Function at 0x14000c960
Capabilities:
Link many functions at runtime

Disassembly:
mov dword [rsp + 8], ecx
sub rsp, 0xae8
mov rax, qword [0x1400f1290]
xor rax, rsp
mov qword [rsp + 0xad0], rax
lea rcx, str.NTDLL.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
jne 0x14000c9a4
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0xb0], 0
jmp 0x14000c9c1
mov eax, dword [rsp + 0xb0]
inc eax
mov dword [rsp + 0xb0], eax
movsxd rax, dword [rsp + 0xb0]
cmp rax, 9
jae 0x14000cabf
cmp dword [rsp + 0xaf0], 0
je 0x14000ca5a
movsxd rax, dword [rsp + 0xb0]
lea rcx, [0x1400e8050]
lea r9, [rsp + 0xc0]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0xc0]
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9b0], rax
movsxd rax, dword [rsp + 0xb0]
lea rcx, [0x1400e9550]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9b0]
mov qword [rax], rcx
cmp qword [rsp + 0x9b0], 0
jne 0x14000ca58
xor eax, eax
jmp 0x14000df90
jmp 0x14000caba
movsxd rax, dword [rsp + 0xb0]
lea rcx, [0x1400e8050]
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9b8], rax
movsxd rax, dword [rsp + 0xb0]
lea rcx, [0x1400e9550]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9b8]
mov qword [rax], rcx
cmp qword [rsp + 0x9b8], 0
jne 0x14000caba
xor eax, eax
jmp 0x14000df90
jmp 0x14000c9b1
lea rcx, str.KERNEL32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x14000cae0
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x130], 0
jmp 0x14000cafd
mov eax, dword [rsp + 0x130]
inc eax
mov dword [rsp + 0x130], eax
movsxd rax, dword [rsp + 0x130]
cmp rax, 0x6a
jae 0x14000cbf5
cmp dword [rsp + 0xaf0], 0
je 0x14000cb93
movsxd rax, dword [rsp + 0x130]
lea rcx, str.ENCMARK_OpenMutexW
lea r9, [rsp + 0x140]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x140]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9c0], rax
movsxd rax, dword [rsp + 0x130]
lea rcx, [0x1400e9200]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9c0]
mov qword [rax], rcx
cmp qword [rsp + 0x9c0], 0
jne 0x14000cb91
xor eax, eax
jmp 0x14000df90
jmp 0x14000cbf0
movsxd rax, dword [rsp + 0x130]
lea rcx, str.ENCMARK_OpenMutexW
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9c8], rax
movsxd rax, dword [rsp + 0x130]
lea rcx, [0x1400e9200]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9c8]
mov qword [rax], rcx
cmp qword [rsp + 0x9c8], 0
jne 0x14000cbf0
xor eax, eax
jmp 0x14000df90
jmp 0x14000caed
lea rcx, [0x1400db0a0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x14000cc16
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x1b0], 0
jmp 0x14000cc33
mov eax, dword [rsp + 0x1b0]
inc eax
mov dword [rsp + 0x1b0], eax
movsxd rax, dword [rsp + 0x1b0]
cmp rax, 0x48
jae 0x14000cd2b
cmp dword [rsp + 0xaf0], 0
je 0x14000ccc9
movsxd rax, dword [rsp + 0x1b0]
lea rcx, str.ENCMARK_MessageBoxW
lea r9, [rsp + 0x1c0]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x1c0]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9d0], rax
movsxd rax, dword [rsp + 0x1b0]
lea rcx, [0x1400e8fc0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9d0]
mov qword [rax], rcx
cmp qword [rsp + 0x9d0], 0
jne 0x14000ccc7
xor eax, eax
jmp 0x14000df90
jmp 0x14000cd26
movsxd rax, dword [rsp + 0x1b0]
lea rcx, str.ENCMARK_MessageBoxW
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9d8], rax
movsxd rax, dword [rsp + 0x1b0]
lea rcx, [0x1400e8fc0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9d8]
mov qword [rax], rcx
cmp qword [rsp + 0x9d8], 0
