Function at 0x140007670
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0xb30
mov qword [rsp + 0xb18], 0xfffffffffffffffe
mov rax, qword [0x140038020]
xor rax, rsp
mov qword [rsp + 0xb28], rax
mov dword [rsp + 0x40], 0
mov rdx, qword [rsp + 0xb40]
add rdx, 0x308
lea rcx, [rsp + 0x48]
call fcn.1400025b0
nop
mov rcx, qword [rsp + 0xb40]
add rcx, 0x27f
call fcn.14000b710
movzx eax, al
test eax, eax
jne 0x1400076f6
mov rcx, qword [rsp + 0xb40]
add rcx, 0x27f
call fcn.140013110
cmp rax, 2
jbe 0x14000777b
mov dword [rsp + 0x40], 0x1c3f9009
xor eax, eax
cmp eax, 1
je 0x14000776c
call fcn.140004430
mov qword [rsp + 0x3d0], rax
cmp qword [rsp + 0x3d0], 0
je 0x14000776c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x3d0]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x1c3f9009
mov dword [rsp + 0x28], 0x1c3
lea rax, [0x14002bf88]
mov qword [rsp + 0x20], rax
lea r9, [0x14002bfd0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x3d0]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rcx, qword [rsp + 0xb40]
add rcx, 0x27f
call fcn.140013110
mov rdi, rax
mov rcx, qword [rsp + 0xb40]
add rcx, 0x2af
call fcn.140013110
cmp rdi, rax
je 0x140007834
mov dword [rsp + 0x40], 0x1c4f9009
xor eax, eax
cmp eax, 1
je 0x140007825
call fcn.140004430
mov qword [rsp + 0x3d8], rax
cmp qword [rsp + 0x3d8], 0
je 0x140007825
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x3d8]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x1c4f9009
mov dword [rsp + 0x28], 0x1c4
lea rax, [0x14002c038]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c080]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x3d8]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rcx, qword [rsp + 0xb40]
add rcx, 0x2af
xor edx, edx
call fcn.14000b750
movzx eax, byte [rax]
mov dword [rsp + 0x390], eax
mov rcx, qword [rsp + 0xb40]
call fcn.140005260
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x1400078f5
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
xor eax, eax
cmp eax, 1
je 0x1400078e6
call fcn.140004430
mov qword [rsp + 0x3e0], rax
cmp qword [rsp + 0x3e0], 0
je 0x1400078e6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x3e0]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x1c8
lea rax, [0x14002c0e8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c130]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x3e0]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rax, qword [rsp + 0xb40]
cmp qword [rax + 0x330], 0
jne 0x140007990
mov dword [rsp + 0x40], 0x1caf9318
xor eax, eax
cmp eax, 1
je 0x140007981
call fcn.140004430
mov qword [rsp + 0x3e8], rax
cmp qword [rsp + 0x3e8], 0
je 0x140007981
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x3e8]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x1caf9318
mov dword [rsp + 0x28], 0x1ca
lea rax, [0x14002c198]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c1e0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x3e8]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rax, qword [rsp + 0xb40]
cmp qword [rax + 0x338], 0
jne 0x140007a2b
mov dword [rsp + 0x40], 0x1cbf9318
xor eax, eax
cmp eax, 1
je 0x140007a1c
call fcn.140004430
mov qword [rsp + 0x3f0], rax
cmp qword [rsp + 0x3f0], 0
je 0x140007a1c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x3f0]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x1cbf9318
mov dword [rsp + 0x28], 0x1cb
lea rax, [0x14002c248]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c290]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x3f0]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x330]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x330]
mov rax, qword [rax]
call qword [rax + pe_nt_image_headers64]
mov byte [rsp + 0x60], 0
lea rdi, [rsp + 0x64]
xor eax, eax
mov ecx, 0x320
rep stosb byte [rdi], al
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x5b8d80
lea r8, [rsp + 0x60]
mov edx, dword [rsp + 0x390]
call qword [rax + 0x20]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x140007b45
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
xor eax, eax
cmp eax, 1
je 0x140007b36
call fcn.140004430
mov qword [rsp + 0x3f8], rax
cmp qword [rsp + 0x3f8], 0
je 0x140007b36
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x3f8]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x1d0
lea rax, [0x14002c2f8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c340]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x3f8]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
movzx eax, byte [rsp + 0x71]
test eax, eax
je 0x140007bd7
mov dword [rsp + 0x40], 0x1d1f9330
xor eax, eax
cmp eax, 1
je 0x140007bc8
call fcn.140004430
mov qword [rsp + 0x400], rax
cmp qword [rsp + 0x400], 0
je 0x140007bc8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x400]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x1d1f9330
mov dword [rsp + 0x28], 0x1d1
lea rax, [0x14002c3a8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c3f0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x400]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
lea rcx, [rsp + 0x398]
call fcn.14000b880
nop
mov qword [rsp + 0x408], 0
jmp 0x140007c07
mov rax, qword [rsp + 0x408]
add rax, 1
mov qword [rsp + 0x408], rax
mov rcx, qword [rsp + 0xb40]
add rcx, 0x27f
call fcn.140013110
cmp qword [rsp + 0x408], rax
jae 0x1400081f8
mov rcx, qword [rsp + 0xb40]
add rcx, 0x27f
mov rdx, qword [rsp + 0x408]
call fcn.14000b750
mov qword [rsp + 0x758], rax
mov rcx, qword [rsp + 0xb40]
add rcx, 0x2af
mov rdx, qword [rsp + 0x408]
call fcn.14000b750
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0x758]
movzx eax, byte [rax]
mov dword [rsp + 0x750], eax
mov byte [rsp + 0x420], 0
lea rdi, [rsp + 0x424]
xor eax, eax
mov ecx, 0x320
rep stosb byte [rdi], al
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x5b8d80
lea r8, [rsp + 0x420]
mov edx, dword [rsp + 0x750]
call qword [rax + 0x20]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x140007d70
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
xor eax, eax
cmp eax, 1
je 0x140007d6b
call fcn.140004430
mov qword [rsp + 0x760], rax
cmp qword [rsp + 0x760], 0
je 0x140007d6b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x760]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x1dc
lea rax, [0x14002c458]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c4a0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x760]
call qword [rdi + 0x30]
jmp 0x1400081f8
mov dword [rsp + 0x410], 0
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x5b8d80
mov r8d, dword [rsp + 0x750]
lea rdx, [rsp + 0x410]
call qword [rax + 0x18]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x140007e50
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
xor eax, eax
cmp eax, 1
je 0x140007e4b
call fcn.140004430
mov qword [rsp + 0x768], rax
cmp qword [rsp + 0x768], 0
je 0x140007e4b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x768]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x1df
lea rax, [0x14002c508]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c550]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x768]
call qword [rdi + 0x30]
jmp 0x1400081f8
mov dword [rsp + 0x754], 0
jmp 0x140007e6e
mov eax, dword [rsp + 0x754]
add eax, 1
mov dword [rsp + 0x754], eax
mov eax, dword [rsp + 0x410]
cmp dword [rsp + 0x754], eax
jae 0x14000816c
mov byte [rsp + 0x770], 0
lea rdi, [rsp + 0x771]
xor eax, eax
mov ecx, 0x19b
rep stosb byte [rdi], al
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x5b8d80
lea r9, [rsp + 0x770]
mov r8d, dword [rsp + 0x754]
mov edx, dword [rsp + 0x750]
call qword [rax + 0x28]
mov dword [rsp + 0x910], eax
mov eax, dword [rsp + 0x910]
and eax, 0xfff
test eax, eax
je 0x140007f23
mov eax, dword [rsp + 0x910]
and eax, 0xfff
cmp eax, 0x30d
je 0x140007f23
jmp 0x140007e5d
mov rax, qword [rsp + 0x758]
mov rax, qword [rax + 0x15b]
cmp qword [rsp + 0x8cc], rax
je 0x140007f41
jmp 0x140007e5d
mov rcx, qword [rsp + 0x758]
movzx eax, byte [rsp + 0x771]
mov byte [rcx + 1], al
mov rcx, qword [rsp + 0x758]
mov eax, dword [rsp + 0x8d8]
mov dword [rcx + 0x167], eax
mov rcx, qword [rsp + 0x758]
mov eax, dword [rsp + 0x8e8]
mov dword [rcx + 0x177], eax
mov rcx, qword [rsp + 0x758]
mov eax, dword [rsp + 0x8dc]
mov dword [rcx + 0x16b], eax
mov rcx, qword [rsp + 0x758]
mov eax, dword [rsp + 0x8e0]
mov dword [rcx + 0x16f], eax
mov rcx, qword [rsp + 0x758]
mov eax, dword [rsp + 0x8e4]
mov dword [rcx + 0x173], eax
mov rcx, qword [rsp + 0x758]
movzx eax, byte [rsp + 0x906]
mov byte [rcx + 0x195], al
mov rcx, qword [rsp + 0x758]
movzx eax, byte [rsp + 0x907]
mov byte [rcx + 0x196], al
mov rcx, qword [rsp + 0x758]
mov eax, dword [rsp + 0x8fc]
mov dword [rcx + 0x18b], eax
mov rcx, qword [rsp + 0x758]
mov rax, qword [rsp + 0x8b4]
mov qword [rcx + 0x143], rax
mov rcx, qword [rsp + 0x758]
mov rax, qword [rsp + 0x8bc]
mov qword [rcx + 0x14b], rax
mov rcx, qword [rsp + 0x758]
mov rax, qword [rsp + 0x8c4]
mov qword [rcx + 0x153], rax
mov rcx, qword [rsp + 0x758]
movzx eax, byte [rsp + 0x905]
mov byte [rcx + 0x194], al
mov rcx, qword [rsp + 0x758]
mov eax, dword [rsp + 0x8d4]
mov dword [rcx + 0x163], eax
mov rcx, qword [rsp + 0x758]
movzx eax, byte [rsp + 0x904]
mov byte [rcx + 0x193], al
mov rcx, qword [rsp + 0x418]
movzx eax, byte [rsp + 0x771]
mov byte [rcx + 1], al
mov rcx, qword [rsp + 0x418]
mov eax, dword [rsp + 0x378]
mov dword [rcx + 0x167], eax
mov rcx, qword [rsp + 0x418]
mov eax, dword [rsp + 0x8dc]
mov dword [rcx + 0x16b], eax
mov rcx, qword [rsp + 0x418]
mov eax, dword [rsp + 0x8e0]
mov dword [rcx + 0x16f], eax
mov rcx, qword [rsp + 0x418]
mov eax, dword [rsp + 0x8e4]
mov dword [rcx + 0x173], eax
mov rcx, qword [rsp + 0x418]
mov rax, qword [rsp + 0x758]
movzx eax, byte [rax + 0x193]
mov byte [rcx + 0x193], al
mov rax, qword [rsp + 0x758]
cmp dword [rax + 0x18f], 0
jne 0x140008130
cmp dword [rsp + 0x900], 0
jne 0x140008130
mov dword [rsp + 0xb20], 0
jmp 0x14000813b
mov dword [rsp + 0xb20], 1
mov rcx, qword [rsp + 0x418]
mov eax, dword [rsp + 0xb20]
mov dword [rcx + 0x18f], eax
lea rdx, [rsp + 0x770]
lea rcx, [rsp + 0x398]
call fcn.14000b920
jmp 0x14000816c
mov eax, dword [rsp + 0x410]
cmp dword [rsp + 0x754], eax
jb 0x1400081f3
mov dword [rsp + 0x40], 0x204f9009
xor eax, eax
cmp eax, 1
je 0x1400081f1
call fcn.140004430
mov qword [rsp + 0x918], rax
cmp qword [rsp + 0x918], 0
je 0x1400081f1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x918]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x204f9009
mov dword [rsp + 0x28], 0x204
lea rax, [0x14002c5b8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c600]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x918]
call qword [rdi + 0x30]
jmp 0x1400081f8
jmp 0x140007bf3
mov eax, dword [rsp + 0x40]
and eax, 0xfff
test eax, eax
je 0x140008222
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rcx, qword [rsp + 0xb40]
call fcn.1400057f0
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x1400082d1
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
xor eax, eax
cmp eax, 1
je 0x1400082b4
call fcn.140004430
mov qword [rsp + 0x920], rax
cmp qword [rsp + 0x920], 0
je 0x1400082b4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x920]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x208
lea rax, [0x14002c668]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c6b0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x920]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 0x30
mov rax, qword [rax + 0x30]
call qword [rax + 8]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14000839c
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
xor eax, eax
cmp eax, 1
je 0x14000837f
call fcn.140004430
mov qword [rsp + 0x928], rax
cmp qword [rsp + 0x928], 0
je 0x14000837f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x928]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x20a
lea rax, [0x14002c718]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c760]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x928]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 8
mov rax, qword [rax + 8]
lea rdx, [rsp + 0x398]
call qword [rax + 0x90]
mov rdx, qword [rsp + 0xb40]
movzx edx, byte [rdx + 0x27a]
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 8
mov rax, qword [rax + 8]
call qword [rax + 0x30]
mov rdx, qword [rsp + 0xb40]
movzx edx, byte [rdx + 0x278]
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
mov rax, qword [rax]
call qword [rax + pe_nt_image_headers64]
mov rdx, qword [rsp + 0xb40]
movzx edx, byte [rdx + 0x279]
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 8
mov rax, qword [rax + 8]
call qword [rax + 0xc0]
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 0x18
mov rax, qword [rax + 0x18]
mov edx, dword [rsp + 0x390]
call qword [rax + 0x68]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14000854b
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
xor eax, eax
cmp eax, 1
je 0x14000852e
call fcn.140004430
mov qword [rsp + 0x930], rax
cmp qword [rsp + 0x930], 0
je 0x14000852e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x930]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x212
