Function at 0x14014a5f0
Capabilities:
Create directory
Get common file path

Disassembly:
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x2560
call fcn.1401d4c90
sub rsp, rax
mov qword [rsp + 0x1ae8], 0xfffffffffffffffe
mov rax, qword [0x1402a15c0]
xor rax, rsp
mov qword [rsp + 0x2550], rax
mov edx, 0x400
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov edx, 1
mov rcx, qword [rsp + 0x2570]
call fcn.14007bfac
lea rdx, [0x140235730]
lea rcx, [rsp + 0x40]
call fcn.1400020d0
nop
lea rcx, [rsp + 0x30]
call fcn.1400053e0
nop
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1548]
call fcn.140117b60
mov qword [rsp + 0x1af0], rax
mov rax, qword [rsp + 0x1af0]
mov qword [rsp + 0x1af8], rax
lea r8, [0x140235750]
mov rdx, qword [rsp + 0x1af8]
lea rcx, [rsp + 0x1550]
call fcn.1400010b0
mov qword [rsp + 0x1b00], rax
mov rcx, qword [rsp + 0x1b00]
call fcn.140023510
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x30]
call fcn.1400055a0
test eax, eax
jne 0x14014a6f0
mov dword [rsp + 0x1b08], 1
jmp 0x14014a6fb
mov dword [rsp + 0x1b08], 0
movzx eax, byte [rsp + 0x1b08]
mov byte [rsp + 0x1540], al
lea rcx, [rsp + 0x1550]
call fcn.140001490
nop
lea rcx, [rsp + 0x1548]
call fcn.140001490
movzx edx, byte [rsp + 0x1540]
test edx, edx
je 0x14014a778
mov dword [rsp + 0x850], 1
lea r8, [rsp + 0x850]
lea rdx, [0x140235770]
lea rcx, [rsp + 0x30]
call fcn.140005630
mov r8d, dword [rsp + 0x850]
lea rdx, [0x140235780]
lea rcx, [rsp + 0x40]
call fcn.140002c40
lea rcx, [rsp + 0x30]
call fcn.140005470
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1560]
call fcn.140117b60
mov qword [rsp + 0x1b10], rax
lea rdx, [0x140235274]
mov rcx, qword [rsp + 0x1b10]
call fcn.140006d90
mov byte [rsp + 0x1558], al
lea rcx, [rsp + 0x1560]
call fcn.140001490
movzx edx, byte [rsp + 0x1558]
test edx, edx
je 0x14014a86d
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1568]
call fcn.140117b60
mov qword [rsp + 0x1b18], rax
mov rax, qword [rsp + 0x1b18]
mov qword [rsp + 0x1b20], rax
lea r8, str.SYSTEMCurrentControlSet
mov rdx, qword [rsp + 0x1b20]
lea rcx, [rsp + 0x1570]
call fcn.1400010b0
mov qword [rsp + 0x1b28], rax
mov rax, qword [rsp + 0x1b28]
mov qword [rsp + 0x1b30], rax
mov rcx, qword [rsp + 0x1b30]
call fcn.140023510
mov rcx, rax
call fcn.140117930
nop
lea rcx, [rsp + 0x1570]
call fcn.140001490
nop
lea rcx, [rsp + 0x1568]
call fcn.140001490
mov dword [rsp + 0x28], 0
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rcx, rax
call fcn.14000ebc0
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x20], 0
je 0x14014e1fc
mov eax, dword [rsp + 0x28]
add eax, 1
mov dword [rsp + 0x28], eax
mov edi, dword [rsp + 0x28]
imul edi, edi, 0x64
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rcx, rax
call fcn.14001b8c0
mov ecx, eax
xor edx, edx
mov eax, edi
div ecx
mov rcx, qword [rsp + 0x2570]
add rcx, 0x2c8
mov edx, eax
call fcn.140016880
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x20]
mov rcx, rax
call fcn.1400825e0
test eax, eax
je 0x14014e1d1
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x20]
mov rcx, rax
call fcn.14000eb40
mov qword [rsp + 0x858], rax
cmp qword [rsp + 0x858], 0
je 0x14014e1d1
mov eax, dword [rsp + 0x28]
add eax, 1
mov dword [rsp + 0x28], eax
mov edi, dword [rsp + 0x28]
imul edi, edi, 0x64
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rcx, rax
call fcn.14001b8c0
mov ecx, eax
xor edx, edx
mov eax, edi
div ecx
mov rcx, qword [rsp + 0x2570]
add rcx, 0x2c8
mov edx, eax
call fcn.140016880
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
mov r9d, 2
mov r8, qword [rsp + 0x858]
lea rdx, [rsp + 0x860]
call fcn.1400f6f80
nop
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
mov r9d, 1
mov r8, qword [rsp + 0x858]
lea rdx, [rsp + 0x878]
call fcn.1400f6f80
nop
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.140082730
test eax, eax
jne 0x14014af9b
lea rcx, [rsp + 0x8a0]
call fcn.1400053e0
nop
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1580]
call fcn.140117b60
mov qword [rsp + 0x1b38], rax
mov rax, qword [rsp + 0x1b38]
mov qword [rsp + 0x1b40], rax
lea r8, [0x1402357d8]
mov rdx, qword [rsp + 0x1b40]
lea rcx, [rsp + 0x1588]
call fcn.1400010b0
mov qword [rsp + 0x1b48], rax
mov rax, qword [rsp + 0x1b48]
mov qword [rsp + 0x1b50], rax
lea r8, [rsp + 0x860]
mov rdx, qword [rsp + 0x1b50]
lea rcx, [rsp + 0x1590]
call fcn.140006bd0
mov qword [rsp + 0x1b58], rax
mov rcx, qword [rsp + 0x1b58]
call fcn.140023510
mov r9d, 0x2001f
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x8a0]
call fcn.1400055a0
test eax, eax
jne 0x14014aaf3
mov dword [rsp + 0x1b60], 1
jmp 0x14014aafe
mov dword [rsp + 0x1b60], 0
movzx eax, byte [rsp + 0x1b60]
mov byte [rsp + 0x1578], al
lea rcx, [rsp + 0x1590]
call fcn.140001490
nop
lea rcx, [rsp + 0x1588]
call fcn.140001490
nop
lea rcx, [rsp + 0x1580]
call fcn.140001490
movzx edx, byte [rsp + 0x1578]
test edx, edx
je 0x14014abf5
mov dword [rsp + 0x8b4], 0
lea r8, [rsp + 0x8b4]
lea rdx, [0x140235800]
lea rcx, [rsp + 0x8a0]
call fcn.140005630
xor r8d, r8d
lea rdx, [0x140235818]
lea rcx, [rsp + 0x8a0]
call fcn.140005920
lea rcx, [rsp + 0x8a0]
call fcn.140005470
cmp dword [rsp + 0x8b4], 0
jne 0x14014abf5
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000eb00
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x8a0]
call fcn.140005410
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x14014a940
mov dword [rsp + 0x8b0], 0
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rcx, rax
call fcn.14000ebc0
mov qword [rsp + 0x898], rax
cmp qword [rsp + 0x898], 0
je 0x14014add5
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x898]
mov rcx, rax
call fcn.1400825e0
test eax, eax
je 0x14014ada4
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x898]
mov rcx, rax
call fcn.14000eb40
mov qword [rsp + 0x8b8], rax
cmp qword [rsp + 0x8b8], 0
je 0x14014ad98
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x8b8]
mov rcx, rax
call fcn.140082730
cmp eax, 1
jne 0x14014ad67
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
mov r9d, 1
mov r8, qword [rsp + 0x8b8]
lea rdx, [rsp + 0x15a0]
call fcn.1400f6f80
mov qword [rsp + 0x1b68], rax
lea rcx, [rsp + 0x878]
call fcn.140023510
mov rdx, rax
mov rcx, qword [rsp + 0x1b68]
call fcn.1400060b0
test eax, eax
jne 0x14014ad27
mov dword [rsp + 0x1b70], 1
jmp 0x14014ad32
mov dword [rsp + 0x1b70], 0
movzx eax, byte [rsp + 0x1b70]
mov byte [rsp + 0x1598], al
lea rcx, [rsp + 0x15a0]
call fcn.140001490
movzx edx, byte [rsp + 0x1598]
test edx, edx
je 0x14014ad67
mov dword [rsp + 0x8b0], 1
jmp 0x14014ad98
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x8b8]
mov rcx, rax
