], xmm6
movups xmmword [r12 + 0x10], xmm6
movups xmmword [r12], xmm6
lea rax, [rsp + 0xa0]
movups xmmword [rax + 0x38], xmm6
movups xmmword [rax + 0x28], xmm6
test rdx, rdx
mov rax, qword [rsp + 0x1b8]
mov rcx, qword [rsp + 0x1b0]
mov r8, qword [rsp + 0x288]
jne 0x140003b71
cmp qword [rsp + 0x1c0], 0
jne 0x140003b71
test r8, r8
je 0x140003b9c
mov dword [rsp + 0xbc], 0x100
mov qword [rsp + 0xd0], r8
mov r8, qword [rsp + 0x1c0]
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0xe0], rdx
mov rbx, qword [rsp + 0x408]
test rbx, rbx
je 0x140003d71
and qword [rsp + 0x1d0], 0
mov dword [rsp + 0x80], 0x70
mov rax, rbx
shr rax, 0x20
lea rsi, [0x140018cf0]
jne 0x140004264
mov qword [rsp + 0x160], rdx
xor ecx, ecx
mov edx, ebx
xor r8d, r8d
lea r9, [rsp + 0x1d0]
call qword [sym.imp.kernel32.dll_InitializeProcThreadAttributeList]
mov rsi, qword [rsp + 0x1d0]
test rsi, rsi
je 0x140003dd0
js 0x140004608
mov ecx, 1
mov rdx, rsi
call fcn.1400069ee
mov rcx, rax
test rax, rax
jne 0x140003dd5
jmp 0x140004608
mov qword [rsp + 0x1c8], rdi
cmp word [r8 + r13*2 - 2], 0x5c
lea rdi, str.Windows_file_names_may_not_contain_____or_end_with___
je 0x140003d41
mov qword [rsp + 0x78], rbx
lea rdi, [r13 - 1]
lea rcx, [r8 + r13*2]
add rcx, 0xfffffffffffffffe
mov edx, 1
mov r9d, 1
mov rbx, r8
lea r8, [0x140018ada]
call fcn.14000b4b4
test al, al
mov edx, 0
cmovne rdx, rbx
test rdx, rdx
cmove rdx, rbx
cmove rdi, r13
lea r8, [rdx + rdi*2]
mov rcx, r15
call fcn.140009df6
mov rcx, r15
mov dx, 0x22
call fcn.14000dbe0
imul r13, qword [rsp + 0x1c8], 0x28
add r13, rsi
mov rcx, r15
cmp rsi, r13
je 0x140003d9f
mov dx, 0x20
call fcn.14000dbe0
mov bl, byte [rsp + 0x158]
cmp byte [rsp + 0x150], 0
jne 0x140003d09
cmp qword [rsi], 0
mov bl, byte [rsp + 0x158]
jne 0x140003d09
mov rdi, qword [rsi + 0x10]
mov r12, qword [rsi + 0x18]
xor ebp, ebp
cmp r12, rbp
setne bl
je 0x140003d09
mov r8b, byte [rdi + rbp]
mov edx, 0x16
lea rcx, str._t_____________
call fcn.14000f75d
inc rbp
test al, al
je 0x140003ce5
lea r12, [rsi + 0x28]
mov rcx, r15
mov rdx, rsi
mov r8d, ebx
call fcn.14000fe07
mov rsi, r12
test rax, rax
movabs rbp, 0x8000000000000000
lea r12, [rsp + 0x88]
je 0x140003ca8
mov rdi, rax
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
call fcn.140009e44
lea r13, [rsp + 0x590]
mov rcx, rbx
mov rdx, r14
call fcn.140009e44
mov r14, rdi
jmp 0x1400030f0
mov qword [rsp + 0x280], rbx
mov qword [rsp + 0x160], rdx
mov dword [rsp + 0x80], 0x68
mov rbx, rax
mov qword [rsp + 0x148], rcx
mov rax, r15
jmp 0x140004016
mov dx, 0x22
call fcn.14000dbe0
mov rax, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
cmp rax, rbp
jne 0x140004207
lea r13, [rsp + 0x590]
mov rbx, qword [rsp + 0x78]
jmp 0x140003d5e
mov ecx, 1
cmp rsi, 1
