Function at 0x140161eb0
Capabilities:
Create process on windows
Set file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x738]
sub rsp, 0x838
mov rax, qword [0x1402fa010]
xor rax, rsp
mov qword [rbp + 0x728], rax
mov r13, r9
mov qword [rbp - 0x78], r9
mov rbx, r8
mov qword [rsp + 0x50], rbx
mov qword [rbp - 0x58], rdx
mov r15, rcx
mov qword [rbp + 0x20], rbx
mov qword [rbp], r9
mov r14, qword [rbp + 0x7a0]
mov qword [rbp + 8], r14
mov rax, qword [rbp + 0x7a8]
mov qword [rsp + 0x58], rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x7b0]
mov qword [rsp + 0x60], rax
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x7c0]
mov qword [rsp + 0x70], rax
xor esi, esi
mov dword [rsp + 0x68], esi
cmp qword [rcx + 0x38], rsi
je 0x140161fb5
call fcn.140163120
test eax, eax
jne 0x140161f8f
mov rbx, qword [r15]
call fcn.1401285c0
mov rdi, rax
xor r9d, r9d
mov r8, qword [rax + 0xf0]
mov rdx, rbx
lea rcx, [rax + 0xe8]
call fcn.140029d10
mov rcx, qword [rdi + 0xf0]
test rcx, rcx
je 0x140161f7c
mov qword [rcx], rax
jmp 0x140161f83
mov qword [rdi + 0xe8], rax
mov qword [rdi + 0xf0], rax
mov rbx, qword [rsp + 0x50]
mov rcx, qword [r15 + 0x38]
test rcx, rcx
je 0x140161f9e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r15 + 0x38], rsi
mov rcx, qword [r15 + 0x40]
test rcx, rcx
je 0x140161fb1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r15 + 0x40], rsi
lea r9, [r15 + 0x28]
mov rcx, qword [r14]
call fcn.140022220
mov rdi, 0xffffffffffffffff
lea r12d, [rdi + 2]
test eax, eax
jne 0x1401621be
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 3
jne 0x140162318
mov qword [rbp + 0xe0], rsi
mov r8, r14
lea rdx, [0x140266198]
lea rcx, [rbp + 0xe0]
call fcn.140028f40
nop
mov rcx, qword [rbp + 0xe0]
call fcn.1400247e0
test eax, eax
jne 0x14016206b
lea r9, str.TEXT
mov r8, qword [r14]
lea rdx, str.TEXT_MSG_TEMP_FILE_NOT_EXIST
lea rcx, [rbp - 0x68]
call fcn.140044a00
nop
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call fcn.140017ba0
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, r12d
jg 0x14016205f
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbp + 0xe0]
jmp 0x140163060
mov rax, qword [r14]
mov edx, r12d
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, 0x410
or ecx, edx
jge 0x14016208e
mov edx, 0x410
mov rcx, r14
call fcn.140018ec0
mov r8d, 0x410
mov rdx, qword [r14]
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
mov rcx, qword [r14]
test rcx, rcx
jne 0x1401620b0
mov eax, esi
jmp 0x1401620c1
movsxd rdx, dword [rcx - 0xc]
call fcn.1401fa6e8
test eax, eax
js 0x1401630ec
mov rcx, qword [r14]
cmp eax, dword [rcx - 0xc]
jg 0x1401630ec
mov dword [rcx - 0x10], eax
mov ecx, eax
mov rax, qword [r14]
mov word [rax + rcx*2], si
mov rax, qword [r14]
mov r9d, dword [rax - 0x10]
add r9d, 0xfffffffc
mov r8d, 4
lea rdx, [rbp - 0x50]
mov rcx, r14
call fcn.14001dbd0
mov ebx, 2
mov dword [rsp + 0x68], ebx
lea rdx, [rbp - 0x50]
mov rcx, r14
call fcn.140017ba0
and ebx, 0xfffffffd
mov dword [rsp + 0x68], ebx
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162136
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
lea r9, [r15 + 0x28]
mov rcx, qword [r14]
call fcn.140022220
test eax, eax
jne 0x140162197
call fcn.140044940
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MSG_INTERNAL_ERROR
call fcn.140048080
test rax, rax
je 0x14016217a
mov rsi, rdi
nop dword [rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x140162170
mov r8d, esi
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call fcn.140018f70
nop
mov rdx, qword [rbp + 0xe0]
jmp 0x140163060
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401621be
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
cmp dword [rbp + 0x7b8], 0
je 0x1401621d5
mov edx, 0x81
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov qword [rbp + 0xd0], rsi