call fcn.14000eb00
mov qword [rsp + 0x8b8], rax
jmp 0x14014ac8b
cmp dword [rsp + 0x8b0], 0
je 0x14014ada4
jmp 0x14014add5
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x898]
mov rcx, rax
call fcn.14000eb00
mov qword [rsp + 0x898], rax
jmp 0x14014ac24
cmp dword [rsp + 0x8b0], 0
jne 0x14014af41
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x15a8]
call fcn.140117b60
mov qword [rsp + 0x1b78], rax
mov rax, qword [rsp + 0x1b78]
mov qword [rsp + 0x1b80], rax
lea r8, [0x140235848]
mov rdx, qword [rsp + 0x1b80]
lea rcx, [rsp + 0x15b0]
call fcn.1400010b0
mov qword [rsp + 0x1b88], rax
mov rax, qword [rsp + 0x1b88]
mov qword [rsp + 0x1b90], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1b90]
lea rcx, [rsp + 0x15b8]
call fcn.140006bd0
mov qword [rsp + 0x1b98], rax
mov rax, qword [rsp + 0x1b98]
mov qword [rsp + 0x1ba0], rax
lea r8, [0x140235830]
mov rdx, qword [rsp + 0x1ba0]
lea rcx, [rsp + 0x15c0]
call fcn.1400010b0
mov qword [rsp + 0x1ba8], rax
mov rax, qword [rsp + 0x1ba8]
mov qword [rsp + 0x1bb0], rax
lea r8, [rsp + 0x878]
mov rdx, qword [rsp + 0x1bb0]
lea rcx, [rsp + 0x15c8]
call fcn.140006bd0
mov qword [rsp + 0x1bb8], rax
mov rax, qword [rsp + 0x1bb8]
mov qword [rsp + 0x1bc0], rax
mov rcx, qword [rsp + 0x1bc0]
call fcn.140023510
mov rcx, rax
call fcn.140117930
nop
lea rcx, [rsp + 0x15c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x15c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x15b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x15b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x15a8]
call fcn.140001490
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000eb00
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x8a0]
call fcn.140005410
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x14014a940
mov dword [rsp + 0x890], 0
lea r9, [rsp + 0x890]
lea r8, [0x140235284]
lea rdx, [rsp + 0x15d0]
lea rcx, [rsp + 0x860]
call fcn.1400065a0
mov qword [rsp + 0x1bc8], rax
mov rax, qword [rsp + 0x1bc8]
mov qword [rsp + 0x1bd0], rax
mov rdx, qword [rsp + 0x1bd0]
lea rcx, [rsp + 0x860]
call fcn.140002d80
nop
lea rcx, [rsp + 0x15d0]
call fcn.140001490
lea rcx, [rsp + 0x860]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x14014b065
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000eb00
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x14014a940
lea rcx, [rsp + 0x868]
call fcn.1400053e0
nop
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x15e0]
call fcn.140117b60
mov qword [rsp + 0x1bd8], rax
mov rax, qword [rsp + 0x1bd8]
mov qword [rsp + 0x1be0], rax
lea r8, [0x140235858]
mov rdx, qword [rsp + 0x1be0]
lea rcx, [rsp + 0x15e8]
call fcn.1400010b0
mov qword [rsp + 0x1be8], rax
mov rax, qword [rsp + 0x1be8]
mov qword [rsp + 0x1bf0], rax
lea r8, [rsp + 0x860]
mov rdx, qword [rsp + 0x1bf0]
lea rcx, [rsp + 0x15f0]
call fcn.140006bd0
mov qword [rsp + 0x1bf8], rax
mov rcx, qword [rsp + 0x1bf8]
call fcn.140023510
mov r9d, 0x2001f
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x868]
call fcn.1400055a0
test eax, eax
jne 0x14014b13b
mov dword [rsp + 0x1c00], 1
jmp 0x14014b146
mov dword [rsp + 0x1c00], 0
movzx eax, byte [rsp + 0x1c00]
mov byte [rsp + 0x15d8], al
lea rcx, [rsp + 0x15f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x15e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x15e0]
call fcn.140001490
movzx edx, byte [rsp + 0x15d8]
test edx, edx
je 0x14014b3e4
mov dword [rsp + 0x8c0], 0
lea r8, [rsp + 0x8c0]
lea rdx, [0x140235880]
lea rcx, [rsp + 0x868]
call fcn.140005630
mov r8d, 1
lea rdx, [0x140235898]
lea rcx, [rsp + 0x868]
call fcn.140005920
lea rcx, [rsp + 0x868]
call fcn.140005470
cmp dword [rsp + 0x8c0], 1
jne 0x14014b3e4
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x15f8]
call fcn.140117b60
mov qword [rsp + 0x1c08], rax
mov rax, qword [rsp + 0x1c08]
mov qword [rsp + 0x1c10], rax
lea r8, [0x1402358e8]
mov rdx, qword [rsp + 0x1c10]
lea rcx, [rsp + 0x1600]
call fcn.1400010b0
mov qword [rsp + 0x1c18], rax
mov rax, qword [rsp + 0x1c18]
mov qword [rsp + 0x1c20], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1c20]
lea rcx, [rsp + 0x1608]
call fcn.140006bd0
mov qword [rsp + 0x1c28], rax
mov rax, qword [rsp + 0x1c28]
mov qword [rsp + 0x1c30], rax
lea r8, [0x1402358d0]
mov rdx, qword [rsp + 0x1c30]
lea rcx, [rsp + 0x1610]
call fcn.1400010b0
mov qword [rsp + 0x1c38], rax
mov rax, qword [rsp + 0x1c38]
mov qword [rsp + 0x1c40], rax
lea r8, [rsp + 0x878]
mov rdx, qword [rsp + 0x1c40]
lea rcx, [rsp + 0x1618]
call fcn.140006bd0
mov qword [rsp + 0x1c48], rax
mov rax, qword [rsp + 0x1c48]
mov qword [rsp + 0x1c50], rax
lea r8, [0x1402358b0]
mov rdx, qword [rsp + 0x1c50]
lea rcx, [rsp + 0x1620]
call fcn.1400010b0
mov qword [rsp + 0x1c58], rax
mov rax, qword [rsp + 0x1c58]
mov qword [rsp + 0x1c60], rax
mov rcx, qword [rsp + 0x1c60]
call fcn.140023510
mov rcx, rax
call fcn.140117930
nop
lea rcx, [rsp + 0x1620]
call fcn.140001490
nop
lea rcx, [rsp + 0x1618]
call fcn.140001490
nop
lea rcx, [rsp + 0x1610]
call fcn.140001490
nop
lea rcx, [rsp + 0x1608]
call fcn.140001490
nop
lea rcx, [rsp + 0x1600]
call fcn.140001490
nop
lea rcx, [rsp + 0x15f8]
call fcn.140001490
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000eb00
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x868]
call fcn.140005410
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x14014a940
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1628]
call fcn.140117b60
mov qword [rsp + 0x1c68], rax
mov rax, qword [rsp + 0x1c68]
mov qword [rsp + 0x1c70], rax
lea r8, [0x140235910]
mov rdx, qword [rsp + 0x1c70]
lea rcx, [rsp + 0x1630]
call fcn.1400010b0
mov qword [rsp + 0x1c78], rax
mov rax, qword [rsp + 0x1c78]
mov qword [rsp + 0x1c80], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1c80]
lea rcx, [rsp + 0x1638]
call fcn.140006bd0
mov qword [rsp + 0x1c88], rax
mov rax, qword [rsp + 0x1c88]
mov qword [rsp + 0x1c90], rax
lea r8, str.Services
mov rdx, qword [rsp + 0x1c90]
lea rcx, [rsp + 0x1640]
call fcn.1400010b0
mov qword [rsp + 0x1c98], rax
mov rax, qword [rsp + 0x1c98]
mov qword [rsp + 0x1ca0], rax
mov rcx, qword [rsp + 0x1ca0]
call fcn.140023510
mov rcx, rax
call fcn.140117270
nop
lea rcx, [rsp + 0x1640]
call fcn.140001490
nop
lea rcx, [rsp + 0x1638]
call fcn.140001490
nop
lea rcx, [rsp + 0x1630]
call fcn.140001490
nop
lea rcx, [rsp + 0x1628]
call fcn.140001490
lea rcx, [0x140235920]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rdi, eax
lea rcx, [rsp + 0x860]
call fcn.140023510
mov r8, rdi
lea rdx, str.ven_10de
mov rcx, rax
call fcn.1400a939c
test eax, eax
jne 0x14014b796
mov rcx, qword [rsp + 0x2570]
call fcn.1401499a0