jne 0x14000cd26
xor eax, eax
jmp 0x14000df90
jmp 0x14000cc23
lea rcx, str.GDI32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x20], 0
jne 0x14000cd4c
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x230], 0
jmp 0x14000cd69
mov eax, dword [rsp + 0x230]
inc eax
mov dword [rsp + 0x230], eax
movsxd rax, dword [rsp + 0x230]
cmp rax, 6
jae 0x14000ce61
cmp dword [rsp + 0xaf0], 0
je 0x14000cdff
movsxd rax, dword [rsp + 0x230]
lea rcx, str.ENCMARK_DeleteDC
lea r9, [rsp + 0x240]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x240]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9e0], rax
movsxd rax, dword [rsp + 0x230]
lea rcx, [0x1400e8f88]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9e0]
mov qword [rax], rcx
cmp qword [rsp + 0x9e0], 0
jne 0x14000cdfd
xor eax, eax
jmp 0x14000df90
jmp 0x14000ce5c
movsxd rax, dword [rsp + 0x230]
lea rcx, str.ENCMARK_DeleteDC
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9e8], rax
movsxd rax, dword [rsp + 0x230]
lea rcx, [0x1400e8f88]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9e8]
mov qword [rax], rcx
cmp qword [rsp + 0x9e8], 0
jne 0x14000ce5c
xor eax, eax
jmp 0x14000df90
jmp 0x14000cd59
lea rcx, [0x1400db0d0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
jne 0x14000ce88
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x2b0], 0
jmp 0x14000cea5
mov eax, dword [rsp + 0x2b0]
inc eax
mov dword [rsp + 0x2b0], eax
movsxd rax, dword [rsp + 0x2b0]
cmp rax, 0x33
jae 0x14000cfa3
cmp dword [rsp + 0xaf0], 0
je 0x14000cf3e
movsxd rax, dword [rsp + 0x2b0]
lea rcx, str.ENCMARK_RegCreateKeyExW
lea r9, [rsp + 0x2c0]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x2c0]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9f0], rax
movsxd rax, dword [rsp + 0x2b0]
lea rcx, [0x1400e8df0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9f0]
mov qword [rax], rcx
cmp qword [rsp + 0x9f0], 0
jne 0x14000cf3c
xor eax, eax
jmp 0x14000df90
jmp 0x14000cf9e
movsxd rax, dword [rsp + 0x2b0]
lea rcx, str.ENCMARK_RegCreateKeyExW
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x9f8], rax
movsxd rax, dword [rsp + 0x2b0]
lea rcx, [0x1400e8df0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0x9f8]
mov qword [rax], rcx
cmp qword [rsp + 0x9f8], 0
jne 0x14000cf9e
xor eax, eax
jmp 0x14000df90
jmp 0x14000ce95
lea rcx, str.SHLWAPI.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x14000cfc4
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x330], 0
jmp 0x14000cfe1
mov eax, dword [rsp + 0x330]
inc eax
mov dword [rsp + 0x330], eax
movsxd rax, dword [rsp + 0x330]
cmp rax, 6
jae 0x14000d0d9
cmp dword [rsp + 0xaf0], 0
je 0x14000d077
movsxd rax, dword [rsp + 0x330]
lea rcx, str.ENCMARK_StrCmpIW
lea r9, [rsp + 0x340]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x340]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa00], rax
movsxd rax, dword [rsp + 0x330]
lea rcx, [0x1400e8dc0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa00]
mov qword [rax], rcx
cmp qword [rsp + 0xa00], 0
jne 0x14000d075
xor eax, eax
jmp 0x14000df90
jmp 0x14000d0d4
movsxd rax, dword [rsp + 0x330]
lea rcx, str.ENCMARK_StrCmpIW
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa08], rax
movsxd rax, dword [rsp + 0x330]
lea rcx, [0x1400e8dc0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa08]
mov qword [rax], rcx
cmp qword [rsp + 0xa08], 0
jne 0x14000d0d4
xor eax, eax
jmp 0x14000df90
jmp 0x14000cfd1
