Function at 0x14002c790
Capabilities:
Check if file exists
Check mutex on windows
Create directory
Initialize winsock library
Query environment variable
Resume thread
Set environment variable

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x7b0
mov qword [rax - 0x600], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140121ef0]
xor rax, rsp
mov qword [rsp + 0x790], rax
mov rsi, rcx
mov qword [rsp + 0x60], rcx
lea rcx, [rsp + 0x138]
call qword [sym.imp.MSVCR110.dll__time64]
mov rax, qword [rsi]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 2
mov r9d, 0x4e20
lea r8d, [rdx - 1]
mov rcx, rsi
call qword [rax + 0x58]
lea rcx, [rsi + 0xa0]
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r9, rax
mov edx, 4
lea rcx, [rsi + 0xc0]
mov r8d, 0x40000013
call fcn.14006a490
mov qword [0x140122018], rsi
lea r8, str.ALMSRVX_A079DAD9_90AE_4ce7_A5F2_AB904B4A427E
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsi + 0x1b0], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14002c860
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x14002c896
mov rax, qword [rsi]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 3
mov r9d, 0x44c
lea r8d, [rdx - 2]
mov rcx, rsi
call qword [rax + 0x58]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov edx, 0x42a
mov rcx, rsi
call fcn.1400688c0
xor r14d, r14d
mov word [rsp + 0x580], r14w
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x582]
call sub.MSVCR110.dll_memset
mov r8d, Ordinal_265
lea rdx, [rsp + 0x580]
lea rcx, str._windir_Temp
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rcx, [rsp + 0x580]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14002c8f4
xor edx, edx
lea rcx, [rsp + 0x580]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, [rsp + 0x580]
lea rcx, [0x1400ddf30]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
lea rdx, [rsp + 0x580]
lea rcx, str.TEMP
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x14002c947
mov r9d, 1
xor r8d, r8d
lea rdx, str.Main_thread:_CoInitializeEx_failed
mov rcx, rsi
call fcn.140029af0
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsi + 0x198], rax
lea r9, str.GlobalALM_SOCKET_SERVER_RUNNING
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsi + 0x1a0], rax
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
cmp byte [rsi + 0x1b8], r14b
je 0x14002c9a5
lea r9, str.LKHStop
call qword [sym.imp.KERNEL32.dll_CreateEventW]
lea r9, str.LKHSleep
jmp 0x14002c9b1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
xor r9d, r9d
mov qword [rsi + 0x188], rax
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsi + 0x190], rax
cmp qword [rsi + 0x188], r14
jne 0x14002c9ef
mov r9d, 1
xor r8d, r8d
lea rdx, str.Create_Stop_Event
mov rcx, rsi
call fcn.140029af0
cmp qword [rsi + 0x190], r14
jne 0x14002ca11
mov r9d, 1
xor r8d, r8d
lea rdx, str.Create_Sleep_Event
mov rcx, rsi
call fcn.140029af0
nop
mov ecx, 0x64d8
call sub.mfc110u.dll_Ordinal_1480
mov qword [rsp + 0xb8], rax
test rax, rax
je 0x14002ca32
mov rcx, rax
call fcn.14003c490
jmp 0x14002ca35
mov rax, r14
mov qword [rsi + 0x1a8], rax
test rax, rax
jne 0x14002ca57
lea r9d, [rax + 1]
xor r8d, r8d
lea rdx, str.Create_GlobalData
mov rcx, rsi
call fcn.140029af0
mov rcx, qword [rsi + 0x1a8]
call fcn.14003f0f0
mov rcx, qword [rsi + 0x1a8]
call fcn.140042100
mov rcx, qword [rsi + 0x1a8]
call fcn.140041ad0
mov rcx, qword [rsi + 0x1a8]
call fcn.14003fbe0
mov rdx, qword [rsi + 0x1a8]
add rdx, 0xcb8
cmp qword [rdx + 0x18], 8
jb 0x14002ca9f
mov rdx, qword [rdx]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc110u.dll_Ordinal_286]
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8d, eax
lea rdx, str.ServiceClasses::CALMService::ServiceMain___ThreadID_:_0x_X.
