Function at 0x140001000
Capabilities:
Get common file path
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x10920
call fcn.1400236a0
sub rsp, rax
mov ecx, dword [0x14005d998]
call fcn.140012240
test eax, eax
jne 0x140001039
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov word [rsp + 0x50], ax
lea rax, [rsp + 0x52]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov r8d, 0x104
lea rdx, [rsp + 0x50]
xor ecx, ecx
call qword [0x140063438]
test eax, eax
jne 0x140001070
xor ecx, ecx
call qword [0x140063440]
call qword [0x1400633d8]
mov qword [rsp + 0x40], rax
cmp dword [0x14005d8b8], 1
jne 0x1400017c5
call fcn.140016210
test eax, eax
jne 0x14000109e
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea rcx, [rsp + 0x4c8]
call fcn.1400023f0
lea rcx, [rsp + 0x4c8]
call fcn.140014e50
test eax, eax
jne 0x1400010c9
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [0x140063460]
lea rcx, [0x1400334c0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4b0], rax
cmp qword [rsp + 0x4b0], 0
je 0x14000128f
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x4f8], rax
cmp qword [rsp + 0x4f8], 0
je 0x14000128f
mov r8d, 0x104
mov rdx, qword [rsp + 0x4f8]
mov rcx, qword [rsp + 0x4b0]
call qword [0x140063438]
test eax, eax
je 0x140001281
lea rax, [0x1400334d8]
mov qword [rsp + 0x500], rax
lea rax, [0x1400334f0]
mov qword [rsp + 0x508], rax
lea rax, [0x140033510]
mov qword [rsp + 0x510], rax
lea rax, [0x140033530]
mov qword [rsp + 0x518], rax
lea rax, [0x140033548]
mov qword [rsp + 0x520], rax
lea rax, [0x140033560]
mov qword [rsp + 0x528], rax
lea rax, [0x140033580]
mov qword [rsp + 0x530], rax
lea rax, [0x1400335a0]
mov qword [rsp + 0x538], rax
lea rax, [0x1400335c0]
mov qword [rsp + 0x540], rax
lea rax, [0x1400335e0]
mov qword [rsp + 0x548], rax
lea rax, [0x1400335f8]
mov qword [rsp + 0x550], rax
lea rax, [0x140033610]
mov qword [rsp + 0x558], rax
lea rax, [0x140033628]
mov qword [rsp + 0x560], rax
lea rax, [0x140033648]
mov qword [rsp + 0x568], rax
mov dword [rsp + 0x570], 0
jmp 0x140001227
mov eax, dword [rsp + 0x570]
inc eax
mov dword [rsp + 0x570], eax
cmp dword [rsp + 0x570], 0xe
jge 0x140001281
movsxd rax, dword [rsp + 0x570]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x580]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005d9a0]
mov rcx, qword [rsp + rax*8 + 0x500]
call fcn.140011d10
lea rdx, [rsp + 0x580]
mov rcx, qword [rsp + 0x4f8]
call fcn.140014b70
jmp 0x140001217
mov rcx, qword [rsp + 0x4f8]
call qword [0x140063420]
lea rcx, [0x140033668]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4c0], rax
cmp qword [rsp + 0x4c0], 0
je 0x140001437
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x5f0], rax
cmp qword [rsp + 0x5f0], 0
je 0x140001437
mov r8d, 0x104
mov rdx, qword [rsp + 0x5f0]
mov rcx, qword [rsp + 0x4c0]
call qword [0x140063438]
test eax, eax
je 0x140001429
lea rax, [0x140033688]
mov qword [rsp + 0x600], rax
lea rax, [0x1400336a0]
mov qword [rsp + 0x608], rax
lea rax, [0x1400336b8]
mov qword [rsp + 0x610], rax
lea rax, [0x1400336d0]
mov qword [rsp + 0x618], rax
lea rax, [0x1400336e8]
mov qword [rsp + 0x620], rax
lea rax, [0x140033700]
mov qword [rsp + 0x628], rax
lea rax, [0x140033718]
mov qword [rsp + 0x630], rax
lea rax, [0x140033738]
mov qword [rsp + 0x638], rax
lea rax, [0x140033758]
