Function at 0x14001a190
Capabilities:
Create thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x238
movaps xmmword [rsp + 0x220], xmm6
mov r14, rcx
mov rcx, qword [rsp + 0x2c0]
mov esi, dword [rsp + 0x2a0]
mov dword [rsp + 0x70], r8d
mov dword [rsp + 0xbc], r9d
cmp byte [0x1402da5e8], 0
jne 0x14001b328
mov ebp, r9d
mov ebx, r8d
mov rdi, rdx
mov rax, rcx
test rcx, rcx
mov qword [rsp + 0x140], rcx
je 0x14001a243
cmp rax, 0xffffffffffffffff
je 0x14001a262
add esi, 3
mov dword [rsp + 0x74], esi
lea rsi, [rdi + 2]
test byte [rdi], 1
mov rcx, rsi
je 0x14001a20d
mov rcx, qword [rdi + 0x10]
lea rdx, str.larges
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x14001a270
test byte [rdi], 1
mov rcx, rsi
je 0x14001a229
mov rcx, qword [rdi + 0x10]
lea rdx, str.unlockeds
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14001a278
mov dword [rsp + 0x74], 0
jmp 0x14001a278
mov ecx, 8
call fcn.1400731c0
mov qword [rax], 0
mov qword [rsp + 0x2c0], rax
cmp rax, 0xffffffffffffffff
jne 0x14001a1f6
mov qword [rsp + 0x2c0], 0
jmp 0x14001a1f6
mov dword [rsp + 0x74], 2
xorps xmm0, xmm0
movaps xmmword [rsp + 0x150], xmm0
mov eax, dword [r14 + 0x10]
cmp eax, ebx
jge 0x14001a291
mov dword [rsp + 0x70], eax
mov ebx, eax
mov qword [rsp + 0x1d0], rsi
cmp ebp, 2
setge byte [rsp + 0x6f]
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], 0
mov dword [rsp + 0x14c], ebx
mov qword [rsp + 0x218], 0
mov ecx, 0x48
call fcn.1400731c0
xorps xmm0, xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x40], 0
mov qword [rsp + 0x78], rax
xor edx, edx
mov rsi, qword [sym.imp.KERNEL32.DLL_CreateEventA]
nop word [rax + rax]
test rdx, rdx
je 0x14001a310
cmp qword [rax], 0
jne 0x14001a347
jmp 0x14001a32e
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, rax
mov rax, qword [rsp + 0x78]
mov qword [rax + 8], rcx
cmp qword [rax], 0
jne 0x14001a347
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x10]
test rcx, rcx
jne 0x14001a368
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, rax
mov rax, qword [rsp + 0x78]
mov qword [rax + 0x10], rcx
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x14001a300
cmp qword [rax], 0
je 0x14001a300
test rcx, rcx
je 0x14001a300
lea r15, [0x140028a40]
mov rbx, qword [sym.imp.KERNEL32.DLL_CreateThread]
nop word [rax + rax]
mov r9, qword [rsp + 0x78]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov edx, 0x40000
xor ecx, ecx
mov r8, r15
call rbx
test rax, rax
je 0x14001a390
mov qword [rsp + 0x1d8], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], 0
movaps xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], 0
cmp dword [rsp + 0x70], 0
mov qword [rsp + 0x98], rdi
jle 0x14001a80f
xor r12d, r12d
jmp 0x14001a425
mov qword [rax + r12*8], rcx
inc r12
movsxd rax, dword [rsp + 0x70]
cmp r12, rax
jge 0x14001a80f
mov r13, qword [r14 + 8]
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rsp + 0xb0]
cmp rdx, rax
jae 0x14001a460
mov qword [rdx], r13
add rdx, 8
