Function at 0x14014a980
Capabilities:
Persist via run registry key

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2f0
mov rax, qword [0x140209b48]
xor rax, rsp
mov qword [rsp + 0x2e0], rax
mov r12, rcx
mov qword [rsp + 0x98], rcx
lea rcx, [rsp + 0xa0]
call fcn.1400012c0
xor edi, edi
lea rcx, [rsp + 0xa0]
mov ebx, edi
mov r15d, edi
mov dword [rsp + 0x44], edi
lea r14d, [rdi + 1]
mov dword [rsp + 0x84], edi
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x5c], edi
call fcn.140175fb0
mov eax, edi
mov ecx, edi
mov dword [rsp + 0x74], edi
mov dword [rsp + 0x54], eax
mov al, byte [rsp + 0x48]
mov dword [rsp + 0x8c], ecx
mov cl, byte [rsp + 0x48]
mov dword [rsp + 0x7c], eax
mov al, byte [rsp + 0x48]
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x6c], edi
mov dword [rsp + 0x70], edi
mov dword [rsp + 0x78], edi
mov dword [rsp + 0x64], edi
mov dword [rsp + 0x88], edi
mov dword [rsp + 0x50], edi
mov r13d, edi
mov dword [rsp + 0x4c], edi
mov esi, edi
mov dword [rsp + 0x60], edi
mov rbp, rdi
mov qword [rsp + 0x90], rdi
lea rdx, [0x140000000]
mov dword [rsp + 0x68], ecx
jmp 0x14014aa66
mov ebx, dword [rsp + 0x40]
cmp qword [r12 + rbp*8 + 0xa8], 0
je 0x14014cbe6
cmp esi, 0x11
mov rdi, qword [r12 + rbp*8 + 0x18]
ja case.default.0x14014aa90
movsxd rax, esi
mov ecx, dword [rdx + rax*4 + 0x14d5bc]
add rcx, rdx
jmp rcx
xor r8d, r8d
mov edx, 0x428
mov rcx, rdi
call fcn.1400d31a0
test eax, eax
mov r11d, eax
jne 0x14014aabc
mov r11d, dword [0x1401fd5f4]
xor r13d, r13d
mov dword [0x14020ac7c], r13d
jmp 0x14014aaf0
cmp eax, 1
jne 0x14014aad1
or r11d, 0xffffffff
mov dword [0x14020ac7c], 0x409
jmp 0x14014aaed
mov rax, qword [0x14020b098]
sub r11d, 2
movsxd rcx, r11d
add rcx, rcx
movzx ecx, word [rax + rcx*8 + 8]
mov dword [0x14020ac7c], ecx
xor r13d, r13d
cmp r11d, dword [0x1401fd5f0]
mov eax, 1
cmovne ebx, eax
cmp byte [0x14020ae23], 0
mov dword [rsp + 0x40], ebx
jne 0x14014ab30
mov edx, 0x41d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014ab27
mov byte [0x14020ae23], al
jmp 0x14014ab4a
cmp byte [0x14020ae23], 0
je 0x14014ab90
mov edx, 0x41d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014ab90
mov byte [0x14020ae23], 0
call fcn.1400da0e0
test eax, eax
je 0x14014ab6a
cmp byte [0x14020ae23], 0
mov ebx, 1
je 0x14014ab95
mov ecx, ebx
call fcn.14000d310
jmp 0x14014ab95
cmp byte [0x14020ae23], 0
lea rax, str.__app_data
lea rdx, str.__no_app_data
lea rcx, [rsp + 0xa0]
cmovne rdx, rax
call fcn.1401752b0
mov ebx, 1
mov edx, 0x423
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014abfb
cmp dword [r12 + 0x2b0], eax
je 0x14014ac79
lea r9d, [rax + 2]
mov edx, 0x423
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2b0], ebx
mov dword [rsp + 0x6c], ebx
call fcn.1400da0e0
test eax, eax
je 0x14014abf2
call fcn.140147880
jmp 0x14014ac79
lea rdx, str.__install_run_on_system_startup
jmp 0x14014ac6c
mov edx, 0x423
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14014ac79
cmp dword [r12 + 0x2b0], eax
je 0x14014ac79
lea r9d, [rax + 3]
mov edx, 0x423
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2b0], r13d
mov dword [rsp + 0x6c], ebx
call fcn.1400da0e0
test eax, eax
je 0x14014ac65
lea r8, [0x1401b2850]
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionRun
mov rcx, 0xffffffff80000002
call fcn.1400e0c80
jmp 0x14014ac79
lea rdx, str.__uninstall_run_on_system_startup
lea rcx, [rsp + 0xa0]
call fcn.1401752b0
mov edx, 0x420
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014acc6
cmp dword [r12 + 0x2cc], eax
je 0x14014ad0c
lea r9d, [rax + 2]
mov edx, 0x420
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2cc], ebx
call fcn.1401464d0
jmp 0x14014ad0c
mov edx, 0x420
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14014ad0c
cmp dword [r12 + 0x2cc], eax
je 0x14014ad0c
lea r9d, [rax + 3]
mov edx, 0x420
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2cc], r13d
call fcn.1401401c0
mov edx, 0x421
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014ad59
cmp dword [r12 + 0x2c0], eax
je 0x14014ad9f
lea r9d, [rax + 2]
mov edx, 0x421
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2c0], ebx
call fcn.140146b10
jmp 0x14014ad9f
mov edx, 0x421
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14014ad9f
cmp dword [r12 + 0x2c0], eax
je 0x14014ad9f
lea r9d, [rax + 3]
mov edx, 0x421
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2c0], r13d
call fcn.140140a00
mov edx, 0x422
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014adec
cmp dword [r12 + 0x2bc], eax
je 0x14014ae32
lea r9d, [rax + 2]
mov edx, 0x422
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2bc], ebx
call fcn.140146d70
jmp 0x14014ae32
mov edx, 0x422
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14014ae32
cmp dword [r12 + 0x2bc], eax
je 0x14014ae32
lea r9d, [rax + 3]
mov edx, 0x422
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2bc], r13d
call fcn.140140da0
cmp byte [0x14020ac66], 0
jne 0x14014ae5f
mov edx, 0x424
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014ae56
mov byte [0x14020ac66], al
jmp 0x14014ae81
cmp byte [0x14020ac66], 0
je 0x14014ae81
mov edx, 0x424
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020ac66]
cmp eax, 1
cmovne ecx, r13d
mov byte [0x14020ac66], cl
cmp byte [0x14020ae3b], 0
jne 0x14014aef3
mov edx, 0x41e
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014aeea
mov byte [0x14020ae3b], al
call fcn.1400da0e0
test eax, eax
je 0x14014aec5
cmp byte [0x14020ae23], 0
je 0x14014af3c
mov ecx, ebx
call fcn.14000d310
jmp 0x14014af3c
lea rdx, str.__enable_run_as_admin
lea rcx, [rsp + 0xa0]
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x84], 1
call fcn.1401752b0
jmp 0x14014af40
cmp byte [0x14020ae3b], 0
je 0x14014af3c
mov edx, 0x41e
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014af3c
mov byte [0x14020ae3b], 0
call fcn.1400da0e0
test eax, eax
je 0x14014af28
cmp byte [0x14020ae23], 0
je 0x14014af3c
mov ecx, ebx
call fcn.14000d310
jmp 0x14014af3c
lea rdx, str.__disable_run_as_admin
lea rcx, [rsp + 0xa0]
