Function at 0x140001000
Capabilities:
Get common file path
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x10920
call fcn.140023e10
sub rsp, rax
mov ecx, dword [0x14005db58]
call fcn.1400128e0
test eax, eax
jne 0x140001039
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov word [rsp + 0x50], ax
lea rax, [rsp + 0x52]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov r8d, 0x104
lea rdx, [rsp + 0x50]
xor ecx, ecx
call qword [0x140063798]
test eax, eax
jne 0x140001070
xor ecx, ecx
call qword [0x1400637a0]
call qword [0x140063738]
mov qword [rsp + 0x40], rax
cmp dword [0x14005da74], 1
jne 0x1400017c5
call fcn.1400168b0
test eax, eax
jne 0x14000109e
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea rcx, [rsp + 0x4c8]
call fcn.140002400
lea rcx, [rsp + 0x4c8]
call fcn.1400154f0
test eax, eax
jne 0x1400010c9
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [0x1400637c0]
lea rcx, [0x1400334c0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4b0], rax
cmp qword [rsp + 0x4b0], 0
je 0x14000128f
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x4f8], rax
cmp qword [rsp + 0x4f8], 0
je 0x14000128f
mov r8d, 0x104
mov rdx, qword [rsp + 0x4f8]
mov rcx, qword [rsp + 0x4b0]
call qword [0x140063798]
test eax, eax
je 0x140001281
lea rax, [0x1400334d8]
mov qword [rsp + 0x500], rax
lea rax, [0x1400334f0]
mov qword [rsp + 0x508], rax
lea rax, [0x140033510]
mov qword [rsp + 0x510], rax
lea rax, [0x140033530]
mov qword [rsp + 0x518], rax
lea rax, [0x140033548]
mov qword [rsp + 0x520], rax
lea rax, [0x140033560]
mov qword [rsp + 0x528], rax
lea rax, [0x140033580]
mov qword [rsp + 0x530], rax
lea rax, [0x1400335a0]
mov qword [rsp + 0x538], rax
lea rax, [0x1400335c0]
mov qword [rsp + 0x540], rax
lea rax, [0x1400335e0]
mov qword [rsp + 0x548], rax
lea rax, [0x1400335f8]
mov qword [rsp + 0x550], rax
lea rax, [0x140033610]
mov qword [rsp + 0x558], rax
lea rax, [0x140033628]
mov qword [rsp + 0x560], rax
lea rax, [0x140033648]
mov qword [rsp + 0x568], rax
mov dword [rsp + 0x570], 0
jmp 0x140001227
mov eax, dword [rsp + 0x570]
inc eax
mov dword [rsp + 0x570], eax
cmp dword [rsp + 0x570], 0xe
jge 0x140001281
movsxd rax, dword [rsp + 0x570]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x580]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005db60]
mov rcx, qword [rsp + rax*8 + 0x500]
call fcn.1400123b0
lea rdx, [rsp + 0x580]
mov rcx, qword [rsp + 0x4f8]
call fcn.140015210
jmp 0x140001217
mov rcx, qword [rsp + 0x4f8]
call qword [0x140063780]
lea rcx, [0x140033668]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4c0], rax
cmp qword [rsp + 0x4c0], 0
je 0x140001437
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x5f0], rax
cmp qword [rsp + 0x5f0], 0
je 0x140001437
mov r8d, 0x104
mov rdx, qword [rsp + 0x5f0]
mov rcx, qword [rsp + 0x4c0]
call qword [0x140063798]
test eax, eax
je 0x140001429
lea rax, [0x140033688]
mov qword [rsp + 0x600], rax
lea rax, [0x1400336a0]
mov qword [rsp + 0x608], rax
lea rax, [0x1400336b8]
mov qword [rsp + 0x610], rax
lea rax, [0x1400336d0]
mov qword [rsp + 0x618], rax
lea rax, [0x1400336e8]
mov qword [rsp + 0x620], rax
lea rax, [0x140033700]
mov qword [rsp + 0x628], rax
lea rax, [0x140033718]
mov qword [rsp + 0x630], rax
lea rax, [0x140033738]
mov qword [rsp + 0x638], rax
lea rax, [0x140033758]