mov qword [rsp + 0x640], rax
lea rax, [0x140033778]
mov qword [rsp + 0x648], rax
lea rax, [0x140033798]
mov qword [rsp + 0x650], rax
lea rax, [0x1400337b0]
mov qword [rsp + 0x658], rax
mov dword [rsp + 0x660], 0
jmp 0x1400013cf
mov eax, dword [rsp + 0x660]
inc eax
mov dword [rsp + 0x660], eax
cmp dword [rsp + 0x660], 0xc
jge 0x140001429
movsxd rax, dword [rsp + 0x660]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x670]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005d9a0]
mov rcx, qword [rsp + rax*8 + 0x600]
call fcn.140011d10
lea rdx, [rsp + 0x670]
mov rcx, qword [rsp + 0x5f0]
call fcn.140014b70
jmp 0x1400013bf
mov rcx, qword [rsp + 0x5f0]
call qword [0x140063420]
lea rcx, [0x1400337c8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4e8], rax
cmp qword [rsp + 0x4e8], 0
je 0x14000153a
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x6e0], rax
cmp qword [rsp + 0x6e0], 0
je 0x14000153a
mov r8d, 0x104
mov rdx, qword [rsp + 0x6e0]
mov rcx, qword [rsp + 0x4e8]
call qword [0x140063438]
test eax, eax
je 0x14000152c
lea rax, [0x1400337e0]
mov qword [rsp + 0x6e8], rax
mov dword [rsp + 0x6f0], 0
jmp 0x1400014d2
mov eax, dword [rsp + 0x6f0]
inc eax
mov dword [rsp + 0x6f0], eax
cmp dword [rsp + 0x6f0], 1
jge 0x14000152c
movsxd rax, dword [rsp + 0x6f0]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x700]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005d9a0]
mov rcx, qword [rsp + rax*8 + 0x6e8]
call fcn.140011d10
lea rdx, [rsp + 0x700]
mov rcx, qword [rsp + 0x6e0]
call fcn.140014b70
jmp 0x1400014c2
mov rcx, qword [rsp + 0x6e0]
call qword [0x140063420]
lea rcx, [0x140033800]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4f0], rax
cmp qword [rsp + 0x4f0], 0
je 0x14000166a
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x770], rax
cmp qword [rsp + 0x770], 0
je 0x14000166a
mov r8d, 0x104
mov rdx, qword [rsp + 0x770]
mov rcx, qword [rsp + 0x4f0]
call qword [0x140063438]
test eax, eax
je 0x14000165c
lea rax, [0x140033818]
mov qword [rsp + 0x778], rax
lea rax, [0x140033838]
mov qword [rsp + 0x780], rax
lea rax, [0x140033858]
mov qword [rsp + 0x788], rax
lea rax, [0x140033878]
mov qword [rsp + 0x790], rax
mov dword [rsp + 0x798], 0
jmp 0x140001602
mov eax, dword [rsp + 0x798]
inc eax
mov dword [rsp + 0x798], eax
cmp dword [rsp + 0x798], 4
jge 0x14000165c
movsxd rax, dword [rsp + 0x798]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x7a0]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005d9a0]
mov rcx, qword [rsp + rax*8 + 0x778]
call fcn.140011d10
lea rdx, [rsp + 0x7a0]
mov rcx, qword [rsp + 0x770]
call fcn.140014b70
jmp 0x1400015f2
mov rcx, qword [rsp + 0x770]
call qword [0x140063420]
lea rcx, str.WIN32U.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4b8], rax
cmp qword [rsp + 0x4b8], 0
je 0x14000179a
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x810], rax
cmp qword [rsp + 0x810], 0
je 0x14000179a
mov r8d, 0x104
mov rdx, qword [rsp + 0x810]
mov rcx, qword [rsp + 0x4b8]
call qword [0x140063438]
test eax, eax
je 0x14000178c
lea rax, [0x1400338a8]
mov qword [rsp + 0x818], rax
lea rax, [0x1400338c8]
mov qword [rsp + 0x820], rax
lea rax, [0x1400338f0]
mov qword [rsp + 0x828], rax
lea rax, [0x140033918]
mov qword [rsp + 0x830], rax
mov dword [rsp + 0x838], 0
jmp 0x140001732
mov eax, dword [rsp + 0x838]
inc eax
