Function at 0x140001000
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x28
mov r8, 0x7b0
xor rdx, rdx
movabs rcx, 0x1403f4fc0
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleW
mov qword [0x1403f4fc8], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x1403f4fc0], rax
movabs rax, 0x1400d17c0
mov qword [0x1403f5018], rax
call fcn.140024ac0
call fcn.140046cb0
call fcn.140045b08
call fcn.140045510
call fcn.140040b10
call fcn.14003dd44
call fcn.14003d210
call fcn.14003ca88
call fcn.14003bafc
call fcn.14003af5c
call fcn.14003a308
call fcn.140039ce8
call fcn.140038360
call fcn.1400379e8
call fcn.140036ec4
call fcn.140035740
call fcn.140032d8c
call fcn.14002b9f4
call fcn.1400296cc
call fcn.1400285fc
call fcn.140027350
call fcn.14002671c
call fcn.140025f5c
call fcn.140024ce8
movabs rdx, str.Office_2013_2024_License_Setup_v1.35
lea rcx, [0x1403f50a0]
call fcn.140046d20
mov rcx, qword [0x1403f50a0]
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
movabs rcx, str._x64
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
lea rcx, [0x1403f50a0]
pop rdx
call fcn.140046ed0
mov qword [0x1403f5068], 0
movabs rdx, 0x1400cd028
lea rcx, [0x1403f50e0]
call fcn.140046d20
mov qword [0x1403f4ff0], 0
mov qword [0x1403f5060], 0
movabs rdx, str.Office_2016_2024_C2R_Licenses
lea rcx, [0x1403f50e8]
call fcn.140046d20
movabs rdx, str.Office_2013_C2R_Licenses
lea rcx, [0x1403f5050]
call fcn.140046d20
movabs rdx, str.____Press__Refresh__button___
lea rcx, [0x1403f5038]
call fcn.140046d20
movabs rdx, 0x1400cd46c
lea rcx, [0x1403f5028]
call fcn.140046d20
movabs rdx, 0x1400cd028
lea rcx, [0x1403f5088]
call fcn.140046d20
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push 0x64
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043b70
add rsp, 0x28
lea rcx, [0x1403f4fd8]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push 0x3e8
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043b70
add rsp, 0x28
lea rcx, [0x1403f50c0]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push 0x3e8
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043b70
add rsp, 0x28
lea rcx, [0x1403f50d0]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push 0x3e8
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043b70
add rsp, 0x28
lea rcx, [0x1403f4fe8]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push 0x3e8
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043b70
add rsp, 0x28
lea rcx, [0x1403f5020]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push 0xc8
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043b70
add rsp, 0x28
lea rcx, [0x1403f5090]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push 0xc8
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043b70
add rsp, 0x28
lea rcx, [0x1403f50d8]
pop rdx
call fcn.140046ed0
push 0x64
mov rax, qword [0x1403f4fd8]
mov rax, rax
push rax
movabs rax, str.SYSTEMDRIVE
push rax
pop rcx
pop rdx
pop r8
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov rax, qword [0x1403f50c0]
mov rax, rax
push rax
movabs rax, str.TEMP
push rax
pop rcx
pop rdx
pop r8
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov rax, qword [0x1403f50d0]
mov rax, rax
push rax
movabs rax, str.WINDIR
push rax
pop rcx
pop rdx
pop r8
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov rax, qword [0x1403f5090]
mov rax, rax
push rax
movabs rax, str.PROCESSOR_ARCHITECTURE
push rax
pop rcx
pop rdx
pop r8
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov rax, qword [0x1403f50d8]
mov rax, rax
push rax
movabs rax, str.PROCESSOR_ARCHITEW6432
push rax
pop rcx
pop rdx
pop r8
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov rax, qword [0x1403f5020]
mov rax, rax
push rax
movabs rax, str.ALLUSERSPROFILE
push rax
pop rcx
pop rdx
pop r8
call sub.KERNEL32.dll_GetEnvironmentVariableW
push qword [0x1403f5090]
movabs rcx, str.AMD64
pop rdx
call fcn.140046fb0
or rax, rax
jne 0x1400014c4
push qword [0x1403f50d8]
movabs rcx, str.AMD64
pop rdx
call fcn.140046fb0
or rax, rax
jne 0x1400014c4
jmp 0x1400014cd
mov rax, 1