mov rax, rsi
adc rax, 0
test rsi, rsi
cmove rax, rsi
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x2e0], rcx
mov edx, ebx
xor r8d, r8d
lea r9, [rsp + 0x1d0]
call qword [sym.imp.kernel32.dll_InitializeProcThreadAttributeList]
test eax, eax
je 0x1400041f5
mov rax, qword [rsp + 0x3f8]
xor ecx, ecx
test rax, rax
setne cl
mov rdx, rbx
cmove rdx, rax
mov qword [rsp + 0xf0], rcx
and qword [rsp + 0xf8], 0
mov r8, qword [rsp + 0x400]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], r8
mov qword [rsp + 0x110], rcx
and qword [rsp + 0x118], 0
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r8
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x280], rbx
mov rsi, rbx
mov rbx, qword [rsp + 0x2e0]
test rsi, rsi
je 0x140003fe6
dec rsi
mov qword [rsp + 0x138], rsi
mov rax, qword [rsp + 0x130]
test rax, rax
je 0x140003fe6
dec rax
mov qword [rsp + 0x130], rax
cmp qword [rsp + 0xf0], 0
je 0x140004608
mov rsi, qword [rsp + 0xf8]
test rsi, rsi
jne 0x140003f0b
mov rdx, qword [rsp + 0x100]
mov r8, qword [rsp + 0x108]
lea rcx, [rsp + 0xf8]
call fcn.140014366
mov qword [rsp + 0xf0], 1
mov rsi, qword [rsp + 0xf8]
mov r8, qword [rsp + 0x100]
mov rdi, qword [rsp + 0x108]
movzx eax, word [rsi + 0x16a]
cmp rdi, rax
jb 0x140003f42
mov rax, qword [rsi]
test rax, rax
je 0x140004608
inc r8
movzx edi, word [rsi + 0x168]
mov rsi, rax
jmp 0x140003f1b
test r8, r8
je 0x140003f61
mov rdx, qword [rsi + rdi*8 + 0x178]
dec r8
lea rcx, [rsp + 0x238]
call fcn.140014366
jmp 0x140003f7e
lea rax, [rdi + 1]
mov qword [rsp + 0x238], rsi
and qword [rsp + 0x240], 0
mov qword [rsp + 0x248], rax
imul rax, rdi, 0x18
mov rcx, qword [rsp + 0x248]
lea rdx, [rsp + 0xf8]
mov qword [rdx + 0x10], rcx
mov rcx, qword [rsp + 0x238]
mov qword [rdx], rcx
mov rcx, qword [rsp + 0x240]
mov qword [rdx + 8], rcx
mov r8, qword [rsi + rdi*8 + 8]
mov r9, qword [rsi + rax + 0x60]
mov rax, qword [rsi + rax + 0x70]
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rax
mov rcx, rbx
xor edx, edx
call qword [sym.imp.kernel32.dll_UpdateProcThreadAttribute]
test eax, eax
je 0x14000423d
mov rsi, qword [rsp + 0x138]
jmp 0x140003e8e
or dword [rsp + 0x18c], 0x80000
mov ecx, 0xd
lea rax, [rsp + 0x4d0]
mov rdi, rax
mov rsi, r15
rep movsq qword [rdi], qword [rsi]
mov rdi, qword [sym.imp.kernel32.dll_CloseHandle]
mov qword [rsp + 0x538], rbx
mov rdx, qword [rsp + 0x198]
lea rcx, [rsp + 0x200]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x30], rax
mov eax, dword [rsp + 0x18c]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov rcx, r14
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.kernel32.dll_CreateProcessW]
test eax, eax
je 0x1400041b8
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x4a8], rax
mov rsi, qword [rsp + 0x2b0]