mov dword [rsp + 0x838], eax
cmp dword [rsp + 0x838], 4
jge 0x14000178c
movsxd rax, dword [rsp + 0x838]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x840]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005d9a0]
mov rcx, qword [rsp + rax*8 + 0x818]
call fcn.140011d10
lea rdx, [rsp + 0x840]
mov rcx, qword [rsp + 0x810]
call fcn.140014b70
jmp 0x140001722
mov rcx, qword [rsp + 0x810]
call qword [0x140063420]
lea rcx, [rsp + 0x4c8]
call fcn.1400151f0
test eax, eax
jne 0x1400017b8
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [0x140063460]
lea rcx, [rsp + 0x4c8]
call fcn.140002430
mov dword [rsp + 0x410], 0x18
mov qword [rsp + 0x418], 0
mov dword [rsp + 0x420], 1
lea r8, str.02F38C5F_B595_43BF_9F75_4615303A3E5C
xor edx, edx
lea rcx, [rsp + 0x410]
call qword [0x1400633e0]
mov qword [0x140063110], rax
cmp qword [0x140063110], 0
jne 0x140001817
xor ecx, ecx
call qword [0x140063440]
cmp dword [0x14005ef70], 1
jne 0x140001825
call fcn.14000a780
call fcn.140004120
cmp eax, 1
jne 0x1400018c4
lea r8, str.66E61F05_6DA4_4B67_AB90_09EDE0ED89ED
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
mov qword [0x140063108], rax
cmp qword [0x140063108], 0
jne 0x140001860
xor ecx, ecx
call qword [0x1400634a0]
mov qword [rsp + 0x8b0], 0
lea r8, str.8C656433_963E_4EEB_A3D5_076C5F5C3800
xor edx, edx
mov ecx, 0x100002
call qword [0x140063490]
mov qword [rsp + 0x8b0], rax
cmp qword [rsp + 0x8b0], 0
jne 0x14000189b
xor ecx, ecx
call qword [0x1400634a0]
mov rcx, qword [rsp + 0x8b0]
call qword [0x140063498]
mov rcx, qword [rsp + 0x8b0]
call qword [0x1400633f8]
call fcn.140018be0
xor ecx, ecx
call qword [0x1400634a0]
call fcn.140009a00
test eax, eax
jne 0x1400018d5
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov qword [rsp + 0x478], 0
lea r8, str.8EC66AE4_CA8A_4B48_A209_40F603693833
xor edx, edx
mov ecx, 0x100000
call qword [0x1400633c8]
mov qword [rsp + 0x478], rax
cmp qword [rsp + 0x478], 0
je 0x14000191e
mov rcx, qword [rsp + 0x478]
call qword [0x1400633f8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, str.8EC66AE4_CA8A_4B48_A209_40F603693833
mov edx, 1
xor ecx, ecx
call qword [0x1400633e0]
test rax, rax
jne 0x14000193f
xor ecx, ecx
call qword [0x140063440]
cmp dword [0x14005ef78], 1
jne 0x14000197b
cmp dword [0x140063190], 0
jne 0x14000197b
call fcn.140019040
test eax, eax
jne 0x14000197b
call fcn.1400198a0
cmp eax, 0xa
jb 0x14000197b
lea rcx, [rsp + 0x50]
call fcn.1400044b0
cmp eax, 1
jne 0x14000197b
xor ecx, ecx
call qword [0x140063440]
cmp dword [0x14005d9ac], 1
jne 0x1400019e1
cmp dword [0x140063194], 0
jne 0x1400019e1
call fcn.1400198a0
cmp eax, 0xa
jb 0x1400019e1
call fcn.140019040
cmp eax, 1
jne 0x1400019e1
lea rdx, [0x14005d9b4]
mov ecx, dword [0x14005d9b0]
call fcn.14000d9b0
mov qword [rsp + 0x8b8], rax
cmp qword [rsp + 0x8b8], 0
je 0x1400019e1
mov rcx, qword [rsp + 0x8b8]
call fcn.14000ded0
mov rcx, qword [rsp + 0x8b8]
call qword [0x140063420]
lea r8, str.CA90B1C0_ECB3_46C4_8C2B_25A77444F930
mov edx, 1
xor ecx, ecx
call qword [0x1400633e0]
mov qword [rsp + 0x438], rax
cmp qword [rsp + 0x438], 0
jne 0x140001a13
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [0x1400634c8]
cmp eax, 0xb7
jne 0x140001a2b
mov ecx, 0xffffffff
call qword [0x140063440]
lea r8, str.63E360A8_EB4D_43E3_B667_86ED5FCC9C5B
mov edx, 1
xor ecx, ecx
