Function at 0x140001000
Capabilities:
Get common file path
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x10920
call fcn.1400266d0
sub rsp, rax
mov ecx, dword [0x140060b88]
call fcn.140014de0
test eax, eax
jne 0x140001039
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov word [rsp + 0x50], ax
lea rax, [rsp + 0x52]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov r8d, 0x104
lea rdx, [rsp + 0x50]
xor ecx, ecx
call qword [0x1400671e0]
test eax, eax
jne 0x140001070
xor ecx, ecx
call qword [0x1400671e8]
call qword [0x140067180]
mov qword [rsp + 0x40], rax
cmp dword [0x140060aa4], 1
jne 0x1400017c5
call fcn.140018ef0
test eax, eax
jne 0x14000109e
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea rcx, [rsp + 0x4c8]
call fcn.140002400
lea rcx, [rsp + 0x4c8]
call fcn.140017b30
test eax, eax
jne 0x1400010c9
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [0x140067208]
lea rcx, [0x1400364c0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4b0], rax
cmp qword [rsp + 0x4b0], 0
je 0x14000128f
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x4f8], rax
cmp qword [rsp + 0x4f8], 0
je 0x14000128f
mov r8d, 0x104
mov rdx, qword [rsp + 0x4f8]
mov rcx, qword [rsp + 0x4b0]
call qword [0x1400671e0]
test eax, eax
je 0x140001281
lea rax, [0x1400364d8]
mov qword [rsp + 0x500], rax
lea rax, [0x1400364f0]
mov qword [rsp + 0x508], rax
lea rax, [0x140036510]
mov qword [rsp + 0x510], rax
lea rax, [0x140036530]
mov qword [rsp + 0x518], rax
lea rax, [0x140036548]
mov qword [rsp + 0x520], rax
lea rax, [0x140036560]
mov qword [rsp + 0x528], rax
lea rax, [0x140036580]
mov qword [rsp + 0x530], rax
lea rax, [0x1400365a0]
mov qword [rsp + 0x538], rax
lea rax, [0x1400365c0]
mov qword [rsp + 0x540], rax
lea rax, [0x1400365e0]
mov qword [rsp + 0x548], rax
lea rax, [0x1400365f8]
mov qword [rsp + 0x550], rax
lea rax, [0x140036610]
mov qword [rsp + 0x558], rax
lea rax, [0x140036628]
mov qword [rsp + 0x560], rax
lea rax, [0x140036648]
mov qword [rsp + 0x568], rax
mov dword [rsp + 0x570], 0
jmp 0x140001227
mov eax, dword [rsp + 0x570]
inc eax
mov dword [rsp + 0x570], eax
cmp dword [rsp + 0x570], 0xe
jge 0x140001281
movsxd rax, dword [rsp + 0x570]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x580]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x140060b90]
mov rcx, qword [rsp + rax*8 + 0x500]
call fcn.1400148b0
lea rdx, [rsp + 0x580]
mov rcx, qword [rsp + 0x4f8]
call fcn.140017850
jmp 0x140001217
mov rcx, qword [rsp + 0x4f8]
call qword [0x1400671c8]
lea rcx, [0x140036668]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4c0], rax
cmp qword [rsp + 0x4c0], 0
je 0x140001437
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x5f0], rax
cmp qword [rsp + 0x5f0], 0
je 0x140001437
mov r8d, 0x104
mov rdx, qword [rsp + 0x5f0]
mov rcx, qword [rsp + 0x4c0]
call qword [0x1400671e0]
test eax, eax
je 0x140001429
lea rax, [0x140036688]
mov qword [rsp + 0x600], rax
lea rax, [0x1400366a0]
mov qword [rsp + 0x608], rax
lea rax, [0x1400366b8]
mov qword [rsp + 0x610], rax
lea rax, [0x1400366d0]
mov qword [rsp + 0x618], rax
lea rax, [0x1400366e8]
mov qword [rsp + 0x620], rax
lea rax, [0x140036700]
mov qword [rsp + 0x628], rax
lea rax, [0x140036718]
mov qword [rsp + 0x630], rax
lea rax, [0x140036738]
mov qword [rsp + 0x638], rax
lea rax, [0x140036758]
mov qword [rsp + 0x640], rax
