Function at 0x140068fe0
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x38
cmp qword [0x1401e5bf8], 0
mov qword [rsp + 0x48], rsi
mov esi, ecx
jne 0x140069018
lea rcx, str.Wimgapi
call fcn.140067bf0
mov rcx, rax
lea rdx, str.WIMCreateFile
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5bf8], rax
cmp qword [0x1401e5d00], 0
jne 0x140069045
lea rcx, str.Wimgapi
call fcn.140067bf0
mov rcx, rax
lea rdx, str.WIMSetTemporaryPath
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5d00], rax
cmp qword [0x1401e57a8], 0
jne 0x140069072
lea rcx, str.Wimgapi
call fcn.140067bf0
mov rcx, rax
lea rdx, str.WIMLoadImage
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e57a8], rax
cmp qword [0x1401e5cf8], 0
jne 0x14006909f
lea rcx, str.Wimgapi
call fcn.140067bf0
mov rcx, rax
lea rdx, str.WIMApplyImage
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5cf8], rax
cmp qword [0x1401e59b8], 0
jne 0x1400690cc
lea rcx, str.Wimgapi
call fcn.140067bf0
mov rcx, rax
lea rdx, str.WIMExtractImagePath
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e59b8], rax
cmp qword [0x1401e5ce0], 0
jne 0x1400690f9
lea rcx, str.Wimgapi
call fcn.140067bf0
mov rcx, rax
lea rdx, str.WIMGetImageInformation
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5ce0], rax
cmp qword [0x1401e5ce8], 0
jne 0x140069126
lea rcx, str.Wimgapi
call fcn.140067bf0
mov rcx, rax
lea rdx, str.WIMRegisterMessageCallback
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5ce8], rax
cmp qword [0x1401e5cd0], 0
jne 0x140069153
lea rcx, str.Wimgapi
call fcn.140067bf0
mov rcx, rax
lea rdx, str.WIMUnregisterMessageCallback
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5cd0], rax
mov rax, qword [0x1401e5d10]
test rax, rax
jne 0x140069182
lea rcx, str.Wimgapi
call fcn.140067bf0
mov rcx, rax
lea rdx, str.WIMCloseHandle
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e5d10], rax
cmp qword [0x1401e5bf8], 0
je 0x1400691b6
cmp qword [0x1401e5d00], 0
je 0x1400691b6
cmp qword [0x1401e57a8], 0
je 0x1400691b6
cmp qword [0x1401e59b8], 0
je 0x1400691b6
test rax, rax
je 0x1400691b6
or byte [0x1401d055d], 1
mov qword [rsp + 0x40], rbx
lea r9, [0x1401e5ad0]
mov r8d, 1
mov qword [rsp + 0x30], rdi
lea rdx, [0x140171868]
mov dword [rsp + 0x20], 0x104
mov rcx, 0xffffffff80000001
call fcn.1400681e0
test eax, eax
jne 0x140069216
lea r9, [0x1401e5ad0]
mov dword [rsp + 0x20], 0x104
lea r8d, [rax + 1]
mov rcx, 0xffffffff80000002
lea rdx, [0x140171868]
call fcn.1400681e0
test eax, eax
je 0x140069273
mov r9, 0xffffffffffffffff
lea r8, str.7z.exe
mov edx, 0x104
lea rcx, [0x1401e5ad0]
call fcn.1400e917c
lea rcx, [0x1401e5ad0]
call fcn.140067e00
xor edx, edx
mov rcx, rax
mov rbx, rax
call fcn.14010acac
mov edi, eax
test rbx, rbx
je 0x14006925d
mov rcx, rbx
call fcn.1400e9080
cmp edi, 0xffffffff
je 0x140069273
movzx eax, byte [0x1401d055d]
or al, 2
mov byte [0x1401d055d], al
jmp 0x14006927a
movzx eax, byte [0x1401d055d]
test al, 1
je 0x1400692a4
cmp qword [0x1401e5cf8], 0
je 0x1400692a4
cmp qword [0x1401e5ce8], 0
je 0x1400692a4
cmp qword [0x1401e5cd0], 0
je 0x1400692a4
or al, 4
mov byte [0x1401d055d], al
test esi, esi
mov rsi, qword [rsp + 0x48]
jne 0x14006931d
lea r8, [0x14015644e]
lea rbx, str.NONE
test al, 2
je 0x1400692c8
lea rdx, [0x140171ae4]
jmp 0x1400692d1
test al, 1
mov rdx, rbx
cmovne rdx, r8
test al, 1
lea rcx, [0x140171ae0]
mov r9, r8
lea rdi, str.wimgapi.dll
cmovne r9, rdi
and al, 3
cmp al, 3
cmove r8, rcx
lea rcx, str.WIM_extraction_method_s__supported:__s_s_s
call fcn.14004f910
test byte [0x1401d055d], 4
lea rcx, str.WIM_apply_method_supported:__s
cmovne rbx, rdi
mov rdx, rbx
call fcn.14004f910
movzx eax, byte [0x1401d055d]
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x40]
add rsp, 0x38
ret