jmp 0x1400014d0
xor rax, rax
and rax, rax
je 0x1400014ed
movabs rdx, 0x1400cf1de
lea rcx, [0x1403f5088]
call fcn.140046d20
jmp 0x140001503
movabs rdx, 0x1400cfb88
lea rcx, [0x1403f5088]
call fcn.140046d20
mov rcx, qword [0x1403f50d0]
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
movabs rcx, str.System32
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
lea rcx, [0x1403f4fe8]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1403f50d0]
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
movabs rcx, str.Sysnativecmd.exe
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
push rax
call fcn.140047040
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140034874
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140023f48
add rsp, 0x28
pop rax
mov r15, rax
and r15, r15
jle 0x140001618
mov rcx, qword [0x1403f50d0]
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
movabs rcx, str.Sysnative
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
lea rcx, [0x1403f50d0]
pop rdx
call fcn.140046ed0
jmp 0x140001660
mov rcx, qword [0x1403f50d0]
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
movabs rcx, str.System32
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
lea rcx, [0x1403f50d0]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140046e10
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.1400085b1
add rsp, 0x28
lea rcx, [0x1403f5048]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push qword [0x1403f5048]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400349f0
add rsp, 0x28
lea rcx, [0x1403f5008]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
movabs rax, str.kmsauto
push rax
push rcx
sub rsp, 0x20
call fcn.140046e10
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push qword [0x1403f5008]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043bd0
add rsp, 0x20
push rax
call fcn.140047040
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043c60
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140023f48
add rsp, 0x28
pop rax
mov r15, rax
and r15, r15
jne 0x14000178d
push qword [0x1403f5008]
movabs rcx, 0x1400cd028
pop rdx
call fcn.140046fb0
or rax, rax
jne 0x14000178d
mov rax, 1
jmp 0x140001790
xor rax, rax
and rax, rax
je 0x14000179a
jmp 0x140002212
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
movabs rax, str.kmsauto
push rax
push rcx
sub rsp, 0x20
call fcn.140046e10
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push qword [0x1403f5008]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043bd0
add rsp, 0x20
push rax
call fcn.140047040
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043c60
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140023f48
add rsp, 0x28
pop rax
mov r15, rax
and r15, r15
jle 0x140001844
push qword [0x1403f5048]
pop rcx
call fcn.140034874
mov r15, rax
cmp r15, 0x1312d00
jge 0x140001844
mov rax, 1
jmp 0x140001847
xor rax, rax
and rax, rax
je 0x140001851
jmp 0x140002212
push reloc.WS2_32.dll_ioctlsocket
movabs rax, str.Consolas
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.140045b7c
push 0x100
push 1
pop rcx
pop rdx
call fcn.140023f1c
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140046e10
add rsp, 0x20
pop rcx
push rax
movabs rax, 0x1400cd2ee
push rax
movabs rax, 0x1400cd418
push rax
movabs rax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftOfficeClickToRun
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14001bf8e
add rsp, 0x28
lea rcx, [0x1403f50b8]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1403f50b8]
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
movabs rcx, str.Office16ospp.vbs
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
push rax
call fcn.140047040
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140034874
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140023f48
add rsp, 0x28
pop rax
mov r15, rax
and r15, r15
jle 0x14000197d
movabs rdx, 0x1400cd46c
lea rcx, [0x1403f5028]
call fcn.140046d20
jmp 0x140001a8b
movabs rdx, 0x1400cd028
lea rcx, [0x1403f50b8]