mov eax, eax
and rax, 0xffff
movzx eax, ax
and rax, 0xff
movzx eax, al
cmp eax, 6
jae 0x14014b796
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1648]
call fcn.140117b60
mov qword [rsp + 0x1ca8], rax
mov rax, qword [rsp + 0x1ca8]
mov qword [rsp + 0x1cb0], rax
lea r8, [0x140235978]
mov rdx, qword [rsp + 0x1cb0]
lea rcx, [rsp + 0x1650]
call fcn.1400010b0
mov qword [rsp + 0x1cb8], rax
mov rax, qword [rsp + 0x1cb8]
mov qword [rsp + 0x1cc0], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1cc0]
lea rcx, [rsp + 0x1658]
call fcn.140006bd0
mov qword [rsp + 0x1cc8], rax
mov rax, qword [rsp + 0x1cc8]
mov qword [rsp + 0x1cd0], rax
lea r8, str.ServicesNVENETFD
mov rdx, qword [rsp + 0x1cd0]
lea rcx, [rsp + 0x1660]
call fcn.1400010b0
mov qword [rsp + 0x1cd8], rax
mov rax, qword [rsp + 0x1cd8]
mov qword [rsp + 0x1ce0], rax
mov rcx, qword [rsp + 0x1ce0]
call fcn.140023510
mov rcx, rax
call fcn.140117930
nop
lea rcx, [rsp + 0x1660]
call fcn.140001490
nop
lea rcx, [rsp + 0x1658]
call fcn.140001490
nop
lea rcx, [rsp + 0x1650]
call fcn.140001490
nop
lea rcx, [rsp + 0x1648]
call fcn.140001490
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1668]
call fcn.140117b60
mov qword [rsp + 0x1ce8], rax
mov rax, qword [rsp + 0x1ce8]
mov qword [rsp + 0x1cf0], rax
lea r8, [0x1402359b0]
mov rdx, qword [rsp + 0x1cf0]
lea rcx, [rsp + 0x1670]
call fcn.1400010b0
mov qword [rsp + 0x1cf8], rax
mov rax, qword [rsp + 0x1cf8]
mov qword [rsp + 0x1d00], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x1d00]
lea rcx, [rsp + 0x1678]
call fcn.140006bd0
mov qword [rsp + 0x1d08], rax
mov rax, qword [rsp + 0x1d08]
mov qword [rsp + 0x1d10], rax
lea r8, str.Services_nvnetbus
mov rdx, qword [rsp + 0x1d10]
lea rcx, [rsp + 0x1680]
call fcn.1400010b0
mov qword [rsp + 0x1d18], rax
mov rax, qword [rsp + 0x1d18]
mov qword [rsp + 0x1d20], rax
mov rcx, qword [rsp + 0x1d20]
call fcn.140023510
mov rcx, rax
call fcn.140117930
nop
lea rcx, [rsp + 0x1680]
call fcn.140001490
nop
lea rcx, [rsp + 0x1678]
call fcn.140001490
nop
lea rcx, [rsp + 0x1670]
call fcn.140001490
nop
lea rcx, [rsp + 0x1668]
call fcn.140001490
lea rcx, [rsp + 0x880]
call fcn.1400053e0
nop
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1690]
call fcn.140117b60
mov qword [rsp + 0x1d28], rax
mov rax, qword [rsp + 0x1d28]
mov qword [rsp + 0x1d30], rax
lea r8, [0x1402359d8]
mov rdx, qword [rsp + 0x1d30]
lea rcx, [rsp + 0x1698]
call fcn.1400010b0
mov qword [rsp + 0x1d38], rax
mov rax, qword [rsp + 0x1d38]
mov qword [rsp + 0x1d40], rax
lea r8, [rsp + 0x860]
mov rdx, qword [rsp + 0x1d40]
lea rcx, [rsp + 0x16a0]
call fcn.140006bd0
mov qword [rsp + 0x1d48], rax
mov rax, qword [rsp + 0x1d48]
mov qword [rsp + 0x1d50], rax
lea r8, [0x1402359c0]
mov rdx, qword [rsp + 0x1d50]
lea rcx, [rsp + 0x16a8]
call fcn.1400010b0
mov qword [rsp + 0x1d58], rax
mov rcx, qword [rsp + 0x1d58]
call fcn.140023510
mov r9d, 0x2001f
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x880]
call fcn.1400055a0
test eax, eax
jne 0x14014b8a0
mov dword [rsp + 0x1d60], 1
jmp 0x14014b8ab
mov dword [rsp + 0x1d60], 0
movzx eax, byte [rsp + 0x1d60]
mov byte [rsp + 0x1688], al
lea rcx, [rsp + 0x16a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x16a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1698]
call fcn.140001490
nop
lea rcx, [rsp + 0x1690]
call fcn.140001490
movzx edx, byte [rsp + 0x1688]
test edx, edx
je 0x14014d978
xor eax, eax
mov word [rsp + 0x8e0], ax
lea rdi, [rsp + 0x8e2]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov dword [rsp + 0x8d0], 0x400
lea r9, [rsp + 0x8d0]
lea r8, [rsp + 0x8e0]
lea rdx, [0x140235a00]
lea rcx, [rsp + 0x880]
call fcn.1400056b0
lea rdx, [0x140235a18]
lea rcx, [rsp + 0x880]
call fcn.140005430
mov r9d, 2
lea r8, [rsp + 0x8e0]
lea rdx, [0x140235a30]
lea rcx, [rsp + 0x880]
call fcn.140005980
mov dx, VarDateFromDisp
lea rcx, [rsp + 0x8e0]
call fcn.140001460
add rax, 2
mov qword [rsp + 0x8c8], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x16b0]
call fcn.140005df0
mov qword [rsp + 0x1d68], rax
mov rax, qword [rsp + 0x1d68]
mov qword [rsp + 0x1d70], rax
lea r8, [0x140235a70]
mov rdx, qword [rsp + 0x1d70]
lea rcx, [rsp + 0x16b8]
call fcn.1400010b0
mov qword [rsp + 0x1d78], rax
mov rax, qword [rsp + 0x1d78]
mov qword [rsp + 0x1d80], rax
lea r8, [0x140235a48]
mov rdx, qword [rsp + 0x1d80]
lea rcx, [rsp + 0x16c0]
call fcn.1400010b0
mov qword [rsp + 0x1d88], rax
mov rcx, qword [rsp + 0x1d88]
call fcn.140023510
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rsp + 0x16c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x16b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x16b0]
call fcn.140001490
mov rcx, qword [rsp + 0x2570]
call fcn.1401499a0
mov eax, eax
and rax, 0xffff
movzx eax, ax
and rax, 0xff
movzx eax, al
cmp eax, 6
jb 0x14014ccff
mov rcx, qword [rsp + 0x2570]
call fcn.1401499a0
mov eax, eax
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
test eax, eax
jne 0x14014bf32
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x16c8]
call fcn.140005df0
mov qword [rsp + 0x1d90], rax
mov rax, qword [rsp + 0x1d90]
mov qword [rsp + 0x1d98], rax
lea r8, [0x140235ab0]
mov rdx, qword [rsp + 0x1d98]
lea rcx, [rsp + 0x16d0]
call fcn.1400010b0
mov qword [rsp + 0x1da0], rax
mov rax, qword [rsp + 0x1da0]
mov qword [rsp + 0x1da8], rax
lea r8, [0x140235a88]
mov rdx, qword [rsp + 0x1da8]
lea rcx, [rsp + 0x16d8]
call fcn.1400010b0
mov qword [rsp + 0x1db0], rax
mov rax, qword [rsp + 0x1db0]
mov qword [rsp + 0x1db8], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1db8]
lea rcx, [rsp + 0x16e0]
call fcn.1400010b0
mov qword [rsp + 0x1dc0], rax
mov rax, qword [rsp + 0x1dc0]
mov qword [rsp + 0x1dc8], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x16e8]
call fcn.140005df0
mov qword [rsp + 0x1dd0], rax
mov rax, qword [rsp + 0x1dd0]
mov qword [rsp + 0x1dd8], rax
lea r8, [0x140235b00]
mov rdx, qword [rsp + 0x1dd8]
lea rcx, [rsp + 0x16f0]
call fcn.1400010b0
mov qword [rsp + 0x1de0], rax
mov rax, qword [rsp + 0x1de0]
mov qword [rsp + 0x1de8], rax
lea r8, [0x140235ac8]
mov rdx, qword [rsp + 0x1de8]
lea rcx, [rsp + 0x16f8]
call fcn.1400010b0
mov qword [rsp + 0x1df0], rax
mov rax, qword [rsp + 0x1df0]
mov qword [rsp + 0x1df8], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1df8]
lea rcx, [rsp + 0x1700]
call fcn.1400010b0
mov qword [rsp + 0x1e00], rax
mov rcx, qword [rsp + 0x1dc8]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x1e00]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1700]
call fcn.140001490
nop