mov qword [rsp + 0x640], rax
lea rax, [0x140033778]
mov qword [rsp + 0x648], rax
lea rax, [0x140033798]
mov qword [rsp + 0x650], rax
lea rax, [0x1400337b0]
mov qword [rsp + 0x658], rax
mov dword [rsp + 0x660], 0
jmp 0x1400013cf
mov eax, dword [rsp + 0x660]
inc eax
mov dword [rsp + 0x660], eax
cmp dword [rsp + 0x660], 0xc
jge 0x140001429
movsxd rax, dword [rsp + 0x660]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x670]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005db60]
mov rcx, qword [rsp + rax*8 + 0x600]
call fcn.1400123b0
lea rdx, [rsp + 0x670]
mov rcx, qword [rsp + 0x5f0]
call fcn.140015210
jmp 0x1400013bf
mov rcx, qword [rsp + 0x5f0]
call qword [0x140063780]
lea rcx, [0x1400337c8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4e8], rax
cmp qword [rsp + 0x4e8], 0
je 0x14000153a
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x6e0], rax
cmp qword [rsp + 0x6e0], 0
je 0x14000153a
mov r8d, 0x104
mov rdx, qword [rsp + 0x6e0]
mov rcx, qword [rsp + 0x4e8]
call qword [0x140063798]
test eax, eax
je 0x14000152c
lea rax, [0x1400337e0]
mov qword [rsp + 0x6e8], rax
mov dword [rsp + 0x6f0], 0
jmp 0x1400014d2
mov eax, dword [rsp + 0x6f0]
inc eax
mov dword [rsp + 0x6f0], eax
cmp dword [rsp + 0x6f0], 1
jge 0x14000152c
movsxd rax, dword [rsp + 0x6f0]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x700]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005db60]
mov rcx, qword [rsp + rax*8 + 0x6e8]
call fcn.1400123b0
lea rdx, [rsp + 0x700]
mov rcx, qword [rsp + 0x6e0]
call fcn.140015210
jmp 0x1400014c2
mov rcx, qword [rsp + 0x6e0]
call qword [0x140063780]
lea rcx, [0x140033800]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4f0], rax
cmp qword [rsp + 0x4f0], 0
je 0x14000166a
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x770], rax
cmp qword [rsp + 0x770], 0
je 0x14000166a
mov r8d, 0x104
mov rdx, qword [rsp + 0x770]
mov rcx, qword [rsp + 0x4f0]
call qword [0x140063798]
test eax, eax
je 0x14000165c
lea rax, [0x140033818]
mov qword [rsp + 0x778], rax
lea rax, [0x140033838]
mov qword [rsp + 0x780], rax
lea rax, [0x140033858]
mov qword [rsp + 0x788], rax
lea rax, [0x140033878]
mov qword [rsp + 0x790], rax
mov dword [rsp + 0x798], 0
jmp 0x140001602
mov eax, dword [rsp + 0x798]
inc eax
mov dword [rsp + 0x798], eax
cmp dword [rsp + 0x798], 4
jge 0x14000165c
movsxd rax, dword [rsp + 0x798]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x7a0]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005db60]
mov rcx, qword [rsp + rax*8 + 0x778]
call fcn.1400123b0
lea rdx, [rsp + 0x7a0]
mov rcx, qword [rsp + 0x770]
call fcn.140015210
jmp 0x1400015f2
mov rcx, qword [rsp + 0x770]
call qword [0x140063780]
lea rcx, str.WIN32U.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4b8], rax
cmp qword [rsp + 0x4b8], 0
je 0x14000179a
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x810], rax
cmp qword [rsp + 0x810], 0
je 0x14000179a
mov r8d, 0x104
mov rdx, qword [rsp + 0x810]
mov rcx, qword [rsp + 0x4b8]
call qword [0x140063798]
test eax, eax
je 0x14000178c
lea rax, [0x1400338a8]
mov qword [rsp + 0x818], rax
lea rax, [0x1400338c8]
mov qword [rsp + 0x820], rax
lea rax, [0x1400338f0]
mov qword [rsp + 0x828], rax
lea rax, [0x140033918]
mov qword [rsp + 0x830], rax
mov dword [rsp + 0x838], 0
jmp 0x140001732
mov eax, dword [rsp + 0x838]
inc eax
mov dword [rsp + 0x838], eax
cmp dword [rsp + 0x838], 4
jge 0x14000178c
movsxd rax, dword [rsp + 0x838]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x840]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x14005db60]
mov rcx, qword [rsp + rax*8 + 0x818]
call fcn.1400123b0
lea rdx, [rsp + 0x840]
mov rcx, qword [rsp + 0x810]
call fcn.140015210
jmp 0x140001722
mov rcx, qword [rsp + 0x810]
call qword [0x140063780]
lea rcx, [rsp + 0x4c8]
call fcn.140015890
test eax, eax
jne 0x1400017b8
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [0x1400637c0]
lea rcx, [rsp + 0x4c8]
call fcn.140002440
mov dword [rsp + 0x410], 0x18
mov qword [rsp + 0x418], 0
mov dword [rsp + 0x420], 1
lea r8, str.08B0AB36_5B44_4FDB_A247_B6C7E2D33D9E
xor edx, edx
lea rcx, [rsp + 0x410]
call qword [0x140063740]
mov qword [0x140063470], rax
cmp qword [0x140063470], 0
jne 0x140001817
xor ecx, ecx
call qword [0x1400637a0]
cmp dword [0x14005f134], 1
jne 0x140001825
call fcn.14000aca0
call fcn.140004300
cmp eax, 1
jne 0x1400018c4
lea r8, str.6815CDB6_ECE0_4894_A5F5_5747C7CD6DDC
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
mov qword [0x140063468], rax
cmp qword [0x140063468], 0
jne 0x140001860
xor ecx, ecx
call qword [0x140063800]
mov qword [rsp + 0x8b0], 0
lea r8, str.6FB1B221_3B74_4B4B_A27F_21E420E39609
xor edx, edx
mov ecx, 0x100002
call qword [0x1400637f0]
mov qword [rsp + 0x8b0], rax
cmp qword [rsp + 0x8b0], 0
jne 0x14000189b
xor ecx, ecx
call qword [0x140063800]
mov rcx, qword [rsp + 0x8b0]
call qword [0x1400637f8]
mov rcx, qword [rsp + 0x8b0]
call qword [0x140063758]
call fcn.140019280
xor ecx, ecx
call qword [0x140063800]
call fcn.140009f80
test eax, eax
jne 0x1400018d5
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov qword [rsp + 0x478], 0
lea r8, str.System
xor edx, edx
mov ecx, 0x100000
call qword [0x140063728]
mov qword [rsp + 0x478], rax
cmp qword [rsp + 0x478], 0
je 0x14000191e
mov rcx, qword [rsp + 0x478]
call qword [0x140063758]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, str.System
mov edx, 1
xor ecx, ecx
call qword [0x140063740]
test rax, rax
jne 0x14000193f
xor ecx, ecx
call qword [0x1400637a0]
cmp dword [0x14005f13c], 1
jne 0x14000197b
cmp dword [0x1400634f0], 0
jne 0x14000197b
call fcn.1400197b0
test eax, eax
jne 0x14000197b
call fcn.14001a010
cmp eax, 0xa
jb 0x14000197b
lea rcx, [rsp + 0x50]
call fcn.140004690
cmp eax, 1
jne 0x14000197b
xor ecx, ecx
call qword [0x1400637a0]
cmp dword [0x14005db70], 1
jne 0x1400019e1
cmp dword [0x1400634f4], 0
jne 0x1400019e1
call fcn.14001a010
cmp eax, 0xa
jb 0x1400019e1
call fcn.1400197b0
cmp eax, 1
jne 0x1400019e1
lea rdx, [0x14005db78]
mov ecx, dword [0x14005db74]
call fcn.14000e050
mov qword [rsp + 0x8b8], rax
cmp qword [rsp + 0x8b8], 0
je 0x1400019e1
mov rcx, qword [rsp + 0x8b8]
call fcn.14000e570
mov rcx, qword [rsp + 0x8b8]
call qword [0x140063780]
lea r8, str.17322235_6698_4351_86FF_6AF43FEEF77A
mov edx, 1
xor ecx, ecx
call qword [0x140063740]
mov qword [rsp + 0x438], rax
cmp qword [rsp + 0x438], 0
jne 0x140001a13
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [0x140063828]
cmp eax, 0xb7
jne 0x140001a2b
mov ecx, 0xffffffff
call qword [0x1400637a0]
lea r8, str.15CD6E95_E542_4BF6_89B2_4BFD4B336941
mov edx, 1
xor ecx, ecx
call qword [0x140063740]
mov qword [rsp + 0x428], rax
cmp qword [rsp + 0x428], 0
jne 0x140001a5a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.15CD6E95_E542_4BF6_89B2_4BFD4B336941
call fcn.140019c70
lea r9, str.6815CDB6_ECE0_4894_A5F5_5747C7CD6DDC
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [0x140063788]
mov qword [0x140063468], rax
cmp qword [0x140063468], 0
jne 0x140001a99
mov ecx, 0xffffffff
call qword [0x1400637a0]
call qword [0x140063828]
cmp eax, 0xb7
jne 0x140001aae
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.6815CDB6_ECE0_4894_A5F5_5747C7CD6DDC
call fcn.140019c70
cmp dword [0x14005d748], 1
jne 0x140001cb6
mov r8d, 0x7fff
lea rdx, [rsp + 0x8c0]
xor ecx, ecx
call qword [0x140063798]
test eax, eax
je 0x140001cae
mov dx, 0x5c
lea rcx, [rsp + 0x8c0]
call fcn.1400023d0
xor ecx, ecx
mov word [rax], cx
lea rdx, [rsp + 0x108c0]
lea rcx, [0x14005d480]
call fcn.14000ae40
mov qword [rsp + 0x108c8], rax
cmp qword [rsp + 0x108c8], 0
je 0x140001ca4
mov dx, 0x5c
mov rcx, qword [rsp + 0x108c8]
call fcn.1400023d0
xor ecx, ecx
mov word [rax], cx
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x108d0], rax
cmp qword [rsp + 0x108d0], 0
je 0x140001c94
mov rdx, qword [rsp + 0x108d0]
mov ecx, 0x7fff
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x140001c7e
mov dx, 0x5c
mov rcx, qword [rsp + 0x108d0]
call fcn.1400023d0
xor ecx, ecx
mov word [rax], cx
mov rdx, qword [rsp + 0x108c8]
lea rcx, [rsp + 0x8c0]
call qword [0x140063a30]
test eax, eax
je 0x140001c7c
mov rdx, qword [rsp + 0x108d0]
lea rcx, [rsp + 0x8c0]
call qword [0x140063a30]
test eax, eax
je 0x140001c7c
call qword [0x140063730]
mov qword [rsp + 0x108e8], rax
lea rdx, [rsp + 0x108d8]
mov rcx, qword [rsp + 0x108e8]
call qword [0x140063ec0]
mov qword [rsp + 0x108e0], rax
lea rdx, str.E6E2D37F_C573_4DBD_810B_360326B316AE
mov rax, qword [rsp + 0x108e0]
mov rcx, qword [rax + 8]
call qword [0x140063a30]
test eax, eax
je 0x140001c7c
lea rdx, str.42EBCAB3_E7C9_4D21_9D6B_DE01C4160D90
mov rax, qword [rsp + 0x108e0]
mov rcx, qword [rax + 8]
call qword [0x140063a30]
test eax, eax
je 0x140001c7c
lea rdx, str.27C7C39D_3490_4E5E_842D_57CD28D6FAAF
mov rax, qword [rsp + 0x108e0]
mov rcx, qword [rax + 8]
call qword [0x140063a30]
test eax, eax
je 0x140001c7c
mov r9d, 1
lea r8, [0x14005d74c]
lea rdx, [0x14005d816]
xor ecx, ecx
call qword [0x140063a78]
cmp eax, 2
jne 0x140001c7c
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x140001c86
xor ecx, ecx
call qword [0x1400637a0]
mov rcx, qword [rsp + 0x108d0]
call qword [0x140063780]
mov rcx, qword [rsp + 0x108c8]
call qword [0x140063780]
jmp 0x140001cac
xor ecx, ecx
call qword [0x1400637a0]
jmp 0x140001cb6
xor ecx, ecx
call qword [0x1400637a0]
lea rdx, [rsp + 0x270]
mov cx, 2
call qword [0x140064020]
test eax, eax
je 0x140001cd4
xor ecx, ecx
call qword [0x1400637a0]
call fcn.140009f60
test eax, eax
jne 0x140001ce8
mov ecx, 0xffffffff
call qword [0x1400637a0]
call fcn.14001ed10
test eax, eax
jne 0x140001cf9
xor ecx, ecx
call qword [0x1400637a0]
call fcn.140003e50
test eax, eax
jne 0x140001d0a
xor ecx, ecx
call qword [0x1400637a0]
call fcn.140004080
test eax, eax
jne 0x140001d1b
xor ecx, ecx
call qword [0x1400637a0]
call fcn.1400027e0
cmp dword [0x14005da80], 0
jne 0x140001d41
lea rcx, [0x14005d480]
call fcn.14000a520
test eax, eax
jne 0x140001d41
xor ecx, ecx
call qword [0x1400637a0]
lea rcx, [0x14005d480]
call fcn.14000af90
test eax, eax
jne 0x140001d59
xor ecx, ecx
call qword [0x1400637a0]
cmp dword [0x14005da80], 0
jne 0x140001d7d
cmp dword [0x14005f128], 1
jne 0x140001d7d
call fcn.14000cde0
cmp eax, 1
jne 0x140001d7d
xor ecx, ecx
call qword [0x1400637a0]
cmp dword [0x14005d1c8], 1
jne 0x140001d90
call fcn.140019280
jmp 0x14000239d
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x268], rax
cmp qword [rsp + 0x268], 0
jne 0x140001dbb
xor ecx, ecx
call qword [0x1400637a0]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x268]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
jne 0x140001dda
xor ecx, ecx
call qword [0x1400637a0]
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x260], rax
cmp qword [rsp + 0x260], 0
jne 0x140001e05
xor ecx, ecx
call qword [0x1400637a0]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x260]
call qword [0x140063860]
test eax, eax
jne 0x140001e24
xor ecx, ecx
call qword [0x1400637a0]
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x140001e49
xor ecx, ecx
call qword [0x1400637a0]
mov r9, qword [rsp + 0x268]
lea r8, [0x140033938]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x38]
call fcn.140023d1c
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x470], rax
cmp qword [rsp + 0x470], 0
jne 0x140001e92
xor ecx, ecx
call qword [0x1400637a0]
mov r9, qword [rsp + 0x260]
lea r8, [0x140033958]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x470]
call fcn.140023d1c
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x140063768]
mov qword [rsp + 0x440], rax
cmp qword [rsp + 0x440], 0
jne 0x140001ede
xor ecx, ecx
call qword [0x1400637a0]
mov r9, qword [rsp + 0x260]
lea r8, [0x140033978]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x440]
call fcn.140023d1c
mov dword [rsp + 0x430], 0
mov qword [rsp + 0x498], 0
lea rax, [rsp + 0x4a0]
mov rdi, rax
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov dword [rsp + 0x460], 0
lea rax, [rsp + 0x464]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov dword [rsp + 0x488], 0
lea rax, [rsp + 0x48c]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
cmp dword [0x14005d1d0], 1
jne 0x140001fbc
movsxd rax, dword [rsp + 0x430]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + rax*8 + 0x498], rcx
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x460], 0
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x488], 1
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
cmp dword [0x14005d1cc], 1
jne 0x140002013
movsxd rax, dword [rsp + 0x430]
mov rcx, qword [rsp + 0x470]
mov qword [rsp + rax*8 + 0x498], rcx
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x460], 1
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x488], 1
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
cmp dword [0x14005d1d4], 1
jne 0x14000206a
movsxd rax, dword [rsp + 0x430]
mov rcx, qword [rsp + 0x440]
mov qword [rsp + rax*8 + 0x498], rcx
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x460], 2
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x488], 1
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
mov eax, dword [rsp + 0x430]
mov dword [rsp + 0x480], eax
mov dword [rsp + 0x30], 1
cmp dword [rsp + 0x30], 0
je 0x14000239d
mov dword [rsp + 0x108f0], 0
jmp 0x1400020a8
mov eax, dword [rsp + 0x108f0]
inc eax
mov dword [rsp + 0x108f0], eax
mov eax, dword [rsp + 0x480]
cmp dword [rsp + 0x108f0], eax
jge 0x140002398
movsxd rax, dword [rsp + 0x108f0]
movsxd rcx, dword [rsp + 0x108f0]
lea r8, [rsp + 0x448]
mov edx, dword [rsp + rax*4 + 0x488]
mov rcx, qword [rsp + rcx*8 + 0x498]
call fcn.14000b180
cmp eax, 1
jne 0x140002388
cmp dword [0x14005da80], 1
jne 0x14000229e
movsxd rax, dword [rsp + 0x108f0]
cmp dword [rsp + rax*4 + 0x460], 1
jne 0x140002187
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x1400637a8]
cmp eax, 0x102
jne 0x140002187
lea r8, str.F5AFF25B_DF12_43C4_B784_52DAFB707CD2
xor edx, edx
mov ecx, 0x100000
call qword [0x140063728]
mov qword [rsp + 0x10908], rax
cmp qword [rsp + 0x10908], 0
jne 0x14000216e
mov edx, 0xa
mov rcx, qword [0x140063468]
call qword [0x1400637a8]
cmp eax, 0x102
je 0x14000216c
jmp 0x14000239d
jmp 0x140002110
cmp qword [rsp + 0x10908], 0
je 0x140002187
mov rcx, qword [rsp + 0x10908]
call qword [0x140063758]
movsxd rax, dword [rsp + 0x108f0]
cmp dword [rsp + rax*4 + 0x460], 0
jne 0x140002210
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x1400637a8]
cmp eax, 0x102
jne 0x140002210
lea r8, str.03161732_9AAA_4352_83DC_9228FDB02560
xor edx, edx
mov ecx, 0x100000
call qword [0x140063728]
mov qword [rsp + 0x10910], rax
cmp qword [rsp + 0x10910], 0
jne 0x1400021f7
mov edx, 0xa
mov rcx, qword [0x140063468]
call qword [0x1400637a8]
cmp eax, 0x102
je 0x1400021f5
jmp 0x14000239d
jmp 0x140002199
cmp qword [rsp + 0x10910], 0
je 0x140002210
mov rcx, qword [rsp + 0x10910]
call qword [0x140063758]
movsxd rax, dword [rsp + 0x108f0]
cmp dword [rsp + rax*4 + 0x460], 2
jne 0x140002299
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x1400637a8]
cmp eax, 0x102
jne 0x140002299
lea r8, str.C09A907B_CD5D_446E_BE35_4134991A5421
xor edx, edx
mov ecx, 0x100000
call qword [0x140063728]
mov qword [rsp + 0x10918], rax
cmp qword [rsp + 0x10918], 0
jne 0x140002280
mov edx, 0xa
mov rcx, qword [0x140063468]
call qword [0x1400637a8]
cmp eax, 0x102
je 0x14000227e
jmp 0x14000239d
jmp 0x140002222
cmp qword [rsp + 0x10918], 0
je 0x140002299
mov rcx, qword [rsp + 0x10918]
call qword [0x140063758]
jmp 0x14000239d
mov qword [rsp + 0x108f8], 0
lea rax, [rsp + 0x10900]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov rax, qword [0x140063468]
mov qword [rsp + 0x108f8], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x10900], rax
mov r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x108f8]
mov ecx, 2
call qword [0x140063838]
xor edx, edx
mov rcx, qword [0x140063468]
call qword [0x1400637a8]
cmp eax, 0x102
je 0x140002319
mov dword [rsp + 0x30], 0
jmp 0x140002398
cmp qword [rsp + 0x448], 0
je 0x140002334
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x1400637c0]
cmp qword [rsp + 0x448], 0
je 0x14000234d
mov rcx, qword [rsp + 0x448]
call qword [0x140063758]
cmp qword [rsp + 0x450], 0
je 0x140002366
mov rcx, qword [rsp + 0x450]
call qword [0x140063758]
mov r8d, 0x18
xor edx, edx
lea rcx, [rsp + 0x448]
call fcn.140023c30
mov ecx, 0x3e8
call qword [0x140063868]
jmp 0x140002393
mov ecx, 0x3e8
call qword [0x140063868]
jmp 0x140002098
jmp 0x140002080
call fcn.140009f70
cmp dword [0x14005d1c8], 1
jne 0x1400023bd
mov edx, 0xffffffff
mov rcx, qword [0x1400645b8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor ecx, ecx
call qword [0x1400637a0]
add rsp, 0x10920
pop rdi
ret