mov rdx, qword [r14]
lea rcx, [rbp + 0xd0]
call fcn.140023810
nop
mov ebx, dword [rbp + 0x7c8]
lea eax, [rbx - 2]
cmp eax, 1
jbe 0x140162c3a
mov rax, qword [rbp + 0xd0]
cmp dword [rax - 0x10], 0
jne 0x140162626
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x104], xmm0
movups xmmword [rbp + 0x114], xmm0
movups xmmword [rbp + 0x124], xmm0
movups xmmword [rbp + 0x134], xmm0
movups xmmword [rbp + 0x144], xmm0
movups xmmword [rbp + 0x154], xmm0
mov dword [rbp + 0x164], eax
mov qword [rbp + 0xf0], rsi
call fcn.1400195b0
mov rcx, rax
test rax, rax
je 0x1401630e1
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038716.0]
add rax, 0x18
mov qword [rbp + 0xf0], rax
mov dword [rbp + 0x100], 0x68
mov r9, qword [r14]
lea r8, str.notepad.exe
lea rdx, str.__s___s
lea rcx, [rbp + 0xf0]
call fcn.14001c3d0
mov dword [0x140306110], r12d
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [rbp + 0xf0]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x140162605
call fcn.140044940
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MSG_INTERNAL_ERROR
call fcn.140048080
test rax, rax
jne 0x1401625b5
mov r8d, esi
jmp 0x1401625cb
cmp eax, 2
jne 0x140162570
mov edx, eax
lea rcx, [rbp - 0x10]
call fcn.140038c30
mov qword [rbp - 0x70], rax
lea r9, str.TEXT
mov r8, qword [r14]
lea rdx, str.TEXT_MSG_TEMP_FILE_NOT_EXIST
lea rcx, [rbp - 0x18]
call fcn.140044a00
mov r12, rax
mov qword [rbp - 0x80], rsi
mov rcx, qword [rax]
mov rcx, qword [rcx - 0x18]
test rcx, rcx
je 0x140162372
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x20]
call qword [case.0x140038716.0]
mov rcx, rax
test rax, rax
jne 0x140162396
call fcn.1400195b0
mov rdx, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x20]
mov rcx, rdx
call qword [case.0x140038716.0]
mov rcx, rax
test rax, rax
je 0x1401630f7
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x140038716.0]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x80], rbx
mov eax, 4
mov dword [rsp + 0x68], eax
lea rax, [0x14026622c]
mov rdi, 0xffffffffffffffff
mov r15, rdi
inc r15
cmp word [rax + r15*2], 0
jne 0x1401623c5
mov rcx, qword [r12]
mov qword [rbp - 0x68], rcx
mov eax, dword [rcx - 0x10]
mov dword [rbp + 0xd8], eax
lea r13d, [rax + r15]
test r13d, r13d
js 0x140163102
mov r12d, 1
sub r12d, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r13d
or eax, r12d
jge 0x140162417
mov edx, r13d
lea rcx, [rbp - 0x80]
call fcn.140018ec0
mov rbx, qword [rbp - 0x80]
mov rcx, qword [rbp - 0x68]
movsxd rax, dword [rbp + 0xd8]
lea r12, [rax + rax]
test r12, r12
je 0x14016245b
test rbx, rbx
je 0x14016244b
mov r8, r12
test rcx, rcx
je 0x140162441
mov rdx, rcx
mov rcx, rbx
call fcn.1401f61a0
jmp 0x14016245b
xor edx, edx
mov rcx, rbx
call fcn.1401f6840
call fcn.1401fae4c
mov dword [rax], 0x16
call fcn.1401facac
movsxd r8, r15d
add r8, r8
lea rcx, [r12 + rbx]
je 0x14016248a
test rcx, rcx
jne 0x14016247e
call fcn.1401fae4c
mov dword [rax], 0x16
call fcn.1401facac
jmp 0x14016248a
lea rdx, [0x14026622c]
call fcn.1401f61a0
cmp r13d, dword [rbx - 0xc]
jg 0x140163102
mov dword [rbx - 0x10], r13d
movsxd rax, r13d
mov word [rbx + rax*2], si
mov r8, qword [rbp - 0x70]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.140029020
nop
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call fcn.140017ba0
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401624e3
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
mov eax, 4
and eax, 0xfffffffb
mov dword [rsp + 0x68], eax
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162514
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162539
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14016255c
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400192d0
nop
mov rcx, qword [rbp - 0x78]
jmp 0x14016308d
call fcn.140044940