lea rcx, [rsp + 0x16f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x16f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x16e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x16e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x16d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x16d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x16c8]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1708]
call fcn.140005df0
mov qword [rsp + 0x1e08], rax
mov rax, qword [rsp + 0x1e08]
mov qword [rsp + 0x1e10], rax
lea r8, [0x140235b50]
mov rdx, qword [rsp + 0x1e10]
lea rcx, [rsp + 0x1710]
call fcn.1400010b0
mov qword [rsp + 0x1e18], rax
mov rax, qword [rsp + 0x1e18]
mov qword [rsp + 0x1e20], rax
lea r8, [0x140235b20]
mov rdx, qword [rsp + 0x1e20]
lea rcx, [rsp + 0x1718]
call fcn.1400010b0
mov qword [rsp + 0x1e28], rax
mov rax, qword [rsp + 0x1e28]
mov qword [rsp + 0x1e30], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1e30]
lea rcx, [rsp + 0x1720]
call fcn.1400010b0
mov qword [rsp + 0x1e38], rax
mov rax, qword [rsp + 0x1e38]
mov qword [rsp + 0x1e40], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1728]
call fcn.140005df0
mov qword [rsp + 0x1e48], rax
mov rax, qword [rsp + 0x1e48]
mov qword [rsp + 0x1e50], rax
lea r8, [0x140235ba0]
mov rdx, qword [rsp + 0x1e50]
lea rcx, [rsp + 0x1730]
call fcn.1400010b0
mov qword [rsp + 0x1e58], rax
mov rax, qword [rsp + 0x1e58]
mov qword [rsp + 0x1e60], rax
lea r8, [0x140235b68]
mov rdx, qword [rsp + 0x1e60]
lea rcx, [rsp + 0x1738]
call fcn.1400010b0
mov qword [rsp + 0x1e68], rax
mov rax, qword [rsp + 0x1e68]
mov qword [rsp + 0x1e70], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1e70]
lea rcx, [rsp + 0x1740]
call fcn.1400010b0
mov qword [rsp + 0x1e78], rax
mov rcx, qword [rsp + 0x1e40]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x1e78]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1740]
call fcn.140001490
nop
lea rcx, [rsp + 0x1738]
call fcn.140001490
nop
lea rcx, [rsp + 0x1730]
call fcn.140001490
nop
lea rcx, [rsp + 0x1728]
call fcn.140001490
nop
lea rcx, [rsp + 0x1720]
call fcn.140001490
nop
lea rcx, [rsp + 0x1718]
call fcn.140001490
nop
lea rcx, [rsp + 0x1710]
call fcn.140001490
nop
lea rcx, [rsp + 0x1708]
call fcn.140001490
mov rcx, qword [rsp + 0x2570]
call fcn.1401499a0
mov eax, eax
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 1
jne 0x14014c3ca
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1748]
call fcn.140005df0
mov qword [rsp + 0x1e80], rax
mov rax, qword [rsp + 0x1e80]
mov qword [rsp + 0x1e88], rax
lea r8, [0x140235be8]
mov rdx, qword [rsp + 0x1e88]
lea rcx, [rsp + 0x1750]
call fcn.1400010b0
mov qword [rsp + 0x1e90], rax
mov rax, qword [rsp + 0x1e90]
mov qword [rsp + 0x1e98], rax
lea r8, [0x140235bc0]
mov rdx, qword [rsp + 0x1e98]
lea rcx, [rsp + 0x1758]
call fcn.1400010b0
mov qword [rsp + 0x1ea0], rax
mov rax, qword [rsp + 0x1ea0]
mov qword [rsp + 0x1ea8], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1ea8]
lea rcx, [rsp + 0x1760]
call fcn.1400010b0
mov qword [rsp + 0x1eb0], rax
mov rax, qword [rsp + 0x1eb0]
mov qword [rsp + 0x1eb8], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1768]
call fcn.140005df0
mov qword [rsp + 0x1ec0], rax
mov rax, qword [rsp + 0x1ec0]
mov qword [rsp + 0x1ec8], rax
lea r8, [0x140235c38]
mov rdx, qword [rsp + 0x1ec8]
lea rcx, [rsp + 0x1770]
call fcn.1400010b0
mov qword [rsp + 0x1ed0], rax
mov rax, qword [rsp + 0x1ed0]
mov qword [rsp + 0x1ed8], rax
lea r8, [0x140235c00]
mov rdx, qword [rsp + 0x1ed8]
lea rcx, [rsp + 0x1778]
call fcn.1400010b0
mov qword [rsp + 0x1ee0], rax
mov rax, qword [rsp + 0x1ee0]
mov qword [rsp + 0x1ee8], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1ee8]
lea rcx, [rsp + 0x1780]
call fcn.1400010b0
mov qword [rsp + 0x1ef0], rax
mov rcx, qword [rsp + 0x1eb8]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x1ef0]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1780]
call fcn.140001490
nop
lea rcx, [rsp + 0x1778]
call fcn.140001490
nop
lea rcx, [rsp + 0x1770]
call fcn.140001490
nop
lea rcx, [rsp + 0x1768]
call fcn.140001490
nop
lea rcx, [rsp + 0x1760]
call fcn.140001490
nop
lea rcx, [rsp + 0x1758]
call fcn.140001490
nop
lea rcx, [rsp + 0x1750]
call fcn.140001490
nop
lea rcx, [rsp + 0x1748]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1788]
call fcn.140005df0
mov qword [rsp + 0x1ef8], rax
mov rax, qword [rsp + 0x1ef8]
mov qword [rsp + 0x1f00], rax
lea r8, [0x140235c88]
mov rdx, qword [rsp + 0x1f00]
lea rcx, [rsp + 0x1790]
call fcn.1400010b0
mov qword [rsp + 0x1f08], rax
mov rax, qword [rsp + 0x1f08]
mov qword [rsp + 0x1f10], rax
lea r8, [0x140235c58]
mov rdx, qword [rsp + 0x1f10]
lea rcx, [rsp + 0x1798]
call fcn.1400010b0
mov qword [rsp + 0x1f18], rax
mov rax, qword [rsp + 0x1f18]
mov qword [rsp + 0x1f20], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1f20]
lea rcx, [rsp + 0x17a0]
call fcn.1400010b0
mov qword [rsp + 0x1f28], rax
mov rax, qword [rsp + 0x1f28]
mov qword [rsp + 0x1f30], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x17a8]
call fcn.140005df0
mov qword [rsp + 0x1f38], rax
mov rax, qword [rsp + 0x1f38]
mov qword [rsp + 0x1f40], rax
lea r8, [0x140235cd8]
mov rdx, qword [rsp + 0x1f40]
lea rcx, [rsp + 0x17b0]
call fcn.1400010b0
mov qword [rsp + 0x1f48], rax
mov rax, qword [rsp + 0x1f48]
mov qword [rsp + 0x1f50], rax
lea r8, [0x140235ca0]
mov rdx, qword [rsp + 0x1f50]
lea rcx, [rsp + 0x17b8]
call fcn.1400010b0
mov qword [rsp + 0x1f58], rax
mov rax, qword [rsp + 0x1f58]
mov qword [rsp + 0x1f60], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1f60]
lea rcx, [rsp + 0x17c0]
call fcn.1400010b0
mov qword [rsp + 0x1f68], rax
mov rcx, qword [rsp + 0x1f30]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x1f68]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x17c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x17b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x17b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x17a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x17a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1798]
call fcn.140001490
nop
lea rcx, [rsp + 0x1790]
call fcn.140001490
nop
lea rcx, [rsp + 0x1788]
call fcn.140001490
mov rcx, qword [rsp + 0x2570]
call fcn.1401499a0
mov eax, eax
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 2
jne 0x14014c862
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x17c8]
call fcn.140005df0
mov qword [rsp + 0x1f70], rax
mov rax, qword [rsp + 0x1f70]
mov qword [rsp + 0x1f78], rax
lea r8, [0x140235d20]
mov rdx, qword [rsp + 0x1f78]
lea rcx, [rsp + 0x17d0]
call fcn.1400010b0
mov qword [rsp + 0x1f80], rax
mov rax, qword [rsp + 0x1f80]
mov qword [rsp + 0x1f88], rax