call qword [0x1400633e0]
mov qword [rsp + 0x428], rax
cmp qword [rsp + 0x428], 0
jne 0x140001a5a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.63E360A8_EB4D_43E3_B667_86ED5FCC9C5B
call fcn.140019500
lea r9, str.66E61F05_6DA4_4B67_AB90_09EDE0ED89ED
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [0x140063428]
mov qword [0x140063108], rax
cmp qword [0x140063108], 0
jne 0x140001a99
mov ecx, 0xffffffff
call qword [0x140063440]
call qword [0x1400634c8]
cmp eax, 0xb7
jne 0x140001aae
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.66E61F05_6DA4_4B67_AB90_09EDE0ED89ED
call fcn.140019500
cmp dword [0x14005d58c], 1
jne 0x140001cb6
mov r8d, 0x7fff
lea rdx, [rsp + 0x8c0]
xor ecx, ecx
call qword [0x140063438]
test eax, eax
je 0x140001cae
mov dx, 0x5c
lea rcx, [rsp + 0x8c0]
call fcn.1400023c0
xor ecx, ecx
mov word [rax], cx
lea rdx, [rsp + 0x108c0]
lea rcx, [0x14005d480]
call fcn.14000a820
mov qword [rsp + 0x108c8], rax
cmp qword [rsp + 0x108c8], 0
je 0x140001ca4
mov dx, 0x5c
mov rcx, qword [rsp + 0x108c8]
call fcn.1400023c0
xor ecx, ecx
mov word [rax], cx
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x108d0], rax
cmp qword [rsp + 0x108d0], 0
je 0x140001c94
mov rdx, qword [rsp + 0x108d0]
mov ecx, 0x7fff
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x140001c7e
mov dx, 0x5c
mov rcx, qword [rsp + 0x108d0]
call fcn.1400023c0
xor ecx, ecx
mov word [rax], cx
mov rdx, qword [rsp + 0x108c8]
lea rcx, [rsp + 0x8c0]
call qword [0x1400636d0]
test eax, eax
je 0x140001c7c
mov rdx, qword [rsp + 0x108d0]
lea rcx, [rsp + 0x8c0]
call qword [0x1400636d0]
test eax, eax
je 0x140001c7c
call qword [0x1400633d0]
mov qword [rsp + 0x108e8], rax
lea rdx, [rsp + 0x108d8]
mov rcx, qword [rsp + 0x108e8]
call qword [0x140063b60]
mov qword [rsp + 0x108e0], rax
lea rdx, str.85982B96_B560_44AB_83EB_4F26AA51A3E9
mov rax, qword [rsp + 0x108e0]
mov rcx, qword [rax + 8]
call qword [0x1400636d0]
test eax, eax
je 0x140001c7c
lea rdx, str.1664D3FC_3308_4CE3_848D_851E74EB84E5
mov rax, qword [rsp + 0x108e0]
mov rcx, qword [rax + 8]
call qword [0x1400636d0]
test eax, eax
je 0x140001c7c
lea rdx, str.A1306D24_38E8_4138_AE0D_3FC738BFBF42
mov rax, qword [rsp + 0x108e0]
mov rcx, qword [rax + 8]
call qword [0x1400636d0]
test eax, eax
je 0x140001c7c
mov r9d, 1
lea r8, [0x14005d590]
lea rdx, [0x14005d65a]
xor ecx, ecx
call qword [0x140063718]
cmp eax, 2
jne 0x140001c7c
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x140001c86
xor ecx, ecx
call qword [0x140063440]
mov rcx, qword [rsp + 0x108d0]
call qword [0x140063420]
mov rcx, qword [rsp + 0x108c8]
call qword [0x140063420]
jmp 0x140001cac
xor ecx, ecx
call qword [0x140063440]
jmp 0x140001cb6
xor ecx, ecx
call qword [0x140063440]
lea rdx, [rsp + 0x270]
mov cx, 2
call qword [0x140063cc0]
test eax, eax
je 0x140001cd4
xor ecx, ecx
call qword [0x140063440]
call fcn.1400099e0
test eax, eax
jne 0x140001ce8
mov ecx, 0xffffffff
call qword [0x140063440]
call fcn.14001e5a0
test eax, eax
jne 0x140001cf9
xor ecx, ecx
call qword [0x140063440]
call fcn.140003c70
test eax, eax
jne 0x140001d0a
xor ecx, ecx
call qword [0x140063440]
call fcn.140003ea0
test eax, eax
jne 0x140001d1b
xor ecx, ecx
call qword [0x140063440]
cmp dword [0x14005d8c4], 0
jne 0x140001d3c
lea rcx, [0x14005d480]
call fcn.140009fa0
test eax, eax
jne 0x140001d3c
xor ecx, ecx