call fcn.1401752b0
mov ebx, dword [rsp + 0x40]
mov edx, 0x425
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014afab
cmp dword [r12 + 0x2b8], eax
je 0x14014b018
lea r9d, [rax + 2]
mov edx, 0x425
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov eax, 1
mov dword [r12 + 0x2b8], eax
mov dword [rsp + 0x70], eax
call fcn.1400da0e0
test eax, eax
je 0x14014afa2
call fcn.140147150
jmp 0x14014b018
lea rdx, str.__install_folder_context_menu
jmp 0x14014b00b
mov edx, 0x425
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14014b018
cmp dword [r12 + 0x2b8], eax
je 0x14014b018
lea r9d, [rax + 3]
mov edx, 0x425
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2b8], r13d
mov dword [rsp + 0x70], 1
call fcn.1400da0e0
test eax, eax
je 0x14014b004
call fcn.140141380
jmp 0x14014b018
lea rdx, str.__uninstall_folder_context_menu
lea rcx, [rsp + 0xa0]
call fcn.1401752b0
mov edx, 0x41f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b0b6
cmp dword [r12 + 0x2b4], eax
je 0x14014b12c
lea r9d, [rax + 2]
mov edx, 0x41f
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov eax, 1
mov dword [r12 + 0x2b4], eax
mov dword [rsp + 0x74], eax
call fcn.1400da0e0
test eax, eax
je 0x14014b082
xor edx, edx
xor ecx, ecx
call fcn.1400ea9e0
jmp 0x14014b12c
lea rdx, str.__install_service
lea rcx, [rsp + 0xa0]
call fcn.140176950
mov eax, 1
mov dword [rsp + 0x88], eax
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x8c], eax
mov dword [rsp + 0x54], eax
jmp 0x14014b12c
mov edx, 0x41f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14014b12c
cmp dword [r12 + 0x2b4], eax
je 0x14014b12c
lea r9d, [rax + 3]
mov edx, 0x41f
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov eax, 1
mov dword [r12 + 0x2b4], r13d
mov dword [rsp + 0x74], eax
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], eax
call fcn.1400da0e0
test eax, eax
je 0x14014b118
call fcn.1400ea340
jmp 0x14014b12c
lea rdx, str.__uninstall_service
lea rcx, [rsp + 0xa0]
call fcn.1401752b0
mov edx, 0x426
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b197
cmp dword [r12 + 0x2c4], eax
je 0x14014b212
lea r9d, [rax + 2]
mov edx, 0x426
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov eax, 1
mov dword [r12 + 0x2c4], eax
mov dword [rsp + 0x78], eax
call fcn.1400da0e0
test eax, eax
je 0x14014b18e
call fcn.140147740
jmp 0x14014b212
lea rdx, str.__install_url_protocol
jmp 0x14014b205
mov edx, 0x426
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14014b212
cmp dword [r12 + 0x2c4], eax
je 0x14014b212
lea r9d, [rax + 3]
mov edx, 0x426
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r12 + 0x2c4], r13d
mov dword [rsp + 0x78], 1
call fcn.1400da0e0
test eax, eax
je 0x14014b1fe
lea rdx, [0x1401d0c34]
mov rcx, 0xffffffff80000000
call fcn.1400d93c0
jmp 0x14014b212
lea rdx, str.__uninstall_url_protocol
lea rcx, [rsp + 0xa0]
call fcn.1401752b0
mov edx, 0x427
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b29f
cmp dword [r12 + 0x2c8], eax
je 0x14014b26f
lea r9d, [rax + 2]
mov edx, 0x427
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov eax, 1
mov dword [r12 + 0x2c8], eax
mov dword [rsp + 0x64], eax
call fcn.1400da0e0
test eax, eax
je 0x14014b289
call fcn.1401474d0
xor edi, edi
mov eax, 1
lea rdx, [0x140000000]
mov r13d, eax
mov dword [rsp + 0x4c], eax
jmp 0x14014cbea
lea rdx, str.__install_efu_association
lea rcx, [rsp + 0xa0]
call fcn.1401752b0
jmp 0x14014b26f
mov edx, 0x427
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14014b26f
cmp dword [r12 + 0x2c8], eax
je 0x14014b26f
lea r9d, [rax + 3]
mov edx, 0x427
mov r8d, 0xf4
mov rcx, rdi
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
xor edi, edi
mov dword [rsp + 0x64], 1
mov dword [r12 + 0x2c8], edi
call fcn.1400da0e0
test eax, eax
je 0x14014b2fd
call fcn.1401417e0
jmp 0x14014b271
lea rdx, str.__uninstall_efu_association
lea rcx, [rsp + 0xa0]
call fcn.1401752b0
jmp 0x14014b271
mov edx, 0x42d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b331
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014b349
mov edx, 0x42d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
jne 0x14014b34e
mov byte [reloc.WS2_32.dll_accept], al
call fcn.1400f1a70
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014b39f
mov edx, 0x42a
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b396
mov byte [reloc.WS2_32.dll_accept], al
xor ebx, ebx
cmp byte [0x14020ac60], 0
jne 0x14014b3d0
mov edx, 0x42b
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b3c7
mov byte [0x14020ac60], al
jmp 0x14014b3f1
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014b370
mov edx, 0x42a
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [reloc.WS2_32.dll_accept]
mov ebx, 0
cmp eax, 1
cmovne ecx, ebx
mov byte [reloc.WS2_32.dll_accept], cl
jmp 0x14014b372
cmp byte [0x14020ac60], 0
je 0x14014b3f1
mov edx, 0x42b
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020ac60]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020ac60], cl
cmp byte [0x14020acf3], 0
jne 0x14014b41e
mov edx, 0x42c
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b415
mov byte [0x14020acf3], al
jmp 0x14014b43f
cmp byte [0x14020acf3], 0
je 0x14014b43f
mov edx, 0x42c
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020acf3]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020acf3], cl
cmp byte [0x14020acf4], 0
jne 0x14014b46c
mov edx, 0x42f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b463
mov byte [0x14020acf4], al
jmp 0x14014b48d
cmp byte [0x14020acf4], 0
je 0x14014b48d
mov edx, 0x42f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020acf4]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020acf4], cl
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014b4ba
mov edx, 0x430
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b4b1
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014b4dd
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014b4dd
mov edx, 0x430
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014b4dd
mov eax, 1
mov byte [reloc.WS2_32.dll_accept], 0