lea r8, [0x140235cf8]
mov rdx, qword [rsp + 0x1f88]
lea rcx, [rsp + 0x17d8]
call fcn.1400010b0
mov qword [rsp + 0x1f90], rax
mov rax, qword [rsp + 0x1f90]
mov qword [rsp + 0x1f98], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1f98]
lea rcx, [rsp + 0x17e0]
call fcn.1400010b0
mov qword [rsp + 0x1fa0], rax
mov rax, qword [rsp + 0x1fa0]
mov qword [rsp + 0x1fa8], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x17e8]
call fcn.140005df0
mov qword [rsp + 0x1fb0], rax
mov rax, qword [rsp + 0x1fb0]
mov qword [rsp + 0x1fb8], rax
lea r8, [0x140235d70]
mov rdx, qword [rsp + 0x1fb8]
lea rcx, [rsp + 0x17f0]
call fcn.1400010b0
mov qword [rsp + 0x1fc0], rax
mov rax, qword [rsp + 0x1fc0]
mov qword [rsp + 0x1fc8], rax
lea r8, [0x140235d38]
mov rdx, qword [rsp + 0x1fc8]
lea rcx, [rsp + 0x17f8]
call fcn.1400010b0
mov qword [rsp + 0x1fd0], rax
mov rax, qword [rsp + 0x1fd0]
mov qword [rsp + 0x1fd8], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1fd8]
lea rcx, [rsp + 0x1800]
call fcn.1400010b0
mov qword [rsp + 0x1fe0], rax
mov rcx, qword [rsp + 0x1fa8]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x1fe0]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1800]
call fcn.140001490
nop
lea rcx, [rsp + 0x17f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x17f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x17e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x17e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x17d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x17d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x17c8]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1808]
call fcn.140005df0
mov qword [rsp + 0x1fe8], rax
mov rax, qword [rsp + 0x1fe8]
mov qword [rsp + 0x1ff0], rax
lea r8, [0x140235dc0]
mov rdx, qword [rsp + 0x1ff0]
lea rcx, [rsp + 0x1810]
call fcn.1400010b0
mov qword [rsp + 0x1ff8], rax
mov rax, qword [rsp + 0x1ff8]
mov qword [rsp + 0x2000], rax
lea r8, [0x140235d90]
mov rdx, qword [rsp + 0x2000]
lea rcx, [rsp + 0x1818]
call fcn.1400010b0
mov qword [rsp + 0x2008], rax
mov rax, qword [rsp + 0x2008]
mov qword [rsp + 0x2010], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x2010]
lea rcx, [rsp + 0x1820]
call fcn.1400010b0
mov qword [rsp + 0x2018], rax
mov rax, qword [rsp + 0x2018]
mov qword [rsp + 0x2020], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1828]
call fcn.140005df0
mov qword [rsp + 0x2028], rax
mov rax, qword [rsp + 0x2028]
mov qword [rsp + 0x2030], rax
lea r8, [0x140235e10]
mov rdx, qword [rsp + 0x2030]
lea rcx, [rsp + 0x1830]
call fcn.1400010b0
mov qword [rsp + 0x2038], rax
mov rax, qword [rsp + 0x2038]
mov qword [rsp + 0x2040], rax
lea r8, str.CCBootPnPWin8CCBootPnP_
mov rdx, qword [rsp + 0x2040]
lea rcx, [rsp + 0x1838]
call fcn.1400010b0
mov qword [rsp + 0x2048], rax
mov rax, qword [rsp + 0x2048]
mov qword [rsp + 0x2050], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x2050]
lea rcx, [rsp + 0x1840]
call fcn.1400010b0
mov qword [rsp + 0x2058], rax
mov rcx, qword [rsp + 0x2020]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x2058]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1840]
call fcn.140001490
nop
lea rcx, [rsp + 0x1838]
call fcn.140001490
nop
lea rcx, [rsp + 0x1830]
call fcn.140001490
nop
lea rcx, [rsp + 0x1828]
call fcn.140001490
nop
lea rcx, [rsp + 0x1820]
call fcn.140001490
nop
lea rcx, [rsp + 0x1818]
call fcn.140001490
nop
lea rcx, [rsp + 0x1810]
call fcn.140001490
nop
lea rcx, [rsp + 0x1808]
call fcn.140001490
mov rcx, qword [rsp + 0x2570]
call fcn.1401499a0
mov eax, eax
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 3
jne 0x14014ccfa
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1848]
call fcn.140005df0
mov qword [rsp + 0x2060], rax
mov rax, qword [rsp + 0x2060]
mov qword [rsp + 0x2068], rax
lea r8, [0x140235e58]
mov rdx, qword [rsp + 0x2068]
lea rcx, [rsp + 0x1850]
call fcn.1400010b0
mov qword [rsp + 0x2070], rax
mov rax, qword [rsp + 0x2070]
mov qword [rsp + 0x2078], rax
lea r8, [0x140235e30]
mov rdx, qword [rsp + 0x2078]
lea rcx, [rsp + 0x1858]
call fcn.1400010b0
mov qword [rsp + 0x2080], rax
mov rax, qword [rsp + 0x2080]
mov qword [rsp + 0x2088], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x2088]
lea rcx, [rsp + 0x1860]
call fcn.1400010b0
mov qword [rsp + 0x2090], rax
mov rax, qword [rsp + 0x2090]
mov qword [rsp + 0x2098], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1868]
call fcn.140005df0
mov qword [rsp + 0x20a0], rax
mov rax, qword [rsp + 0x20a0]
mov qword [rsp + 0x20a8], rax
lea r8, [0x140235ea8]
mov rdx, qword [rsp + 0x20a8]
lea rcx, [rsp + 0x1870]
call fcn.1400010b0
mov qword [rsp + 0x20b0], rax
mov rax, qword [rsp + 0x20b0]
mov qword [rsp + 0x20b8], rax
lea r8, [0x140235e70]
mov rdx, qword [rsp + 0x20b8]
lea rcx, [rsp + 0x1878]
call fcn.1400010b0
mov qword [rsp + 0x20c0], rax
mov rax, qword [rsp + 0x20c0]
mov qword [rsp + 0x20c8], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x20c8]
lea rcx, [rsp + 0x1880]
call fcn.1400010b0
mov qword [rsp + 0x20d0], rax
mov rcx, qword [rsp + 0x2098]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x20d0]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1880]
call fcn.140001490
nop
lea rcx, [rsp + 0x1878]
call fcn.140001490
nop
lea rcx, [rsp + 0x1870]
call fcn.140001490
nop
lea rcx, [rsp + 0x1868]
call fcn.140001490
nop
lea rcx, [rsp + 0x1860]
call fcn.140001490
nop
lea rcx, [rsp + 0x1858]
call fcn.140001490
nop
lea rcx, [rsp + 0x1850]
call fcn.140001490
nop
lea rcx, [rsp + 0x1848]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1888]
call fcn.140005df0
mov qword [rsp + 0x20d8], rax
mov rax, qword [rsp + 0x20d8]
mov qword [rsp + 0x20e0], rax
lea r8, [0x140235ef8]
mov rdx, qword [rsp + 0x20e0]
lea rcx, [rsp + 0x1890]
call fcn.1400010b0
mov qword [rsp + 0x20e8], rax
mov rax, qword [rsp + 0x20e8]
mov qword [rsp + 0x20f0], rax
lea r8, [0x140235ec8]
mov rdx, qword [rsp + 0x20f0]
lea rcx, [rsp + 0x1898]
call fcn.1400010b0
mov qword [rsp + 0x20f8], rax
mov rax, qword [rsp + 0x20f8]
mov qword [rsp + 0x2100], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x2100]
lea rcx, [rsp + 0x18a0]
call fcn.1400010b0
mov qword [rsp + 0x2108], rax
mov rax, qword [rsp + 0x2108]
mov qword [rsp + 0x2110], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x18a8]
call fcn.140005df0
mov qword [rsp + 0x2118], rax
mov rax, qword [rsp + 0x2118]
mov qword [rsp + 0x2120], rax
lea r8, [0x140235f48]
mov rdx, qword [rsp + 0x2120]
lea rcx, [rsp + 0x18b0]
call fcn.1400010b0
mov qword [rsp + 0x2128], rax
mov rax, qword [rsp + 0x2128]
mov qword [rsp + 0x2130], rax
lea r8, str.CCBootPnPWin10CCBootPnP_