mov qword [rsp + 0xa8], rdx
jmp 0x14001a5cb
mov rcx, qword [rsp + 0xa0]
mov rbx, rdx
sub rbx, rcx
mov rsi, rbx
sar rsi, 3
lea r8, [rsi + 1]
movabs r10, 0x1fffffffffffffff
cmp r8, r10
ja 0x14001b344
sub rax, rcx
movabs r9, 0x7fffffffffffffef
add r9, 9
mov r15, rax
shr r15, 2
cmp r15, r8
cmovbe r15, r8
cmp rax, r9
cmovae r15, r10
test r15, r15
je 0x14001a4df
cmp r15, r10
ja 0x14001b36b
lea rcx, [r15*8]
call fcn.1400731c0
mov rcx, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0xa8]
jmp 0x14001a4e1
xor eax, eax
lea r8, [rax + rsi*8]
mov qword [rax + rsi*8], r13
mov r10, rdx
sub r10, rcx
je 0x14001a59d
add r10, 0xfffffffffffffff8
cmp r10, 0x98
jae 0x14001a507
mov r9, rdx
jmp 0x14001a580
add rbx, rax
mov r9, rdx
sub r9, rbx
cmp r9, 0x20
jae 0x14001a51b
mov r9, rdx
jmp 0x14001a580
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea rdi, [r11*8]
sub r8, rdi
mov r9, rdx
sub r9, rdi
lea rdi, [rax + rsi*8]
add rdi, 0xfffffffffffffff0
mov rbx, r11
neg rbx
xor r13d, r13d
nop dword [rax + rax]
movups xmm0, xmmword [rdx + r13*8 - 0x20]
movups xmm1, xmmword [rdx + r13*8 - 0x10]
movups xmmword [rdi + r13*8], xmm1
movups xmmword [rdi + r13*8 - 0x10], xmm0
add r13, 0xfffffffffffffffc
cmp rbx, r13
jne 0x14001a550
cmp r10, r11
mov rdi, qword [rsp + 0x98]
je 0x14001a595
nop dword [rax]
mov rdx, qword [r9 - 8]
add r9, 0xfffffffffffffff8
mov qword [r8 - 8], rdx
add r8, 0xfffffffffffffff8
cmp r9, rcx
jne 0x14001a580
mov rcx, qword [rsp + 0xa0]
lea rdx, [rax + r15*8]
lea rax, [rax + rsi*8]
add rax, 8
mov qword [rsp + 0xa0], r8
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rdx
test rcx, rcx
je 0x14001a5cb
call fcn.140073240
mov ecx, 0x20
call fcn.1400731c0
mov r15, rax
mov rcx, rax
call fcn.14005c770
mov r8, qword [rsp + 0x88]
cmp r8, qword [rsp + 0x90]
je 0x14001a610
mov qword [r8], r15
add r8, 8
mov qword [rsp + 0x88], r8
mov rbx, qword [sym.imp.KERNEL32.DLL_CreateThread]
jmp 0x14001a782
mov rcx, qword [rsp + 0x80]
mov rbx, r8
sub rbx, rcx
mov rsi, rbx
sar rsi, 3
lea rax, [rsi + 1]
movabs r9, 0x1fffffffffffffff
cmp rax, r9
ja 0x14001b351
movabs rdx, 0x7fffffffffffffef
add rdx, 9
mov rbp, rbx
shr rbp, 2
cmp rbp, rax
cmovbe rbp, rax
cmp rbx, rdx
cmovae rbp, r9
test rbp, rbp
je 0x14001a68c
cmp rbp, r9
ja 0x14001b370
lea rcx, [rbp*8]
call fcn.1400731c0
mov rcx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
jmp 0x14001a68e
xor eax, eax
lea rdx, [rax + rsi*8]
mov qword [rax + rsi*8], r15
mov r10, r8
sub r10, rcx
je 0x14001a74d
add r10, 0xfffffffffffffff8
cmp r10, 0x98
jae 0x14001a6b4
mov r9, r8
jmp 0x14001a730
add rbx, rax
mov r9, r8
sub r9, rbx
cmp r9, 0x20
jae 0x14001a6c8
mov r9, r8
jmp 0x14001a730
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea rdi, [r11*8]
sub rdx, rdi
mov r9, r8
sub r9, rdi
lea rdi, [rax + rsi*8]
add rdi, 0xfffffffffffffff0
mov rbx, r11
neg rbx
xor r15d, r15d
nop dword [rax + rax]
movups xmm0, xmmword [r8 + r15*8 - 0x20]
movups xmm1, xmmword [r8 + r15*8 - 0x10]