lea rcx, str.SHELL32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
jne 0x14000d0fa
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x3b0], 0
jmp 0x14000d117
mov eax, dword [rsp + 0x3b0]
inc eax
mov dword [rsp + 0x3b0], eax
movsxd rax, dword [rsp + 0x3b0]
cmp rax, 7
jae 0x14000d20f
cmp dword [rsp + 0xaf0], 0
je 0x14000d1ad
movsxd rax, dword [rsp + 0x3b0]
lea rcx, str.ENCMARK_SHGetKnownFolderPath
lea r9, [rsp + 0x3c0]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x3c0]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa10], rax
movsxd rax, dword [rsp + 0x3b0]
lea rcx, [0x1400e8d88]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa10]
mov qword [rax], rcx
cmp qword [rsp + 0xa10], 0
jne 0x14000d1ab
xor eax, eax
jmp 0x14000df90
jmp 0x14000d20a
movsxd rax, dword [rsp + 0x3b0]
lea rcx, str.ENCMARK_SHGetKnownFolderPath
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa18], rax
movsxd rax, dword [rsp + 0x3b0]
lea rcx, [0x1400e8d88]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa18]
mov qword [rax], rcx
cmp qword [rsp + 0xa18], 0
jne 0x14000d20a
xor eax, eax
jmp 0x14000df90
jmp 0x14000d107
lea rcx, str.OLE32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x80], rax
cmp qword [rsp + 0x80], 0
jne 0x14000d236
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x430], 0
jmp 0x14000d253
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
movsxd rax, dword [rsp + 0x430]
cmp rax, 9
jae 0x14000d351
cmp dword [rsp + 0xaf0], 0
je 0x14000d2ec
movsxd rax, dword [rsp + 0x430]
lea rcx, str.ENCMARK_CoTaskMemFree
lea r9, [rsp + 0x440]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x440]
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa20], rax
movsxd rax, dword [rsp + 0x430]
lea rcx, [0x1400e8d40]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa20]
mov qword [rax], rcx
cmp qword [rsp + 0xa20], 0
jne 0x14000d2ea
xor eax, eax
jmp 0x14000df90
jmp 0x14000d34c
movsxd rax, dword [rsp + 0x430]
lea rcx, str.ENCMARK_CoTaskMemFree
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa28], rax
movsxd rax, dword [rsp + 0x430]
lea rcx, [0x1400e8d40]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa28]
mov qword [rax], rcx
cmp qword [rsp + 0xa28], 0
jne 0x14000d34c
xor eax, eax
jmp 0x14000df90
jmp 0x14000d243
lea rcx, str.WINHTTP.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x14000d378
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x4b0], 0
jmp 0x14000d395
mov eax, dword [rsp + 0x4b0]
inc eax
mov dword [rsp + 0x4b0], eax
movsxd rax, dword [rsp + 0x4b0]
cmp rax, 0x10
jae 0x14000d493
cmp dword [rsp + 0xaf0], 0
je 0x14000d42e
movsxd rax, dword [rsp + 0x4b0]
lea rcx, str.ENCMARK_WinHttpCheckPlatform
lea r9, [rsp + 0x4c0]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x4c0]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa30], rax
movsxd rax, dword [rsp + 0x4b0]
lea rcx, [0x1400e8cc0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa30]
mov qword [rax], rcx
cmp qword [rsp + 0xa30], 0
jne 0x14000d42c
xor eax, eax
jmp 0x14000df90
jmp 0x14000d48e
movsxd rax, dword [rsp + 0x4b0]
lea rcx, str.ENCMARK_WinHttpCheckPlatform
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa38], rax
movsxd rax, dword [rsp + 0x4b0]
lea rcx, [0x1400e8cc0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa38]
mov qword [rax], rcx
cmp qword [rsp + 0xa38], 0
jne 0x14000d48e
xor eax, eax
jmp 0x14000df90
jmp 0x14000d385
lea rcx, str.WTSAPI32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