mov rdx, qword [rsp + 0x2130]
lea rcx, [rsp + 0x18b8]
call fcn.1400010b0
mov qword [rsp + 0x2138], rax
mov rax, qword [rsp + 0x2138]
mov qword [rsp + 0x2140], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x2140]
lea rcx, [rsp + 0x18c0]
call fcn.1400010b0
mov qword [rsp + 0x2148], rax
mov rcx, qword [rsp + 0x2110]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x2148]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x18c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x18b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x18b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x18a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x18a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1898]
call fcn.140001490
nop
lea rcx, [rsp + 0x1890]
call fcn.140001490
nop
lea rcx, [rsp + 0x1888]
call fcn.140001490
jmp 0x14014d169
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x18c8]
call fcn.140005df0
mov qword [rsp + 0x2150], rax
mov rax, qword [rsp + 0x2150]
mov qword [rsp + 0x2158], rax
lea r8, [0x140235f90]
mov rdx, qword [rsp + 0x2158]
lea rcx, [rsp + 0x18d0]
call fcn.1400010b0
mov qword [rsp + 0x2160], rax
mov rax, qword [rsp + 0x2160]
mov qword [rsp + 0x2168], rax
lea r8, str._system32drivers_
mov rdx, qword [rsp + 0x2168]
lea rcx, [rsp + 0x18d8]
call fcn.1400010b0
mov qword [rsp + 0x2170], rax
mov rax, qword [rsp + 0x2170]
mov qword [rsp + 0x2178], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x2178]
lea rcx, [rsp + 0x18e0]
call fcn.1400010b0
mov qword [rsp + 0x2180], rax
mov rax, qword [rsp + 0x2180]
mov qword [rsp + 0x2188], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x18e8]
call fcn.140005df0
mov qword [rsp + 0x2190], rax
mov rax, qword [rsp + 0x2190]
mov qword [rsp + 0x2198], rax
lea r8, [0x140235fe0]
mov rdx, qword [rsp + 0x2198]
lea rcx, [rsp + 0x18f0]
call fcn.1400010b0
mov qword [rsp + 0x21a0], rax
mov rax, qword [rsp + 0x21a0]
mov qword [rsp + 0x21a8], rax
lea r8, [0x140235fa8]
mov rdx, qword [rsp + 0x21a8]
lea rcx, [rsp + 0x18f8]
call fcn.1400010b0
mov qword [rsp + 0x21b0], rax
mov rax, qword [rsp + 0x21b0]
mov qword [rsp + 0x21b8], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x21b8]
lea rcx, [rsp + 0x1900]
call fcn.1400010b0
mov qword [rsp + 0x21c0], rax
mov rcx, qword [rsp + 0x2188]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x21c0]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1900]
call fcn.140001490
nop
lea rcx, [rsp + 0x18f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x18f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x18e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x18e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x18d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x18d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x18c8]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1908]
call fcn.140005df0
mov qword [rsp + 0x21c8], rax
mov rax, qword [rsp + 0x21c8]
mov qword [rsp + 0x21d0], rax
lea r8, [0x140236030]
mov rdx, qword [rsp + 0x21d0]
lea rcx, [rsp + 0x1910]
call fcn.1400010b0
mov qword [rsp + 0x21d8], rax
mov rax, qword [rsp + 0x21d8]
mov qword [rsp + 0x21e0], rax
lea r8, str._system32CCBootPnP_
mov rdx, qword [rsp + 0x21e0]
lea rcx, [rsp + 0x1918]
call fcn.1400010b0
mov qword [rsp + 0x21e8], rax
mov rax, qword [rsp + 0x21e8]
mov qword [rsp + 0x21f0], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x21f0]
lea rcx, [rsp + 0x1920]
call fcn.1400010b0
mov qword [rsp + 0x21f8], rax
mov rax, qword [rsp + 0x21f8]
mov qword [rsp + 0x2200], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1928]
call fcn.140005df0
mov qword [rsp + 0x2208], rax
mov rax, qword [rsp + 0x2208]
mov qword [rsp + 0x2210], rax
lea r8, [0x140236080]
mov rdx, qword [rsp + 0x2210]
lea rcx, [rsp + 0x1930]
call fcn.1400010b0
mov qword [rsp + 0x2218], rax
mov rax, qword [rsp + 0x2218]
mov qword [rsp + 0x2220], rax
lea r8, [0x140236048]
mov rdx, qword [rsp + 0x2220]
lea rcx, [rsp + 0x1938]
call fcn.1400010b0
mov qword [rsp + 0x2228], rax
mov rax, qword [rsp + 0x2228]
mov qword [rsp + 0x2230], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x2230]
lea rcx, [rsp + 0x1940]
call fcn.1400010b0
mov qword [rsp + 0x2238], rax
mov rcx, qword [rsp + 0x2200]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x2238]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1940]
call fcn.140001490
nop
lea rcx, [rsp + 0x1938]
call fcn.140001490
nop
lea rcx, [rsp + 0x1930]
call fcn.140001490
nop
lea rcx, [rsp + 0x1928]
call fcn.140001490
nop
lea rcx, [rsp + 0x1920]
call fcn.140001490
nop
lea rcx, [rsp + 0x1918]
call fcn.140001490
nop
lea rcx, [rsp + 0x1910]
call fcn.140001490
nop
lea rcx, [rsp + 0x1908]
call fcn.140001490
mov rcx, qword [rsp + 0x2570]
call fcn.1401499a0
mov eax, eax
and rax, 0xffff
movzx eax, ax
and rax, 0xff
movzx eax, al
cmp eax, 6
jae 0x14014d96b
lea rcx, [rsp + 0x10e0]
call fcn.140076008
nop
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1950]
call fcn.140005df0
mov qword [rsp + 0x2240], rax
mov rax, qword [rsp + 0x2240]
mov qword [rsp + 0x2248], rax
lea r8, [0x1402360e8]
mov rdx, qword [rsp + 0x2248]
lea rcx, [rsp + 0x1958]
call fcn.1400010b0
mov qword [rsp + 0x2250], rax
mov rax, qword [rsp + 0x2250]
mov qword [rsp + 0x2258], rax
lea r8, [0x1402360a0]
mov rdx, qword [rsp + 0x2258]
lea rcx, [rsp + 0x1960]
call fcn.1400010b0
mov qword [rsp + 0x2260], rax
mov rax, qword [rsp + 0x2260]
mov qword [rsp + 0x2268], rax
mov rcx, qword [rsp + 0x2268]
call fcn.140023510
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x10e0]
call fcn.14007610c
mov dword [rsp + 0x1948], eax
lea rcx, [rsp + 0x1960]
call fcn.140001490
nop
lea rcx, [rsp + 0x1958]
call fcn.140001490
nop
lea rcx, [rsp + 0x1950]
call fcn.140001490
cmp dword [rsp + 0x1948], 0
je 0x14014d95e
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1968]
call fcn.140005df0
mov qword [rsp + 0x2270], rax
mov rax, qword [rsp + 0x2270]
mov qword [rsp + 0x2278], rax
lea r8, [0x140236140]
mov rdx, qword [rsp + 0x2278]
lea rcx, [rsp + 0x1970]
call fcn.1400010b0
mov qword [rsp + 0x2280], rax
mov rax, qword [rsp + 0x2280]
mov qword [rsp + 0x2288], rax
lea r8, str._system32driversNVNRM.SYS
mov rdx, qword [rsp + 0x2288]
lea rcx, [rsp + 0x1978]
call fcn.1400010b0
mov qword [rsp + 0x2290], rax
mov rax, qword [rsp + 0x2290]
mov qword [rsp + 0x2298], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1980]
call fcn.140005df0
mov qword [rsp + 0x22a0], rax
mov rax, qword [rsp + 0x22a0]
mov qword [rsp + 0x22a8], rax
lea r8, [0x1402361a8]
mov rdx, qword [rsp + 0x22a8]
lea rcx, [rsp + 0x1988]
call fcn.1400010b0
mov qword [rsp + 0x22b0], rax
mov rax, qword [rsp + 0x22b0]
mov qword [rsp + 0x22b8], rax
lea r8, [0x140236160]
mov rdx, qword [rsp + 0x22b8]
lea rcx, [rsp + 0x1990]
call fcn.1400010b0
mov qword [rsp + 0x22c0], rax
mov rcx, qword [rsp + 0x2298]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x22c0]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1990]
call fcn.140001490
nop
lea rcx, [rsp + 0x1988]
call fcn.140001490
nop
lea rcx, [rsp + 0x1980]
call fcn.140001490
nop
lea rcx, [rsp + 0x1978]
call fcn.140001490
nop
lea rcx, [rsp + 0x1970]
call fcn.140001490
nop
lea rcx, [rsp + 0x1968]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1998]
call fcn.140005df0
mov qword [rsp + 0x22c8], rax
mov rax, qword [rsp + 0x22c8]
mov qword [rsp + 0x22d0], rax
lea r8, [0x140236208]
mov rdx, qword [rsp + 0x22d0]
lea rcx, [rsp + 0x19a0]
call fcn.1400010b0
mov qword [rsp + 0x22d8], rax
mov rax, qword [rsp + 0x22d8]
mov qword [rsp + 0x22e0], rax
lea r8, str._system32CCBootPnPNVNRM.SYS
mov rdx, qword [rsp + 0x22e0]
lea rcx, [rsp + 0x19a8]
call fcn.1400010b0
mov qword [rsp + 0x22e8], rax
mov rax, qword [rsp + 0x22e8]
mov qword [rsp + 0x22f0], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x19b0]
call fcn.140005df0
mov qword [rsp + 0x22f8], rax
mov rax, qword [rsp + 0x22f8]
mov qword [rsp + 0x2300], rax
lea r8, [0x140236268]
mov rdx, qword [rsp + 0x2300]
lea rcx, [rsp + 0x19b8]
call fcn.1400010b0
mov qword [rsp + 0x2308], rax
mov rax, qword [rsp + 0x2308]
mov qword [rsp + 0x2310], rax
lea r8, str.CCBootPnPXPCCBootPnPNVNRM.SYS
mov rdx, qword [rsp + 0x2310]
lea rcx, [rsp + 0x19c0]
call fcn.1400010b0
mov qword [rsp + 0x2318], rax
mov rcx, qword [rsp + 0x22f0]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x2318]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x19c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x19b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x19b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x19a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x19a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1998]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x19c8]
call fcn.140005df0
mov qword [rsp + 0x2320], rax
mov rax, qword [rsp + 0x2320]
mov qword [rsp + 0x2328], rax
lea r8, [0x1402362c8]
mov rdx, qword [rsp + 0x2328]
lea rcx, [rsp + 0x19d0]
call fcn.1400010b0
mov qword [rsp + 0x2330], rax
mov rax, qword [rsp + 0x2330]
mov qword [rsp + 0x2338], rax
lea r8, str._system32driversNVSNPU.SYS
mov rdx, qword [rsp + 0x2338]
lea rcx, [rsp + 0x19d8]
call fcn.1400010b0
mov qword [rsp + 0x2340], rax
mov rax, qword [rsp + 0x2340]
mov qword [rsp + 0x2348], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x19e0]
call fcn.140005df0
mov qword [rsp + 0x2350], rax
mov rax, qword [rsp + 0x2350]
mov qword [rsp + 0x2358], rax
lea r8, [0x140236328]
mov rdx, qword [rsp + 0x2358]
lea rcx, [rsp + 0x19e8]
call fcn.1400010b0
mov qword [rsp + 0x2360], rax
mov rax, qword [rsp + 0x2360]
mov qword [rsp + 0x2368], rax
lea r8, [0x1402362e0]
mov rdx, qword [rsp + 0x2368]
lea rcx, [rsp + 0x19f0]
call fcn.1400010b0
mov qword [rsp + 0x2370], rax
mov rcx, qword [rsp + 0x2348]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x2370]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x19f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x19e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x19e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x19d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x19d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x19c8]
call fcn.140001490
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x19f8]
call fcn.140005df0
mov qword [rsp + 0x2378], rax
mov rax, qword [rsp + 0x2378]
mov qword [rsp + 0x2380], rax
lea r8, str.:Windows
mov rdx, qword [rsp + 0x2380]
lea rcx, [rsp + 0x1a00]
call fcn.1400010b0
mov qword [rsp + 0x2388], rax
mov rax, qword [rsp + 0x2388]
mov qword [rsp + 0x2390], rax
lea r8, str._system32CCBootPnPNVSNPU.SYS
mov rdx, qword [rsp + 0x2390]
lea rcx, [rsp + 0x1a08]
call fcn.1400010b0
mov qword [rsp + 0x2398], rax
mov rax, qword [rsp + 0x2398]
mov qword [rsp + 0x23a0], rax
mov r8d, 1
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1a10]
call fcn.140005df0
mov qword [rsp + 0x23a8], rax
mov rax, qword [rsp + 0x23a8]
mov qword [rsp + 0x23b0], rax
lea r8, [0x1402363e8]
mov rdx, qword [rsp + 0x23b0]
lea rcx, [rsp + 0x1a18]
call fcn.1400010b0
mov qword [rsp + 0x23b8], rax
mov rax, qword [rsp + 0x23b8]
mov qword [rsp + 0x23c0], rax
lea r8, [0x1402363a0]
mov rdx, qword [rsp + 0x23c0]
lea rcx, [rsp + 0x1a20]
call fcn.1400010b0
mov qword [rsp + 0x23c8], rax
mov rcx, qword [rsp + 0x23a0]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x23c8]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.140116880
lea rcx, [rsp + 0x1a20]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a18]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a10]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a08]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a00]
call fcn.140001490
nop
lea rcx, [rsp + 0x19f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x10e0]
call fcn.140076064
lea rcx, [rsp + 0x880]
call fcn.140005470
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1a28]
call fcn.140117b60
mov qword [rsp + 0x23d0], rax
mov rax, qword [rsp + 0x23d0]
mov qword [rsp + 0x23d8], rax
lea r8, [0x140236420]
mov rdx, qword [rsp + 0x23d8]
lea rcx, [rsp + 0x1a30]
call fcn.1400010b0
mov qword [rsp + 0x23e0], rax
mov rax, qword [rsp + 0x23e0]
mov qword [rsp + 0x23e8], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x23e8]
lea rcx, [rsp + 0x1a38]
call fcn.140006bd0
mov qword [rsp + 0x23f0], rax
mov rax, qword [rsp + 0x23f0]
mov qword [rsp + 0x23f8], rax
lea r8, [0x140236408]
mov rdx, qword [rsp + 0x23f8]
lea rcx, [rsp + 0x1a40]
call fcn.1400010b0
mov qword [rsp + 0x2400], rax
mov rax, qword [rsp + 0x2400]
mov qword [rsp + 0x2408], rax
lea r8, [rsp + 0x878]
mov rdx, qword [rsp + 0x2408]
lea rcx, [rsp + 0x1a48]
call fcn.140006bd0
mov qword [rsp + 0x2410], rax
mov rax, qword [rsp + 0x2410]
mov qword [rsp + 0x2418], rax
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1a50]
call fcn.140117b60
mov qword [rsp + 0x2420], rax
mov rax, qword [rsp + 0x2420]
mov qword [rsp + 0x2428], rax
lea r8, [0x140236448]
mov rdx, qword [rsp + 0x2428]
lea rcx, [rsp + 0x1a58]
call fcn.1400010b0
mov qword [rsp + 0x2430], rax
mov rax, qword [rsp + 0x2430]
mov qword [rsp + 0x2438], rax
lea r8, [rsp + 0x860]
mov rdx, qword [rsp + 0x2438]
lea rcx, [rsp + 0x1a60]
call fcn.140006bd0
mov qword [rsp + 0x2440], rax
mov rax, qword [rsp + 0x2440]
mov qword [rsp + 0x2448], rax
lea r8, [0x140236430]
mov rdx, qword [rsp + 0x2448]
lea rcx, [rsp + 0x1a68]
call fcn.1400010b0
mov qword [rsp + 0x2450], rax
mov rax, qword [rsp + 0x2450]
mov qword [rsp + 0x2458], rax
mov rcx, qword [rsp + 0x2418]
call fcn.140023510
mov rdi, rax
mov rcx, qword [rsp + 0x2458]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.1401174a0
nop
lea rcx, [rsp + 0x1a68]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a60]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a58]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a50]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a48]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a40]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a38]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a30]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a28]
call fcn.140001490
mov dword [rsp + 0x1110], 0
jmp 0x14014dc10
mov eax, dword [rsp + 0x1110]
add eax, 1
mov dword [rsp + 0x1110], eax
cmp dword [rsp + 0x1110], 0xa
jge 0x14014dfc9
lea rcx, [rsp + 0x1128]
call fcn.140002db0
nop
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1a70]
call fcn.140117b60
mov qword [rsp + 0x2460], rax
mov rax, qword [rsp + 0x2460]
mov qword [rsp + 0x2468], rax
lea r8, [0x140236488]
mov rdx, qword [rsp + 0x2468]
lea rcx, [rsp + 0x1a78]
call fcn.1400010b0
mov qword [rsp + 0x2470], rax
mov rax, qword [rsp + 0x2470]
mov qword [rsp + 0x2478], rax
lea r8, [rsp + 0x860]
mov rdx, qword [rsp + 0x2478]
lea rcx, [rsp + 0x1a80]
call fcn.140006bd0
mov qword [rsp + 0x2480], rax
mov rax, qword [rsp + 0x2480]
mov qword [rsp + 0x2488], rax
lea r8, str.Service_d
mov rdx, qword [rsp + 0x2488]
lea rcx, [rsp + 0x1a88]
call fcn.1400010b0
mov qword [rsp + 0x2490], rax
mov rax, qword [rsp + 0x2490]
mov qword [rsp + 0x2498], rax
mov edi, dword [rsp + 0x1110]
add edi, 2
mov rcx, qword [rsp + 0x2498]
call fcn.140023510
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x1128]
call fcn.140002c40
nop
lea rcx, [rsp + 0x1a88]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a80]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a78]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a70]
call fcn.140001490
lea rcx, [rsp + 0x1118]
call fcn.1400053e0
nop
lea rcx, [rsp + 0x1128]
call fcn.140023510
mov r9d, 0x2001f
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x1118]
call fcn.1400055a0
test eax, eax
je 0x14014ddbb
lea rcx, [rsp + 0x1118]
call fcn.140005410
nop
lea rcx, [rsp + 0x1128]
call fcn.140001490
jmp 0x14014dfc9
xor eax, eax
mov word [rsp + 0x1140], ax
lea rdi, [rsp + 0x1142]
xor eax, eax
mov ecx, 0x3fe
rep stosb byte [rdi], al
mov dword [rsp + 0x1130], 0x200
lea r9, [rsp + 0x1130]
lea r8, [rsp + 0x1140]
lea rdx, [0x1402364b0]
lea rcx, [rsp + 0x1118]
call fcn.1400056b0
test eax, eax
je 0x14014de37
lea rcx, [rsp + 0x1118]
call fcn.140005470
nop
lea rcx, [rsp + 0x1118]
call fcn.140005410
nop
lea rcx, [rsp + 0x1128]
call fcn.140001490
jmp 0x14014dfc9
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1a90]
call fcn.140117b60
mov qword [rsp + 0x24a0], rax
mov rax, qword [rsp + 0x24a0]
mov qword [rsp + 0x24a8], rax
lea r8, [0x1402364e0]
mov rdx, qword [rsp + 0x24a8]
lea rcx, [rsp + 0x1a98]
call fcn.1400010b0
mov qword [rsp + 0x24b0], rax
mov rax, qword [rsp + 0x24b0]
mov qword [rsp + 0x24b8], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x24b8]
lea rcx, [rsp + 0x1aa0]
call fcn.140006bd0
mov qword [rsp + 0x24c0], rax
mov rax, qword [rsp + 0x24c0]
mov qword [rsp + 0x24c8], rax
lea r8, [0x1402364c8]
mov rdx, qword [rsp + 0x24c8]
lea rcx, [rsp + 0x1aa8]
call fcn.1400010b0
mov qword [rsp + 0x24d0], rax
mov rax, qword [rsp + 0x24d0]
mov qword [rsp + 0x24d8], rax
lea r8, [rsp + 0x1140]
mov rdx, qword [rsp + 0x24d8]
lea rcx, [rsp + 0x1ab0]
call fcn.1400010b0
mov qword [rsp + 0x24e0], rax
mov rax, qword [rsp + 0x24e0]
mov qword [rsp + 0x24e8], rax
mov rcx, qword [rsp + 0x24e8]
call fcn.140023510
mov rdi, rax
lea rcx, [rsp + 0x1128]
call fcn.140023510
mov rdx, rdi
mov rcx, rax
call fcn.1401174a0
nop
lea rcx, [rsp + 0x1ab0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1aa8]
call fcn.140001490
nop
lea rcx, [rsp + 0x1aa0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a98]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a90]
call fcn.140001490
nop
lea rcx, [rsp + 0x1118]
call fcn.140005410
nop
lea rcx, [rsp + 0x1128]
call fcn.140001490
jmp 0x14014dbff
mov rax, qword [rsp + 0x2570]
movzx edx, word [rax + 0x2c4]
lea rcx, [rsp + 0x1ab8]
call fcn.140117b60
mov qword [rsp + 0x24f0], rax
mov rax, qword [rsp + 0x24f0]
mov qword [rsp + 0x24f8], rax
lea r8, [0x140236528]
mov rdx, qword [rsp + 0x24f8]
lea rcx, [rsp + 0x1ac0]
call fcn.1400010b0
mov qword [rsp + 0x2500], rax
mov rax, qword [rsp + 0x2500]
mov qword [rsp + 0x2508], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x2508]
lea rcx, [rsp + 0x1ac8]
call fcn.140006bd0
mov qword [rsp + 0x2510], rax
mov rax, qword [rsp + 0x2510]
mov qword [rsp + 0x2518], rax
lea r8, str.Services_
mov rdx, qword [rsp + 0x2518]
lea rcx, [rsp + 0x1ad0]
call fcn.1400010b0
mov qword [rsp + 0x2520], rax
mov rax, qword [rsp + 0x2520]
mov qword [rsp + 0x2528], rax
lea r8, [rsp + 0x878]
mov rdx, qword [rsp + 0x2528]
lea rcx, [rsp + 0x1ad8]
call fcn.140006bd0
mov qword [rsp + 0x2530], rax
mov rax, qword [rsp + 0x2530]
mov qword [rsp + 0x2538], rax
lea r8, str.StartOverride
mov rdx, qword [rsp + 0x2538]
lea rcx, [rsp + 0x1ae0]
call fcn.1400010b0
mov qword [rsp + 0x2540], rax
mov rax, qword [rsp + 0x2540]
mov qword [rsp + 0x2548], rax
mov rcx, qword [rsp + 0x2548]
call fcn.140023510
mov rcx, rax
call fcn.140117930
nop
lea rcx, [rsp + 0x1ae0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1ad8]
call fcn.140001490
nop
lea rcx, [rsp + 0x1ad0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1ac8]
call fcn.140001490
nop
lea rcx, [rsp + 0x1ac0]
call fcn.140001490
nop
lea rcx, [rsp + 0x1ab8]
call fcn.140001490
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14000eb00
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x880]
call fcn.140005410
nop
lea rcx, [rsp + 0x868]
call fcn.140005410
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x860]
call fcn.140001490
jmp 0x14014a940
mov rcx, qword [rsp + 0x2570]
add rcx, 0x370
call fcn.14001b610
mov rdx, qword [rsp + 0x20]
mov rcx, rax
call fcn.14000eb00
mov qword [rsp + 0x20], rax
jmp 0x14014a896
mov rcx, qword [rsp + 0x2570]
call fcn.14008112c
nop
lea rcx, [rsp + 0x30]
call fcn.140005410
nop
lea rcx, [rsp + 0x40]
call fcn.140001490
mov rcx, qword [rsp + 0x2550]
xor rcx, rsp
call fcn.1400a8050
add rsp, 0x2560
pop rdi
ret