call qword [0x140063440]
lea rcx, [0x14005d480]
call fcn.14000a950
test eax, eax
jne 0x140001d54
xor ecx, ecx
call qword [0x140063440]
cmp dword [0x14005ef64], 1
jne 0x140001d6f
call fcn.14000c7a0
cmp eax, 1
jne 0x140001d6f
xor ecx, ecx
call qword [0x140063440]
cmp dword [0x14005d1c8], 1
jne 0x140001d82
call fcn.140018be0
jmp 0x14000238f
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x268], rax
cmp qword [rsp + 0x268], 0
jne 0x140001dad
xor ecx, ecx
call qword [0x140063440]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x268]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
jne 0x140001dcc
xor ecx, ecx
call qword [0x140063440]
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x260], rax
cmp qword [rsp + 0x260], 0
jne 0x140001df7
xor ecx, ecx
call qword [0x140063440]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x260]
call qword [0x140063500]
test eax, eax
jne 0x140001e16
xor ecx, ecx
call qword [0x140063440]
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x140001e3b
xor ecx, ecx
call qword [0x140063440]
mov r9, qword [rsp + 0x268]
lea r8, [0x140033938]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x38]
call fcn.1400235ac
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x470], rax
cmp qword [rsp + 0x470], 0
jne 0x140001e84
xor ecx, ecx
call qword [0x140063440]
mov r9, qword [rsp + 0x260]
lea r8, [0x140033958]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x470]
call fcn.1400235ac
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063408]
mov qword [rsp + 0x440], rax
cmp qword [rsp + 0x440], 0
jne 0x140001ed0
xor ecx, ecx
call qword [0x140063440]
mov r9, qword [rsp + 0x260]
lea r8, [0x140033978]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x440]
call fcn.1400235ac
mov dword [rsp + 0x430], 0
mov qword [rsp + 0x498], 0
lea rax, [rsp + 0x4a0]
mov rdi, rax
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov dword [rsp + 0x460], 0
lea rax, [rsp + 0x464]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov dword [rsp + 0x488], 0
lea rax, [rsp + 0x48c]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
cmp dword [0x14005d1d0], 1
jne 0x140001fae
movsxd rax, dword [rsp + 0x430]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + rax*8 + 0x498], rcx
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x460], 0
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x488], 1
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
cmp dword [0x14005d1cc], 1
jne 0x140002005
movsxd rax, dword [rsp + 0x430]
mov rcx, qword [rsp + 0x470]
mov qword [rsp + rax*8 + 0x498], rcx
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x460], 1
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x488], 1
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
cmp dword [0x14005d1d4], 1
jne 0x14000205c
movsxd rax, dword [rsp + 0x430]
mov rcx, qword [rsp + 0x440]
mov qword [rsp + rax*8 + 0x498], rcx
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x460], 2
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x488], 1
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
mov eax, dword [rsp + 0x430]
mov dword [rsp + 0x480], eax
mov dword [rsp + 0x30], 1
cmp dword [rsp + 0x30], 0
je 0x14000238f
mov dword [rsp + 0x108f0], 0
jmp 0x14000209a
mov eax, dword [rsp + 0x108f0]
inc eax
mov dword [rsp + 0x108f0], eax