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov rcx, rax
call fcn.1400b8a00
test eax, eax
jne 0x14002cb06
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x80], eax
lea rdx, [0x14011cb28]
lea rcx, [rsp + 0x80]
call fcn.1400bb178
nop
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
nop
jmp 0x14002cb1f
mov rax, qword [rsi + 0x1a8]
cmp qword [rax + 0xa40], 0
jne 0x14002cb48
mov edx, 2
lea rcx, [rsi + 0xc0]
lea r8, str.No_Plugin_installed_
call fcn.14006a5c0
mov ecx, 0x202
lea rdx, [rsp + 0x3e0]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x14002cb9b
mov ecx, eax
call qword [sym.imp.WS2_32.dll_WSASetLastError]
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, eax
lea rdx, str.Socket_Startup_failed_with__d_
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
mov r9d, 1
xor r8d, r8d
lea rdx, str.Socket_Startup_failed__
mov rcx, rsi
call fcn.140029af0
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 0xffffffffffffffff
mov rdx, qword [rsi + 0x1a8]
add rdx, 0xaa0
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 4
xor r9d, r9d
xor r8d, r8d
lea rcx, [0x140058950]
call sub.mfc110u.dll_Ordinal_2099
mov r15, rax
test rax, rax
je 0x14002cde3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 0x100000
lea r9, [rsp + 0x58]
mov r8, rbx
mov rdx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14002cdb5
lea rax, [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
cmp rax, rcx
jae 0x14002cd0d
lea rax, [rsp + 0x58]
cmp r8, rax
ja 0x14002cd0d
lea rbx, [rsp + 0x58]
sub rbx, r8
sar rbx, 3
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002ccf1
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002ccf1
sub rcx, r8
sar rcx, 3
movabs rdi, 0x1fffffffffffffff
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002ccb0
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea r9, [rcx + 1]
sub rdx, r8
sar rdx, 3
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rax, rdx
jae 0x14002ccd1
mov rdx, r14
jmp 0x14002ccd4
add rdx, rcx
cmp rdx, r9
cmovb rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
jmp 0x14002ccfb
movabs rdi, 0x1fffffffffffffff
test rcx, rcx
je 0x14002cdaa
mov rax, qword [r8 + rbx*8]
jmp 0x14002cda2
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002cd8e
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002cd8e
sub rcx, r8
sar rcx, 3
movabs rdi, 0x1fffffffffffffff
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002cd52
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea r9, [rcx + 1]
sub rdx, r8
sar rdx, 3
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rax, rdx
jae 0x14002cd73
mov rdx, r14
jmp 0x14002cd76
add rdx, rcx
cmp rdx, r9
cmovb rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
jmp 0x14002cd98
movabs rdi, 0x1fffffffffffffff
test rcx, rcx
je 0x14002cdaa
mov rax, qword [rsp + 0x58]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x48]
add rcx, 8
mov qword [rsp + 0x48], rcx
jmp 0x14002cdd7
mov r9d, 1
xor r8d, r8d
lea rdx, str.Couldnt_duplicate_WatchServer_
mov rcx, rsi
call fcn.140029af0
movabs rdi, 0x1fffffffffffffff
mov rcx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x14002ce05
mov r9d, 1
xor r8d, r8d
lea rdx, str.Watch_dead_process_thread_could_not_be_created_null__
mov rcx, rsi
call fcn.140029af0
movabs rdi, 0x1fffffffffffffff
mov rdx, qword [rsi + 0x1a8]
cmp byte [rdx + 4], 0
jne 0x14002d009
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 4
xor r9d, r9d
or r8d, 0xffffffff
lea rcx, [0x140043b20]
call sub.mfc110u.dll_Ordinal_2099
mov r15, rax
test rax, rax
je 0x14002cff1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 0x100000
lea r9, [rsp + 0x58]
mov r8, rbx
mov rdx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14002cfcd
lea rax, [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
cmp rax, rcx
jae 0x14002cf3b
lea rax, [rsp + 0x58]
cmp r8, rax
ja 0x14002cf3b
lea rbx, [rsp + 0x58]
sub rbx, r8
sar rbx, 3
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002cf2c
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002cf2c
sub rcx, r8
sar rcx, 3
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002ceed
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea r9, [rcx + 1]
sub rdx, r8
sar rdx, 3
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rax, rdx
jae 0x14002cf0e
mov rdx, r14
jmp 0x14002cf11
add rdx, rcx
cmp rdx, r9
cmovb rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
test rcx, rcx
je 0x14002cfc2
mov rax, qword [r8 + rbx*8]
jmp 0x14002cfba
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002cfb0
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002cfb0
sub rcx, r8
sar rcx, 3
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002cf76
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea r9, [rcx + 1]
sub rdx, r8