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MSG_INTERNAL_ERROR
call fcn.140048080
test rax, rax
je 0x14016259c
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140162590
mov esi, edi
mov r8d, esi
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call fcn.140018f70
nop
mov rcx, rbx
jmp 0x140163084
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1401625c0
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call fcn.140018f70
nop
mov dword [0x140306110], esi
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162600
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
jmp 0x140163059
mov rax, qword [rbp + 0xa0]
mov qword [r15 + 0x38], rax
mov rax, qword [rbp + 0xa8]
mov qword [r15 + 0x40], rax
mov dword [0x140306110], esi
jmp 0x140162eee
mov qword [rbp + 0xd8], rsi
mov rdx, r14
lea rcx, [rbp + 0xd8]
call fcn.140023540
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
mov dword [rbp + 0x30], 0x70
mov dword [rbp + 0x34], 0x40
mov rax, qword [r14]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x40], rsi
mov dword [rbp + 0x60], r12d
mov rax, qword [rbp + 0xd8]
mov qword [rbp + 0x58], rax
lea rax, [rbp - 0x48]
mov qword [rbp - 0x38], rax
mov rcx, qword [rbp + 0xd0]
add rcx, 0xffffffffffffffe8
call fcn.1400191a0
add rax, 0x18
mov qword [rbp - 0x48], rax
lea rcx, [rbp - 0x48]
call fcn.140123230
test eax, eax
je 0x1401627ec
call fcn.140163500
cmp dword [rax + 0x614], 0
jne 0x1401627ec
mov dword [0x140306110], r12d
xor edx, edx
mov r8d, 0x538
lea rcx, [rbp + 0x1e0]
call fcn.1401f6840
mov qword [rbp + 0x1e8], rsi
lea rax, [rbp + 0x1f0]
mov qword [rbp - 0x38], rax
mov qword [rbp + 0x208], rsi
mov qword [rbp + 0x210], rsi
mov dword [rbp + 0x218], esi
lea rax, vtable.CAskExecutableDlg.0
mov qword [rbp + 0x1e0], rax
lea rax, [rbp + 0x220]
mov qword [rbp - 0x60], rax
call fcn.1400195b0
mov rcx, rax
test rax, rax
je 0x14016310d
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038716.0]
add rax, 0x18
mov qword [rbp + 0x220], rax
lea rcx, [rbp + 0x230]
call fcn.1400149d0
nop
lea rcx, [rbp + 0x2b8]
call fcn.140075140
nop
lea rcx, [rbp + 0x688]
call fcn.1400f1680
nop
mov dword [rbp + 0x228], esi
mov qword [rbp + 0x2b0], rsi
mov rdx, r14
lea rcx, [rbp + 0x220]
call fcn.140017ba0
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rbx, rax
mov rax, qword [rbp + 0x208]
test rax, rax
jne 0x1401628b4
call fcn.1401f38b8
mov qword [rbp + 0x208], rax
test rax, rax
jne 0x1401628b4
lea ecx, [rax + 0xe]
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [rbp + 0x228], 0
je 0x1401627df
call fcn.140163500
mov dword [rax + 0x614], r12d
lea rcx, [rbp + 0x1e0]
call fcn.14010e220
nop
mov dword [0x140306110], r12d
lea rax, [rbp - 8]
mov qword [rbp - 0x60], rax
lea rdx, str.ShellExecuteEx
lea rcx, [rbp - 8]
call fcn.140019100
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.1400f49d0
nop
lea rcx, [rbp + 0x30]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov ebx, eax
lea rdx, [0x140262520]
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140162830
lea rcx, [0x14030f2a0]
call fcn.140018f70
nop
mov dword [0x140306110], esi
test ebx, ebx
je 0x140162a0c
cmp qword [rbp + 0x68], 0x20
jbe 0x140162a0c
mov rax, qword [rbp + 0x98]
test rax, rax
jne 0x1401629f8
call fcn.1401285c0
lea rcx, [rax + 0xe8]
mov rdx, qword [r13]
call fcn.140029bf0
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401628af
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
jmp 0x140162bda
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1401f39e8
lea rax, [rbp + 0x1e0]
mov qword [rbp + 0x1f0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp + 0x1f8], eax
lea rax, [0x14030fbd8]
mov qword [rbp - 0x30], rax
mov byte [rbp - 0x28], 0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rbp - 0x28], 1
mov rax, qword [0x14030fc00]
mov qword [rbp + 0x200], rax