lea rax, [0x140036778]
mov qword [rsp + 0x648], rax
lea rax, [0x140036798]
mov qword [rsp + 0x650], rax
lea rax, [0x1400367b0]
mov qword [rsp + 0x658], rax
mov dword [rsp + 0x660], 0
jmp 0x1400013cf
mov eax, dword [rsp + 0x660]
inc eax
mov dword [rsp + 0x660], eax
cmp dword [rsp + 0x660], 0xc
jge 0x140001429
movsxd rax, dword [rsp + 0x660]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x670]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x140060b90]
mov rcx, qword [rsp + rax*8 + 0x600]
call fcn.1400148b0
lea rdx, [rsp + 0x670]
mov rcx, qword [rsp + 0x5f0]
call fcn.140017850
jmp 0x1400013bf
mov rcx, qword [rsp + 0x5f0]
call qword [0x1400671c8]
lea rcx, [0x1400367c8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4e8], rax
cmp qword [rsp + 0x4e8], 0
je 0x14000153a
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x6e0], rax
cmp qword [rsp + 0x6e0], 0
je 0x14000153a
mov r8d, 0x104
mov rdx, qword [rsp + 0x6e0]
mov rcx, qword [rsp + 0x4e8]
call qword [0x1400671e0]
test eax, eax
je 0x14000152c
lea rax, [0x1400367e0]
mov qword [rsp + 0x6e8], rax
mov dword [rsp + 0x6f0], 0
jmp 0x1400014d2
mov eax, dword [rsp + 0x6f0]
inc eax
mov dword [rsp + 0x6f0], eax
cmp dword [rsp + 0x6f0], 1
jge 0x14000152c
movsxd rax, dword [rsp + 0x6f0]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x700]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x140060b90]
mov rcx, qword [rsp + rax*8 + 0x6e8]
call fcn.1400148b0
lea rdx, [rsp + 0x700]
mov rcx, qword [rsp + 0x6e0]
call fcn.140017850
jmp 0x1400014c2
mov rcx, qword [rsp + 0x6e0]
call qword [0x1400671c8]
lea rcx, [0x140036800]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4f0], rax
cmp qword [rsp + 0x4f0], 0
je 0x14000166a
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x770], rax
cmp qword [rsp + 0x770], 0
je 0x14000166a
mov r8d, 0x104
mov rdx, qword [rsp + 0x770]
mov rcx, qword [rsp + 0x4f0]
call qword [0x1400671e0]
test eax, eax
je 0x14000165c
lea rax, [0x140036818]
mov qword [rsp + 0x778], rax
lea rax, [0x140036838]
mov qword [rsp + 0x780], rax
lea rax, [0x140036858]
mov qword [rsp + 0x788], rax
lea rax, [0x140036878]
mov qword [rsp + 0x790], rax
mov dword [rsp + 0x798], 0
jmp 0x140001602
mov eax, dword [rsp + 0x798]
inc eax
mov dword [rsp + 0x798], eax
cmp dword [rsp + 0x798], 4
jge 0x14000165c
movsxd rax, dword [rsp + 0x798]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x7a0]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x140060b90]
mov rcx, qword [rsp + rax*8 + 0x778]
call fcn.1400148b0
lea rdx, [rsp + 0x7a0]
mov rcx, qword [rsp + 0x770]
call fcn.140017850
jmp 0x1400015f2
mov rcx, qword [rsp + 0x770]
call qword [0x1400671c8]
lea rcx, str.WIN32U.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x4b8], rax
cmp qword [rsp + 0x4b8], 0
je 0x14000179a
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x810], rax
cmp qword [rsp + 0x810], 0
je 0x14000179a
mov r8d, 0x104
mov rdx, qword [rsp + 0x810]
mov rcx, qword [rsp + 0x4b8]
call qword [0x1400671e0]
test eax, eax
je 0x14000178c
lea rax, [0x1400368a8]
mov qword [rsp + 0x818], rax
lea rax, [0x1400368c8]
mov qword [rsp + 0x820], rax
lea rax, [0x1400368f0]
mov qword [rsp + 0x828], rax
lea rax, [0x140036918]
mov qword [rsp + 0x830], rax
mov dword [rsp + 0x838], 0
jmp 0x140001732
mov eax, dword [rsp + 0x838]
inc eax