mov dword [rsp + 0x44], eax
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014b50a
mov edx, 0x431
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b501
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014b52b
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014b52b
mov edx, 0x431
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, 1
cmovne ecx, ebx
mov byte [reloc.WS2_32.dll_accept], cl
cmp byte [0x14020ad00], 0
jne 0x14014b558
mov edx, 0x432
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b54f
mov byte [0x14020ad00], al
jmp 0x14014b579
cmp byte [0x14020ad00], 0
je 0x14014b579
mov edx, 0x432
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020ad00]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020ad00], cl
cmp byte [0x14020ad11], 0
jne 0x14014b5a6
mov edx, 0x437
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b59d
mov byte [0x14020ad11], al
jmp 0x14014b5c0
cmp byte [0x14020ad11], 0
je 0x14014b5c6
mov edx, 0x437
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014b5c6
mov byte [0x14020ad11], 0
mov r15d, 1
mov edx, 0x434
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x436
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, 1
mov r11, rax
movsx eax, byte [0x14020acd3]
cmp ebx, eax
je 0x14014b629
mov byte [0x14020acd3], bl
mov r15d, ecx
movsx eax, byte [0x14020ace8]
cmp r11d, eax
je 0x14014b63f
mov byte [0x14020ace8], r11b
mov r15d, ecx
call fcn.1400f1a70
jmp 0x14014cbdd
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014b67b
mov edx, 0x43c
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b672
mov byte [reloc.WS2_32.dll_accept], al
mov ebx, eax
mov r15d, eax
jmp 0x14014b6a4
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014b69f
mov edx, 0x43c
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014b69f
mov ebx, 1
mov byte [reloc.WS2_32.dll_accept], 0
mov r15d, ebx
jmp 0x14014b6a4
mov ebx, 1
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014b6d1
mov edx, 0x43d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b6c8
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014b6eb
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014b6ef
mov edx, 0x43d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014b6ef
mov byte [reloc.WS2_32.dll_accept], 0
mov dword [rsp + 0x5c], ebx
cmp byte [0x14020ad40], 0
jne 0x14014b71c
mov edx, 0x43e
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b713
mov byte [0x14020ad40], al
jmp 0x14014b736
cmp byte [0x14020ad40], 0
je 0x14014b73a
mov edx, 0x43e
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014b73a
mov byte [0x14020ad40], 0
mov dword [rsp + 0x5c], ebx
cmp byte [0x14020ac6e], 0
jne 0x14014b767
mov edx, 0x43f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b75e
mov byte [0x14020ac6e], al
jmp 0x14014b781
cmp byte [0x14020ac6e], 0
je 0x14014b789
mov edx, 0x43f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014b789
mov byte [0x14020ac6e], 0
mov dword [rsp + 0x44], ebx
mov dword [rsp + 0x5c], ebx
cmp byte [0x14020ac64], 0
jne 0x14014b7b6
mov edx, 0x43a
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b7ad
mov byte [0x14020ac64], al
jmp 0x14014b7d0
cmp byte [0x14020ac64], 0
je 0x14014b7d3
mov edx, 0x43a
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014b7d3
mov byte [0x14020ac64], 0
mov r15d, ebx
cmp byte [0x14020ac65], 0
jne 0x14014b800
mov edx, 0x439
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b7f7
mov byte [0x14020ac65], al
jmp 0x14014b81a
cmp byte [0x14020ac65], 0
je 0x14014b81d
mov edx, 0x439
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014b81d
mov byte [0x14020ac65], 0
mov r15d, ebx
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014b86e
mov edx, 0x438
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b865
mov byte [reloc.WS2_32.dll_accept], al
xor ebx, ebx
cmp byte [0x14020acf7], 0
jne 0x14014b89f
mov edx, 0x442
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b896
mov byte [0x14020acf7], al
jmp 0x14014b8c0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014b83f
mov edx, 0x438
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [reloc.WS2_32.dll_accept]
mov ebx, 0
cmp eax, 1
cmovne ecx, ebx
mov byte [reloc.WS2_32.dll_accept], cl
jmp 0x14014b841
cmp byte [0x14020acf7], 0
je 0x14014b8c0
mov edx, 0x442
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020acf7]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020acf7], cl
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014b8e7
mov edx, 0x443
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014b8de
jmp 0x14014b8fc
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014b91e
mov edx, 0x443
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014b91e
xor al, al
mov byte [reloc.WS2_32.dll_accept], al
mov rcx, qword [r12 + 0x10]
test al, al
mov r8, rbx
setne r8b
mov edx, 0x401
xor r9d, r9d
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x440
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, 1
cmp eax, 0xffffffff
mov r11, rax
je 0x14014b963
movsx eax, byte [reloc.WS2_32.dll_bind]
cmp r11d, eax
je 0x14014b963
mov r15d, ebx
mov byte [reloc.WS2_32.dll_bind], r11b
mov edx, 0x441
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
mov r11, rax
je 0x14014cbdd
movsx eax, byte [0x14020ad43]
cmp r11d, eax
je 0x14014cbdd
mov r15d, ebx
mov byte [0x14020ad43], r11b
jmp 0x14014cbdd
mov edx, 0x44c
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14014b9e9
cmp eax, 1
mov byte [0x14020aceb], 1
sete byte [0x14020ac56]
jmp 0x14014b9f0
mov byte [0x14020aceb], 0
mov edx, 0x44d
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14014ba29
cmp eax, 1
mov byte [0x14020acec], 1
sete byte [0x14020ac54]
jmp 0x14014ba30
mov byte [0x14020acec], 0
mov edx, 0x44e
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14014ba69
cmp eax, 1
mov byte [0x14020aced], 1
sete byte [0x14020ac55]
jmp 0x14014ba70
mov byte [0x14020aced], 0
mov edx, 0x44f
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14014baa9
cmp eax, 1
mov byte [0x14020acee], 1