lea rax, [rbp + 0x1f0]
mov qword [0x14030fc00], rax
lea rcx, [0x14030fbd8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [rbp - 0x28], 0
mov qword [rsp + 0x20], rsi
lea r9, [0x140017d90]
mov r8, rbx
mov edx, 0xd3
mov rcx, qword [0x1403043d0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, 2
jne 0x1401627ca
lea rcx, [r15 + 0x78]
mov rdx, qword [r13]
call fcn.140029bf0
nop
lea rcx, [rbp + 0x1e0]
call fcn.14010e220
nop
mov dword [0x140306110], esi
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162998
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x1401629be
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400192d0
nop
mov rcx, r13
call fcn.1400192d0
nop
mov rcx, r14
call fcn.1400192d0
nop
mov rcx, qword [rsp + 0x58]
call fcn.1400192d0
nop
mov rcx, qword [rsp + 0x60]
call fcn.1400192d0
mov eax, r12d
jmp 0x1401630b3
mov qword [r15 + 0x38], rax
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
jmp 0x140162ef2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c7
jne 0x140162a54
lea rcx, [r15 + 0x78]
mov rdx, qword [r13]
call fcn.140029bf0
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162a4f
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
jmp 0x140162bda
cmp eax, 0xd8
jne 0x140162afb
lea rax, [rbp - 0x78]
mov qword [rbp - 0x60], rax
mov rcx, qword [r14]
sub rcx, 0x18
call fcn.1400191a0
add rax, 0x18
mov qword [rbp - 0x78], rax
lea r8, [rbp - 0x78]
mov edx, 0xd8
lea rcx, [rbp - 0x58]
call fcn.140123340
nop
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call fcn.140017ba0
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162ac0
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
lea rcx, [r15 + 0x78]
mov rdx, qword [r13]
call fcn.140029bf0
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162af6
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
jmp 0x140163059
lea rax, [rbp - 0x70]
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp + 0xd0]
add rcx, 0xffffffffffffffe8
call fcn.1400191a0
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x70]
call fcn.140123230
test eax, eax
je 0x140162ba5
call fcn.140044940
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_ERR_AT_EXECUTE_DIRECT
call fcn.140048080
test rax, rax
je 0x140162b5a
mov rsi, rdi
nop dword [rax + rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x140162b50
mov r8d, esi
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call fcn.140018f70
lea rcx, [r15 + 0x78]
mov rdx, qword [r13]
call fcn.140029bf0
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162ba0
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
jmp 0x140163059
mov rdx, qword [r14]
mov rcx, qword [rbp - 0x58]
call fcn.1400289a0
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162bda
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x140162c00
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400192d0
nop
mov rcx, r13
call fcn.1400192d0
nop
mov rcx, r14
call fcn.1400192d0
nop
mov rcx, qword [rsp + 0x58]
call fcn.1400192d0
nop
mov rcx, qword [rsp + 0x60]
call fcn.1400192d0
mov eax, r12d
jmp 0x1401630b3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x174], xmm0
movups xmmword [rbp + 0x184], xmm0
movups xmmword [rbp + 0x194], xmm0
movups xmmword [rbp + 0x1a4], xmm0
movups xmmword [rbp + 0x1b4], xmm0
movups xmmword [rbp + 0x1c4], xmm0
mov dword [rbp + 0x1d4], eax
mov qword [rbp + 0xe8], rsi
call fcn.1400195b0
mov rcx, rax
test rax, rax
je 0x1401630d6
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038716.0]
lea rdx, [rax + 0x18]
mov qword [rbp + 0xe8], rdx
mov dword [rbp + 0x170], 0x68
cmp ebx, 2
jne 0x140162cd2
call fcn.140163500
mov r9, qword [r14]
mov r8, qword [rax + 0x460]
lea rdx, str.__s____s_
lea rcx, [rbp + 0xe8]
call fcn.14001c3d0
jmp 0x140162d23
cmp ebx, 3
jne 0x140163038
lea rcx, [rbp - 0x40]
call fcn.140022cc0