lea rax, [0x14002c7c8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c810]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x930]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov qword [rsp + 0x938], 0
jmp 0x14000856d
mov rax, qword [rsp + 0x938]
add rax, 1
mov qword [rsp + 0x938], rax
mov rcx, qword [rsp + 0xb40]
add rcx, 0x2af
call fcn.140013110
cmp qword [rsp + 0x938], rax
jae 0x1400086a1
mov rcx, qword [rsp + 0xb40]
add rcx, 0x2af
mov rdx, qword [rsp + 0x938]
call fcn.14000b750
mov qword [rsp + 0x940], rax
mov byte [rsp + 0x950], 0
lea rdi, [rsp + 0x951]
xor eax, eax
mov ecx, 0x19b
rep stosb byte [rdi], al
lea r8, [rsp + 0x950]
mov rdx, qword [rsp + 0x940]
mov rcx, qword [rsp + 0xb40]
call fcn.14000b2a0
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
add rcx, 0x18
mov rax, qword [rax + 0x18]
lea rdx, [rsp + 0x950]
call qword [rax + 0x18]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14000869c
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
xor eax, eax
cmp eax, 1
je 0x14000869a
call fcn.140004430
mov qword [rsp + 0xaf0], rax
cmp qword [rsp + 0xaf0], 0
je 0x14000869a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0xaf0]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x21b
lea rax, [0x14002c878]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c8c0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0xaf0]
call qword [rdi + 0x30]
jmp 0x1400086a1
jmp 0x140008559
mov eax, dword [rsp + 0x40]
and eax, 0xfff
test eax, eax
je 0x1400086cb
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rax, qword [rsp + 0xb40]
movzx eax, byte [rax + 0x271]
test eax, eax
je 0x140008775
mov dword [rsp + 0x40], 0x21ff901a
xor eax, eax
cmp eax, 1
je 0x140008758
call fcn.140004430
mov qword [rsp + 0xaf8], rax
cmp qword [rsp + 0xaf8], 0
je 0x140008758
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0xaf8]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x21ff901a
mov dword [rsp + 0x28], 0x21f
lea rax, [0x14002c928]
mov qword [rsp + 0x20], rax
lea r9, [0x14002c970]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0xaf8]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rdx, rax
mov rax, qword [rsp + 0xb40]
mov qword [rax + 0x350], rdx
mov rax, qword [rsp + 0xb40]
cmp qword [rax + 0x350], 0
jne 0x140008843
mov dword [rsp + 0x40], 0x222f9259
xor eax, eax
cmp eax, 1
je 0x140008826
call fcn.140004430
mov qword [rsp + 0xb00], rax
cmp qword [rsp + 0xb00], 0
je 0x140008826
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0xb00]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x222f9259
mov dword [rsp + 0x28], 0x222
lea rax, [0x14002c9d8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002ca20]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0xb00]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov dword [rsp + 0x44], 0
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0xb40]
lea r8, [0x14000ac10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdx, rax
mov rax, qword [rsp + 0xb40]
mov qword [rax + 0x348], rdx
mov rax, qword [rsp + 0xb40]
cmp qword [rax + 0x348], 0
jne 0x140008931
mov dword [rsp + 0x40], 0x226f9246
xor eax, eax
cmp eax, 1
je 0x140008914
call fcn.140004430
mov qword [rsp + 0xb08], rax
cmp qword [rsp + 0xb08], 0
je 0x140008914
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0xb08]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x226f9246
mov dword [rsp + 0x28], 0x226
lea rax, [0x14002ca88]
mov qword [rsp + 0x20], rax
lea r9, [0x14002cad0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0xb08]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx + 0x338]
mov rax, qword [rax]
call qword [rax + 0x38]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x1400089f4
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
xor eax, eax
cmp eax, 1
je 0x1400089da
call fcn.140004430
mov qword [rsp + 0xb10], rax
cmp qword [rsp + 0xb10], 0
je 0x1400089da
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0xb10]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x228
lea rax, [0x14002cb38]
mov qword [rsp + 0x20], rax
lea r9, [0x14002cb80]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0xb10]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
jmp 0x140008a16
lea rcx, [rsp + 0x398]
call fcn.14000b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.1400025f0
xor eax, eax
test eax, eax
jne 0x1400076a3
mov eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0xb28]
xor rcx, rsp
call fcn.1400239c0
add rsp, 0xb30
pop rdi
ret