movups xmmword [rdi + r15*8], xmm1
movups xmmword [rdi + r15*8 - 0x10], xmm0
add r15, 0xfffffffffffffffc
cmp rbx, r15
jne 0x14001a700
cmp r10, r11
mov rdi, qword [rsp + 0x98]
je 0x14001a745
nop dword [rax]
mov r8, qword [r9 - 8]
add r9, 0xfffffffffffffff8
mov qword [rdx - 8], r8
add rdx, 0xfffffffffffffff8
cmp r9, rcx
jne 0x14001a730
mov rcx, qword [rsp + 0x80]
lea r8, [rax + rbp*8]
lea rax, [rax + rsi*8]
add rax, 8
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], r8
test rcx, rcx
mov rbx, qword [sym.imp.KERNEL32.DLL_CreateThread]
je 0x14001a782
call fcn.140073240
test r12, r12
je 0x14001a414
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rax + r12*8]
test r12b, 7
je 0x14001a7d0
mov edx, r12d
and edx, 7
xor r8d, r8d
nop word cs:[rax + rax]
mov rcx, qword [rcx + 8]
inc r8
cmp rdx, r8
jne 0x14001a7b0
mov rdx, r12
sub rdx, r8
cmp r12, 8
jb 0x14001a410
jmp 0x14001a7dd
mov rdx, r12
cmp r12, 8
jb 0x14001a410
dec rdx
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 8]
add rdx, 0xfffffffffffffff8
cmp rdx, 0xfffffffffffffffe
jb 0x14001a7e0
jmp 0x14001a410
mov qword [rsp + 0x210], r14
mov qword [rsp + 0x1c0], 0
mov ecx, 0xa0
call fcn.1400731c0
lea rcx, [0x14025fe60]
mov qword [rax], rcx
lea rcx, [rsp + 0xa0]
mov qword [rax + 8], rcx
lea rcx, [rsp + 0x210]
mov qword [rax + 0x10], rcx
lea rcx, [rsp + 0x6f]
mov qword [rax + 0x18], rcx
lea rcx, [rsp + 0x80]
mov qword [rax + 0x20], rcx
lea rcx, [rsp + 0x2b0]
mov qword [rax + 0x28], rcx
lea rcx, [rsp + 0x2a0]
mov qword [rax + 0x30], rcx
lea rcx, [rsp + 0x2a8]
mov qword [rax + 0x38], rcx
lea rcx, [rsp + 0xbc]
mov qword [rax + 0x40], rcx
lea rcx, [rsp + 0x2c0]
mov qword [rax + 0x48], rcx
lea rcx, [rsp + 0x14c]
mov qword [rax + 0x50], rcx
lea rcx, [rsp + 0x78]
mov qword [rax + 0x58], rcx
lea rcx, [rsp + 0x2c8]
mov qword [rax + 0x60], rcx
lea rcx, [rsp + 0x2d0]
mov qword [rax + 0x68], rcx
mov rcx, qword [rsp + 0x2d8]
mov qword [rax + 0x70], rcx
lea rcx, [rsp + 0x2b8]
mov qword [rax + 0x78], rcx
lea rcx, [rsp + 0x74]
mov qword [rax + 0x80], rcx
mov qword [rax + 0x88], rdi
lea rcx, [rsp + 0x218]
mov qword [rax + 0x90], rcx
lea rcx, [rsp + 0x70]
mov qword [rax + 0x98], rcx
mov qword [rsp + 0x1c0], rax
cmp dword [rsp + 0x70], 0
jle 0x14001ab5f
xor esi, esi
lea r13, [rsp + 0x1a0]
lea r14, [0x1400356a0]
jmp 0x14001a95d
mov qword [r15], r12
add r15, 8
mov qword [rsp + 0xc8], r15
inc esi
mov eax, dword [rsp + 0x70]
cmp esi, eax
jge 0x14001ab1e
mov ecx, 0x10
call fcn.1400731c0
mov r15, rax
mov qword [rax], r13
mov dword [rax + 8], esi
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
mov r8, r14
mov r9, r15
call rbx
mov r12, rax
test rax, rax
je 0x14001a970
mov r15, qword [rsp + 0xc8]
cmp r15, qword [rsp + 0xd0]
jne 0x14001a940
mov rbx, qword [rsp + 0xc0]
mov r13, r15
sub r13, rbx
mov rdi, r13
sar rdi, 3
lea rax, [rdi + 1]
movabs rdx, 0x1fffffffffffffff
cmp rax, rdx
ja 0x14001b35e
movabs rcx, 0x7fffffffffffffef