sar rdx, 3
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rax, rdx
jae 0x14002cf97
mov rdx, r14
jmp 0x14002cf9a
add rdx, rcx
cmp rdx, r9
cmovb rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14002cfc2
mov rax, qword [rsp + 0x58]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x48]
add rcx, 8
mov qword [rsp + 0x48], rcx
jmp 0x14002cfe5
mov r9d, 1
xor r8d, r8d
lea rdx, str.Couldnt_duplicate_DBServer_
mov rcx, rsi
call fcn.140029af0
mov rcx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x14002d009
mov r9d, 1
xor r8d, r8d
lea rdx, str.Database_thread_could_not_be_created_null__
mov rcx, rsi
call fcn.140029af0
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 4
xor r9d, r9d
or r8d, 0xffffffff
mov rdx, rsi
lea rcx, [0x140061020]
call sub.mfc110u.dll_Ordinal_2099
test rax, rax
je 0x14002d044
mov word [rsi + 0x181], 0
mov rcx, qword [rax + 0x58]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 4
xor r9d, r9d
lea r8d, [r9 + 2]
lea rdx, [rsp + 0x1c0]
lea rcx, [0x14002e790]
call sub.mfc110u.dll_Ordinal_2099
mov r15, rax
test rax, rax
je 0x14002d238
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 0x100000
lea r9, [rsp + 0x58]
mov r8, rbx
mov rdx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14002d214
lea rax, [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
cmp rax, rcx
jae 0x14002d171
lea rax, [rsp + 0x58]
cmp r8, rax
ja 0x14002d171
lea rbx, [rsp + 0x58]
sub rbx, r8
sar rbx, 3
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002d162
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002d162
sub rcx, r8
sar rcx, 3
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002d123
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea r9, [rcx + 1]
sub rdx, r8
sar rdx, 3
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rax, rdx
jae 0x14002d144
mov rdx, r14
jmp 0x14002d147
add rdx, rcx
cmp rdx, r9
cmovb rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
test rcx, rcx
je 0x14002d1f8
mov rax, qword [r8 + rbx*8]
jmp 0x14002d1f0
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002d1e6
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002d1e6
sub rcx, r8
sar rcx, 3
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002d1ac
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea r9, [rcx + 1]
sub rdx, r8
sar rdx, 3
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rax, rdx
jae 0x14002d1cd
mov rdx, r14
jmp 0x14002d1d0
add rdx, rcx
cmp rdx, r9
cmovb rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14002d1f8
mov rax, qword [rsp + 0x58]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x48]
add rcx, 8
mov qword [rsp + 0x48], rcx
lea rdx, [rsi + 0x1a0]
lea rcx, [rsp + 0x68]
call fcn.1400301e0
jmp 0x14002d22c
mov r9d, 1
xor r8d, r8d
lea rdx, str.Couldnt_duplicate_SocketServer_
mov rcx, rsi
call fcn.140029af0
mov rcx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x14002d250
mov r9d, 1
xor r8d, r8d
lea rdx, str.Socket_server_thread_could_not_be_created_null__
mov rcx, rsi
call fcn.140029af0
mov rdx, qword [rsi + 0x1a8]
cmp byte [rdx + 4], 0
jne 0x14002d454
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 4
xor r9d, r9d
lea r8d, [r9 - 0xf]
lea rcx, [0x14003e620]
call sub.mfc110u.dll_Ordinal_2099
mov r15, rax
test rax, rax
je 0x14002d43c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 0x100000
lea r9, [rsp + 0x58]
mov r8, rbx
mov rdx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14002d418
lea rax, [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
cmp rax, rcx
jae 0x14002d386
lea rax, [rsp + 0x58]
cmp r8, rax
ja 0x14002d386
lea rbx, [rsp + 0x58]
sub rbx, r8
sar rbx, 3
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002d377
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002d377
sub rcx, r8
sar rcx, 3
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002d338
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea r9, [rcx + 1]
sub rdx, r8
sar rdx, 3
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rax, rdx
jae 0x14002d359
mov rdx, r14
jmp 0x14002d35c
add rdx, rcx
cmp rdx, r9
cmovb rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
test rcx, rcx
je 0x14002d40d
mov rax, qword [r8 + rbx*8]
jmp 0x14002d405
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002d3fb
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002d3fb
sub rcx, r8
sar rcx, 3
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002d3c1
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea r9, [rcx + 1]
sub rdx, r8
sar rdx, 3
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rax, rdx
jae 0x14002d3e2
mov rdx, r14
jmp 0x14002d3e5
add rdx, rcx
cmp rdx, r9
cmovb rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14002d40d
mov rax, qword [rsp + 0x58]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x48]