sete byte [0x14020ac57]
jmp 0x14014bab0
mov byte [0x14020acee], 0
mov edx, 0x450
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14014bae9
cmp eax, 1
mov byte [0x14020acef], 1
sete byte [0x14020ac58]
jmp 0x14014baf0
mov byte [0x14020acef], 0
mov edx, 0x451
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14014bb69
lea rcx, [rsp + 0x1c0]
call fcn.1400012c0
lea r8, [rsp + 0x1c0]
mov edx, 0x452
mov rcx, rdi
call fcn.1400d8310
mov rdx, qword [rsp + 0x1c8]
mov rcx, qword [0x14020ad38]
call fcn.140174640
lea rcx, [rsp + 0x1c0]
mov byte [reloc.WS2_32.dll_accept], 1
mov qword [0x14020ad38], rax
call fcn.140175010
jmp 0x14014bb70
mov byte [reloc.WS2_32.dll_accept], 0
mov edx, 0x453
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [0x14020acf0], 0
test eax, eax
je 0x14014bbc7
lea ecx, [rax - 1]
call fcn.1400bfe00
test rax, rax
je 0x14014bbc0
mov rdx, qword [rax]
mov rcx, qword [0x14020add0]
call fcn.140174640
mov qword [0x14020add0], rax
mov byte [0x14020acf0], 1
mov edx, 0x454
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
mov rbx, rax
je 0x14014bc2b
sub ebx, 1
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
call fcn.1400f6500
mov rcx, qword [0x14020ae08]
mov rdx, rax
call fcn.140174640
not bl
mov byte [0x14020acf1], 1
and bl, 1
mov qword [0x14020ae08], rax
mov byte [reloc.WS2_32.dll_accept], bl
jmp 0x14014bc32
mov byte [0x14020acf1], 0
mov edx, 0x455
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14014bc85
cmp eax, 1
jne 0x14014bc6c
mov byte [0x14020ac59], 0
mov byte [0x14020acf2], al
jmp 0x14014bc8c
shl eax, 4
mov byte [0x14020ac59], 1
mov byte [0x14020acf2], 1
mov dword [0x1401f9bc8], eax
jmp 0x14014bc8c
mov byte [0x14020acf2], 0
mov edx, 0x456
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
mov rbx, rax
je 0x14014bd70
lea rcx, [rsp + 0x1c0]
call fcn.1400012c0
lea r8, [rsp + 0x1c0]
mov edx, 0x458
mov rcx, rdi
call fcn.1400d8310
mov rdx, qword [rsp + 0x1c8]
mov rcx, qword [0x14020ae10]
call fcn.140174640
lea r8, [rsp + 0x1c0]
mov edx, 0x45b
mov rcx, rdi
mov qword [0x14020ae10], rax
call fcn.1400d8310
mov rdx, qword [rsp + 0x1c8]
mov rcx, qword [0x14020ae18]
call fcn.140174640
mov edx, 0x45d
mov rcx, rdi
mov qword [0x14020ae18], rax
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
sub bl, 1
lea rcx, [rsp + 0x1c0]
mov byte [reloc.WS2_32.dll_accept], 1
mov byte [0x14020ae05], bl
mov byte [reloc.WS2_32.dll_accept], al
call fcn.140175010
jmp 0x14014cbdd
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x14014cbdd
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014bdaf
mov edx, 0x45f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014bda6
mov byte [reloc.WS2_32.dll_accept], al
mov ebx, eax
mov dword [rsp + 0x44], eax
jmp 0x14014bdd9
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014bdd4
mov edx, 0x45f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014bdd4
mov ebx, 1
mov byte [reloc.WS2_32.dll_accept], 0
mov dword [rsp + 0x44], ebx
jmp 0x14014bdd9
mov ebx, 1
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014be06
mov edx, 0x460
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014bdfd
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014be20
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014be24
mov edx, 0x460
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014be24
mov byte [reloc.WS2_32.dll_accept], 0
mov dword [rsp + 0x44], ebx
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014be51
mov edx, 0x461
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014be48
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014be6b
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014be6f
mov edx, 0x461
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014be6f
mov byte [reloc.WS2_32.dll_accept], 0
mov dword [rsp + 0x44], ebx
cmp byte [0x14020ad2a], 0
jne 0x14014be9c
mov edx, 0x462
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014be93
mov byte [0x14020ad2a], al
jmp 0x14014beb6
cmp byte [0x14020ad2a], 0
je 0x14014beba
mov edx, 0x462
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014beba
mov byte [0x14020ad2a], 0
mov dword [rsp + 0x44], ebx
cmp byte [0x14020ad2b], 0
jne 0x14014bee7
mov edx, 0x463
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014bede
mov byte [0x14020ad2b], al
jmp 0x14014bf01
cmp byte [0x14020ad2b], 0
je 0x14014bf05
mov edx, 0x463
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014bf05
mov byte [0x14020ad2b], 0
mov dword [rsp + 0x44], ebx
cmp byte [0x14020ad2e], 0
jne 0x14014bf32
mov edx, 0x465
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014bf29
mov byte [0x14020ad2e], al
jmp 0x14014bf4c
cmp byte [0x14020ad2e], 0
je 0x14014bf50
mov edx, 0x465
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014bf50
mov byte [0x14020ad2e], 0
mov dword [rsp + 0x44], ebx
mov edx, 0x466
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov r11, rax
movsx eax, byte [0x14020ad2f]
cmp r11d, eax
je 0x14014bf8c
mov dword [rsp + 0x44], ebx
mov byte [0x14020ad2f], r11b
cmp byte [0x14020ad2c], 0
jne 0x14014bfc4
mov edx, 0x464
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014bfb7
mov byte [0x14020ad2c], al
mov dword [rsp + 0x44], ebx
jmp 0x14014cbdd
cmp byte [0x14020ad2c], 0
je 0x14014cbdd
mov edx, 0x464
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014cbdd
mov byte [0x14020ad2c], 0
mov dword [rsp + 0x44], ebx
jmp 0x14014cbdd
mov ebx, dword [rsp + 0x7c]
mov edx, 0x46a
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test bl, bl
jne 0x14014c00a
cmp eax, 1
jne 0x14014c01c
mov bl, al
jmp 0x14014c018
cmp eax, 1
movzx ebx, bl
mov eax, 0
cmovne ebx, eax
mov dword [rsp + 0x7c], ebx
xor ecx, ecx
call fcn.140009440
mov r11d, eax
movsx eax, bl
cmp eax, r11d
jne 0x14014c037
mov byte [0x14020ad41], 0
jmp 0x14014c044
test bl, bl
sete al
add al, 1
mov byte [0x14020ad41], al
mov ebx, dword [rsp + 0x68]
mov edx, 0x46b
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test bl, bl
jne 0x14014c063
cmp eax, 1
jne 0x14014c075
mov bl, al
jmp 0x14014c071
cmp eax, 1