call fcn.140046d20
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140046e10
add rsp, 0x20
pop rcx
push rax
movabs rax, 0x1400cd2ee
push rax
movabs rax, 0x1400cd418
push rax
movabs rax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftOffice15.0ClickToRun
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14001bf8e
add rsp, 0x28
lea rcx, [0x1403f50b8]
pop rdx
call fcn.140046ed0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1403f50b8]
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
movabs rcx, str._rootLicensesc2rpridslicensefiles_auto.xml
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
push rax
call fcn.140047040
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140034874
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140023f48
add rsp, 0x28
pop rax
mov r15, rax
and r15, r15
jle 0x140001a8b
movabs rdx, 0x1400cd466
lea rcx, [0x1403f5028]
call fcn.140046d20
mov qword [0x1403f4fe0], 0
mov qword [0x1403f5010], 0
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140046e10
add rsp, 0x20
pop rcx
push rax
movabs rax, 0x1400cd2ee
push rax
movabs rax, str.AppsUseLightTheme
push rax
movabs rax, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionThemesPersonalize
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14001bf8e
add rsp, 0x28
lea rcx, [0x1403f50b0]
pop rdx
call fcn.140046ed0
push qword [0x1403f50b0]
movabs rcx, 0x1400cd328
pop rdx
call fcn.140046fb0
or rax, rax
je 0x140001b31
mov qword [0x1403f4fe0], 1
mov qword [0x1403f5010], 1
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
call fcn.14003a320
mov qword [0x1403f50c8], rax
push 0xff
push 0xff
push 0xff
pop rcx
pop rdx
pop r8
call fcn.14003a320
mov qword [0x1403f5058], rax
push MsiGetActiveDatabase
push MsiGetActiveDatabase
push MsiGetActiveDatabase
pop rcx
pop rdx
pop r8
call fcn.14003a320
mov qword [0x1403f4ff8], rax
mov qword [0x1403f50a8], 0
push 0x808080
push 1
push 0
pop rcx
pop rdx
pop r8
call sub.GDI32.dll_CreatePen
mov qword [0x1403f5040], rax
push 0xcc872c
push 1
push 0
pop rcx
pop rdx
pop r8
call sub.GDI32.dll_CreatePen
mov qword [0x1403f5098], rax
mov r9, 7
xor r8, r8
lea rdx, [0x1403f5680]
mov rcx, 0x3b
call fcn.14003bb28
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [0x1403f5750]
xor r8, r8
mov rdx, 7
mov rcx, 0x59
sub rsp, 0x20
call fcn.140037a14
add rsp, 0x28
add rsp, 8
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [0x1403f5758]
xor r8, r8
mov rdx, SafeArrayPutElement
mov rcx, 8
sub rsp, 0x20
call fcn.140037a14
add rsp, 0x28
add rsp, 8
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [0x1403f5760]
xor r8, r8
mov rdx, SafeArrayPutElement
mov rcx, 8
sub rsp, 0x20
call fcn.140037a14
add rsp, 0x28
add rsp, 8
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [0x1403f5768]
xor r8, r8
mov rdx, SafeArrayPutElement
mov rcx, 8
sub rsp, 0x20
call fcn.140037a14
add rsp, 0x28
add rsp, 8
mov qword [0x1403f5650], 2
mov qword [0x1403f5658], 1
sub rsp, 0x18
movabs rax, 0x1403f5648
push rax
xor r9, r9
mov r8, SafeArrayPutElement
mov rdx, 8
mov rcx, 2
sub rsp, 0x20
call fcn.140039e00
add rsp, 0x40
mov qword [0x1403f5648], rax
mov r9, SafeArrayPutElement
xor r8, r8
lea rdx, [0x1403f5690]
mov rcx, 8
call fcn.14003bb28
push 0x1d6
push 0x318
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000228d
push 1
push 2
pop rcx
pop rdx
call fcn.14002bac8
push qword [0x1403f5028]
movabs rcx, 0x1400cd46c
pop rdx
call fcn.140046fb0
or rax, rax
je 0x140001db6
push 1
push 7
pop rcx
pop rdx
call fcn.14002bb00
push 0
push 8
pop rcx
pop rdx
call fcn.14002bb54
push 1
push 0
pop rcx
pop rdx
call fcn.14002bb54
jmp 0x140001de9
push 1
push 6
pop rcx
pop rdx
call fcn.14002bb00
push 1
push 8
pop rcx
pop rdx
call fcn.14002bb54
push 0
push 0
pop rcx
pop rdx
call fcn.14002bb54
push 0
push qword [0x1403f5038]
push 0xffffffffffffffff
push 8
pop rcx
pop rdx
pop r8
pop r9
call fcn.14002bbac
push 0
push qword [0x1403f5038]
push 0xffffffffffffffff
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14002bbac
push 1
pop rcx
call fcn.14002bc30
push 0
