Function at 0x140001560
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
mov eax, 0x1098
call fcn.140002aa0
sub rsp, rax
mov rax, qword [0x140056008]
xor rax, rsp
mov qword [rsp + 0x1090], rax
call fcn.140001350
call fcn.140001520
call fcn.140004ce0
test eax, eax
je 0x1400016a4
call fcn.140004570
mov rsi, rax
call fcn.140001520
mov rcx, rsi
call fcn.1400045b0
mov rsi, rax
xor ebx, ebx
mov ecx, 0x20004
xor edx, edx
call fcn.140002c20
mov ecx, 0x22002
mov edx, 3
call fcn.140002c20
call fcn.140001350
call fcn.140001520
mov ecx, 0x22003
mov edx, 3
call fcn.140002c20
call fcn.140001350
mov edx, dword [rsi + 8]
mov ecx, 0x21001
call fcn.140002c20
call fcn.140001520
mov edx, dword [rsi + 0xc]
mov ecx, 0x21002
call fcn.140002c20
call fcn.140001350
mov edx, dword [rsi + 0x10]
mov ecx, 0x21003
call fcn.140002c20
call fcn.140001520
mov ecx, 0x21004
mov edx, 8
call fcn.140002c20
call fcn.140001350
mov ecx, 0x21005
mov edx, 0x18
call fcn.140002c20
call fcn.140001520
mov ecx, 0x21006
mov edx, 8
call fcn.140002c20
mov qword [rsp + 0x20], 0
lea r8, str.glText
mov ecx, 0x280
mov edx, 0x1e0
xor r9d, r9d
call fcn.140002f30
mov rdi, rax
call fcn.140001350
lea rcx, str.C:UsersPublicPicturesconfig.jpg
call fcn.1400029e0
test eax, eax
je 0x1400016ae
call fcn.140001520
call fcn.140001350
jmp 0x1400018d3
call fcn.140001350
jmp 0x1400018ce
lea rcx, str.C:Windowscomsetup.log
call fcn.1400029e0
call fcn.140001520
call fcn.140002740
test eax, eax
je 0x1400018f2
mov rcx, rdi
call fcn.140005270
call fcn.140001350
mov ecx, 1
call fcn.140005310
call fcn.140002390
test eax, eax
je 0x140001849
call fcn.140001350
call fcn.140002990
test eax, eax
jne 0x140001849
call fcn.140001520
mov ecx, 0x20004
xor edx, edx
call fcn.140002c20
mov ecx, 0x22002
mov edx, 3
call fcn.140002c20
mov ecx, 0x22003
mov edx, 3
call fcn.140002c20
call fcn.140002880
mov ebx, eax
call fcn.140001350
test ebx, ebx
jne 0x1400018f6
lea rcx, [rsp + 0x38]
call fcn.140001930
mov edx, dword [rsi + 8]
mov ecx, 0x21001
call fcn.140002c20
mov edx, dword [rsi + 0xc]
mov ecx, 0x21002
call fcn.140002c20
call fcn.140001520
mov edx, dword [rsi + 0x10]
mov ecx, 0x21003
call fcn.140002c20
call fcn.140001350
lea rbx, [rsp + 0x14e]
lea r14, [0x140034bfd]
mov edx, 0x65
mov rcx, rbx
mov r8, r14
call fcn.1400027c0
call fcn.140001520
lea rcx, [rsp + 0x252]
mov edx, 0x66
mov r8, r14
call fcn.1400027c0
call fcn.140001350
lea rcx, [rsp + 0x45a]
mov edx, 0x67
mov r8, r14
call fcn.1400027c0
call fcn.140001520
lea rcx, [rsp + 0x356]
mov edx, 0x68
mov r8, r14
call fcn.1400027c0
call fcn.140001350
mov rcx, rdi
call fcn.140005270
mov ecx, 1
call fcn.140005310
mov rcx, rbx
call fcn.140002280
call fcn.140001350
mov edx, dword [rsi + 8]
mov ecx, 0x21001
call fcn.140002c20
mov edx, dword [rsi + 0xc]
mov ecx, 0x21002
call fcn.140002c20
mov edx, dword [rsi + 0x10]
mov ecx, 0x21003
call fcn.140002c20
call fcn.140001520
lea rcx, str.C:UsersPublicPicturesconfig.jpg
call fcn.140002a40
mov rcx, rdi
call fcn.140003360
test eax, eax
je 0x1400018bc
lea rsi, [rsp + 0x38]
lea rbx, [rsp + 0x34]
mov r14, qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001884
mov ecx, 0x100
call r14
mov rcx, rdi
call fcn.140003360
test eax, eax
je 0x1400018bc
call fcn.140003670
call fcn.140001520
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.1400033b0
mov rcx, rdi
mov edx, 0x100
call fcn.140003520
test eax, eax
je 0x140001870
mov rcx, rdi
mov edx, 1
call fcn.140003390
jmp 0x140001870
call fcn.140001350
mov rcx, rdi
call fcn.140003280
call fcn.140004db0
mov ebx, 1
mov rcx, qword [rsp + 0x1090]
xor rcx, rsp
call fcn.140002b00
mov eax, ebx
add rsp, 0x1098
pop rbx
pop rdi
pop rsi
pop r14
ret
xor ebx, ebx
jmp 0x1400018d3
call fcn.140002990
call fcn.140001520
call fcn.140002880
call fcn.140001350
lea rcx, [rsp + 0x38]
call fcn.140001930
call fcn.140001520
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]