movzx ebx, bl
mov eax, 0
cmovne ebx, eax
mov dword [rsp + 0x68], ebx
xor ecx, ecx
call fcn.140009440
mov r11d, eax
movsx eax, bl
cmp eax, r11d
jne 0x14014c090
mov byte [0x14020ad42], 0
jmp 0x14014c09d
test bl, bl
sete al
add al, 1
mov byte [0x14020ad42], al
cmp byte [0x14020acf5], 0
jne 0x14014c0ee
mov edx, 0x46d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014c0e5
mov byte [0x14020acf5], al
xor ebx, ebx
cmp byte [0x14020acf6], 0
jne 0x14014c11f
mov edx, 0x46e
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014c116
mov byte [0x14020acf6], al
jmp 0x14014c140
cmp byte [0x14020acf5], 0
je 0x14014c0bf
mov edx, 0x46d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020acf5]
mov ebx, 0
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020acf5], cl
jmp 0x14014c0c1
cmp byte [0x14020acf6], 0
je 0x14014c140
mov edx, 0x46e
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020acf6]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020acf6], cl
cmp byte [0x14020acf8], 0
jne 0x14014c16d
mov edx, 0x46f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014c164
mov byte [0x14020acf8], al
jmp 0x14014c18e
cmp byte [0x14020acf8], 0
je 0x14014c18e
mov edx, 0x46f
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020acf8]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020acf8], cl
cmp byte [0x14020acf9], 0
jne 0x14014c1bb
mov edx, 0x470
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014c1b2
mov byte [0x14020acf9], al
jmp 0x14014c1dc
cmp byte [0x14020acf9], 0
je 0x14014c1dc
mov edx, 0x470
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020acf9]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020acf9], cl
mov ebx, dword [rsp + 0x80]
mov edx, 0x471
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test bl, bl
jne 0x14014c1fe
cmp eax, 1
jne 0x14014c213
mov bl, al
jmp 0x14014c20c
cmp eax, 1
movzx ebx, bl
mov eax, 0
cmovne ebx, eax
mov dword [rsp + 0x80], ebx
xor ecx, ecx
call fcn.140009440
mov r11d, eax
movsx eax, bl
cmp eax, r11d
jne 0x14014c22e
mov byte [0x14020acfb], 0
jmp 0x14014c23b
test bl, bl
sete al
add al, 1
mov byte [0x14020acfb], al
mov edx, 0x46c
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x472
mov rcx, rdi
mov byte [0x14020ad01], al
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
mov r11, rax
je 0x14014c2b7
sub r11d, 1
je 0x14014c2b2
xor ebx, ebx
sub r11d, 2
je 0x14014c2ab
cmp r11d, 1
je 0x14014c2a4
mov eax, ebx
jmp 0x14014c2be
mov eax, 2
jmp 0x14014c2be
mov eax, 1
jmp 0x14014c2be
or eax, 0xffffffff
jmp 0x14014c2bc
mov eax, 0xfffffff1
xor ebx, ebx
mov edx, 0x473
mov rcx, rdi
mov byte [0x14020ad02], al
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
mov r11, rax
je 0x14014c316
sub r11d, 1
je 0x14014c311
sub r11d, 2
je 0x14014c30a
cmp r11d, 1
je 0x14014c303
mov eax, ebx
jmp 0x14014c31b
mov eax, 2
jmp 0x14014c31b
mov eax, 1
jmp 0x14014c31b
or eax, 0xffffffff
jmp 0x14014c31b
mov eax, 0xfffffff1
mov edx, 0x474
mov rcx, rdi
mov byte [0x14020ad03], al
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
mov r11, rax
je 0x14014c375
sub r11d, 1
je 0x14014c370
sub r11d, 2
je 0x14014c367
cmp r11d, 1
je 0x14014c360
mov eax, ebx
jmp 0x14014c37a
mov eax, 2
jmp 0x14014c37a
mov ebx, 1
mov eax, ebx
jmp 0x14014c37f
or eax, 0xffffffff
jmp 0x14014c37a
mov eax, 0xfffffff1
mov ebx, 1
cmp byte [0x14020ac6c], 0
mov byte [0x14020ad04], al
jne 0x14014c3b2
mov edx, 0x468
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014c3a9
mov byte [0x14020ac6c], al
jmp 0x14014c3cc
cmp byte [0x14020ac6c], 0
je 0x14014c3d0
mov edx, 0x468
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014c3d0
mov byte [0x14020ac6c], 0
mov dword [rsp + 0x44], ebx
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014c404
mov edx, 0x469
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014c3f7
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014cbdd
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014cbdd
mov edx, 0x469
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014cbdd
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x14014cbdd
xor eax, eax
lea rbp, [r12 + 0x2d4]
lea r13, [0x140000000]
mov esi, eax
xor r12d, r12d
nop
cmp esi, 7
mov rdi, r12
ja case.default.0x14014c45a
movsxd rax, esi
mov ecx, dword [r13 + rax*4 + 0x14d604]
add rcx, r13
jmp rcx
lea rbx, [0x14020aca8]
jmp 0x14014c49c
lea rbx, [0x14020aca0]
jmp 0x14014c49c
lea rbx, [0x14020ac90]
lea rdi, [0x1401f9c94]
jmp 0x14014c49c
lea rbx, [0x14020ac88]
lea rdi, [0x1401f9c95]
jmp 0x14014c49c
lea rbx, [0x14020ac98]
lea rdi, [0x1401f9c96]
mov rdx, qword [rbp + 4]
mov rcx, qword [rbx]
call fcn.140174640
test rdi, rdi
mov qword [rbx], rax
je case.default.0x14014c45a
jmp 0x14014c4cb
lea rdi, [0x1401f9c91]
jmp 0x14014c4cb
lea rdi, [0x1401f9c92]
jmp 0x14014c4cb
lea rdi, [0x1401f9c93]
movzx eax, byte [rbp]
mov byte [rdi], al
add esi, 1
add rbp, 0x10
cmp esi, 8
jl 0x14014c440
mov r12, qword [rsp + 0x98]
mov r13d, dword [rsp + 0x4c]
mov esi, dword [rsp + 0x60]
mov rbp, qword [rsp + 0x90]
jmp 0x14014cbdd
mov edx, 0x476
mov rcx, rdi
lea rbx, [0x1401aef92]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14014c54a
add eax, 0xffffffff
cmp eax, dword [r12 + 0x358]
jae 0x14014c54a
mov ecx, eax
mov rax, qword [r12 + 0x360]
mov rcx, qword [rax + rcx*8]
mov rbx, qword [rcx]
mov rax, qword [0x14020af50]
mov r8, rbx
mov r9, qword [rax]
mov rcx, r9
movzx eax, byte [r9]
cmp al, byte [rbx]
jne 0x14014c576
test al, al
je 0x14014c5a4
mov al, byte [rcx + 1]
add rcx, 1
add r8, 1
cmp al, byte [r8]
je 0x14014c562
movzx eax, byte [r8]
movzx ecx, byte [rcx]
cmp ecx, eax
je 0x14014c5a4
mov rdx, rbx
mov rcx, r9
call fcn.140174640
mov ebx, 1
mov r11, rax
mov rax, qword [0x14020af50]
mov dword [rsp + 0x58], ebx
mov qword [rax], r11
jmp 0x14014c5a9
mov ebx, 1
lea rcx, [rsp + 0x1c0]
call fcn.1400012c0
mov edx, 0x477
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14014c5e2
xor edi, edi
mov eax, edi
jmp 0x14014c60e
lea r8, [rsp + 0x1c0]
mov edx, 0x477
mov rcx, rdi
call fcn.1400d8310
mov rcx, qword [rsp + 0x1c8]
call fcn.14016c410
mov edi, 0
test eax, eax
cmovle eax, edi
mov rcx, qword [0x14020af50]
cmp dword [rcx + 8], eax
je 0x14014c621
mov dword [rcx + 8], eax
mov dword [rsp + 0x58], ebx
lea rcx, [rsp + 0x1c0]
call fcn.140175010
mov rcx, rdi
mov rax, qword [r12 + 0x168]
mov rdx, qword [0x14020af58]
mov r8d, dword [rcx + rax + 4]
cmp dword [rcx + rdx + 4], r8d
je 0x14014c654
mov dword [rcx + rdx + 4], r8d
mov r15d, ebx
mov rax, qword [r12 + 0x168]
mov rdx, qword [0x14020af58]
mov r8d, dword [rcx + rax]
cmp dword [rcx + rdx], r8d
je 0x14014c674
mov dword [rcx + rdx], r8d
mov r15d, ebx
mov rax, qword [r12 + 0x168]
mov rdx, qword [0x14020af58]
movzx r8d, byte [rcx + rax + 8]
cmp byte [rcx + rdx + 8], r8b
je 0x14014c699
mov byte [rcx + rdx + 8], r8b
mov dword [rsp + 0x58], ebx
add rcx, 0xc
cmp rcx, 0x138
jl 0x14014c631
lea rdx, [0x140000000]
jmp 0x14014cbe6
mov r8, qword [r12 + 0x190]
lea rdx, [0x14020af78]
lea rcx, [0x14020af70]
call fcn.140008010
movzx eax, byte [r12 + 0x25f]
movzx r11d, byte [r12 + 0x25e]
shl r11d, 8
or r11d, eax
mov dword [0x14020ac70], r11d
movzx eax, byte [r12 + 0x25d]
movzx ecx, byte [r12 + 0x25c]
shl ecx, 8
or ecx, eax
mov dword [0x14020ac74], ecx
movzx ecx, byte [r12 + 0x260]
movzx eax, byte [r12 + 0x261]
shl ecx, 8
or ecx, eax
mov dword [0x14020ac78], ecx
call fcn.1400f2300
jmp 0x14014cbdd
cmp byte [0x14020ae07], 0
jne 0x14014c764
mov edx, 0x499
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014c75b
mov byte [0x14020ae07], al
mov ebx, eax
mov dword [rsp + 0x58], eax
jmp 0x14014c78e
cmp byte [0x14020ae07], 0
je 0x14014c789
mov edx, 0x499
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014c789
mov ebx, 1
mov byte [0x14020ae07], 0
mov dword [rsp + 0x58], ebx
jmp 0x14014c78e
mov ebx, 1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x496
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItemInt]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x49f
mov rcx, rdi
mov dword [0x1401f9ca8], eax
call qword [sym.imp.USER32.dll_GetDlgItemInt]
mov edx, 0x495
mov rcx, rdi
mov dword [0x1401f9cac], eax
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edx, 0x49e
test eax, eax
mov rcx, rdi
sete byte [0x1401f9ca6]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
sete byte [0x1401f9ca7]
cmp byte [0x14020ae06], 0
jne 0x14014c81d
mov edx, 0x494
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014c814
mov byte [0x14020ae06], al
jmp 0x14014c837
cmp byte [0x14020ae06], 0
je 0x14014c841
mov edx, 0x494
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014c841
mov byte [0x14020ae06], 0
call fcn.1400e74e0
call fcn.1400f6200
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014c86e
mov edx, 0x49d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014c865
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014c888
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014c8a2
mov edx, 0x49d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
je 0x14014c8a2
mov byte [reloc.WS2_32.dll_accept], 0
call fcn.1400f2550
mov rcx, rax
call fcn.14006df00
test eax, eax
je 0x14014c8a2
mov dword [rsp + 0x44], ebx
call fcn.1400f6240
mov edx, 0x49b
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [0x140000000]
mov r11, rax
sub r11d, 1
je 0x14014c8fa
mov ebx, dword [rsp + 0x40]
xor edi, edi
cmp r11d, 1
je 0x14014c8ef
mov dword [reloc.WS2_32.dll_bind], 2
jmp 0x14014cbea
mov dword [reloc.WS2_32.dll_bind], edi
jmp 0x14014cbea
mov dword [reloc.WS2_32.dll_bind], ebx
jmp case.default.0x14014aa90
cmp byte [reloc.WS2_32.dll_accept], 0
je case.default.0x14014aa90
mov rcx, qword [0x14020ad70]
mov r8d, 0x4a3
mov rdx, rdi
call fcn.140142d20
lea rcx, [0x14020ad5a]
mov r8d, 0x4a5
mov rdx, rdi
mov qword [0x14020ad70], rax
call fcn.140142230
lea rcx, [0x14020ad5b]
mov r8d, 0x4a8
mov rdx, rdi
call fcn.140142230
lea rcx, [0x1401f9c63]
mov r8d, 0x4a9
mov rdx, rdi
call fcn.140142230
lea rcx, [0x1401f9c5c]
mov r8d, 0x4aa
mov rdx, rdi
call fcn.140142230
lea rcx, [0x1401f9c5d]
mov r8d, 0x4ab
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ad5c]
mov r8d, 0x4ac
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ad5d]
mov r8d, 0x4ad
mov rdx, rdi
call fcn.140142230
lea rcx, [0x1401f9c5e]
mov r8d, 0x4ae
mov rdx, rdi
call fcn.140142230
lea rcx, [0x1401f9c5f]
mov r8d, 0x4af
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ad5e]
mov r8d, 0x4b0
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ad5f]
mov r8d, 0x4b1
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ad78]
mov r8d, 0x4b2
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ad79]
mov r8d, 0x4b3
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ad7a]
mov r8d, 0x4b4
mov rdx, rdi
call fcn.140142230
lea rcx, [0x1401f9c60]
mov r8d, 0x4b5
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ad7b]
mov r8d, 0x4b6
mov rdx, rdi
call fcn.140142230
mov eax, 1
mov r13d, eax
mov dword [rsp + 0x4c], eax
jmp 0x14014cbdd
cmp byte [reloc.WS2_32.dll_accept], 0
je case.default.0x14014aa90
lea rcx, [0x1401f9bf0]
mov r8d, 0x4d4
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ac84]
mov r8d, 0x4d5
mov rdx, rdi
call fcn.140142230
lea rcx, [0x1401f9bf1]
mov r8d, 0x4d6
mov rdx, rdi
call fcn.140142230
mov edi, dword [rsp + 0x50]
mov r13d, 1
test eax, eax
cmovne edi, r13d
mov dword [rsp + 0x50], edi
call fcn.140008390
mov rbx, qword [r12 + 0x138]
test rbx, rbx
je 0x14014cbd8
xor esi, esi
cmp dword [rbx + 0x38], esi
je 0x14014cb9b
cmp dword [rbx + 0x3c], esi
je 0x14014cb61
call fcn.1400da0e0
test eax, eax
je 0x14014cb3c
mov r9d, dword [rbx + 0x34]
mov r8d, dword [rbx + 0x30]
mov rdx, qword [rbx + 0x10]
mov rcx, qword [r12]
call fcn.140144010
test eax, eax
jne 0x14014cb98
mov r14d, esi
jmp 0x14014cb9b
mov eax, dword [rbx + 0x34]
mov r9d, dword [rbx + 0x30]
mov r8, qword [rbx + 0x10]
lea rdx, str.__create_usn_journal___s___d__d
lea rcx, [rsp + 0xa0]
mov dword [rsp + 0x20], eax
call fcn.140176950
jmp 0x14014cb98
call fcn.1400da0e0
test eax, eax
je 0x14014cb80
mov rdx, qword [rbx + 0x10]
mov rcx, qword [r12]