jne 0x14000d4b4
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x530], 0
jmp 0x14000d4d1
mov eax, dword [rsp + 0x530]
inc eax
mov dword [rsp + 0x530], eax
movsxd rax, dword [rsp + 0x530]
cmp rax, 1
jae 0x14000d5c9
cmp dword [rsp + 0xaf0], 0
je 0x14000d567
movsxd rax, dword [rsp + 0x530]
lea rcx, str.ENCMARK_WTSQueryUserToken
lea r9, [rsp + 0x540]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x540]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa40], rax
movsxd rax, dword [rsp + 0x530]
lea rcx, [0x1400e8cb0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa40]
mov qword [rax], rcx
cmp qword [rsp + 0xa40], 0
jne 0x14000d565
xor eax, eax
jmp 0x14000df90
jmp 0x14000d5c4
movsxd rax, dword [rsp + 0x530]
lea rcx, str.ENCMARK_WTSQueryUserToken
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa48], rax
movsxd rax, dword [rsp + 0x530]
lea rcx, [0x1400e8cb0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa48]
mov qword [rax], rcx
cmp qword [rsp + 0xa48], 0
jne 0x14000d5c4
xor eax, eax
jmp 0x14000df90
jmp 0x14000d4c1
lea rcx, str.WS2_32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0xa8], rax
cmp qword [rsp + 0xa8], 0
jne 0x14000d5f0
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x5b0], 0
jmp 0x14000d60d
mov eax, dword [rsp + 0x5b0]
inc eax
mov dword [rsp + 0x5b0], eax
movsxd rax, dword [rsp + 0x5b0]
cmp rax, 0x14
jae 0x14000d70b
cmp dword [rsp + 0xaf0], 0
je 0x14000d6a6
movsxd rax, dword [rsp + 0x5b0]
lea rcx, str.ENCMARK_setsockopt
lea r9, [rsp + 0x5c0]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x5c0]
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa50], rax
movsxd rax, dword [rsp + 0x5b0]
lea rcx, [0x1400e8c10]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa50]
mov qword [rax], rcx
cmp qword [rsp + 0xa50], 0
jne 0x14000d6a4
xor eax, eax
jmp 0x14000df90
jmp 0x14000d706
movsxd rax, dword [rsp + 0x5b0]
lea rcx, str.ENCMARK_setsockopt
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa58], rax
movsxd rax, dword [rsp + 0x5b0]
lea rcx, [0x1400e8c10]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa58]
mov qword [rax], rcx
cmp qword [rsp + 0xa58], 0
jne 0x14000d706
xor eax, eax
jmp 0x14000df90
jmp 0x14000d5fd
lea rcx, str.GDIPLUS.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
jne 0x14000d72c
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x630], 0
jmp 0x14000d749
mov eax, dword [rsp + 0x630]
inc eax
mov dword [rsp + 0x630], eax
movsxd rax, dword [rsp + 0x630]
cmp rax, 0xe
jae 0x14000d841
cmp dword [rsp + 0xaf0], 0
je 0x14000d7df
movsxd rax, dword [rsp + 0x630]
lea rcx, str.ENCMARK_GdiplusStartup
lea r9, [rsp + 0x640]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x640]
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa60], rax
movsxd rax, dword [rsp + 0x630]
lea rcx, [0x1400e8ba0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa60]
mov qword [rax], rcx
cmp qword [rsp + 0xa60], 0
jne 0x14000d7dd
xor eax, eax
jmp 0x14000df90
jmp 0x14000d83c
movsxd rax, dword [rsp + 0x630]
lea rcx, str.ENCMARK_GdiplusStartup
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa68], rax
movsxd rax, dword [rsp + 0x630]
lea rcx, [0x1400e8ba0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa68]
mov qword [rax], rcx
cmp qword [rsp + 0xa68], 0
jne 0x14000d83c
xor eax, eax
jmp 0x14000df90
jmp 0x14000d739
lea rcx, str.MSI.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0xa0], rax
cmp qword [rsp + 0xa0], 0
jne 0x14000d868
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x6b0], 0
jmp 0x14000d885
mov eax, dword [rsp + 0x6b0]
inc eax
mov dword [rsp + 0x6b0], eax
movsxd rax, dword [rsp + 0x6b0]
cmp rax, 3
jae 0x14000d983
cmp dword [rsp + 0xaf0], 0
je 0x14000d91e
movsxd rax, dword [rsp + 0x6b0]
lea rcx, str.ENCMARK_MsiGetProductInfoW
lea r9, [rsp + 0x6c0]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x6c0]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa70], rax
movsxd rax, dword [rsp + 0x6b0]
lea rcx, [0x1400e8b80]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa70]
mov qword [rax], rcx
cmp qword [rsp + 0xa70], 0
jne 0x14000d91c
xor eax, eax
jmp 0x14000df90
jmp 0x14000d97e
movsxd rax, dword [rsp + 0x6b0]
lea rcx, str.ENCMARK_MsiGetProductInfoW
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa78], rax
movsxd rax, dword [rsp + 0x6b0]
lea rcx, [0x1400e8b80]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa78]
mov qword [rax], rcx
cmp qword [rsp + 0xa78], 0
jne 0x14000d97e
xor eax, eax
jmp 0x14000df90
jmp 0x14000d875
lea rcx, str.WINMM.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
jne 0x14000d9a4
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x730], 0
jmp 0x14000d9c1
mov eax, dword [rsp + 0x730]
inc eax
mov dword [rsp + 0x730], eax
movsxd rax, dword [rsp + 0x730]
cmp rax, 0xa
jae 0x14000dab9
cmp dword [rsp + 0xaf0], 0
je 0x14000da57
movsxd rax, dword [rsp + 0x730]
lea rcx, str.ENCMARK_waveInOpen
lea r9, [rsp + 0x740]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x740]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa80], rax
movsxd rax, dword [rsp + 0x730]
lea rcx, [0x1400e8b30]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa80]
mov qword [rax], rcx
cmp qword [rsp + 0xa80], 0
jne 0x14000da55
xor eax, eax
jmp 0x14000df90
jmp 0x14000dab4
movsxd rax, dword [rsp + 0x730]
lea rcx, str.ENCMARK_waveInOpen
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa88], rax
movsxd rax, dword [rsp + 0x730]
lea rcx, [0x1400e8b30]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa88]
mov qword [rax], rcx
cmp qword [rsp + 0xa88], 0
jne 0x14000dab4
xor eax, eax
jmp 0x14000df90
jmp 0x14000d9b1
lea rcx, str.DBGHELP.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x14000dada
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x7b0], 0
jmp 0x14000daf7
mov eax, dword [rsp + 0x7b0]
inc eax
mov dword [rsp + 0x7b0], eax
movsxd rax, dword [rsp + 0x7b0]
cmp rax, 1
jae 0x14000dbef
cmp dword [rsp + 0xaf0], 0
je 0x14000db8d
movsxd rax, dword [rsp + 0x7b0]
lea rcx, str.ENCMARK_MiniDumpWriteDump
lea r9, [rsp + 0x7c0]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x7c0]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa90], rax
movsxd rax, dword [rsp + 0x7b0]
lea rcx, [0x1400e8b28]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa90]
mov qword [rax], rcx
cmp qword [rsp + 0xa90], 0
jne 0x14000db8b
xor eax, eax
jmp 0x14000df90
jmp 0x14000dbea
movsxd rax, dword [rsp + 0x7b0]
lea rcx, str.ENCMARK_MiniDumpWriteDump
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa98], rax
movsxd rax, dword [rsp + 0x7b0]
lea rcx, [0x1400e8b28]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xa98]
mov qword [rax], rcx
cmp qword [rsp + 0xa98], 0
jne 0x14000dbea
xor eax, eax
jmp 0x14000df90
jmp 0x14000dae7
lea rcx, str.SECUR32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
jne 0x14000dc10
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x830], 0
jmp 0x14000dc2d
mov eax, dword [rsp + 0x830]
inc eax
mov dword [rsp + 0x830], eax
movsxd rax, dword [rsp + 0x830]
cmp rax, 1
jae 0x14000dd25
cmp dword [rsp + 0xaf0], 0
je 0x14000dcc3
movsxd rax, dword [rsp + 0x830]
lea rcx, str.ENCMARK_GetUserNameExW
lea r9, [rsp + 0x840]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x840]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xaa0], rax
movsxd rax, dword [rsp + 0x830]
lea rcx, [0x1400e8b20]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xaa0]
mov qword [rax], rcx
cmp qword [rsp + 0xaa0], 0
jne 0x14000dcc1
xor eax, eax
jmp 0x14000df90
jmp 0x14000dd20
movsxd rax, dword [rsp + 0x830]
lea rcx, str.ENCMARK_GetUserNameExW
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xaa8], rax
movsxd rax, dword [rsp + 0x830]
lea rcx, [0x1400e8b20]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xaa8]
mov qword [rax], rcx
cmp qword [rsp + 0xaa8], 0
jne 0x14000dd20
xor eax, eax
jmp 0x14000df90
jmp 0x14000dc1d
lea rcx, str.WLANAPI.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
jne 0x14000dd46
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x8b0], 0
jmp 0x14000dd63
mov eax, dword [rsp + 0x8b0]
inc eax
mov dword [rsp + 0x8b0], eax
movsxd rax, dword [rsp + 0x8b0]
cmp rax, 6
jae 0x14000de5b
cmp dword [rsp + 0xaf0], 0
je 0x14000ddf9
movsxd rax, dword [rsp + 0x8b0]
lea rcx, str.ENCMARK_WlanOpenHandle
lea r9, [rsp + 0x8c0]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x8c0]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xab0], rax
movsxd rax, dword [rsp + 0x8b0]
lea rcx, [0x1400e8af0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xab0]
mov qword [rax], rcx
cmp qword [rsp + 0xab0], 0
jne 0x14000ddf7
xor eax, eax
jmp 0x14000df90
jmp 0x14000de56
movsxd rax, dword [rsp + 0x8b0]
lea rcx, str.ENCMARK_WlanOpenHandle
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xab8], rax
movsxd rax, dword [rsp + 0x8b0]
lea rcx, [0x1400e8af0]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xab8]
mov qword [rax], rcx
cmp qword [rsp + 0xab8], 0
jne 0x14000de56
xor eax, eax
jmp 0x14000df90
jmp 0x14000dd53
lea rcx, str.CRYPT32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x14000de7c
xor eax, eax
jmp 0x14000df90
mov dword [rsp + 0x930], 0
jmp 0x14000de99
mov eax, dword [rsp + 0x930]
inc eax
mov dword [rsp + 0x930], eax
movsxd rax, dword [rsp + 0x930]
cmp rax, 1
jae 0x14000df8b
cmp dword [rsp + 0xaf0], 0
je 0x14000df2c
movsxd rax, dword [rsp + 0x930]
lea rcx, str.ENCMARK_CryptBinaryToStringW
lea r9, [rsp + 0x940]
mov r8d, 8
mov edx, dword [rsp + 0xaf0]
mov rcx, qword [rcx + rax*8]
call fcn.14000c820
lea rdx, [rsp + 0x940]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xac0], rax
movsxd rax, dword [rsp + 0x930]
lea rcx, [0x1400e8ae8]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xac0]
mov qword [rax], rcx
cmp qword [rsp + 0xac0], 0
jne 0x14000df2a
xor eax, eax
jmp 0x14000df90
jmp 0x14000df86
movsxd rax, dword [rsp + 0x930]
lea rcx, str.ENCMARK_CryptBinaryToStringW
mov rax, qword [rcx + rax*8]
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xac8], rax
movsxd rax, dword [rsp + 0x930]
lea rcx, [0x1400e8ae8]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rsp + 0xac8]
mov qword [rax], rcx
cmp qword [rsp + 0xac8], 0
jne 0x14000df86
xor eax, eax
jmp 0x14000df90
jmp 0x14000de89
mov eax, 1
mov rcx, qword [rsp + 0xad0]
xor rcx, rsp
call fcn.1400c2a80
add rsp, 0xae8
ret