mov dword [rsp + 0x838], eax
cmp dword [rsp + 0x838], 4
jge 0x14000178c
movsxd rax, dword [rsp + 0x838]
mov dword [rsp + 0x28], 0x64
lea rcx, [rsp + 0x840]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x140060b90]
mov rcx, qword [rsp + rax*8 + 0x818]
call fcn.1400148b0
lea rdx, [rsp + 0x840]
mov rcx, qword [rsp + 0x810]
call fcn.140017850
jmp 0x140001722
mov rcx, qword [rsp + 0x810]
call qword [0x1400671c8]
lea rcx, [rsp + 0x4c8]
call fcn.140017ed0
test eax, eax
jne 0x1400017b8
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [0x140067208]
lea rcx, [rsp + 0x4c8]
call fcn.140002440
mov dword [rsp + 0x410], 0x18
mov qword [rsp + 0x418], 0
mov dword [rsp + 0x420], 1
lea r8, str.0EB37759_1AC7_4F45_92C8_DC4C566508D5
xor edx, edx
lea rcx, [rsp + 0x410]
call qword [0x140067188]
mov qword [0x140066e30], rax
cmp qword [0x140066e30], 0
jne 0x140001817
xor ecx, ecx
call qword [0x1400671e8]
cmp dword [0x140062164], 1
jne 0x140001825
call fcn.14000b5d0
call fcn.140004af0
cmp eax, 1
jne 0x1400018c4
lea r8, str.247CEE34_A6D8_417C_B761_3871BFD07FAE
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
mov qword [0x140066e28], rax
cmp qword [0x140066e28], 0
jne 0x140001860
xor ecx, ecx
call qword [0x140067248]
mov qword [rsp + 0x8b0], 0
lea r8, str.FACD6D2B_247F_4EF2_87BC_F77FB24549A4
xor edx, edx
mov ecx, 0x100002
call qword [0x140067238]
mov qword [rsp + 0x8b0], rax
cmp qword [rsp + 0x8b0], 0
jne 0x14000189b
xor ecx, ecx
call qword [0x140067248]
mov rcx, qword [rsp + 0x8b0]
call qword [0x140067240]
mov rcx, qword [rsp + 0x8b0]
call qword [0x1400671a0]
call fcn.14001b8c0
xor ecx, ecx
call qword [0x140067248]
call fcn.14000a8b0
test eax, eax
jne 0x1400018d5
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov qword [rsp + 0x478], 0
lea r8, str.ECA7DF78_C00F_4277_A99C_22BCECF2FEB8
xor edx, edx
mov ecx, 0x100000
call qword [0x140067170]
mov qword [rsp + 0x478], rax
cmp qword [rsp + 0x478], 0
je 0x14000191e
mov rcx, qword [rsp + 0x478]
call qword [0x1400671a0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, str.ECA7DF78_C00F_4277_A99C_22BCECF2FEB8
mov edx, 1
xor ecx, ecx
call qword [0x140067188]
test rax, rax
jne 0x14000193f
xor ecx, ecx
call qword [0x1400671e8]
cmp dword [0x14006216c], 1
jne 0x14000197b
cmp dword [0x140066f38], 0
jne 0x14000197b
call fcn.14001c000
test eax, eax
jne 0x14000197b
call fcn.14001c860
cmp eax, 0xa
jb 0x14000197b
lea rcx, [rsp + 0x50]
call fcn.140004e80
cmp eax, 1
jne 0x14000197b
xor ecx, ecx
call qword [0x1400671e8]
cmp dword [0x140060ba0], 1
jne 0x1400019e1
cmp dword [0x140066f3c], 0
jne 0x1400019e1
call fcn.14001c860
cmp eax, 0xa
jb 0x1400019e1
call fcn.14001c000
cmp eax, 1
jne 0x1400019e1
lea rdx, [0x140060ba8]
mov ecx, dword [0x140060ba4]
call fcn.140010550
mov qword [rsp + 0x8b8], rax
cmp qword [rsp + 0x8b8], 0
je 0x1400019e1
mov rcx, qword [rsp + 0x8b8]
call fcn.140010a70
mov rcx, qword [rsp + 0x8b8]
call qword [0x1400671c8]
lea r8, str.09882660_C1BF_4062_821D_8885FF0340D3
mov edx, 1
xor ecx, ecx
call qword [0x140067188]
mov qword [rsp + 0x438], rax
cmp qword [rsp + 0x438], 0
jne 0x140001a13
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [0x140067270]
cmp eax, 0xb7
jne 0x140001a2b
mov ecx, 0xffffffff
call qword [0x1400671e8]
lea r8, str.0EB7BDFC_3703_493E_83A8_A36874EF95A9
mov edx, 1
xor ecx, ecx
call qword [0x140067188]
mov qword [rsp + 0x428], rax
cmp qword [rsp + 0x428], 0
jne 0x140001a5a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.0EB7BDFC_3703_493E_83A8_A36874EF95A9
call fcn.14001c4c0
lea r9, str.247CEE34_A6D8_417C_B761_3871BFD07FAE
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [0x1400671d0]
mov qword [0x140066e28], rax
cmp qword [0x140066e28], 0
jne 0x140001a99
mov ecx, 0xffffffff
call qword [0x1400671e8]
call qword [0x140067270]
cmp eax, 0xb7
jne 0x140001aae
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.247CEE34_A6D8_417C_B761_3871BFD07FAE
call fcn.14001c4c0
cmp dword [0x140060778], 1
jne 0x140001cb6
mov r8d, 0x7fff
lea rdx, [rsp + 0x8c0]
xor ecx, ecx
call qword [0x1400671e0]
test eax, eax
je 0x140001cae
mov dx, 0x5c
lea rcx, [rsp + 0x8c0]
call fcn.1400023d0
xor ecx, ecx
mov word [rax], cx
lea rdx, [rsp + 0x108c0]
lea rcx, [0x1400604b0]
call fcn.14000b770
mov qword [rsp + 0x108c8], rax
cmp qword [rsp + 0x108c8], 0
je 0x140001ca4
mov dx, 0x5c
mov rcx, qword [rsp + 0x108c8]
call fcn.1400023d0
xor ecx, ecx
mov word [rax], cx
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x108d0], rax
cmp qword [rsp + 0x108d0], 0
je 0x140001c94
mov rdx, qword [rsp + 0x108d0]
mov ecx, 0x7fff
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x140001c7e
mov dx, 0x5c
mov rcx, qword [rsp + 0x108d0]
call fcn.1400023d0
xor ecx, ecx
mov word [rax], cx
mov rdx, qword [rsp + 0x108c8]
lea rcx, [rsp + 0x8c0]
call qword [0x140067478]
test eax, eax
je 0x140001c7c
mov rdx, qword [rsp + 0x108d0]
lea rcx, [rsp + 0x8c0]
call qword [0x140067478]
test eax, eax
je 0x140001c7c
call qword [0x140067178]
mov qword [rsp + 0x108e8], rax
lea rdx, [rsp + 0x108d8]
mov rcx, qword [rsp + 0x108e8]
call qword [0x140067918]
mov qword [rsp + 0x108e0], rax
lea rdx, str.6F22D2F3_0262_493C_9BD5_3F5F62A3532B
mov rax, qword [rsp + 0x108e0]
mov rcx, qword [rax + 8]
call qword [0x140067478]
test eax, eax
je 0x140001c7c
lea rdx, str.3B85CFBD_2F81_413C_8159_390D4E2E9DBF
mov rax, qword [rsp + 0x108e0]
mov rcx, qword [rax + 8]
call qword [0x140067478]
test eax, eax
je 0x140001c7c
lea rdx, str.8D2DEC5E_54EA_4D6A_AAD8_D8045F510029
mov rax, qword [rsp + 0x108e0]
mov rcx, qword [rax + 8]
call qword [0x140067478]
test eax, eax
je 0x140001c7c
mov r9d, 1
lea r8, [0x14006077c]
lea rdx, [0x140060846]
xor ecx, ecx
call qword [0x1400674d0]
cmp eax, 2
jne 0x140001c7c
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x140001c86
xor ecx, ecx
call qword [0x1400671e8]
mov rcx, qword [rsp + 0x108d0]
call qword [0x1400671c8]
mov rcx, qword [rsp + 0x108c8]
call qword [0x1400671c8]
jmp 0x140001cac
xor ecx, ecx
call qword [0x1400671e8]
jmp 0x140001cb6
xor ecx, ecx
call qword [0x1400671e8]
lea rdx, [rsp + 0x270]
mov cx, 2
call qword [0x140067a78]
test eax, eax
je 0x140001cd4
xor ecx, ecx
call qword [0x1400671e8]
call fcn.14000a890
test eax, eax
jne 0x140001ce8
mov ecx, 0xffffffff
call qword [0x1400671e8]
call fcn.140021560
test eax, eax
jne 0x140001cf9
xor ecx, ecx
call qword [0x1400671e8]
call fcn.140004640
test eax, eax
jne 0x140001d0a
xor ecx, ecx
call qword [0x1400671e8]
call fcn.140004870
test eax, eax
jne 0x140001d1b
xor ecx, ecx
call qword [0x1400671e8]
call fcn.140002fd0
cmp dword [0x140060ab0], 0
jne 0x140001d41
lea rcx, [0x1400604b0]
call fcn.14000ae50
test eax, eax
jne 0x140001d41
xor ecx, ecx
call qword [0x1400671e8]
lea rcx, [0x1400604b0]
call fcn.14000b8c0
test eax, eax
jne 0x140001d59
xor ecx, ecx
call qword [0x1400671e8]
cmp dword [0x140060ab0], 0
jne 0x140001d7d
cmp dword [0x140062158], 1
jne 0x140001d7d
call fcn.14000d710
cmp eax, 1
jne 0x140001d7d
xor ecx, ecx
call qword [0x1400671e8]
cmp dword [0x1400601f8], 1
jne 0x140001d90
call fcn.14001b8c0
jmp 0x14000239d
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x268], rax
cmp qword [rsp + 0x268], 0
jne 0x140001dbb
xor ecx, ecx
call qword [0x1400671e8]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x268]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
jne 0x140001dda
xor ecx, ecx
call qword [0x1400671e8]
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x260], rax
cmp qword [rsp + 0x260], 0
jne 0x140001e05
xor ecx, ecx
call qword [0x1400671e8]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x260]
call qword [0x1400672a8]
test eax, eax
jne 0x140001e24
xor ecx, ecx
call qword [0x1400671e8]
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x140001e49
xor ecx, ecx
call qword [0x1400671e8]
mov r9, qword [rsp + 0x268]
lea r8, [0x140036938]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x38]
call fcn.1400265dc
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x470], rax
cmp qword [rsp + 0x470], 0
jne 0x140001e92
xor ecx, ecx
call qword [0x1400671e8]
mov r9, qword [rsp + 0x260]
lea r8, [0x140036958]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x470]
call fcn.1400265dc
mov edx, 0xfffe
mov ecx, 0x40
call qword [0x1400671b0]
mov qword [rsp + 0x440], rax
cmp qword [rsp + 0x440], 0
jne 0x140001ede
xor ecx, ecx
call qword [0x1400671e8]
mov r9, qword [rsp + 0x260]
lea r8, [0x140036978]
mov edx, 0x7fff
mov rcx, qword [rsp + 0x440]
call fcn.1400265dc
mov dword [rsp + 0x430], 0
mov qword [rsp + 0x498], 0
lea rax, [rsp + 0x4a0]
mov rdi, rax
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov dword [rsp + 0x460], 0
lea rax, [rsp + 0x464]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov dword [rsp + 0x488], 0
lea rax, [rsp + 0x48c]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
cmp dword [0x140060200], 1
jne 0x140001fbc
movsxd rax, dword [rsp + 0x430]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + rax*8 + 0x498], rcx
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x460], 0
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x488], 1
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
cmp dword [0x1400601fc], 1
jne 0x140002013
movsxd rax, dword [rsp + 0x430]
mov rcx, qword [rsp + 0x470]
mov qword [rsp + rax*8 + 0x498], rcx
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x460], 1
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x488], 1
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
cmp dword [0x140060204], 1
jne 0x14000206a
movsxd rax, dword [rsp + 0x430]
mov rcx, qword [rsp + 0x440]
mov qword [rsp + rax*8 + 0x498], rcx
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x460], 2
movsxd rax, dword [rsp + 0x430]
mov dword [rsp + rax*4 + 0x488], 1
mov eax, dword [rsp + 0x430]
inc eax
mov dword [rsp + 0x430], eax
mov eax, dword [rsp + 0x430]
mov dword [rsp + 0x480], eax
mov dword [rsp + 0x30], 1
cmp dword [rsp + 0x30], 0
je 0x14000239d
mov dword [rsp + 0x108f0], 0
jmp 0x1400020a8
mov eax, dword [rsp + 0x108f0]
inc eax
mov dword [rsp + 0x108f0], eax
mov eax, dword [rsp + 0x480]
cmp dword [rsp + 0x108f0], eax
jge 0x140002398
movsxd rax, dword [rsp + 0x108f0]
movsxd rcx, dword [rsp + 0x108f0]
lea r8, [rsp + 0x448]
mov edx, dword [rsp + rax*4 + 0x488]
mov rcx, qword [rsp + rcx*8 + 0x498]
call fcn.14000bab0
cmp eax, 1
jne 0x140002388
cmp dword [0x140060ab0], 1
jne 0x14000229e
movsxd rax, dword [rsp + 0x108f0]
cmp dword [rsp + rax*4 + 0x460], 1
jne 0x140002187
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x1400671f0]
cmp eax, 0x102
jne 0x140002187
lea r8, str.365A43B3_1890_4724_93C9_CED4A111EEA3
xor edx, edx
mov ecx, 0x100000
call qword [0x140067170]
mov qword [rsp + 0x10908], rax
cmp qword [rsp + 0x10908], 0
jne 0x14000216e
mov edx, 0xa
mov rcx, qword [0x140066e28]
call qword [0x1400671f0]
cmp eax, 0x102
je 0x14000216c
jmp 0x14000239d
jmp 0x140002110
cmp qword [rsp + 0x10908], 0
je 0x140002187
mov rcx, qword [rsp + 0x10908]
call qword [0x1400671a0]
movsxd rax, dword [rsp + 0x108f0]
cmp dword [rsp + rax*4 + 0x460], 0
jne 0x140002210
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x1400671f0]
cmp eax, 0x102
jne 0x140002210
lea r8, str.74D77FAC_80D2_4F88_B645_C5F36AFB8791
xor edx, edx
mov ecx, 0x100000
call qword [0x140067170]
mov qword [rsp + 0x10910], rax
cmp qword [rsp + 0x10910], 0
jne 0x1400021f7
mov edx, 0xa
mov rcx, qword [0x140066e28]
call qword [0x1400671f0]
cmp eax, 0x102
je 0x1400021f5
jmp 0x14000239d
jmp 0x140002199
cmp qword [rsp + 0x10910], 0
je 0x140002210
mov rcx, qword [rsp + 0x10910]
call qword [0x1400671a0]
movsxd rax, dword [rsp + 0x108f0]
cmp dword [rsp + rax*4 + 0x460], 2
jne 0x140002299
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x1400671f0]
cmp eax, 0x102
jne 0x140002299
lea r8, str.2C607456_D6AB_4BCB_A2B8_2A44B8D8393D
xor edx, edx
mov ecx, 0x100000
call qword [0x140067170]
mov qword [rsp + 0x10918], rax
cmp qword [rsp + 0x10918], 0
jne 0x140002280
mov edx, 0xa
mov rcx, qword [0x140066e28]
call qword [0x1400671f0]
cmp eax, 0x102
je 0x14000227e
jmp 0x14000239d
jmp 0x140002222
cmp qword [rsp + 0x10918], 0
je 0x140002299
mov rcx, qword [rsp + 0x10918]
call qword [0x1400671a0]
jmp 0x14000239d
mov qword [rsp + 0x108f8], 0
lea rax, [rsp + 0x10900]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov rax, qword [0x140066e28]
mov qword [rsp + 0x108f8], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x10900], rax
mov r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x108f8]
mov ecx, 2
call qword [0x140067280]
xor edx, edx
mov rcx, qword [0x140066e28]
call qword [0x1400671f0]
cmp eax, 0x102
je 0x140002319
mov dword [rsp + 0x30], 0
jmp 0x140002398
cmp qword [rsp + 0x448], 0
je 0x140002334
xor edx, edx
mov rcx, qword [rsp + 0x448]
call qword [0x140067208]
cmp qword [rsp + 0x448], 0
je 0x14000234d
mov rcx, qword [rsp + 0x448]
call qword [0x1400671a0]
cmp qword [rsp + 0x450], 0
je 0x140002366
mov rcx, qword [rsp + 0x450]
call qword [0x1400671a0]
mov r8d, 0x18
xor edx, edx
lea rcx, [rsp + 0x448]
call fcn.1400264f0
mov ecx, 0x3e8
call qword [0x1400672b0]
jmp 0x140002393
mov ecx, 0x3e8
call qword [0x1400672b0]
jmp 0x140002098
jmp 0x140002080
call fcn.14000a8a0
cmp dword [0x1400601f8], 1
jne 0x1400023bd
mov edx, 0xffffffff
mov rcx, qword [0x140068018]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor ecx, ecx
call qword [0x1400671e8]
add rsp, 0x10920
pop rdi
ret