nop
mov r9, qword [r14]
mov r8, qword [rax]
lea rdx, str.__s____s_
lea rcx, [rbp + 0xe8]
call fcn.14001c3d0
nop
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162d23
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
mov dword [0x140306110], r12d
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x170]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [rbp + 0xe8]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x140162ed2
call fcn.140044940
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MSG_INTERNAL_ERROR
call fcn.140048080
test rax, rax
jne 0x140162d99
mov r8d, esi
jmp 0x140162dab
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140162da0
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call fcn.140018f70
nop
mov dword [0x140306110], esi
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162de0
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162e08
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rbx, qword [rsp + 0x50]
mov rdx, qword [rbx]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162e31
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [r13]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162e56
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [r14]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162e7a
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rsi, qword [rsp + 0x58]
mov rdx, qword [rsi]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162ea3
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov r15, qword [rsp + 0x60]
mov rdx, qword [r15]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x1401630b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
jmp 0x1401630b1
mov rax, qword [rbp + 0xb8]
mov qword [r15 + 0x38], rax
mov rax, qword [rbp + 0xc0]
mov qword [r15 + 0x40], rax
mov dword [0x140306110], esi
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162f0e
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
lea rcx, [r15 + 8]
mov rbx, qword [rsp + 0x50]
mov rdx, rbx
call fcn.140017ba0
mov rdx, r13
mov rcx, r15
call fcn.140017ba0
lea rcx, [r15 + 0x10]
mov rdx, r14
call fcn.140017ba0
lea rcx, [r15 + 0x18]
mov rsi, qword [rsp + 0x58]
mov rdx, rsi
call fcn.140017ba0
lea rcx, [r15 + 0x20]
mov r15, qword [rsp + 0x60]
mov rdx, r15
call fcn.140017ba0
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162f81
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbx]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162fa5
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [r13]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162fca
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [r14]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140162fee
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140163012
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [r15]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x140163033
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
mov eax, r12d
jmp 0x1401630b3
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140163059
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14016307f
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038716.0]
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400192d0
nop
mov rcx, r13
call fcn.1400192d0
nop
mov rcx, r14
call fcn.1400192d0
nop
mov rcx, qword [rsp + 0x58]
call fcn.1400192d0
nop
mov rcx, qword [rsp + 0x60]
call fcn.1400192d0
xor eax, eax
mov rcx, qword [rbp + 0x728]
xor rcx, rsp
call fcn.1401f3bf0
add rsp, 0x838
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x80004005
call fcn.140019320
int3
mov ecx, 0x80004005
call fcn.140019320
nop
mov ecx, 0x80070057
call fcn.140019320
nop
mov ecx, 0x80004005
call fcn.140019320
int3
mov ecx, 0x80070057
call fcn.140019320
nop
mov ecx, 0x80004005
call fcn.140019320
int3