add rcx, 9
mov rbp, r13
shr rbp, 2
cmp rbp, rax
cmovbe rbp, rax
cmp r13, rcx
cmovae rbp, rdx
test rbp, rbp
je 0x14001aa13
cmp rbp, rdx
ja 0x14001b375
lea rcx, [rbp*8]
call fcn.1400731c0
jmp 0x14001aa15
xor eax, eax
lea rcx, [rax + rdi*8]
mov qword [rax + rdi*8], r12
mov r8, r15
sub r8, rbx
je 0x14001aa6f
add r8, 0xfffffffffffffff8
cmp r8, 0x98
jb 0x14001aa41
add r13, rax
mov rdx, r15
sub rdx, r13
cmp rdx, 0x20
jae 0x14001aab8
mov rdx, r15
lea r13, [rsp + 0x1a0]
nop dword [rax]
mov r8, qword [rdx - 8]
add rdx, 0xfffffffffffffff8
mov qword [rcx - 8], r8
add rcx, 0xfffffffffffffff8
cmp rdx, rbx
jne 0x14001aa50
mov r15, qword [rsp + 0xc0]
jmp 0x14001aa77
lea r13, [rsp + 0x1a0]
lea rdx, [rax + rbp*8]
lea rax, [rax + rdi*8]
add rax, 8
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], rdx
test r15, r15
mov rbx, qword [sym.imp.KERNEL32.DLL_CreateThread]
je 0x14001a94f
mov rcx, r15
call fcn.140073240
jmp 0x14001a94f
shr r8, 3
inc r8
mov r9, r8
and r9, 0xfffffffffffffffc
lea r10, [r9*8]
sub rcx, r10
mov rdx, r15
sub rdx, r10
lea r10, [rax + rdi*8]
add r10, 0xfffffffffffffff0
mov r11, r9
neg r11
xor r12d, r12d
lea r13, [rsp + 0x1a0]
movups xmm0, xmmword [r15 + r12*8 - 0x20]
movups xmm1, xmmword [r15 + r12*8 - 0x10]
movups xmmword [r10 + r12*8], xmm1
movups xmmword [r10 + r12*8 - 0x10], xmm0
add r12, 0xfffffffffffffffc
cmp r11, r12
jne 0x14001aaf0
cmp r8, r9
jne 0x14001aa50
jmp 0x14001aa65
test eax, eax
jle 0x14001ab5f
mov rsi, qword [rsp + 0xc0]
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
mov r14, qword [sym.imp.KERNEL32.DLL_CloseHandle]
nop word [rax + rax]
mov rcx, qword [rsi + rdi*8]
mov edx, 0xffffffff
call rbx
mov rcx, qword [rsi + rdi*8]
call r14
inc rdi
movsxd rax, dword [rsp + 0x70]
cmp rdi, rax
jl 0x14001ab40
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.DLL_SetEvent]
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp dword [rsp + 0xbc], 1
jne 0x14001ad14
movsxd rax, dword [rsp + 0x2a0]
mov rcx, qword [0x1402da310]
lea rax, [rax + rax*2]
movzx edx, byte [rsp + 0x2a8]
mov rsi, qword [rcx + rax*8]
lea rdi, [rdx + rdx*2]
cmp qword [rsi + rdi*8 + 0x10], 0
je 0x14001ad14
lea rcx, [rsp + 0x1f8]
mov rdx, qword [rsp + 0x98]
call fcn.140075840
lea rcx, [rsi + rdi*8]
mov r8d, dword [rsp + 0x70]
mov eax, dword [rsp + 0x2a0]
movzx edx, byte [rsp + 0x2a8]
mov r9, qword [rsp + 0x2b0]
movups xmm0, xmmword [rsp + 0x2c8]
mov r10, qword [rsp + 0x2d8]
mov qword [rsp + 0x58], r10
movups xmmword [rsp + 0x48], xmm0
mov r10, qword [rsp + 0x140]
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x30], r9
mov byte [rsp + 0x28], dl
mov dword [rsp + 0x20], eax
mov qword [rsp + 0x38], 4
lea rdx, [rsp + 0x1f8]
mov r9d, 2
call fcn.14001a190
test byte [rsp + 0x1f8], 1
je 0x14001ac55
mov rcx, qword [rsp + 0x208]
call fcn.140073240
movsxd rax, dword [rsp + 0x2a0]
mov rcx, qword [0x1402da328]
lea rax, [rax + rax*2]
movzx esi, byte [rsp + 0x2a8]
mov rdi, qword [rcx + rax*8]
lea rcx, [rsp + 0x1e0]
mov rdx, qword [rsp + 0x98]
call fcn.140075840
lea rax, [rsi + rsi*2]
lea rcx, [rdi + rax*8]
mov r8d, dword [rsp + 0x70]
mov eax, dword [rsp + 0x2a0]
movzx edx, byte [rsp + 0x2a8]
mov r9, qword [rsp + 0x2b0]
movups xmm0, xmmword [rsp + 0x2c8]
mov r10, qword [rsp + 0x2d8]
mov qword [rsp + 0x58], r10
movups xmmword [rsp + 0x48], xmm0
mov r10, qword [rsp + 0x140]
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x30], r9
mov byte [rsp + 0x28], dl
mov dword [rsp + 0x20], eax
mov qword [rsp + 0x38], 4
lea rdx, [rsp + 0x1e0]
mov r9d, 3
call fcn.14001a190
test byte [rsp + 0x1e0], 1
je 0x14001ad14
mov rcx, qword [rsp + 0x1f0]
call fcn.140073240
cmp byte [rsp + 0x6f], 0
je 0x14001ad32
movzx edi, byte [0x1402da388]
mov ecx, edi
and cl, 1
je 0x14001ad50
mov rdi, qword [0x1402da390]
jmp 0x14001ad53
movzx esi, byte [0x1402da388]
mov ecx, esi
and cl, 1
je 0x14001aea8
mov rsi, qword [0x1402da390]
jmp 0x14001aeab
shr rdi, 1
lea rsi, [rdi + 0x3a]
movabs rax, 0x7fffffffffffffef
cmp rsi, rax
ja 0x14001b389
cmp rsi, 0xa
ja 0x14001ad96
xorps xmm0, xmm0
movaps xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], 0
add sil, sil
mov byte [rsp + 0x120], sil
xor eax, eax
jmp 0x14001add7
mov rbx, rsi
or rbx, 7
inc rbx
js 0x14001b384
lea rcx, [rbx + rbx]
call fcn.1400731c0
or rbx, 1
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x128], rsi
movzx ecx, byte [0x1402da388]
and cl, 1
mov esi, ebx
test sil, 1
lea rsi, [rsp + 0x122]
cmovne rsi, rax
test cl, cl
je 0x14001adf4
mov rdx, qword [0x1402da398]
jmp 0x14001adfb
lea rdx, [0x1402da38a]
lea r8, [rdi + rdi]
mov rcx, rsi
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.ProgramDataAdobeExtension_Manager_CCLogsunlockeds.txt]
movups xmmword [rsi + rdi*2], xmm0
movups xmm0, xmmword [0x14025d8a0]
movups xmmword [rsi + rdi*2 + 0x10], xmm0
movups xmm0, xmmword [0x14025d8b0]
movups xmmword [rsi + rdi*2 + 0x20], xmm0
movups xmm0, xmmword [0x14025d8c0]
movups xmmword [rsi + rdi*2 + 0x30], xmm0
movups xmm0, xmmword [0x14025d8d0]
movups xmmword [rsi + rdi*2 + 0x40], xmm0
movups xmm0, xmmword [0x14025d8e0]
movups xmmword [rsi + rdi*2 + 0x50], xmm0
movups xmm0, xmmword [0x14025d8f0]
movups xmmword [rsi + rdi*2 + 0x60], xmm0
mov dword [rsi + rdi*2 + 0x70], 0x740078
mov word [rsi + rdi*2 + 0x74], 0
mov r9, qword [rsp + 0x2b8]
mov byte [rsp + 0x20], 1
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x120]
xor ecx, ecx
call fcn.1400283a0
test byte [rsp + 0x120], 1
je 0x14001b0c7
mov rcx, qword [rsp + 0x130]
jmp 0x14001b0c2
shr rsi, 1
lea rdi, [rsi + 0x2d]
movabs rax, 0x7fffffffffffffef
cmp rdi, rax
ja 0x14001b396
mov ebx, dword [rsp + 0x74]
cmp rdi, 0xa
ja 0x14001aef2
xorps xmm0, xmm0
movaps xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], 0
add dil, dil
mov byte [rsp + 0x100], dil
xor eax, eax
jmp 0x14001af34
mov r14, rdi
or r14, 7
inc r14
js 0x14001b3a3
lea rcx, [r14 + r14]
call fcn.1400731c0
or r14, 1
mov qword [rsp + 0x100], r14
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x108], rdi
movzx ecx, byte [0x1402da388]
and cl, 1
mov edi, r14d
test dil, 1
lea r14, [rsp + 0x102]
cmovne r14, rax
test cl, cl
je 0x14001af51
mov rdx, qword [0x1402da398]
jmp 0x14001af58
lea rdx, [0x1402da38a]
mov rdi, qword [rsp + 0x98]
lea r8, [rsi + rsi]
mov rcx, r14
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.ProgramDataAdobeExtension_Manager_CCLogs_]
movups xmmword [r14 + rsi*2], xmm0
movups xmm0, xmmword [0x14025d916]
movups xmmword [r14 + rsi*2 + 0x10], xmm0
movups xmm0, xmmword [0x14025d926]
movups xmmword [r14 + rsi*2 + 0x20], xmm0
movups xmm0, xmmword [0x14025d936]
movups xmmword [r14 + rsi*2 + 0x30], xmm0
movups xmm0, xmmword [0x14025d946]
movups xmmword [r14 + rsi*2 + 0x40], xmm0
movups xmm0, xmmword [0x14025d950]
movups xmmword [r14 + rsi*2 + 0x4a], xmm0
mov word [r14 + rsi*2 + 0x5a], 0
movzx r8d, byte [rdi]
test r8b, 1
je 0x14001afd5
mov rdx, qword [rdi + 0x10]
mov r8, qword [rdi + 8]
jmp 0x14001afe0
shr r8, 1
mov rdx, qword [rsp + 0x1d0]
lea rcx, [rsp + 0x100]
call fcn.140075c20
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x170], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x160], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, [0x14025d962]
lea rcx, [rsp + 0x160]
call fcn.140076360
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x190], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x180], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov r9, qword [rsp + 0x2b8]
mov byte [rsp + 0x20], 1
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x180]
mov ecx, ebx
call fcn.1400283a0
test byte [rsp + 0x180], 1
jne 0x14001b08c
test byte [rsp + 0x160], 1
jne 0x14001b0a3
test byte [rsp + 0x100], 1
jne 0x14001b0ba
jmp 0x14001b0c7
mov rcx, qword [rsp + 0x190]
call fcn.140073240
test byte [rsp + 0x160], 1
je 0x14001b080
mov rcx, qword [rsp + 0x170]
call fcn.140073240
test byte [rsp + 0x100], 1
je 0x14001b0c7
mov rcx, qword [rsp + 0x110]
call fcn.140073240
movzx edi, byte [0x1402da388]
mov ecx, edi
and cl, 1
je 0x14001b0de
mov rdi, qword [0x1402da390]
jmp 0x14001b0e1
shr rdi, 1
lea rsi, [rdi + 0x36]
movabs rax, 0x7fffffffffffffef
cmp rsi, rax
ja 0x14001b37a
cmp rsi, 0xa
ja 0x14001b124
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], 0
add sil, sil
mov byte [rsp + 0xe0], sil
xor eax, eax
jmp 0x14001b165
mov rbx, rsi
or rbx, 7
inc rbx
js 0x14001b384
lea rcx, [rbx + rbx]
call fcn.1400731c0
or rbx, 1
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xe8], rsi
movzx ecx, byte [0x1402da388]
and cl, 1
mov esi, ebx
test sil, 1
lea rsi, [rsp + 0xe2]
cmovne rsi, rax
test cl, cl
je 0x14001b182
mov rdx, qword [0x1402da398]
jmp 0x14001b189
lea rdx, [0x1402da38a]
lea r8, [rdi + rdi]
mov rcx, rsi
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.ProgramDataAdobeExtension_Manager_CCLogs_fails.txt]
movups xmmword [rsi + rdi*2], xmm0
movups xmm0, xmmword [0x14025d97c]
movups xmmword [rsi + rdi*2 + 0x10], xmm0
movups xmm0, xmmword [0x14025d98c]
movups xmmword [rsi + rdi*2 + 0x20], xmm0
movups xmm0, xmmword [0x14025d99c]
movups xmmword [rsi + rdi*2 + 0x30], xmm0
movups xmm0, xmmword [0x14025d9ac]
movups xmmword [rsi + rdi*2 + 0x40], xmm0
movups xmm0, xmmword [0x14025d9bc]
movups xmmword [rsi + rdi*2 + 0x50], xmm0
movups xmm0, xmmword [0x14025d9c8]
movups xmmword [rsi + rdi*2 + 0x5c], xmm0
mov word [rsi + rdi*2 + 0x6c], 0
mov byte [rsp + 0x20], 1
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0xe0]
mov r9d, 0xa
mov ecx, 1
call fcn.1400283a0
test byte [rsp + 0xe0], 1
je 0x14001b22b
mov rcx, qword [rsp + 0xf0]
call fcn.140073240
mov rax, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
cmp rdx, rax
je 0x14001b282
xor esi, esi
jmp 0x14001b262
inc rsi
mov rcx, rdx
sub rcx, rax
sar rcx, 3
cmp rsi, rcx
jae 0x14001b282
mov rcx, qword [rax + rsi*8]
test rcx, rcx
je 0x14001b250
call fcn.140073240
mov rax, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
jmp 0x14001b250
lea rsi, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
je 0x14001b2a6
cmp rcx, qword [rsp + 0x140]
je 0x14001b2a6
call fcn.140073240
mov rcx, qword [rsp + 0x1c0]
cmp rcx, rsi
je 0x14001b2c4
test rcx, rcx
je 0x14001b2d5
mov rax, qword [rcx]
add rax, 0x28
mov rsi, rcx
jmp 0x14001b2d0
mov rax, qword [rsp + 0x1a0]
add rax, 0x20
mov rcx, rsi
call qword [rax]
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001b2ef
mov qword [rsp + 0xa8], rcx
call fcn.140073240
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x14001b301
call fcn.140073240
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14001b31b
mov qword [rsp + 0x88], rcx
call fcn.140073240
mov rcx, qword [rsp + 0x150]
call fcn.140257dd0
movaps xmm6, xmmword [rsp + 0x220]
add rsp, 0x238
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0xa0]
call fcn.1400487f0
lea rcx, [rsp + 0x80]
call fcn.140048810
lea rcx, [rsp + 0xc0]
call fcn.14003e380
call fcn.140002ba0
call fcn.140002ba0
call fcn.140002ba0
lea rcx, [rsp + 0xe0]
jmp 0x14001b391
call fcn.140002ba0
lea rcx, [rsp + 0x120]
call fcn.140002b00
lea rcx, [rsp + 0x100]
call fcn.140002b00
call fcn.140002ba0
mov rsi, rax
test byte [rsp + 0x1e0], 1
je 0x14001b4e8
mov rcx, qword [rsp + 0x1f0]
call fcn.140073240
jmp 0x14001b4e8
mov rdx, qword [rsp + 0x1c0]
lea rcx, [rsp + 0x1a0]
cmp rdx, rcx
jne 0x14001b50b
mov rax, qword [rsp + 0x1a0]
add rax, 0x20
jmp 0x14001b51a
test rdx, rdx
je 0x14001b51c
mov rax, qword [rdx]
add rax, 0x28
mov rcx, rdx
call qword [rax]
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001b536
mov qword [rsp + 0xa8], rcx
call fcn.140073240
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x14001b550
mov qword [rsp + 0xc8], rcx
call fcn.140073240
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14001b56a
mov qword [rsp + 0x88], rcx
call fcn.140073240
mov rcx, qword [rsp + 0x150]
call fcn.140257dd0
mov rcx, rsi
call fcn.14009d370
int3