add rcx, 8
mov qword [rsp + 0x48], rcx
jmp 0x14002d430
mov r9d, 1
xor r8d, r8d
lea rdx, str.Couldnt_duplicate_ConvertDataBase_
mov rcx, rsi
call fcn.140029af0
mov rcx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x14002d454
mov r9d, 1
xor r8d, r8d
lea rdx, str.ConvertDataBase_server_thread_could_not_be_created__null__
mov rcx, rsi
call fcn.140029af0
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8d, [r9 - 0xf]
mov rdx, qword [rsi + 0x1a8]
lea rcx, [0x140043200]
call sub.mfc110u.dll_Ordinal_2099
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 4
xor r9d, r9d
or r8d, 0xffffffff
mov rdx, qword [rsi + 0x1a8]
lea rcx, [0x140044100]
call sub.mfc110u.dll_Ordinal_2099
mov r15, rax
test rax, rax
je 0x14002d652
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 0x100000
lea r9, [rsp + 0x58]
mov r8, rbx
mov rdx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14002d62e
lea rax, [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
cmp rax, rcx
jae 0x14002d5a0
lea rax, [rsp + 0x58]
cmp r8, rax
ja 0x14002d5a0
lea rbx, [rsp + 0x58]
sub rbx, r8
sar rbx, 3
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002d591
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002d591
sub rcx, r8
sar rcx, 3
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002d556
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, r8
sar rdx, 3
mov rax, rdx
shr rax, 1
sub rdi, rax
cmp rdi, rdx
jae 0x14002d573
mov rdx, r14
jmp 0x14002d576
add rdx, rax
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
test rcx, rcx
je 0x14002d623
mov rax, qword [r8 + rbx*8]
jmp 0x14002d61b
mov rdx, qword [rsp + 0x50]
cmp rcx, rdx
jne 0x14002d611
mov rax, rdx
sub rax, rcx
sar rax, 3
cmp rax, 1
jae 0x14002d611
sub rcx, r8
sar rcx, 3
mov rax, rdi
sub rax, rcx
cmp rax, 1
jae 0x14002d5db
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP110.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, r8
sar rdx, 3
mov rax, rdx
shr rax, 1
sub rdi, rax
cmp rdi, rdx
jae 0x14002d5f8
mov rdx, r14
jmp 0x14002d5fb
add rdx, rax
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
call fcn.140030020
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14002d623
mov rax, qword [rsp + 0x58]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x48]
add rcx, 8
mov qword [rsp + 0x48], rcx
jmp 0x14002d646
mov r9d, 1
xor r8d, r8d
lea rdx, str.Couldnt_duplicate_DBServer_
mov rcx, rsi
call fcn.140029af0
mov rcx, qword [r15 + 0x58]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x14002d66a
mov r9d, 1
xor r8d, r8d
lea rdx, str.Database_thread_could_not_be_created_null__
mov rcx, rsi
call fcn.140029af0
lea rcx, [rsp + 0x148]
call qword [sym.imp.MSVCR110.dll__time64]
mov rbx, qword [rsp + 0x70]
sub rbx, qword [rsp + 0x68]
sar rbx, 3
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.MSVCR110.dll__difftime64]
mulsd xmm0, qword [0x1400dfb18]
cvttsd2si rax, xmm0
mov r9d, dword [rsi + 0x80]
sub r9d, eax
mov r8d, 1
mov rdx, qword [rsp + 0x68]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, 0x102
jne 0x14002d87f
xor ecx, ecx
call qword [sym.imp.MSVCR110.dll__time64]
xorps xmm6, xmm6
movsd qword [rsp + 0x88], xmm6
mov dword [rsp + 0x90], r14d
mov qword [rsp + 0x158], rax
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.MSVCR110.dll__localtime64_s]
mov r12d, 0x76c
test eax, eax
jne 0x14002d7ba
movzx eax, word [rsp + 0x3c4]
add ax, r12w
mov word [rsp + 0x220], ax
movzx eax, word [rsp + 0x3c0]
inc ax
mov word [rsp + 0x222], ax
movzx eax, word [rsp + 0x3c8]
mov word [rsp + 0x224], ax
movzx eax, word [rsp + reloc.mfc110u.dll_Ordinal_956]
mov word [rsp + 0x226], ax
movzx eax, word [rsp + 0x3b8]
mov word [rsp + 0x228], ax
movzx eax, word [rsp + 0x3b4]
mov word [rsp + 0x22a], ax
movzx eax, word [rsp + 0x3b0]
mov word [rsp + 0x22c], ax
mov word [rsp + 0x22e], r14w
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x220]
call fcn.140009b70
test eax, eax
mov dword [rsp + 0x90], r14d
jne 0x14002d7c5
mov dword [rsp + 0x90], 1
lea r8, str._H:_M:_S
lea rdx, [rsp + 0x168]
lea rcx, [rsp + 0x88]
call fcn.14000f850
nop
mov rcx, rax
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r8, rax
lea rdx, str.SERVICE_START_PENDING_timeout____s
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
nop
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
mov rax, qword [rsi]
mov r9d, dword [rsi + 0x80]
add r9d, 0x9c4
mov r8d, dword [rsi + 0x7c]
inc r8d
mov dword [rsp + 0x20], 0xffffffff
mov edx, 2
mov rcx, rsi
call qword [rax + 0x58]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
sub rax, rcx
sar rax, 3
cmp rax, 1
jbe 0x14002d888
mov edx, 0x64
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x14002d888
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Pipe_Server_couldnt_be_started.