push qword [0x1403f5050]
push 0xffffffffffffffff
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14002bbac
push 0
push qword [0x1403f50e8]
push 0xffffffffffffffff
push 8
pop rcx
pop rdx
pop r8
pop r9
call fcn.14002bbac
call fcn.1400329fc
mov r15, rax
cmp r15, 0x6e
jl 0x140001e97
mov r15, qword [0x1403f5010]
and r15, r15
jle 0x140001e97
mov rax, 1
jmp 0x140001e9a
xor rax, rax
and rax, rax
je 0x140001f49
call fcn.14001269c
movabs rax, 0x1400d0a7a
push rax
push 0
pop rcx
pop rdx
call fcn.140029780
and rax, rax
je 0x140001f49
movabs rax, str.DwmSetWindowAttribute
push rax
push 0
pop rcx
pop rdx
call fcn.140029808
mov qword [0x1403f5030], rax
mov rax, 8
mov rax, rax
push rax
lea rax, [0x1403f5010]
mov rax, rax
push rax
mov rax, SafeArrayPutElement
mov rax, rax
push rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140032e54
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call qword [0x1403f5030]
push 0
pop rcx
call fcn.14002966c
call fcn.14000e203
push 0
pop rcx
call fcn.14002966c
push 0
push 0
pop rcx
pop rdx
call fcn.140032e74
call fcn.140032f7c
and rax, rax
je 0x140001f66
jmp 0x140001f5a
call fcn.140032f7c
and rax, rax
je 0x140001f72
jmp 0x140001f66
push 0
pop rcx
call fcn.14001554d
call fcn.140032f7c
mov qword [0x1403f5080], rax
cmp qword [0x1403f5080], 0
je 0x140002053
push qword [0x1403f5080]
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x140001ffe
sub rsp, 8
sub rsp, 0x20
call fcn.140037084
add rsp, 0x28
mov rax, rax
push rax
xor r15, r15
cmp r15, qword [rsp]
jne 0x140001fdd
push 0
pop rcx
sub rsp, 0x20
call fcn.140006854
add rsp, 0x20
jmp 0x140001ffd
mov r15, 8
cmp r15, qword [rsp]
jne 0x140001ffd
push 8
pop rcx
sub rsp, 0x20
call fcn.140006854
add rsp, 0x20
pop rax
add rsp, 8
call fcn.1400370a0
mov rax, rax
push rax
xor r15, r15
cmp r15, qword [rsp]
jne 0x14000202e
sub rsp, 8
push qword [0x1403f5080]
pop rcx
sub rsp, 0x20
call fcn.14001965d
add rsp, 0x28
jmp 0x140002050
mov qword [0x1403f5080], 0
sub rsp, 8
push 5
pop rcx
sub rsp, 0x20
call fcn.140032bf8
add rsp, 0x28
pop rax
jmp 0x14000205e
push 5
pop rcx
call fcn.140032bf8
mov r15, qword [0x1403f5080]
cmp r15, 0x333c
jne 0x140001f7d
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push 3
movabs rax, 0x1400cd028
push rax
mov rcx, qword [0x1403f50c0]
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
movabs rcx, str.o16files
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
push rax
call fcn.140047040
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140034afc
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140023f48
add rsp, 0x28
pop rax
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push 3
movabs rax, 0x1400cd028
push rax
mov rcx, qword [0x1403f50c0]
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
movabs rcx, str.o15files
sub rsp, 0x28
call fcn.140046e60
add rsp, 0x28
push rax
call fcn.140047040
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140034afc
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140023f48
add rsp, 0x28
pop rax
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [0x1403f50c0]
push rcx
sub rsp, 0x20
call fcn.140046e10
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140046e10
add rsp, 0x28
pop rcx
push rax
pop rcx
sub rsp, 0x20
call fcn.140026764
add rsp, 0x20
push rax
call fcn.140047040
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140043c60
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140023f48
add rsp, 0x28
pop rax
mov r15, rax
and r15, r15
jle 0x140002210
call fcn.140019d6b
jmp 0x140002212
call 0x140002234
call fcn.140046cf0
mov rcx, qword [0x1403f4fc0]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x1403f4fd0]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140024c34
call fcn.140027334
call fcn.1400285bc
call fcn.1400296c0
call fcn.14002b990
call fcn.140032d5c
call fcn.140034e38
call fcn.140035730
call fcn.140036e98
call fcn.14003835c
call fcn.14003af50
call fcn.14003ca84
call fcn.140040b40
call fcn.140045d08
call fcn.140045d88
call fcn.140045500
add rsp, 0x28
ret