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x490], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x498], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x480], rax
cmp qword [rsp + 0x280], 0
je 0x140004101
mov rcx, rbx
mov rdx, qword [rsp + 0x148]
call fcn.140010393
mov rcx, qword [rsp + 0x160]
call rdi
mov rcx, qword [rsp + 0x1c0]
call rdi
mov rcx, qword [rsp + 0x288]
call rdi
mov ecx, 2
call fcn.1400103c8
lea rcx, [0x14001c0f0]
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov rcx, qword [rsp + 0x2e8]
mov rdx, qword [rsp + 0x150]
call fcn.140009e44
mov rcx, qword [rsp + 0x2f0]
mov rdx, qword [rsp + 0x1c8]
call fcn.140009e44
mov rcx, qword [rsp + 0x190]
mov rdx, qword [rsp + 0x198]
call fcn.140009e44
mov rcx, qword [rsp + 0x78]
mov rdx, r14
call fcn.140009e44
cmp byte [rsp + 0x188], 0
jne 0x14000419b
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
call fcn.140009e44
mov qword [rsp + 0x1b8], rbx
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x1b0], rax
jmp 0x14000434b
call fcn.14000aa88
mov rsi, rax
cmp qword [rsp + 0x280], 0
je 0x1400041db
mov rcx, rbx
mov rdx, qword [rsp + 0x148]
call fcn.140010393
mov qword [rsp + 0x1b8], rbx
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x1b0], rax
jmp 0x14000425c
call fcn.14000aa88
mov rsi, rax
mov rbx, qword [rsp + 0x2e0]
jmp 0x14000424c
mov rcx, qword [rsp + 0x90]
mov dl, 1
mov dword [rsp + 0x158], edx
mov dword [rsp + 0x188], 0
lea r13, [rsp + 0x590]
lea rsi, [rsp + 0x310]
mov rbx, qword [rsp + 0x78]
jmp 0x14000314a
call fcn.14000aa88
mov rsi, rax
mov rdi, qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, rbx
mov rdx, qword [rsp + 0x148]
call fcn.140010393
mov rdx, qword [rsp + 0x160]
mov rcx, rdx
call rdi
mov rbx, rsi
mov rsi, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x1c0]
call rdi
mov rcx, qword [rsp + 0x288]
call rdi
mov ecx, 2
call fcn.1400103c8
mov rcx, qword [rsp + 0x2b0]
mov rdx, qword [rsp + 0x2b8]
call fcn.1400103d6
mov rcx, qword [rsp + 0x2c0]
mov rdx, qword [rsp + 0x2c8]
call fcn.1400103d6
mov rcx, qword [rsp + 0x2d0]
mov rdx, qword [rsp + 0x2d8]
call fcn.1400103d6
lea rcx, [0x14001c0f0]
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov rcx, qword [rsp + 0x2e8]
mov rdx, rsi
call fcn.140009e44
mov qword [rsp + 0x60], rbx
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x2f0]
mov rdx, qword [rsp + 0x1c8]
call fcn.140009e44
mov rcx, qword [rsp + 0x190]
mov rdx, qword [rsp + 0x198]
call fcn.140009e44
mov rcx, rbx
mov rdx, r14
call fcn.140009e44
mov esi, 2
cmp byte [rsp + 0x158], 0
je 0x14000434b
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
call fcn.140009e44
mov r14, qword [rsp + 0x60]
jmp 0x140002252
mov rdx, qword [rsp + 0x80]
test rdx, rdx
je 0x140004374
mov r8, qword [rsp + 0x88]
mov rcx, r15
call fcn.140009d96
jmp 0x140004355
mov rcx, qword [rsp + 0x388]
cmp rcx, rbp
je 0x14000438e
mov rdx, qword [rsp + 0x390]
call fcn.140004cc5
mov ecx, dword [rsp + 0x3a8]
mov rdx, qword [rsp + 0x3b0]
call fcn.140001000
mov ecx, dword [rsp + 0x3b8]
mov rdx, qword [rsp + 0x3c0]
call fcn.140001000
mov ecx, dword [rsp + 0x3c8]
mov rdx, qword [rsp + 0x3d0]
call fcn.140001000
mov rax, qword [rsp + 0x3f8]
test rax, rax
je 0x140004421
mov rcx, qword [rsp + 0x400]
and qword [rsp + 0x4d8], 0
mov qword [rsp + 0x4e0], rax
mov qword [rsp + 0x4e8], rcx
and qword [rsp + 0x4f8], 0
mov rbx, qword [rsp + 0x408]
mov qword [rsp + 0x500], rax
mov qword [rsp + 0x508], rcx
mov r14d, 1
jmp 0x140004426
xor r14d, r14d
xor ebx, ebx
mov qword [rsp + 0x4d0], r14
mov qword [rsp + 0x4f0], r14
mov qword [rsp + 0x510], rbx
test rbx, rbx
je 0x140004590
dec rbx
mov qword [rsp + 0x510], rbx
test r14, r14
je 0x140004608
mov rsi, qword [rsp + 0x4d8]
test rsi, rsi
jne 0x140004493
mov rdx, qword [rsp + 0x4e0]
mov r8, qword [rsp + 0x4e8]
lea rcx, [rsp + 0x4d8]
call fcn.140014366
mov r14d, 1
mov rsi, qword [rsp + 0x4d8]
mov r8, qword [rsp + 0x4e0]
mov rdi, qword [rsp + 0x4e8]
movzx eax, word [rsi + 0x16a]
cmp rdi, rax
jb 0x1400044dd
mov rcx, r15
mov rdx, rsi
call fcn.140014324
mov rsi, qword [rsp + 0x80]
test rsi, rsi
je 0x140004608
mov r8, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x90]
jmp 0x1400044a3
test r8, r8
je 0x140004516
mov rdx, qword [rsi + rdi*8 + 0x178]
dec r8
mov rcx, r15
call fcn.140014366
mov rax, qword [rsp + 0x80]
movdqu xmm0, xmmword [r12]
movdqa xmmword [rsp + 0xf0], xmm0
test rax, rax
jne 0x140004545
jmp 0x140004608
lea rax, [rdi + 1]
mov qword [rsp + 0x80], rsi
and qword [rsp + 0x88], 0
mov qword [rsp + 0x90], rax
movdqu xmm0, xmmword [r12]
movdqa xmmword [rsp + 0xf0], xmm0
mov rax, rsi
movdqa xmm0, xmmword [rsp + 0xf0]
movdqu xmmword [r13 - 0xb0], xmm0
mov qword [rsp + 0x4d8], rax
imul rax, rdi, 0x18
mov rdi, qword [rsi + rax + 0x60]
mov rsi, qword [rsi + rax + 0x68]
mov rcx, rdi
call qword [rsi]
mov r8, qword [rsi + 8]
test r8, r8
je 0x14000443e
mov rdx, qword [rsi + 0x10]
mov rcx, rdi
call fcn.14000101a
jmp 0x14000443e
test r14, r14
lea rbx, [rsp + 0x4d0]
lea r14, str.LeagueClient.exe
je 0x1400045ee
mov rdx, qword [rsp + 0x4d8]
mov r8, qword [rsp + 0x4e0]
test rdx, rdx
jne 0x1400045e4
mov rax, qword [rsp + 0x4e8]
mov rcx, r15
mov rdx, r8
mov r8, rax
call fcn.140014366
mov rdx, qword [rsp + 0x80]
test rdx, rdx
je 0x1400045ee
mov r8, qword [rsp + 0x88]
mov rcx, r15
call fcn.140014324
jmp 0x1400045cf
mov rcx, qword [rsp + 0x4c0]
mov rdx, qword [rsp + 0x308]
call fcn.140004cc5
jmp 0x140001073
ud2
call fcn.14000aa88
ud2