mov eax, dword [rsp + 0x480]
cmp dword [rsp + 0x108f0], eax
jge 0x14000238a
movsxd rax, dword [rsp + 0x108f0]
movsxd rcx, dword [rsp + 0x108f0]
lea r8, [rsp + 0x448]
mov edx, dword [rsp + rax*4 + 0x488]
mov rcx, qword [rsp + rcx*8 + 0x498]
call fcn.14000ab40
cmp eax, 1
jne 0x14000237a
cmp dword [0x14005d8c4], 1
jne 0x140002290
movsxd rax, dword [rsp + 0x108f0]
cmp dword [rsp + rax*4 + 0x460], 1
jne 0x140002179
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x140063448]
cmp eax, 0x102
jne 0x140002179
lea r8, str.6AAC6D2F_28F9_47D4_A07B_F369210359A7
xor edx, edx
mov ecx, 0x100000
call qword [0x1400633c8]
mov qword [rsp + 0x10908], rax
cmp qword [rsp + 0x10908], 0
jne 0x140002160
mov edx, 0xa
mov rcx, qword [0x140063108]
call qword [0x140063448]
cmp eax, 0x102
je 0x14000215e
jmp 0x14000238f
jmp 0x140002102
cmp qword [rsp + 0x10908], 0
je 0x140002179
mov rcx, qword [rsp + 0x10908]
call qword [0x1400633f8]
movsxd rax, dword [rsp + 0x108f0]
cmp dword [rsp + rax*4 + 0x460], 0
jne 0x140002202
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x140063448]
cmp eax, 0x102
jne 0x140002202
lea r8, str.15E27327_0251_4FC0_927D_8AAA45100E6B
xor edx, edx
mov ecx, 0x100000
call qword [0x1400633c8]
mov qword [rsp + 0x10910], rax
cmp qword [rsp + 0x10910], 0
jne 0x1400021e9
mov edx, 0xa
mov rcx, qword [0x140063108]
call qword [0x140063448]
cmp eax, 0x102
je 0x1400021e7
jmp 0x14000238f
jmp 0x14000218b
cmp qword [rsp + 0x10910], 0
je 0x140002202
mov rcx, qword [rsp + 0x10910]
call qword [0x1400633f8]
movsxd rax, dword [rsp + 0x108f0]
cmp dword [rsp + rax*4 + 0x460], 2
jne 0x14000228b
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x140063448]
cmp eax, 0x102
jne 0x14000228b
lea r8, str.4B85BE30_76C9_4955_9566_BF5E65CDBB9B
xor edx, edx
mov ecx, 0x100000
call qword [0x1400633c8]
mov qword [rsp + 0x10918], rax
cmp qword [rsp + 0x10918], 0
jne 0x140002272
mov edx, 0xa
mov rcx, qword [0x140063108]
call qword [0x140063448]
cmp eax, 0x102
je 0x140002270
jmp 0x14000238f
jmp 0x140002214
cmp qword [rsp + 0x10918], 0
je 0x14000228b
mov rcx, qword [rsp + 0x10918]
call qword [0x1400633f8]
jmp 0x14000238f
mov qword [rsp + 0x108f8], 0
lea rax, [rsp + 0x10900]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov rax, qword [0x140063108]
mov qword [rsp + 0x108f8], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x10900], rax
mov r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x108f8]
mov ecx, 2
call qword [0x1400634d8]
xor edx, edx
mov rcx, qword [0x140063108]
call qword [0x140063448]
cmp eax, 0x102
je 0x14000230b
mov dword [rsp + 0x30], 0
jmp 0x14000238a
cmp qword [rsp + 0x448], 0
je 0x140002326
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x140063460]
cmp qword [rsp + 0x448], 0
je 0x14000233f
mov rcx, qword [rsp + 0x448]
call qword [0x1400633f8]
cmp qword [rsp + 0x450], 0
je 0x140002358
mov rcx, qword [rsp + 0x450]
call qword [0x1400633f8]
mov r8d, 0x18
xor edx, edx
lea rcx, [rsp + 0x448]
call fcn.1400234c0
mov ecx, 0x3e8
call qword [0x140063508]
jmp 0x140002385
mov ecx, 0x3e8
call qword [0x140063508]
jmp 0x14000208a
jmp 0x140002072
call fcn.1400099f0
cmp dword [0x14005d1c8], 1
jne 0x1400023af
mov edx, 0xffffffff
mov rcx, qword [0x140064258]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor ecx, ecx
call qword [0x140063440]
add rsp, 0x10920
pop rdi
ret