call fcn.1401440e0
test eax, eax
jne 0x14014cb98
mov r14d, esi
jmp 0x14014cb9b
mov r8, qword [rbx + 0x10]
lea rdx, str.__delete_usn_journal___s_
lea rcx, [rsp + 0xa0]
call fcn.140176950
mov dword [rbx + 0x38], esi
mov eax, dword [rbx + 0x50]
mov r9d, dword [rbx + 0x40]
mov r8, qword [rbx + 0x20]
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x10]
mov dword [rsp + 0x30], eax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x28], rax
mov eax, dword [rbx + 0x44]
mov dword [rsp + 0x20], eax
call fcn.140008500
mov rbx, qword [rbx + 0x58]
test rbx, rbx
jne 0x14014cb07
mov esi, dword [rsp + 0x60]
mov dword [rsp + 0x4c], r13d
lea rdx, [0x140000000]
xor edi, edi
mov ebx, dword [rsp + 0x40]
add esi, 1
add rbp, 1
cmp esi, 0x12
mov dword [rsp + 0x60], esi
mov qword [rsp + 0x90], rbp
jl 0x14014aa62
test r14d, r14d
je 0x14014cc19
mov rcx, qword [r12]
mov edx, 0x3e9
call fcn.1400d4ad0
xor ecx, ecx
call fcn.14000d310
test r15d, r15d
je 0x14014cc2a
call fcn.1400f58e0
mov eax, dword [rsp + 0x58]
test eax, eax
je 0x14014cc37
call fcn.140100f90
cmp dword [rsp + 0x5c], 0
je 0x14014cc4d
call fcn.1400f9990
call fcn.1400f9180
call fcn.140124250
test ebx, ebx
je 0x14014cc5d
mov ecx, dword [rsp + 0x84]
call fcn.1400cd050
mov rax, qword [rsp + 0xa8]
cmp byte [rax], 0
je 0x14014d35e
lea rcx, [rsp + 0x1c0]
call fcn.1400012c0
lea rcx, [rsp + 0x1c0]
xor edx, edx
call fcn.1400d85c0
call fcn.1400cd3c0
test rax, rax
je 0x14014ccb0
call fcn.1400cd3c0
lea rdx, str.__instance___s_
lea rcx, [rsp + 0xa0]
mov r8, rax
call fcn.140176950
mov r8, qword [0x14020b0c0]
cmp qword [r8 + 0x18], 0
je 0x14014ccd6
mov r8, qword [r8 + 0x18]
lea rdx, str.__config___s_
lea rcx, [rsp + 0xa0]
call fcn.140176950
mov r9, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x1c8]
mov rcx, qword [r12]
mov esi, 1
lea r8, str.runas
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
call fcn.1400d67b0
lea rcx, [rsp + 0x1c0]
test eax, eax
cmove r14d, edi
call fcn.140175010
jmp 0x14014d363
cmp byte [reloc.WS2_32.dll_accept], 0
je case.default.0x14014aa90
lea rcx, [0x1401f9bf3]
mov r8d, 0x4e8
mov rdx, rdi
call fcn.140142230
lea rcx, [0x14020ac85]
mov r8d, 0x4e9
mov rdx, rdi
call fcn.140142230
lea rcx, [0x1401f9bf4]
mov r8d, 0x4ea
mov rdx, rdi
call fcn.140142230
mov edi, dword [rsp + 0x54]
mov r13d, 1
test eax, eax
cmovne edi, r13d
mov dword [rsp + 0x54], edi
call fcn.140008740
mov rbx, qword [r12 + 0x150]
test rbx, rbx
je 0x14014cbd8
xor ebp, ebp
nop
nop
cmp dword [rbx + 0x38], ebp
je 0x14014ce34
cmp dword [rbx + 0x3c], ebp
je 0x14014cdfa
call fcn.1400da0e0
test eax, eax
je 0x14014cdd5
mov r9d, dword [rbx + 0x34]
mov r8d, dword [rbx + 0x30]
mov rdx, qword [rbx + 0x10]
mov rcx, qword [r12]
call fcn.140144010
test eax, eax
jne 0x14014ce31
mov r14d, ebp
jmp 0x14014ce34
mov eax, dword [rbx + 0x34]
mov r9d, dword [rbx + 0x30]
mov r8, qword [rbx + 0x10]
lea rdx, str.__create_usn_journal___s___d__d
lea rcx, [rsp + 0xa0]
mov dword [rsp + 0x20], eax
call fcn.140176950
jmp 0x14014ce31
call fcn.1400da0e0
test eax, eax
je 0x14014ce19
mov rdx, qword [rbx + 0x10]
mov rcx, qword [r12]
call fcn.1401440e0
test eax, eax
jne 0x14014ce31
mov r14d, ebp
jmp 0x14014ce34
mov r8, qword [rbx + 0x10]
lea rdx, str.__delete_usn_journal___s_
lea rcx, [rsp + 0xa0]
call fcn.140176950
mov dword [rbx + 0x38], ebp
mov eax, dword [rbx + 0x50]
mov r9d, dword [rbx + 0x40]
mov r8, qword [rbx + 0x20]
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x10]
mov dword [rsp + 0x30], eax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x28], rax
mov eax, dword [rbx + 0x44]
mov dword [rsp + 0x20], eax
call fcn.1400088b0
mov rbx, qword [rbx + 0x58]
test rbx, rbx
jne 0x14014cda0
mov rbp, qword [rsp + 0x90]
jmp 0x14014cbd8
cmp byte [reloc.WS2_32.dll_accept], 0
je case.default.0x14014aa90
mov rcx, qword [r12 + 0x90]
mov edx, 0x40f
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edx, 0x410
cmp eax, 1
sete byte [0x14020ad58]
mov rcx, qword [r12 + 0x90]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edx, 0x40e
cmp eax, 1
sete byte [0x14020ad59]
mov rcx, qword [r12 + 0x90]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
lea rdx, [0x14020afc8]
lea rcx, [0x14020afc0]
cmp eax, 1
sete byte [0x1401f9c5b]
mov r8, qword [r12 + 0x288]
call fcn.14000b620
mov rcx, qword [0x14020ad60]
mov r8d, 0x414
mov rdx, rdi
call fcn.140142d20
mov rcx, qword [0x14020ad68]
mov r8d, 0x416
mov rdx, rdi
mov qword [0x14020ad60], rax
call fcn.140142d20
mov qword [0x14020ad68], rax
mov eax, 1
mov r13d, eax
mov dword [rsp + 0x4c], eax
jmp 0x14014cbdd
cmp byte [reloc.WS2_32.dll_accept], 0
je case.default.0x14014aa90
mov r8, qword [r12 + 0x268]
lea rdx, [0x14020afb8]
lea rcx, [0x14020afb0]
call fcn.14000a930
mov eax, 1
mov r13d, eax
mov dword [rsp + 0x4c], eax
jmp 0x14014cbdd
cmp byte [reloc.WS2_32.dll_accept], 0
je case.default.0x14014aa90
mov r8, qword [r12 + 0x278]
lea rdx, [0x14020afa8]
lea rcx, [0x14020afa0]
call fcn.14000a850
mov eax, 1
mov r13d, eax
mov dword [rsp + 0x4c], eax
jmp 0x14014cbdd
mov rcx, qword [0x14020ae60]
mov r8d, 0x4fb
mov rdx, rdi
call fcn.140142d20
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4ff
mov rcx, rdi
mov qword [0x14020ae60], rax
call qword [sym.imp.USER32.dll_GetDlgItemInt]
mov rcx, qword [0x14020ae48]
mov r8d, 0x501
mov rdx, rdi
mov dword [reloc.WS2_32.dll_setsockopt], eax
call fcn.140142d20
mov rcx, qword [0x14020ae50]
mov r8d, 0x503
mov rdx, rdi
mov qword [0x14020ae48], rax
call fcn.140142d20
cmp byte [reloc.WS2_32.dll_accept], 0
mov qword [0x14020ae50], rax
jne 0x14014d073
mov edx, 0x4fc
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014d06a
mov byte [reloc.WS2_32.dll_accept], al
xor ebx, ebx
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014d0a4
mov edx, 0x4fd
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014d09b
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014d0c5
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014d044
mov edx, 0x4fc
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [reloc.WS2_32.dll_accept]