mov rcx, rsi
call fcn.140029af0
jmp 0x14002d888
mov r12d, 0x76c
xorps xmm6, xmm6
xor edx, edx
mov rcx, qword [rsi + 0x188]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14002da1a
xor ecx, ecx
call qword [sym.imp.MSVCR110.dll__time64]
movsd qword [rsp + 0xf0], xmm6
mov dword [rsp + 0xf8], r14d
mov qword [rsp + 0x178], rax
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x270]
call qword [sym.imp.MSVCR110.dll__localtime64_s]
test eax, eax
jne 0x14002d97f
movzx eax, word [rsp + 0x284]
add ax, r12w
mov word [rsp + 0x1e0], ax
movzx eax, word [rsp + 0x280]
inc ax
mov word [rsp + 0x1e2], ax
movzx eax, word [rsp + 0x288]
mov word [rsp + 0x1e4], ax
movzx eax, word [rsp + 0x27c]
mov word [rsp + 0x1e6], ax
movzx eax, word [rsp + 0x278]
mov word [rsp + 0x1e8], ax
movzx eax, word [rsp + 0x274]
mov word [rsp + reloc.mfc110u.dll_Ordinal_490], ax
movzx eax, word [rsp + 0x270]
mov word [rsp + 0x1ec], ax
mov word [rsp + 0x1ee], r14w
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x1e0]
call fcn.140009b70
test eax, eax
mov dword [rsp + 0xf8], r14d
jne 0x14002d98a
mov dword [rsp + 0xf8], 1
lea r8, str._H:_M:_S
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0xf0]
call fcn.14000f850
nop
mov rcx, rax
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r8, rax
lea rdx, str.SERVICE_RUNNING____s
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
nop
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
mov rax, qword [rsi]
mov dword [rsp + 0x20], 0xffffffff
or r9d, 0xffffffff
or r8d, r9d
mov edx, 4
mov rcx, rsi
call qword [rax + 0x58]
lea rcx, [rsi + 0xa0]
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r9, rax
mov edx, 4
lea rcx, [rsi + 0xc0]
mov r8d, 0x40000001
call fcn.14006a490
nop
mov rcx, qword [rsi + 0x188]
call fcn.140029740
mov eax, r14d
xchg dword [0x140122010], eax
xor ecx, ecx
call qword [sym.imp.MSVCR110.dll__time64]
movsd qword [rsp + 0xd0], xmm6
mov dword [rsp + 0xd8], r14d
mov qword [rsp + 0x198], rax
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.MSVCR110.dll__localtime64_s]
test eax, eax
jne 0x14002db0f
movzx eax, word [rsp + 0x2fc]
add ax, r12w
mov word [rsp + 0x240], ax
movzx eax, word [rsp + 0x2f8]
inc ax
mov word [rsp + 0x242], ax
movzx eax, word [rsp + 0x300]
mov word [rsp + 0x244], ax
movzx eax, word [rsp + 0x2f4]
mov word [rsp + 0x246], ax
movzx eax, word [rsp + 0x2f0]
mov word [rsp + 0x248], ax
movzx eax, word [rsp + 0x2ec]
mov word [rsp + 0x24a], ax
movzx eax, word [rsp + 0x2e8]
mov word [rsp + 0x24c], ax
mov word [rsp + 0x24e], r14w
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x240]
call fcn.140009b70
test eax, eax
mov dword [rsp + 0xd8], r14d
jne 0x14002db1a
mov dword [rsp + 0xd8], 1
lea r8, str._H:_M:_S
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0xd0]
call fcn.14000f850
nop
mov rcx, rax
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r8, rax
lea rdx, str.ServiceClasses::CALMService::ServiceMain___Exited_from_main_wait_loop____s
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
nop
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
mov rax, qword [rsi]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 3
mov r9d, 0xea60
lea r8d, [rdx - 2]
mov rcx, rsi
call qword [rax + 0x58]
lea rcx, [rsi + 0xa0]
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r9, rax
mov edx, 4
lea rcx, [rsi + 0xc0]
mov r8d, 0x40000014
call fcn.14006a490
mov rax, qword [rsi + 0x1a8]
cmp byte [rax + 4], 0
jne 0x14002dd39
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
cmp rdx, rcx
je 0x14002debf
mov edx, 0x1388
mov rcx, qword [rcx - 8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx - 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x48]
cmp qword [rsp + 0x40], rax
je 0x14002dc03
sub rax, 8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call qword [sym.imp.MSVCR110.dll__time64]
movsd qword [rsp + 0x98], xmm6
mov dword [rsp + 0xa0], r14d
mov qword [rsp + 0x1b8], rax
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x388]
call qword [sym.imp.MSVCR110.dll__localtime64_s]
test eax, eax
jne 0x14002dce3
movzx eax, word [rsp + 0x39c]
add ax, r12w
mov word [rsp + 0x260], ax
movzx eax, word [rsp + 0x398]
inc ax
mov word [rsp + 0x262], ax
movzx eax, word [rsp + 0x3a0]
mov word [rsp + 0x264], ax
movzx eax, word [rsp + 0x394]
mov word [rsp + 0x266], ax
movzx eax, word [rsp + 0x390]
mov word [rsp + 0x268], ax
movzx eax, word [rsp + 0x38c]
mov word [rsp + 0x26a], ax
movzx eax, word [rsp + 0x388]
mov word [rsp + 0x26c], ax
mov word [rsp + 0x26e], r14w
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x260]
call fcn.140009b70
test eax, eax
mov dword [rsp + 0xa0], r14d
jne 0x14002dcee
mov dword [rsp + 0xa0], 1
lea r8, str._H:_M:_S
lea rdx, [rsp + 0x1c8]
lea rcx, [rsp + 0x98]
call fcn.14000f850
nop
mov rcx, rax
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r8, rax
lea rdx, str.ServiceClasses::CALMService::ServiceMain___DatabaseConversionThread_stopped____s
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
nop
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
cmp rdx, rcx
je 0x14002debf
mov edx, 0x1388
mov rcx, qword [rcx - 8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx - 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x48]
cmp qword [rsp + 0x40], rax
je 0x14002dd7f
sub rax, 8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call qword [sym.imp.MSVCR110.dll__time64]
movsd qword [rsp + 0xa8], xmm6
mov dword [rsp + 0xb0], r14d
mov qword [rsp + 0x180], rax
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x338]
call qword [sym.imp.MSVCR110.dll__localtime64_s]
test eax, eax
jne 0x14002de5f
movzx eax, word [rsp + 0x34c]
add ax, r12w
mov word [rsp + 0x230], ax
movzx eax, word [rsp + 0x348]
inc ax
mov word [rsp + 0x232], ax
movzx eax, word [rsp + 0x350]
mov word [rsp + 0x234], ax
movzx eax, word [rsp + 0x344]
mov word [rsp + 0x236], ax
movzx eax, word [rsp + 0x340]
mov word [rsp + 0x238], ax
movzx eax, word [rsp + 0x33c]
mov word [rsp + 0x23a], ax
movzx eax, word [rsp + 0x338]
mov word [rsp + 0x23c], ax
mov word [rsp + 0x23e], r14w
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x230]
call fcn.140009b70
test eax, eax
mov dword [rsp + 0xb0], r14d
jne 0x14002de6a
mov dword [rsp + 0xb0], 1
lea r8, str._H:_M:_S
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xa8]
call fcn.14000f850
nop
mov rcx, rax
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r8, rax
lea rdx, str.ServiceClasses::CALMService::ServiceMain___SocketServerThread_stopped____s
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
nop
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov rax, qword [rsi + 0x1a8]
cmp byte [rax + 4], 0
jne 0x14002e04c
cmp rdx, rcx
je 0x14002e1be
mov edx, 0x1388
mov rcx, qword [rcx - 8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx - 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x48]
cmp qword [rsp + 0x40], rax
je 0x14002df0c
sub rax, 8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call qword [sym.imp.MSVCR110.dll__time64]
movsd qword [rsp + 0xc0], xmm6
mov dword [rsp + 0xc8], r14d
mov qword [rsp + 0x140], rax
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x298]
call qword [sym.imp.MSVCR110.dll__localtime64_s]
test eax, eax
jne 0x14002dfec
movzx eax, word [rsp + 0x2ac]
add ax, r12w
mov word [rsp + 0x210], ax
movzx eax, word [rsp + 0x2a8]
inc ax
mov word [rsp + 0x212], ax
movzx eax, word [rsp + 0x2b0]
mov word [rsp + 0x214], ax
movzx eax, word [rsp + 0x2a4]
mov word [rsp + 0x216], ax
movzx eax, word [rsp + 0x2a0]
mov word [rsp + 0x218], ax
movzx eax, word [rsp + 0x29c]
mov word [rsp + 0x21a], ax
movzx eax, word [rsp + 0x298]
mov word [rsp + 0x21c], ax
mov word [rsp + 0x21e], r14w
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x210]
call fcn.140009b70
test eax, eax
mov dword [rsp + 0xc8], r14d
jne 0x14002dff7
mov dword [rsp + 0xc8], 1
lea r8, str._H:_M:_S
lea rdx, [rsp + reloc.mfc110u.dll_Ordinal_296]
lea rcx, [rsp + 0xc0]
call fcn.14000f850
nop
mov rcx, rax
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r8, rax
lea rdx, str.ServiceClasses::CALMService::ServiceMain___DatabaseThread_stopped____s
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
nop
lea rcx, [rsp + reloc.mfc110u.dll_Ordinal_296]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
cmp rdx, rcx
je 0x14002e1be
mov edx, 0x7530
mov rcx, qword [rcx - 8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx - 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x48]
cmp qword [rsp + 0x40], rax
je 0x14002e088
sub rax, 8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call qword [sym.imp.MSVCR110.dll__time64]
movsd qword [rsp + 0xe0], xmm6
mov dword [rsp + 0xe8], r14d
mov qword [rsp + 0x150], rax
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.MSVCR110.dll__localtime64_s]
test eax, eax
jne 0x14002e168
movzx eax, word [rsp + 0x2d4]
add ax, r12w
mov word [rsp + 0x250], ax
movzx eax, word [rsp + 0x2d0]
inc ax
mov word [rsp + 0x252], ax
movzx eax, word [rsp + 0x2d8]
mov word [rsp + 0x254], ax
movzx eax, word [rsp + 0x2cc]
mov word [rsp + 0x256], ax
movzx eax, word [rsp + 0x2c8]
mov word [rsp + 0x258], ax
movzx eax, word [rsp + 0x2c4]
mov word [rsp + 0x25a], ax
movzx eax, word [rsp + 0x2c0]
mov word [rsp + 0x25c], ax
mov word [rsp + 0x25e], r14w
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x250]
call fcn.140009b70
test eax, eax
mov dword [rsp + 0xe8], r14d
jne 0x14002e173
mov dword [rsp + 0xe8], 1
lea r8, str._H:_M:_S
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0xe0]
call fcn.14000f850
nop
mov rcx, rax
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r8, rax
lea rdx, str.ServiceClasses::CALMService::ServiceMain___WatchThread_stopped____s
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
nop
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
mov rdi, qword [rsi + 0x1a8]
xor ecx, ecx
call qword [sym.imp.MSVCR110.dll__time64]
movsd qword [rsp + 0x100], xmm6
mov dword [rsp + 0x108], r14d
mov qword [rsp + 0x160], rax
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x310]
call qword [sym.imp.MSVCR110.dll__localtime64_s]
test eax, eax
jne 0x14002e2a5
movzx eax, word [rsp + reloc.mfc110u.dll_Ordinal_804]
add ax, r12w
mov word [rsp + 0x1f0], ax
movzx eax, word [rsp + 0x320]
inc ax
mov word [rsp + 0x1f2], ax
movzx eax, word [rsp + 0x328]
mov word [rsp + 0x1f4], ax
movzx eax, word [rsp + 0x31c]
mov word [rsp + 0x1f6], ax
movzx eax, word [rsp + 0x318]
mov word [rsp + 0x1f8], ax
movzx eax, word [rsp + 0x314]
mov word [rsp + 0x1fa], ax
movzx eax, word [rsp + 0x310]
mov word [rsp + 0x1fc], ax
mov word [rsp + 0x1fe], r14w
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x1f0]
call fcn.140009b70
test eax, eax
mov dword [rsp + 0x108], r14d
jne 0x14002e2b0
mov dword [rsp + 0x108], 1
lea r8, str._H:_M:_S
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x100]
call fcn.14000f850
nop
mov rbx, qword [rdi + 0x1508]
mov rcx, rax
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r9, rax
mov r8, rbx
lea rdx, str.ServiceClasses::CALMService::ServiceMain____d_clients_to_stop____s
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
nop
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
mov rdi, qword [rdi + 0x1500]
mov rbx, qword [rdi]
mov r13d, 1
cmp rbx, rdi
je 0x14002e50b
inc r13d
mov rax, qword [rsi]
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 0xea60
mov r8d, r13d
mov edx, 3
mov rcx, rsi
call qword [rax + 0x58]
mov r8d, dword [rbx + 0x1c]
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov r15, rax
test rax, rax
je 0x14002e4ae
mov edx, 0x1388
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.MSVCR110.dll__time64]
movsd qword [rsp + reloc.mfc110u.dll_Ordinal_280], xmm6
mov dword [rsp + 0x120], r14d
mov qword [rsp + 0x170], rax
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x360]
call qword [sym.imp.MSVCR110.dll__localtime64_s]
test eax, eax
jne 0x14002e454
movzx eax, word [rsp + 0x374]
add ax, r12w
mov word [rsp + 0x200], ax
movzx eax, word [rsp + 0x370]
inc ax
mov word [rsp + 0x202], ax
movzx eax, word [rsp + 0x378]
mov word [rsp + 0x204], ax
movzx eax, word [rsp + 0x36c]
mov word [rsp + 0x206], ax
movzx eax, word [rsp + 0x368]
mov word [rsp + 0x208], ax
movzx eax, word [rsp + 0x364]
mov word [rsp + 0x20a], ax
movzx eax, word [rsp + 0x360]
mov word [rsp + 0x20c], ax
mov word [rsp + 0x20e], r14w
lea rdx, [rsp + reloc.mfc110u.dll_Ordinal_280]
lea rcx, [rsp + 0x200]
call fcn.140009b70
test eax, eax
mov dword [rsp + 0x120], r14d
jne 0x14002e45f
mov dword [rsp + 0x120], 1
lea r8, str._H:_M:_S
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + reloc.mfc110u.dll_Ordinal_280]
call fcn.14000f850
nop
mov rcx, rax
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r9, rax
mov r8d, dword [rbx + 0x1c]
lea rdx, str.ServiceClasses::CALMService::ServiceMain___ClientThreadID_0x_.4X_stopped____s
mov rcx, qword [rsi + 0x1a8]
call fcn.14004c390
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc110u.dll_Ordinal_1027]
cmp byte [rbx + 0x19], 0
jne 0x14002e315
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x14002e4e3
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x14002e315
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x14002e4d2
jmp 0x14002e315
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14002e503
nop dword [rax]
cmp rbx, qword [rax + 0x10]
jne 0x14002e503
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14002e4f0
mov rbx, rax
jmp 0x14002e315
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov rcx, qword [rsi + 0x1a8]
call fcn.14003ea50
mov rbx, qword [rsi + 0x1a8]
test rbx, rbx
je 0x14002e539
mov rcx, rbx
call fcn.14003d6a0
mov rcx, rbx
call sub.mfc110u.dll_Ordinal_1482
mov qword [rsi + 0x1a8], r14
call fcn.1400b8f70
mov rcx, qword [rsi + 0x1b0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [rsi + 0x68], 0
je 0x14002e586
lea rcx, [rsi + 0xa0]
call qword [sym.imp.mfc110u.dll_Ordinal_1632]
mov r9, rax
mov edx, 4
lea rcx, [rsi + 0xc0]
mov r8d, 0x40000004
call fcn.14006a490
nop
jmp 0x14002e58b
cmp qword [rsp + 0x40], 0
je 0x14002e5b7
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP110.dll_public:_void___cdecl_std::_Container_base0::_Orphan_all_void____ptr64]
mov rcx, qword [rsp + 0x40]
call sub.mfc110u.dll_Ordinal_1482
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
cmp qword [rsp + 0x68], 0
je 0x14002e5d4
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP110.dll_public:_void___cdecl_std::_Container_base0::_Orphan_all_void____ptr64]
mov rcx, qword [rsp + 0x68]
call sub.mfc110u.dll_Ordinal_1482
mov rcx, qword [rsp + 0x790]
xor rcx, rsp
call fcn.1400bb310
lea r11, [rsp + 0x7b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret