Function at 0x140008ca0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x998
mov qword [rsp + 0x980], 0xfffffffffffffffe
mov rax, qword [0x140038020]
xor rax, rsp
mov qword [rsp + 0x988], rax
mov dword [rsp + 0x44], 0
mov dword [rsp + 0x40], 0
mov rdx, qword [rsp + 0x9b0]
add rdx, 0x308
lea rcx, [rsp + 0x220]
call fcn.1400025b0
nop
mov rcx, qword [rsp + 0x9b0]
add rcx, 0x27f
call fcn.140013110
cmp rax, 1
je 0x140008d9f
mov dword [rsp + 0x44], 0x258f9009
xor eax, eax
cmp eax, 1
je 0x140008d8d
call fcn.140004430
mov qword [rsp + 0x590], rax
cmp qword [rsp + 0x590], 0
je 0x140008d8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x590]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x258f9009
mov dword [rsp + 0x28], 0x258
lea rax, [0x14002ccc8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002cd10]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x590]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rcx, qword [rsp + 0x9b0]
add rcx, 0x27f
call fcn.140013110
mov rdi, rax
mov rcx, qword [rsp + 0x9b0]
add rcx, 0x2af
call fcn.140013110
cmp rdi, rax
je 0x140008e5b
mov dword [rsp + 0x44], 0x259f9009
xor eax, eax
cmp eax, 1
je 0x140008e49
call fcn.140004430
mov qword [rsp + 0x598], rax
cmp qword [rsp + 0x598], 0
je 0x140008e49
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x598]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x259f9009
mov dword [rsp + 0x28], 0x259
lea rax, [0x14002cd78]
mov qword [rsp + 0x20], rax
lea r9, [0x14002cdc0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x598]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rcx, qword [rsp + 0x9b0]
call fcn.140005260
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x140008eff
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x140008eed
call fcn.140004430
mov qword [rsp + 0x5a0], rax
cmp qword [rsp + 0x5a0], 0
je 0x140008eed
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x5a0]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x25b
lea rax, [0x14002ce28]
mov qword [rsp + 0x20], rax
lea r9, [0x14002ce70]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x5a0]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rax, qword [rsp + 0x9b0]
cmp qword [rax + 0x330], 0
jne 0x140008f9d
mov dword [rsp + 0x44], 0x25df9318
xor eax, eax
cmp eax, 1
je 0x140008f8b
call fcn.140004430
mov qword [rsp + 0x5a8], rax
cmp qword [rsp + 0x5a8], 0
je 0x140008f8b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x5a8]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x25df9318
mov dword [rsp + 0x28], 0x25d
lea rax, [0x14002ced8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002cf20]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x5a8]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rax, qword [rsp + 0x9b0]
cmp qword [rax + 0x338], 0
jne 0x14000903b
mov dword [rsp + 0x44], 0x25ef9318
xor eax, eax
cmp eax, 1
je 0x140009029
call fcn.140004430
mov qword [rsp + 0x5b0], rax
cmp qword [rsp + 0x5b0], 0
je 0x140009029
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x5b0]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x25ef9318
mov dword [rsp + 0x28], 0x25e
lea rax, [0x14002cf88]
mov qword [rsp + 0x20], rax
lea r9, [0x14002cfd0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x5b0]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x330]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x330]
mov rax, qword [rax]
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [rsp + 0x9b0]
add rcx, 0x27f
xor edx, edx
call fcn.14000b750
mov qword [rsp + 0x580], rax
mov rcx, qword [rsp + 0x9b0]
add rcx, 0x2af
xor edx, edx
call fcn.14000b750
mov qword [rsp + 0x208], rax
mov rcx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x580]
movzx eax, byte [rax + 0x193]
mov byte [rcx + 0x193], al
mov rax, qword [rsp + 0x580]
movzx eax, byte [rax]
mov dword [rsp + 0x230], eax
mov rax, qword [rsp + 0x208]
movzx eax, byte [rax]
mov dword [rsp + 0x588], eax
mov dword [rsp + 0x200], 0
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x5b8d80
mov r8d, dword [rsp + 0x230]
lea rdx, [rsp + 0x200]
call qword [rax + 0x18]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x1400091d1
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x1400091bf
call fcn.140004430
mov qword [rsp + 0x5b8], rax
cmp qword [rsp + 0x5b8], 0
je 0x1400091bf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x5b8]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x26b
lea rax, [0x14002d038]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d080]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x5b8]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov dword [rsp + 0x5c0], 0
jmp 0x1400091ef
mov eax, dword [rsp + 0x5c0]
add eax, 1
mov dword [rsp + 0x5c0], eax
mov eax, dword [rsp + 0x200]
cmp dword [rsp + 0x5c0], eax
jae 0x140009403
mov byte [rsp + 0x5d0], 0
lea rdi, [rsp + 0x5d1]
xor eax, eax
mov ecx, 0x19b
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x5b8d80
lea r9, [rsp + 0x5d0]
mov r8d, dword [rsp + 0x5c0]
mov edx, dword [rsp + 0x230]
call qword [rax + 0x28]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
and eax, 0xfff
test eax, eax
je 0x14000929b
mov eax, dword [rsp + 0x40]
and eax, 0xfff
cmp eax, 0x30d
je 0x14000929b
jmp 0x1400091de
mov rax, qword [rsp + 0x580]
mov rax, qword [rax + 0x15b]
cmp qword [rsp + 0x72c], rax
je 0x1400092b9
jmp 0x1400091de
mov rcx, qword [rsp + 0x580]
movzx eax, byte [rsp + 0x5d1]
mov byte [rcx + 1], al
mov rcx, qword [rsp + 0x580]
mov eax, dword [rsp + 0x738]
mov dword [rcx + 0x167], eax
mov rcx, qword [rsp + 0x580]
mov eax, dword [rsp + 0x748]
mov dword [rcx + 0x177], eax
mov rcx, qword [rsp + 0x580]
mov eax, dword [rsp + 0x73c]
mov dword [rcx + 0x16b], eax
mov rcx, qword [rsp + 0x580]
mov eax, dword [rsp + 0x740]
mov dword [rcx + 0x16f], eax
mov rcx, qword [rsp + 0x580]
mov eax, dword [rsp + 0x744]
mov dword [rcx + 0x173], eax
mov rcx, qword [rsp + 0x580]
movzx eax, byte [rsp + 0x766]
mov byte [rcx + 0x195], al
mov rcx, qword [rsp + 0x580]
movzx eax, byte [rsp + 0x767]
mov byte [rcx + 0x196], al
mov rcx, qword [rsp + 0x580]
mov eax, dword [rsp + 0x75c]
mov dword [rcx + 0x18b], eax
mov rcx, qword [rsp + 0x580]
mov rax, qword [rsp + 0x714]
mov qword [rcx + 0x143], rax
mov rcx, qword [rsp + 0x580]
mov rax, qword [rsp + 0x71c]
mov qword [rcx + 0x14b], rax
mov rcx, qword [rsp + 0x580]
mov rax, qword [rsp + 0x724]
mov qword [rcx + 0x153], rax
mov rcx, qword [rsp + 0x580]
movzx eax, byte [rsp + 0x765]
mov byte [rcx + 0x194], al
mov rcx, qword [rsp + 0x580]
mov eax, dword [rsp + 0x734]
mov dword [rcx + 0x163], eax
mov rcx, qword [rsp + 0x580]
movzx eax, byte [rsp + 0x764]
mov byte [rcx + 0x193], al
jmp 0x140009403
mov dword [rsp + 0x210], 0
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x5b8d80
mov r8d, dword [rsp + 0x588]
lea rdx, [rsp + 0x210]
call qword [rax + 0x18]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x1400094f5
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x1400094e3
call fcn.140004430
mov qword [rsp + 0x770], rax
cmp qword [rsp + 0x770], 0
je 0x1400094e3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x770]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x286
lea rax, [0x14002d0e8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d130]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x770]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov byte [rsp + 0x3e0], 0
lea rdi, [rsp + 0x3e1]
xor eax, eax
mov ecx, 0x19b
rep stosb byte [rdi], al
mov dword [rsp + 0x778], 0
jmp 0x14000952c
mov eax, dword [rsp + 0x778]
add eax, 1
mov dword [rsp + 0x778], eax
mov eax, dword [rsp + 0x210]
cmp dword [rsp + 0x778], eax
jae 0x140009708
mov byte [rsp + 0x780], 0
lea rdi, [rsp + 0x781]
xor eax, eax
mov ecx, 0x19b
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x5b8d80
lea r9, [rsp + 0x780]
mov r8d, dword [rsp + 0x778]
mov edx, dword [rsp + 0x588]
call qword [rax + 0x28]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
and eax, 0xfff
test eax, eax
je 0x1400095d8
mov eax, dword [rsp + 0x40]
and eax, 0xfff
cmp eax, 0x30d
je 0x1400095d8
jmp 0x14000951b
cmp dword [rsp + 0x8e8], 0
jae 0x14000965c
mov dword [rsp + 0x44], 0x28ef9009
xor eax, eax
cmp eax, 1
je 0x140009657
call fcn.140004430
mov qword [rsp + 0x928], rax
cmp qword [rsp + 0x928], 0
je 0x140009657
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x928]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x28ef9009
mov dword [rsp + 0x28], 0x28e
lea rax, [0x14002d198]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d1e0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x928]
call qword [rdi + 0x30]
jmp 0x140009708
mov ecx, dword [rsp + 0x8e8]
xor edx, edx
mov rax, qword [rsp + 0x8c4]
div rcx
mov rcx, rax
mov rax, qword [rsp + 0x8dc]
add rax, rcx
mov qword [rsp + 0x920], rax
mov rcx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x8dc]
cmp qword [rcx + 0x15b], rax
jae 0x1400096a4
jmp 0x14000951b
mov rcx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x920]
cmp qword [rcx + 0x15b], rax
jb 0x1400096c2
jmp 0x14000951b
mov rcx, qword [rsp + 0x208]
movzx eax, byte [rsp + 0x781]
mov byte [rcx + 1], al
mov rcx, qword [rsp + 0x208]
mov eax, dword [rsp + 0x8e8]
mov dword [rcx + 0x167], eax
lea rdi, [rsp + 0x3e0]
lea rsi, [rsp + 0x780]
mov ecx, 0x19c
rep movsb byte [rdi], byte [rsi]
jmp 0x140009708
mov eax, dword [rsp + 0x44]
and eax, 0xfff
test eax, eax
je 0x140009727
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 0x30
mov rax, qword [rax + 0x30]
call qword [rax + 8]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x1400097e7
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x1400097d5
call fcn.140004430
mov qword [rsp + 0x930], rax
cmp qword [rsp + 0x930], 0
je 0x1400097d5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x930]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x29a
lea rax, [0x14002d248]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d290]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x930]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rax, qword [rsp + 0x9b0]
movzx edx, byte [rax + 0x27a]
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 8
mov rax, qword [rax + 8]
call qword [rax + 0x30]
mov rdx, qword [rsp + 0x9b0]
movzx edx, byte [rdx + 0x278]
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
mov rax, qword [rax]
call qword [rax + pe_nt_image_headers64]
mov byte [rsp + 0x240], 0
lea rdi, [rsp + 0x241]
xor eax, eax
mov ecx, 0x19b
rep stosb byte [rdi], al
lea r8, [rsp + 0x240]
mov rdx, qword [rsp + 0x580]
mov rcx, qword [rsp + 0x9b0]
call fcn.14000b2a0
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 8
mov rax, qword [rax + 8]
lea rdx, [rsp + 0x240]
call qword [rax + 8]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x140009953
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x140009941
call fcn.140004430
mov qword [rsp + 0x938], rax
cmp qword [rsp + 0x938], 0
je 0x140009941
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x938]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x2a1
lea rax, [0x14002d2f8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d340]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x938]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rax, qword [rsp + 0x9b0]
movzx edx, byte [rax + 0x279]
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 8
mov rax, qword [rax + 8]
call qword [rax + 0xc0]
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 8
mov rax, qword [rax + 8]
lea rdx, [rsp + 0x3e0]
call qword [rax + 0x68]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x140009a56
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x140009a44
call fcn.140004430
mov qword [rsp + 0x940], rax
cmp qword [rsp + 0x940], 0
je 0x140009a44
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x940]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x2a5
lea rax, [0x14002d3a8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d3f0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x940]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 0x18
mov rax, qword [rax + 0x18]
call qword [rax + 8]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x140009b16
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x140009b04
call fcn.140004430
mov qword [rsp + 0x948], rax
cmp qword [rsp + 0x948], 0
je 0x140009b04
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x948]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x2a6
lea rax, [0x14002d458]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d4a0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x948]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov byte [rsp + 0x60], 0
lea rdi, [rsp + 0x61]
xor eax, eax
mov ecx, 0x19b
rep stosb byte [rdi], al
mov qword [rsp + 0x228], 0
mov qword [rsp + 0x218], 0
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 0x18
mov rax, qword [rax + 0x18]
lea r9, [rsp + 0x218]
lea r8, [rsp + 0x228]
lea rdx, [rsp + 0x60]
call qword [rax + 0x38]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x140009c16
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x140009c04
call fcn.140004430
mov qword [rsp + 0x950], rax
cmp qword [rsp + 0x950], 0
je 0x140009c04
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x950]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x2aa
lea rax, [0x14002d508]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d550]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x950]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
lea r8, [rsp + 0x3e0]
mov rdx, qword [rsp + 0x208]
mov rcx, qword [rsp + 0x9b0]
call fcn.14000b2a0
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
add rcx, 0x18
mov rax, qword [rax + 0x18]
lea rdx, [rsp + 0x3e0]
call qword [rax + 0x18]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x140009cfb
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x140009ce9
call fcn.140004430
mov qword [rsp + 0x958], rax
cmp qword [rsp + 0x958], 0
je 0x140009ce9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x958]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x2ad
lea rax, [0x14002d5b8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d600]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x958]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rax, qword [rsp + 0x9b0]
movzx eax, byte [rax + 0x271]
test eax, eax
je 0x140009d9a
mov dword [rsp + 0x44], 0x2aff901a
xor eax, eax
cmp eax, 1
je 0x140009d88
call fcn.140004430
mov qword [rsp + 0x960], rax
cmp qword [rsp + 0x960], 0
je 0x140009d88
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x960]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x2aff901a
mov dword [rsp + 0x28], 0x2af
lea rax, [0x14002d668]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d6b0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x960]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rdx, rax
mov rax, qword [rsp + 0x9b0]
mov qword [rax + 0x350], rdx
mov rax, qword [rsp + 0x9b0]
cmp qword [rax + 0x350], 0
jne 0x140009e5d
mov dword [rsp + 0x44], 0x2b2f9259
xor eax, eax
cmp eax, 1
je 0x140009e4b
call fcn.140004430
mov qword [rsp + 0x968], rax
cmp qword [rsp + 0x968], 0
je 0x140009e4b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x968]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x2b2f9259
mov dword [rsp + 0x28], 0x2b2
lea rax, [0x14002d718]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d760]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x968]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov dword [rsp + 0x48], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x9b0]
lea r8, [0x14000ac10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdx, rax
mov rax, qword [rsp + 0x9b0]
mov qword [rax + 0x348], rdx
mov rax, qword [rsp + 0x9b0]
cmp qword [rax + 0x348], 0
jne 0x140009f40
mov dword [rsp + 0x44], 0x2b6f9246
xor eax, eax
cmp eax, 1
je 0x140009f2e
call fcn.140004430
mov qword [rsp + 0x970], rax
cmp qword [rsp + 0x970], 0
je 0x140009f2e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x970]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x2b6f9246
mov dword [rsp + 0x28], 0x2b6
lea rax, [0x14002d7c8]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d810]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x970]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax + 0x338]
mov rcx, qword [rsp + 0x9b0]
mov rcx, qword [rcx + 0x338]
mov rax, qword [rax]
call qword [rax + 0x38]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x140009ff8
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
xor eax, eax
cmp eax, 1
je 0x140009fe9
call fcn.140004430
mov qword [rsp + 0x978], rax
cmp qword [rsp + 0x978], 0
je 0x140009fe9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x978]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x2b8
lea rax, [0x14002d878]
mov qword [rsp + 0x20], rax
lea r9, [0x14002d8c0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x978]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x220]
call fcn.1400025f0
jmp 0x14000a00f
lea rcx, [rsp + 0x220]
call fcn.1400025f0
xor eax, eax
test eax, eax
jne 0x140008cdc
mov eax, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x988]
xor rcx, rsp
call fcn.1400239c0
add rsp, 0x998
pop rdi
pop rsi
ret