mov ebx, 0
cmp eax, 1
cmovne ecx, ebx
mov byte [reloc.WS2_32.dll_accept], cl
jmp 0x14014d046
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014d0c5
mov edx, 0x4fd
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, 1
cmovne ecx, ebx
mov byte [reloc.WS2_32.dll_accept], cl
cmp byte [0x14020ae3c], 0
jne 0x14014d0f2
mov edx, 0x4f9
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014d0e9
mov byte [0x14020ae3c], al
jmp 0x14014d113
cmp byte [0x14020ae3c], 0
je 0x14014d113
mov edx, 0x4f9
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020ae3c]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020ae3c], cl
mov rcx, qword [0x14020ae58]
mov r8d, 0x504
mov rdx, rdi
call fcn.140142d20
xor r9d, r9d
xor r8d, r8d
mov edx, 0x506
mov rcx, rdi
mov qword [0x14020ae58], rax
call qword [sym.imp.USER32.dll_GetDlgItemInt]
shl eax, 0xa
mov dword [0x1401f9ce4], eax
mov rcx, qword [r12]
call fcn.1400bca80
test eax, eax
jne 0x14014cbdd
xor edi, edi
lea rdx, [0x140000000]
mov r14d, edi
jmp 0x14014cbe6
mov rcx, qword [0x14020ae98]
mov r8d, 0x521
mov rdx, rdi
call fcn.140142d20
xor r9d, r9d
xor r8d, r8d
mov edx, 0x517
mov rcx, rdi
mov qword [0x14020ae98], rax
call qword [sym.imp.USER32.dll_GetDlgItemInt]
mov rcx, qword [0x14020ae70]
mov r8d, 0x51d
mov rdx, rdi
mov dword [0x1401f9cf0], eax
call fcn.140142d20
mov rcx, qword [0x14020ae78]
mov r8d, 0x51f
mov rdx, rdi
mov qword [0x14020ae70], rax
call fcn.140142d20
cmp byte [reloc.WS2_32.dll_accept], 0
mov qword [0x14020ae78], rax
jne 0x14014d22d
mov edx, 0x50c
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014d224
mov byte [reloc.WS2_32.dll_accept], al
xor ebx, ebx
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14014d25e
mov edx, 0x50d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014d255
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14014d27f
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014d1fe
mov edx, 0x50c
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [reloc.WS2_32.dll_accept]
mov ebx, 0
cmp eax, 1
cmovne ecx, ebx
mov byte [reloc.WS2_32.dll_accept], cl
jmp 0x14014d200
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14014d27f
mov edx, 0x50d
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, 1
cmovne ecx, ebx
mov byte [reloc.WS2_32.dll_accept], cl
cmp byte [0x14020ae3d], 0
jne 0x14014d2ac
mov edx, 0x50b
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x14014d2a3
mov byte [0x14020ae3d], al
jmp 0x14014d2cd
cmp byte [0x14020ae3d], 0
je 0x14014d2cd
mov edx, 0x50b
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
movzx ecx, byte [0x14020ae3d]
cmp eax, 1
cmovne ecx, ebx
mov byte [0x14020ae3d], cl
mov rcx, qword [0x14020ae90]
mov r8d, 0x50e
mov rdx, rdi
call fcn.140142d20
xor r9d, r9d
xor r8d, r8d
mov edx, 0x518
mov rcx, rdi
mov qword [0x14020ae90], rax
call qword [sym.imp.USER32.dll_GetDlgItemInt]
mov rcx, qword [0x14020ae80]
mov r8d, 0x511
shl eax, 0xa
mov rdx, rdi
mov dword [0x1401f9cf8], eax
call fcn.140142d20
mov rcx, qword [0x14020ae88]
mov r8d, 0x514
mov rdx, rdi
mov qword [0x14020ae80], rax
call fcn.140142d20
mov qword [0x14020ae88], rax
mov rcx, qword [r12]
call fcn.1400c8560
mov edi, 0
lea rdx, [0x140000000]
test eax, eax
cmove r14d, edi
jmp 0x14014cbe6
mov esi, 1
cmp dword [rsp + 0x74], 0
je 0x14014d384
call fcn.140143510
cmp eax, dword [r12 + 0x2b4]
je 0x14014d384
mov dword [r12 + 0x2b4], eax
mov r14d, edi
cmp dword [rsp + 0x6c], 0
je 0x14014d3a5
call fcn.140141e70
cmp eax, dword [r12 + 0x2b0]
je 0x14014d3a5
mov dword [r12 + 0x2b0], eax
mov r14d, edi
cmp dword [rsp + 0x70], 0
je 0x14014d454
mov rcx, qword [0x1401fd5f8]
mov ebx, edi
mov rcx, qword [rcx + 0x2f90]
call fcn.140141460
test eax, eax
je 0x14014d3d1
cmp eax, 1
mov edi, esi
cmove ebx, esi
mov rax, qword [0x1401fd5f8]
lea rdx, str.Search_Everything...
mov rcx, qword [rax + 0x2f90]
movzx eax, byte [rcx]
cmp al, 0x53
jne 0x14014d403
nop
test al, al
je 0x14014d427
mov al, byte [rcx + 1]
add rcx, 1
add rdx, 1
cmp al, byte [rdx]
je 0x14014d3f0
movzx eax, byte [rdx]
movzx ecx, byte [rcx]
cmp ecx, eax
je 0x14014d427
lea rcx, str.Search_Everything...
call fcn.140141460
test eax, eax
je 0x14014d427
add edi, 1
cmp eax, 1
jne 0x14014d427
add ebx, eax
cmp ebx, 1
jne 0x14014d434
cmp edi, ebx
jne 0x14014d434
mov eax, esi
jmp 0x14014d43b
neg edi
sbb eax, eax
and eax, 2
xor ebx, ebx
cmp eax, dword [r12 + 0x2b8]
je 0x14014d456
mov dword [r12 + 0x2b8], eax
mov r14d, ebx
jmp 0x14014d456
xor ebx, ebx
mov eax, dword [rsp + 0x78]
test eax, eax
je 0x14014d478
call fcn.140141c70
cmp eax, dword [r12 + 0x2c4]
je 0x14014d478
mov dword [r12 + 0x2c4], eax
mov r14d, ebx
cmp dword [rsp + 0x64], 0
je 0x14014d499
call fcn.140141830
cmp eax, dword [r12 + 0x2c8]
je 0x14014d499
mov dword [r12 + 0x2c8], eax
mov r14d, ebx
mov eax, dword [rsp + 0x50]
test eax, eax
je 0x14014d4a9
mov rcx, r12
call fcn.140149e70
mov eax, dword [rsp + 0x54]
test eax, eax
je 0x14014d4b9
mov rcx, r12
call fcn.14014a420
mov rcx, r12
call fcn.1401430e0
mov eax, dword [rsp + 0x88]
test eax, eax
je 0x14014d4f2
mov ecx, esi
call fcn.1400d1680
test rax, rax
mov rbx, rax
je 0x14014d4f2
call fcn.1400f2550
xor edx, edx
mov rcx, rax
call fcn.140025630
mov rcx, rbx
call fcn.1400d10a0
mov ecx, dword [rsp + 0x8c]
test ecx, ecx
je 0x14014d523
mov ecx, esi
call fcn.1400e49b0
test rax, rax
mov rbx, rax
je 0x14014d523
call fcn.1400f2550
xor edx, edx
mov rcx, rax
call fcn.140025630
mov rcx, rbx
call fcn.1400e4400
lea rcx, str.db__d_n
mov edx, r13d
call fcn.1400b35e0
test r13d, r13d
je 0x14014d549
call fcn.1400f2550
lea rdx, [rsp + 0x44]
mov rcx, rax
call fcn.140015f00
mov edx, dword [rsp + 0x44]
lea rcx, str.research__d_n
call fcn.1400b35e0
cmp dword [rsp + 0x44], 0
je 0x14014d565
call fcn.1400f5890
lea rcx, [rsp + 0xa0]
call fcn.140175010
test r14d, r14d
jne 0x14014d585
mov rcx, qword [r12]
mov edx, 0x3e9
call fcn.1400d4b70
mov eax, r14d
mov rcx, qword [rsp + 0x2e0]
xor rcx, rsp
call fcn.1401a6ae0
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret