Function at 0x14009c5c0
Capabilities:
Copy file
Get common file path
Get program files directory

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x3578
call fcn.140222df0
sub rsp, rax
mov rax, qword [0x1408fa960]
xor rax, rsp
mov qword [rsp + 0x3560], rax
mov dword [rsp + 0x60], 0
lea rcx, [rsp + 0x78]
call fcn.140017b60
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c840
nop
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 0
je 0x14009c62a
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 1
jne 0x1400a1995
mov dword [rsp + 0x330], 8
mov dword [rsp + 0x334], reloc.msi.dll_MsiEnumClientsW
lea rcx, [rsp + 0x330]
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x13e0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
lea rcx, [rsp + 0x68]
call fcn.1400c5240
nop
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0x3590]
call fcn.1400b7400
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0x3590]
call fcn.1400b7d00
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 0
jne 0x14009c90d
mov byte [rsp + 0x8b], 0
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0x1388], rax
lea rdx, [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1388]
call fcn.140035cf0
jmp 0x14009c6f7
lea rcx, [rsp + 0x1c0]
call fcn.14002d290
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0x1390], rax
lea rdx, [rsp + 0x1428]
mov rcx, qword [rsp + 0x1390]
call fcn.140020530
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.14001e940
movzx eax, al
test eax, eax
je 0x14009c87b
movzx eax, byte [rsp + 0x8b]
test eax, eax
jne 0x14009c87b
lea rcx, [rsp + 0x1c0]
call fcn.14001ea10
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x1398], rax
lea rdx, [0x140302ad0]
lea rcx, [rsp + 0x1e30]
call fcn.1400179b0
nop
mov eax, dword [rsp + 0x60]
or eax, 1
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x1e30]
lea rdx, [rsp + 0x20e0]
mov rcx, qword [rsp + 0x1398]
call fcn.140091d10
mov qword [rsp + 0x13a0], rax
mov rax, qword [rsp + 0x13a0]
mov qword [rsp + 0x13a8], rax
mov eax, dword [rsp + 0x60]
or eax, 2
mov dword [rsp + 0x60], eax
mov rcx, qword [rsp + 0x13a8]
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x14009c80d
lea rcx, [rsp + 0x1c0]
call fcn.14001ea10
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140091f30
movzx eax, al
test eax, eax
je 0x14009c80d
mov dword [rsp + 0x18c], 1
jmp 0x14009c818
mov dword [rsp + 0x18c], 0
movzx eax, byte [rsp + 0x18c]
mov byte [rsp + 0xb7], al
mov eax, dword [rsp + 0x60]
and eax, 2
test eax, eax
je 0x14009c845
and dword [rsp + 0x60], 0xfffffffd
lea rcx, [rsp + 0x20e0]
call fcn.14000a800
nop
mov eax, dword [rsp + 0x60]
and eax, 1
test eax, eax
je 0x14009c862
and dword [rsp + 0x60], 0xfffffffe
lea rcx, [rsp + 0x1e30]
call fcn.14000a800
movzx eax, byte [rsp + 0xb7]
test eax, eax
je 0x14009c876
mov byte [rsp + 0x8b], 1
jmp 0x14009c6ea
movzx eax, byte [rsp + 0x8b]
test eax, eax
je 0x14009c894
mov dword [rsp + 0x190], reloc.WSOCK32.dll_ntohl
jmp 0x14009c89f
mov dword [rsp + 0x190], reloc.WSOCK32.dll_inet_ntoa
mov edx, dword [rsp + 0x190]
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov edx, reloc.WSOCK32.dll_inet_ntoa
lea rcx, [rsp + 0x68]
call fcn.1400c5330
movzx eax, al
test eax, eax
je 0x14009c908
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov qword [rsp + 0x13b0], rax
xor r8d, r8d
lea rdx, str._TESTINSTALL1
mov rcx, qword [rsp + 0x13b0]
call fcn.140036b80
cmp rax, 0xffffffffffffffff
je 0x14009c908
mov edx, reloc.WSOCK32.dll_inet_ntoa
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009dc78
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x1a70]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8a00
nop
mov byte [rsp + 0x8c], 0
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x14009c964
mov byte [rsp + 0x8c], 1
mov rax, qword [rsp + 0x3590]
add rax, 0xf8
mov qword [rsp + 0x13c0], rax
mov rcx, qword [rsp + 0x3590]
add rcx, 0xb8
lea r9, [rsp + 0x1a70]
mov r8, rcx
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x3590]
call fcn.1400b80a0
mov qword [rsp + 0x13b8], rax
mov rax, qword [rsp + 0x13b8]
mov qword [rsp + 0x13c8], rax
lea r9, [rsp + 0x13e0]
mov rax, qword [rsp + 0x13c0]
mov r8, rax
mov rdx, qword [rsp + 0x13c8]
lea rcx, [rsp + 0xc0]
call fcn.140072090
nop
lea rcx, [rsp + 0x2100]
call fcn.14000a800
lea rdx, [0x140902758]
lea rcx, [rsp + 0x1a70]
call fcn.140024f20
movzx eax, al
test eax, eax
jne 0x14009ca31
lea rdx, [0x140902738]
lea rcx, [rsp + 0x1a70]
call fcn.140024f20
movzx eax, al
test eax, eax
je 0x14009d17f
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x13d0], rax
lea rdx, [rsp + 0x1a70]
mov rcx, qword [rsp + 0x13d0]
call fcn.140091c60
mov byte [rsp + 0x89], 0
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0x13d8], rax
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0x358]
mov rcx, qword [rsp + 0x13d8]
call fcn.140078610
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0x13f8], rax
lea rdx, [rsp + 0x15f0]
mov rcx, qword [rsp + 0x13f8]
call fcn.140020530
mov rdx, rax
lea rcx, [rsp + 0x358]
call fcn.14001e940
movzx eax, al
test eax, eax
je 0x14009cb00
lea rcx, [rsp + 0x358]
call fcn.14001ea10
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140091f30
movzx eax, al
test eax, eax
je 0x14009cb00
mov byte [rsp + 0x89], 1
movzx eax, byte [rsp + 0x89]
test eax, eax
jne 0x14009cde7
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x14009cde7
lea rcx, [rsp + 0x138]
call fcn.140009b50
mov qword [rsp + 0x3f8], rax
mov dword [rsp + 0x280], 6
mov dword [rsp + 0x284], 8
lea rax, [rsp + 0x288]
mov r8, rax
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x16d8]
call fcn.1400479a0
lea rcx, [rsp + 0x1430]
mov rdi, rcx
mov rsi, rax
mov ecx, MsiDatabaseExportA
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1440]
lea rcx, [rsp + 0x1430]
mov rdi, rax
mov rsi, rcx
mov ecx, MsiDatabaseExportA
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rsp + 0x3f8]
lea rdx, [rsp + 0x1440]
lea rcx, [rsp + 0x1630]
call fcn.1400cf150
nop
lea rax, [rsp + 0x1630]
mov qword [rsp + 0x380], rax
mov rcx, qword [rsp + 0x380]
call fcn.140009d90
mov qword [rsp + 0x1b8], rax
mov rcx, qword [rsp + 0x380]
call fcn.14000af40
mov qword [rsp + 0x400], rax
jmp 0x14009cc1c
mov rax, qword [rsp + 0x1b8]
add rax, 4
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x400]
cmp qword [rsp + 0x1b8], rax
je 0x14009cdda
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x410], rax
lea rcx, [rsp + 0x3c8]
call fcn.140072120
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000e130
mov qword [rsp + 0x408], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rdx, rax
mov rcx, qword [rsp + 0x408]
call fcn.140091830
lea rcx, [rsp + 0x3c8]
call fcn.14000e130
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0x410]
mov eax, dword [rax]
mov dword [rsp + 0x200], eax
mov edx, dword [rsp + 0x200]
mov rcx, qword [rsp + 0x418]
call fcn.140091960
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0x420], rax
lea r8, [rsp + 0x3c8]
lea rdx, [rsp + 0x210]
mov rcx, qword [rsp + 0x420]
call fcn.140078610
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0x428], rax
lea rdx, [rsp + 0x1618]
mov rcx, qword [rsp + 0x428]
call fcn.140020530
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.14001e940
movzx eax, al
test eax, eax
je 0x14009cdc8
lea rdx, [0x140902758]
lea rcx, [rsp + 0x1a70]
call fcn.140024f20
movzx eax, al
test eax, eax
je 0x14009cd79
lea rcx, [rsp + 0x210]
call fcn.14001e9f0
mov rcx, rax
call fcn.140009d90
mov rcx, rax
call fcn.140093bf0
mov rcx, rax
call fcn.14002d1c0
movzx eax, al
test eax, eax
jne 0x14009cdc0
lea rdx, [0x140902738]
lea rcx, [rsp + 0x1a70]
call fcn.140024f20
movzx eax, al
test eax, eax
je 0x14009cdc8
lea rcx, [rsp + 0x210]
call fcn.14001e9f0
mov rcx, rax
call fcn.140009d90
mov rcx, rax
call fcn.140093c30
mov rcx, rax
call fcn.14002d1c0
movzx eax, al
test eax, eax
je 0x14009cdc8
mov byte [rsp + 0x89], 1
lea rcx, [rsp + 0x3c8]
call fcn.1400183a0
jmp 0x14009cc08
lea rcx, [rsp + 0x1630]
call fcn.14002c7c0
movzx eax, byte [rsp + 0x89]
test eax, eax
je 0x14009d17a
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x81]
test eax, eax
jne 0x14009cf8d
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x430], rax
lea rdx, [rsp + 0x2120]
mov rcx, qword [rsp + 0x430]
call fcn.140091e00
mov qword [rsp + 0x438], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x440], rax
mov rcx, qword [rsp + 0x440]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1450]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x448], rax
mov eax, 0x7e0
mov word [rsp + 0x158], ax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x448]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
lea rcx, [0x140902650]
mov qword [rsp + 0x58], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x50], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x48], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x30], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x1450]
mov qword [rsp + 0x20], rcx
mov r9, rax
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
nop
lea rcx, [rsp + 0x2120]
call fcn.14000a800
mov byte [rsp + 0xb8], 0
lea rcx, [rsp + 0xc0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x1a70]
call fcn.14000a800
nop
lea rcx, [rsp + 0x68]
call fcn.1400c5270
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xb8]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x80]
test eax, eax
jne 0x14009d17a
lea rcx, [rsp + 0x1c10]
call fcn.14000a280
nop
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x450], rax
lea rdx, [rsp + 0x2140]
mov rcx, qword [rsp + 0x450]
call fcn.140091e00
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x460], rax
mov rcx, qword [rsp + 0x460]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1460]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x468], rax
mov eax, 0x7e1
mov word [rsp + 0x13a], ax
lea rdx, [rsp + 0x13a]
mov rcx, qword [rsp + 0x468]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
lea r8, [rsp + 0x1460]
mov rdx, rax
lea rcx, [rsp + 0x1c10]
call fcn.140014cf0
nop
lea rcx, [rsp + 0x2140]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x470], rax
mov eax, 0x7d4
mov word [rsp + 0x13c], ax
lea rdx, [rsp + 0x13c]
mov rcx, qword [rsp + 0x470]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0x478], rax
lea rcx, [rsp + 0x1c10]
call fcn.14000c690
mov qword [rsp + 0x480], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x488], rax
mov r9d, reloc.msi.dll_MsiGetFeatureCostA
mov r8, qword [rsp + 0x478]
mov rdx, qword [rsp + 0x480]
mov rcx, qword [rsp + 0x488]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
je 0x14009d16d
mov byte [rsp + 0xb9], 0
lea rcx, [rsp + 0x1c10]
call fcn.14000a800
nop
lea rcx, [rsp + 0xc0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x1a70]
call fcn.14000a800
nop
lea rcx, [rsp + 0x68]
call fcn.1400c5270
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xb9]
jmp 0x1400a68ef
lea rcx, [rsp + 0x1c10]
call fcn.14000a800
jmp 0x14009d701
lea rcx, [rsp + 0x2f0]
call fcn.14000df30
nop
mov dword [rsp + 0x204], 6
lea rdx, [rsp + 0x204]
lea rcx, [rsp + 0x2f0]
call fcn.1400792d0
mov dword [rsp + 0x208], 7
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x2f0]
call fcn.1400792d0
mov dword [rsp + 0x26c], 9
lea rdx, [rsp + 0x26c]
lea rcx, [rsp + 0x2f0]
call fcn.1400792d0
mov dword [rsp + 0x268], 8
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x2f0]
call fcn.1400792d0
lea rdx, [rsp + 0x1620]
lea rcx, [rsp + 0x2f0]
call fcn.14000e6a0
mov rax, qword [rax]
mov qword [rsp + 0x218], rax
jmp 0x14009d23c
lea rcx, [rsp + 0x218]
call fcn.1400717f0
lea rdx, [rsp + 0x15f8]
lea rcx, [rsp + 0x2f0]
call fcn.14000e890
mov rdx, rax
lea rcx, [rsp + 0x218]
call fcn.14000e0f0
movzx eax, al
test eax, eax
je 0x14009d6f4
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x490], rax
lea rcx, [rsp + 0x218]
call fcn.140009d90
mov eax, dword [rax]
mov dword [rsp + 0x270], eax
mov edx, dword [rsp + 0x270]
mov rcx, qword [rsp + 0x490]
call fcn.140091960
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0x498], rax
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0x220]
mov rcx, qword [rsp + 0x498]
call fcn.140078610
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0x4a0], rax
lea rdx, [rsp + 0x1628]
mov rcx, qword [rsp + 0x4a0]
call fcn.140020530
mov rdx, rax
lea rcx, [rsp + 0x220]
call fcn.14001e940
movzx eax, al
test eax, eax
je 0x14009d6ef
lea rcx, [rsp + 0x220]
call fcn.14001ea10
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140091f30
movzx eax, al
test eax, eax
je 0x14009d6ef
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x81]
test eax, eax
jne 0x14009d4f4
lea rcx, [rsp + 0x220]
call fcn.14001ea10
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x4a8], rax
lea rdx, [rsp + 0x2160]
mov rcx, qword [rsp + 0x4a8]
call fcn.140091e00
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0x4b8], rax
mov rcx, qword [rsp + 0x4b8]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1470]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x4c0], rax
mov eax, 0x7e0
mov word [rsp + 0x13e], ax
lea rdx, [rsp + 0x13e]
mov rcx, qword [rsp + 0x4c0]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
lea rcx, [0x140902650]
mov qword [rsp + 0x58], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x50], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x48], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x30], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x1470]
mov qword [rsp + 0x20], rcx
mov r9, rax
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
nop
lea rcx, [rsp + 0x2160]
call fcn.14000a800
mov byte [rsp + 0x91], 0
lea rcx, [rsp + 0x2f0]
call fcn.14002c7c0
nop
lea rcx, [rsp + 0xc0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x1a70]
call fcn.14000a800
nop
lea rcx, [rsp + 0x68]
call fcn.1400c5270
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0x91]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x80]
test eax, eax
jne 0x14009d6ef
lea rcx, [rsp + 0x1c30]
call fcn.14000a280
nop
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x4c8], rax
lea rdx, [rsp + 0x2180]
mov rcx, qword [rsp + 0x4c8]
call fcn.140091e00
mov qword [rsp + 0x4d0], rax
mov rax, qword [rsp + 0x4d0]
mov qword [rsp + 0x4d8], rax
mov rcx, qword [rsp + 0x4d8]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1480]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x4e0], rax
mov eax, 0x7e1
mov word [rsp + 0x144], ax
lea rdx, [rsp + 0x144]
mov rcx, qword [rsp + 0x4e0]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
lea r8, [rsp + 0x1480]
mov rdx, rax
lea rcx, [rsp + 0x1c30]
call fcn.140014cf0
nop
lea rcx, [rsp + 0x2180]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x4e8], rax
mov eax, 0x7d4
mov word [rsp + 0x152], ax
lea rdx, [rsp + 0x152]
mov rcx, qword [rsp + 0x4e8]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0x4f0], rax
lea rcx, [rsp + 0x1c30]
call fcn.14000c690
mov qword [rsp + 0x4f8], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x500], rax
mov r9d, reloc.msi.dll_MsiGetFeatureCostA
mov r8, qword [rsp + 0x4f0]
mov rdx, qword [rsp + 0x4f8]
mov rcx, qword [rsp + 0x500]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
je 0x14009d6e2
mov byte [rsp + 0x92], 0
lea rcx, [rsp + 0x1c30]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2f0]
call fcn.14002c7c0
nop
lea rcx, [rsp + 0xc0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x1a70]
call fcn.14000a800
nop
lea rcx, [rsp + 0x68]
call fcn.1400c5270
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0x92]
jmp 0x1400a68ef
lea rcx, [rsp + 0x1c30]
call fcn.14000a800
jmp 0x14009d22f
lea rcx, [rsp + 0x2f0]
call fcn.14002c7c0
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x508], rax
lea rdx, [rsp + 0x1a70]
mov rcx, qword [rsp + 0x508]
call fcn.140091c60
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 2
je 0x14009d797
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 3
je 0x14009d797
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 4
je 0x14009d797
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 5
jne 0x14009da62
mov byte [rsp + 0x8c], 0
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov rcx, qword [rsp + 0x3590]
mov dword [rcx + 0x2c], eax
lea rcx, [rsp + 0x1d50]
call fcn.14000a280
nop
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
lea rdx, [rsp + 0x1d50]
mov rcx, rax
call fcn.1400dc830
movzx eax, al
test eax, eax
je 0x14009d81c
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x510], rax
lea rdx, [rsp + 0x1d50]
mov rcx, qword [rsp + 0x510]
call fcn.1400918b0
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x388], rax
mov rax, qword [rsp + 0x388]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x520], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 4
lea rcx, [rsp + 0x1730]
call fcn.1401723f0
mov qword [rsp + 0x518], rax
mov rdx, qword [rsp + 0x518]
mov rcx, qword [rsp + 0x388]
call qword [rsp + 0x520]
movzx eax, al
test eax, eax
je 0x14009da55
mov byte [rsp + 0x8d], 0
lea rax, [rsp + 0x1678]
mov qword [rsp + 0x528], rax
lea rdx, [rsp + 0xc0]
mov rcx, qword [rsp + 0x528]
call fcn.140017b20
mov qword [rsp + 0x530], rax
lea rdx, [rsp + 0x8d]
mov rcx, qword [rsp + 0x530]
call fcn.1400c5030
movzx eax, al
test eax, eax
je 0x14009da55
movzx eax, byte [rsp + 0x8d]
test eax, eax
je 0x14009da55
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x558], rax
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x538], rax
lea rdx, [rsp + 0x21a0]
mov rcx, qword [rsp + 0x538]
call fcn.140091ea0
mov qword [rsp + 0x540], rax
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x548], rax
mov rax, qword [rsp + 0x548]
mov qword [rsp + 0x550], rax
mov rdx, qword [rsp + 0x550]
mov rcx, qword [rsp + 0x558]
call fcn.140091ef0
nop
lea rcx, [rsp + 0x21a0]
call fcn.14000a800
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x590], rax
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x560], rax
lea rdx, [rsp + 0x21e0]
mov rcx, qword [rsp + 0x560]
call fcn.140091e00
mov qword [rsp + 0x568], rax
mov rax, qword [rsp + 0x568]
mov qword [rsp + 0x570], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x570]
lea rcx, [rsp + 0x21c0]
call fcn.140221e10
mov qword [rsp + 0x578], rax
mov rax, qword [rsp + 0x578]
mov qword [rsp + 0x580], rax
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x588], rax
mov rdx, qword [rsp + 0x588]
mov rcx, qword [rsp + 0x590]
call fcn.1400918b0
nop
lea rcx, [rsp + 0x21c0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x21e0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1d50]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x80]
test eax, eax
je 0x14009db1a
mov rax, qword [rsp + 0x3598]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x13e0]
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0x2a0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400bcbf0
movzx eax, al
test eax, eax
jne 0x14009db06
mov byte [rsp + 0x93], 0
lea rcx, [rsp + 0xc0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x1a70]
call fcn.14000a800
nop
lea rcx, [rsp + 0x68]
call fcn.1400c5270
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0x93]
jmp 0x1400a68ef
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009dc4a
movzx eax, byte [rsp + 0x8c]
test eax, eax
je 0x14009db37
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009db46
mov edx, 6
lea rcx, [rsp + 0x68]
call fcn.1400c5280
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x598], rax
lea rdx, [rsp + 0x2200]
mov rcx, qword [rsp + 0x598]
call fcn.140091e00
mov qword [rsp + 0x5a0], rax
mov rcx, qword [rsp + 0x5a0]
call fcn.1400165c0
mov byte [rsp + 0x94], al
lea rcx, [rsp + 0x2200]
call fcn.14000a800
movzx eax, byte [rsp + 0x94]
test eax, eax
je 0x14009dc4a
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov qword [rsp + 0x5c8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x5a8], rax
lea rcx, [rsp + 0xc0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov r8d, eax
lea rdx, [rsp + 0x2220]
mov rcx, qword [rsp + 0x5a8]
call fcn.140094640
mov qword [rsp + 0x5b0], rax
mov rax, qword [rsp + 0x5b0]
mov qword [rsp + 0x5b8], rax
mov rax, qword [rsp + 0x5b8]
mov qword [rsp + 0x5c0], rax
mov rdx, qword [rsp + 0x5c0]
mov rcx, qword [rsp + 0x5c8]
call fcn.140091830
nop
lea rcx, [rsp + 0x2220]
call fcn.14000a800
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x78]
call fcn.14002ce90
nop
lea rcx, [rsp + 0xc0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x1a70]
call fcn.14000a800
mov byte [rsp + 0x98], 0
mov qword [rsp + 0x118], 0xffffffffffffffff
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c52b0
movzx eax, al
test eax, eax
je 0x1400a190a
lea rcx, [rsp + 0x68]
call fcn.1400c5370
mov dword [rsp + 0x110], eax
mov eax, dword [rsp + 0x110]
sub eax, 2
mov dword [rsp + 0x110], eax
cmp dword [rsp + 0x110], 0xc
ja case.default.0x14009dcef
movsxd rax, dword [rsp + 0x110]
lea rcx, [0x140000000]
mov eax, dword [rcx + rax*4 + 0xa690c]
add rax, rcx
jmp rax
mov rax, qword [rsp + 0x3590]
add rax, 0x528
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3ad0
movzx eax, al
test eax, eax
je 0x14009dd2a
mov edx, 3
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009ddf9
mov rax, qword [rsp + 0x3590]
add rax, 0x528
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x5d8], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x5d0], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x5d0]
mov rcx, qword [rsp + 0x5d8]
call fcn.1400d3130
mov qword [rsp + 0x118], rax
cmp qword [rsp + 0x118], 1
jne 0x14009dde2
mov rax, qword [rsp + 0x3590]
add rax, 0x528
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d1db0
mov rcx, qword [rsp + 0x3590]
mov byte [rcx + 0x87], al
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x87]
test eax, eax
je 0x14009ddd1
mov edx, 3
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009dde0
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009ddf9
cmp qword [rsp + 0x118], 2
jne 0x14009ddf9
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
add rax, 0x538
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3ad0
movzx eax, al
test eax, eax
je 0x14009de45
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x30], 1
jne 0x14009de40
mov edx, 2
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009e043
mov rax, qword [rsp + 0x3590]
add rax, 0x538
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x5e8], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x5e0], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x5e0]
mov rcx, qword [rsp + 0x5e8]
call fcn.1400d3130
mov qword [rsp + 0x118], rax
cmp qword [rsp + 0x118], 1
jne 0x14009dfe2
mov rax, qword [rsp + 0x3590]
add rax, 0x538
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d34c0
mov rcx, qword [rsp + 0x3590]
mov eax, dword [rax]
cmp dword [rcx + 0x30], eax
je 0x14009dfc3
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x5f0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x2b8
mov rdx, rax
mov rcx, qword [rsp + 0x5f0]
call fcn.1400d4150
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x5f8], rax
lea rdx, [0x140302f88]
lea rcx, [rsp + 0x1e50]
call fcn.1400179b0
nop
lea rdx, [rsp + 0x1e50]
mov rcx, qword [rsp + 0x5f8]
call fcn.1400d4150
nop
lea rcx, [rsp + 0x1e50]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3230
mov rcx, qword [rsp + 0x3590]
add rcx, 0x2b8
mov rdx, rax
call fcn.1400185b0
mov rax, qword [rsp + 0x3590]
add rax, 0x538
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d34c0
mov rcx, qword [rsp + 0x3590]
mov eax, dword [rax]
mov dword [rcx + 0x30], eax
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x30], 1
jne 0x14009dfe0
mov edx, 2
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009e043
cmp qword [rsp + 0x118], 0x3ef
jne 0x14009e037
mov rax, qword [rsp + 0x3590]
add rax, 0x528
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3ad0
movzx eax, al
test eax, eax
jne 0x14009e026
mov edx, 4
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009e035
mov edx, 3
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009e043
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3ad0
movzx eax, al
test eax, eax
je 0x14009e2be
lea rcx, [rsp + 0x1c50]
call fcn.14000a280
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x320
mov rcx, qword [rsp + 0x3590]
add rcx, 0x290
mov rdx, qword [rsp + 0x3590]
add rdx, 0x270
mov rdi, qword [rsp + 0x3590]
add rdi, 0x2d8
mov rsi, qword [rsp + 0x3590]
add rsi, 0x2b8
mov r8, qword [rsp + 0x3590]
add r8, 0x300
mov r9, qword [rsp + 0x3590]
add r9, 0x30
mov qword [rsp + 0x600], r9
mov byte [rsp + 0x48], 0
lea r10, [rsp + 0x1c50]
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdi
mov r9, rsi
mov rax, qword [rsp + 0x600]
mov rdx, rax
mov rcx, qword [rsp + 0x3590]
call fcn.1400b48a0
movzx eax, al
test eax, eax
je 0x14009e1de
mov rax, qword [rsp + 0x3590]
add rax, 0x320
mov rcx, qword [rsp + 0x3590]
add rcx, 0x290
mov rdx, qword [rsp + 0x3590]
add rdx, 0x270
mov rdi, qword [rsp + 0x3590]
add rdi, 0x2d8
mov rsi, qword [rsp + 0x3590]
add rsi, 0x2b8
mov r8, qword [rsp + 0x3590]
add r8, 0x300
mov qword [rsp + 0x608], r8
lea r9, [rsp + 0x1c50]
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
mov r9, rdi
mov r8, rsi
mov rax, qword [rsp + 0x608]
mov rdx, rax
mov rcx, qword [rsp + 0x3590]
call fcn.1400b4620
movzx eax, al
test eax, eax
jne 0x14009e29c
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x610], rax
mov eax, 0x7d4
mov word [rsp + 0x154], ax
lea rdx, [rsp + 0x154]
mov rcx, qword [rsp + 0x610]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0x618], rax
lea rcx, [rsp + 0x1c50]
call fcn.14000c690
mov qword [rsp + 0x620], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x628], rax
mov r9d, reloc.msi.dll_MsiGetDatabaseState
mov r8, qword [rsp + 0x618]
mov rdx, qword [rsp + 0x620]
mov rcx, qword [rsp + 0x628]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x630], rax
mov dl, 1
mov rcx, qword [rsp + 0x630]
call fcn.1400d4840
jmp 0x14009e2ac
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
nop
lea rcx, [rsp + 0x1c50]
call fcn.14000a800
jmp 0x14009e677
mov rax, qword [rsp + 0x3590]
add rax, 0x2b8
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x14009e306
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x30], 1
jne 0x14009e306
mov rax, qword [rsp + 0x3590]
add rax, 0x2b8
lea rdx, [0x140303014]
mov rcx, rax
call fcn.140015550
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x638], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x2b8
mov rdx, rax
mov rcx, qword [rsp + 0x638]
call fcn.1400d4150
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x640], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x2d8
mov rdx, rax
mov rcx, qword [rsp + 0x640]
call fcn.1400d4120
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x648], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x270
mov rdx, rax
mov rcx, qword [rsp + 0x648]
call fcn.1400d47c0
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x650], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x290
mov rdx, rax
mov rcx, qword [rsp + 0x650]
call fcn.1400d47f0
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x658], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x300
mov rdx, rax
mov rcx, qword [rsp + 0x658]
call fcn.1400d4220
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x660], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x30
mov rdx, rax
mov rcx, qword [rsp + 0x660]
call fcn.1400d4250
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x670], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x668], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x668]
mov rcx, qword [rsp + 0x670]
call fcn.1400d3130
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.14004f630
mov rcx, qword [rsp + 0x3590]
add rcx, 0x300
mov rdx, rax
call fcn.1400185b0
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3230
mov rcx, qword [rsp + 0x3590]
add rcx, 0x2b8
mov rdx, rax
call fcn.1400185b0
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3210
mov rcx, qword [rsp + 0x3590]
add rcx, 0x2d8
mov rdx, rax
call fcn.14007e240
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3a00
mov rcx, qword [rsp + 0x3590]
add rcx, 0x270
mov rdx, rax
call fcn.1400185b0
mov rax, qword [rsp + 0x3590]
add rax, 0x548
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3a20
mov rcx, qword [rsp + 0x3590]
add rcx, 0x290
mov rdx, rax
call fcn.14007e240
cmp qword [rsp + 0x118], 1
jne 0x14009e5e0
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009e677
cmp qword [rsp + 0x118], 0x3ef
jne 0x14009e66b
mov rax, qword [rsp + 0x3590]
add rax, 0x538
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3ad0
movzx eax, al
test eax, eax
jne 0x14009e624
mov edx, 3
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009e669
mov rax, qword [rsp + 0x3590]
add rax, 0x528
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3ad0
movzx eax, al
test eax, eax
jne 0x14009e65a
mov edx, 4
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009e669
mov edx, 2
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009e677
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
add rax, 0x4c8
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x680], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x678], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x678]
mov rcx, qword [rsp + 0x680]
call fcn.1400d3130
mov qword [rsp + 0xd8], rax
cmp qword [rsp + 0xd8], 1
jne 0x14009e792
mov edx, 0x3fe
mov rcx, qword [rsp + 0x3590]
call fcn.1400ac3c0
movzx eax, al
test eax, eax
jne 0x14009e76d
mov edx, 0x402
mov rcx, qword [rsp + 0x3590]
call fcn.1400ac3c0
movzx eax, al
test eax, eax
jne 0x14009e76d
mov edx, 0x3fb
mov rcx, qword [rsp + 0x3590]
call fcn.1400ac3c0
movzx eax, al
test eax, eax
jne 0x14009e76d
mov edx, 0x3fc
mov rcx, qword [rsp + 0x3590]
call fcn.1400ac3c0
movzx eax, al
test eax, eax
jne 0x14009e76d
mov edx, 0x3fd
mov rcx, qword [rsp + 0x3590]
call fcn.1400ac3c0
movzx eax, al
test eax, eax
jne 0x14009e76d
mov edx, 0x3ff
mov rcx, qword [rsp + 0x3590]
call fcn.1400ac3c0
movzx eax, al
test eax, eax
je 0x14009e77e
mov edx, reloc.WSOCK32.dll_inet_ntoa
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009e78d
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009f8bf
cmp qword [rsp + 0xd8], 2
jne 0x14009e7ae
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009f8bf
cmp qword [rsp + 0xd8], 0x3f5
je 0x14009e7ea
cmp qword [rsp + 0xd8], 0x3f6
je 0x14009e7ea
cmp qword [rsp + 0xd8], 0x3f7
je 0x14009e7ea
cmp qword [rsp + 0xd8], 0x3f8
jne 0x14009f0d0
mov rax, qword [rsp + 0x3590]
add rax, 0x4c8
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140067340
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14002ce90
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3590]
add rax, 0x60
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14002ce90
mov rax, qword [rsp + 0x3590]
add rax, 0x70
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14002ce90
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov rcx, qword [rsp + 0x3590]
mov dword [rcx + 0x2c], eax
lea rdx, [0x1402fedc4]
lea rcx, [rsp + 0x1e70]
call fcn.1400179b0
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x2240]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8a00
mov qword [rsp + 0x688], rax
mov rax, qword [rsp + 0x688]
mov qword [rsp + 0x690], rax
lea rdx, [rsp + 0x1e70]
mov rcx, qword [rsp + 0x690]
call fcn.1400dd3d0
mov rcx, qword [rsp + 0x3590]
cmp eax, dword [rcx + 0x2c]
je 0x14009e8f8
mov dword [rsp + 0x194], 1
jmp 0x14009e903
mov dword [rsp + 0x194], 0
movzx eax, byte [rsp + 0x194]
mov byte [rsp + 0x95], al
lea rcx, [rsp + 0x2240]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1e70]
call fcn.14000a800
movzx eax, byte [rsp + 0x95]
test eax, eax
je 0x14009e9f2
mov rax, qword [rsp + 0x3590]
mov byte [rax + 0x88], 1
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x698], rax
mov rax, qword [rsp + 0x3590]
mov r8d, dword [rax + 0x2c]
lea rdx, [rsp + 0x2260]
mov rcx, qword [rsp + 0x698]
call fcn.140094940
mov qword [rsp + 0x6a0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x150
mov rdx, qword [rsp + 0x6a0]
mov rcx, rax
call fcn.14001e7a0
lea rcx, [rsp + 0x2260]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x1748]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
mov rdx, rax
lea rcx, [rsp + 0x13e0]
mov rax, qword [rsp + 0x13e0]
call qword [rax]
cmp qword [rsp + 0xd8], 0x3f5
jne 0x14009eb3b
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 2
je 0x14009ea40
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 4
je 0x14009ea40
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 3
je 0x14009ea40
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 5
jne 0x14009eb28
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x6a8], rax
mov eax, 0x7d4
mov word [rsp + 0x156], ax
lea rdx, [rsp + 0x156]
mov rcx, qword [rsp + 0x6a8]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0x6b8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x6b0], rax
mov eax, 0x7f0
mov word [rsp + 0x15a], ax
lea rdx, [rsp + 0x15a]
mov rcx, qword [rsp + 0x6b0]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0x6c0], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x6c8], rax
mov r9d, reloc.msi.dll_MsiGetFeatureCostA
mov r8, qword [rsp + 0x6b8]
mov rdx, qword [rsp + 0x6c0]
mov rcx, qword [rsp + 0x6c8]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
je 0x14009eb18
mov edx, reloc.WSOCK32.dll_ntohl
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009eb26
mov rax, qword [rsp + 0x3598]
mov dword [rax], 5
jmp 0x14009eb36
mov rax, qword [rsp + 0x3598]
mov dword [rax], 5
jmp 0x14009f0cb
cmp qword [rsp + 0xd8], 0x3f6
jne 0x14009ef0e
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x6d0], rax
lea rdx, [rsp + 0x2280]
mov rcx, qword [rsp + 0x6d0]
call fcn.140091e00
mov qword [rsp + 0x6d8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xd8
mov rdx, qword [rsp + 0x6d8]
mov rcx, rax
call fcn.14001e7a0
lea rcx, [rsp + 0x2280]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x6e0], rax
lea rdx, [rsp + 0x13e0]
mov rcx, qword [rsp + 0x6e0]
call fcn.1400933b0
movzx eax, al
test eax, eax
je 0x14009eefa
mov rax, qword [rsp + 0x3598]
mov dword [rax], 4
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
jne 0x14009ed23
lea rax, [rsp + 0x16b8]
mov qword [rsp + 0x6e8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x70
mov rdx, rax
mov rcx, qword [rsp + 0x6e8]
call fcn.140017b20
mov qword [rsp + 0x6f0], rax
mov rdx, qword [rsp + 0x6f0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400c26b0
movzx eax, al
test eax, eax
jne 0x14009ed23
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x6f8], rax
mov eax, 0x7d4
mov word [rsp + 0x15c], ax
lea rdx, [rsp + 0x15c]
mov rcx, qword [rsp + 0x6f8]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0x708], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x700], rax
mov eax, 0x7ff
mov word [rsp + 0x120], ax
lea rdx, [rsp + 0x120]
mov rcx, qword [rsp + 0x700]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0x710], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x718], rax
mov r9d, reloc.msi.dll_MsiGetDatabaseState
mov r8, qword [rsp + 0x708]
mov rdx, qword [rsp + 0x710]
mov rcx, qword [rsp + 0x718]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009dc8c
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x720], rax
lea rdx, [0x140303258]
lea rcx, [rsp + 0x1ed0]
call fcn.1400179b0
nop
lea r8, [rsp + 0x1ed0]
lea rdx, [rsp + 0x22e0]
mov rcx, qword [rsp + 0x720]
call fcn.140091d10
mov qword [rsp + 0x728], rax
mov rax, qword [rsp + 0x728]
mov qword [rsp + 0x730], rax
mov rax, qword [rsp + 0x730]
mov qword [rsp + 0x760], rax
lea rdx, [0x140303270]
lea rcx, [rsp + 0x1eb0]
call fcn.1400179b0
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x150
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x1eb0]
mov r8, rax
lea rdx, [rsp + 0x22c0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8aa0
mov qword [rsp + 0x738], rax
mov rax, qword [rsp + 0x738]
mov qword [rsp + 0x740], rax
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x768], rax
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x748], rax
lea rdx, [0x1403032a0]
lea rcx, [rsp + 0x1e90]
call fcn.1400179b0
nop
lea r8, [rsp + 0x1e90]
lea rdx, [rsp + 0x22a0]
mov rcx, qword [rsp + 0x748]
call fcn.140091d10
mov qword [rsp + 0x750], rax
mov rax, qword [rsp + 0x750]
mov qword [rsp + 0x758], rax
mov rax, qword [rsp + 0x758]
mov qword [rsp + 0x770], rax
mov r9, qword [rsp + 0x760]
mov r8, qword [rsp + 0x768]
mov rdx, qword [rsp + 0x770]
mov rcx, qword [rsp + 0x3590]
call fcn.1400b6650
nop
lea rcx, [rsp + 0x22a0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1e90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x22c0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1eb0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x22e0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1ed0]
call fcn.14000a800
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0x3590]
call fcn.1400b6e50
mov edx, 6
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009f0cb
cmp qword [rsp + 0xd8], 0x3f7
jne 0x14009f089
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 2
je 0x14009ef5c
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 4
je 0x14009ef5c
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 3
je 0x14009ef5c
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 5
jne 0x14009f053
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x778], rax
mov eax, 0x7d4
mov word [rsp + 0x122], ax
lea rdx, [rsp + 0x122]
mov rcx, qword [rsp + 0x778]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0x788], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x780], rax
mov eax, 0x7f0
mov word [rsp + 0x124], ax
lea rdx, [rsp + 0x124]
mov rcx, qword [rsp + 0x780]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0x790], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x798], rax
mov r9d, reloc.msi.dll_MsiGetFeatureCostA
mov r8, qword [rsp + 0x788]
mov rdx, qword [rsp + 0x790]
mov rcx, qword [rsp + 0x798]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
je 0x14009f034
mov edx, reloc.WSOCK32.dll_ntohl
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009f051
mov rax, qword [rsp + 0x3598]
mov dword [rax], 2
mov edx, 7
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009f087
mov rax, qword [rsp + 0x3598]
mov dword [rax], 2
mov rax, qword [rsp + 0x3590]
mov ecx, dword [rax + 0x2c]
call fcn.1400dcd40
movzx eax, al
test eax, eax
je 0x14009f087
mov edx, 7
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009f0cb
cmp qword [rsp + 0xd8], 0x3f8
jne 0x14009f0cb
mov rax, qword [rsp + 0x3598]
mov dword [rax], 3
mov rax, qword [rsp + 0x3590]
mov ecx, dword [rax + 0x2c]
call fcn.1400dcd40
movzx eax, al
test eax, eax
je 0x14009f0cb
mov edx, 7
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009f8bf
cmp qword [rsp + 0xd8], 0x3f9
jne 0x14009f50c
mov rax, qword [rsp + 0x3590]
add rax, 0x4c8
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140067340
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14002ce90
mov rax, qword [rsp + 0x3590]
add rax, 0x4b8
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x7a8], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x7a0], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x7a0]
mov rcx, qword [rsp + 0x7a8]
call fcn.1400d3130
mov qword [rsp + 0x390], rax
cmp qword [rsp + 0x390], 2
jne 0x14009f175
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009f507
cmp qword [rsp + 0x390], 1
jne 0x14009f507
mov rax, qword [rsp + 0x3590]
add rax, 0x4b8
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d3b10
mov byte [rsp + 0x96], al
movzx eax, byte [rsp + 0x96]
test eax, eax
je 0x14009f1c6
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x2c], 3
jmp 0x14009f1d5
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x2c], 5
lea rcx, [rsp + 0x1d70]
call fcn.14000a280
nop
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x7b0], rax
lea rdx, [rsp + 0x2300]
mov rcx, qword [rsp + 0x7b0]
call fcn.140091e00
mov qword [rsp + 0x7b8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xd8
mov rdx, qword [rsp + 0x7b8]
mov rcx, rax
call fcn.14001e7a0
lea rcx, [rsp + 0x2300]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140072260
mov dword [rsp + 0x274], eax
lea rcx, [rsp + 0x1490]
call fcn.140072120
mov qword [rsp + 0x7c0], rax
mov rdx, qword [rsp + 0x7c0]
lea rcx, [rsp + 0x78]
call fcn.140071670
lea rcx, [rsp + 0x1490]
call fcn.1400183a0
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x7c8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xd8
mov rdx, rax
mov rcx, qword [rsp + 0x7c8]
call fcn.140091830
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x7d0], rax
mov edx, dword [rsp + 0x274]
mov rcx, qword [rsp + 0x7d0]
call fcn.1400d46b0
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x7d8], rax
lea rdx, [rsp + 0x2320]
mov rcx, qword [rsp + 0x7d8]
call fcn.140091e00
mov qword [rsp + 0x7e0], rax
mov rax, qword [rsp + 0x7e0]
mov qword [rsp + 0x7e8], rax
lea rdx, [rsp + 0x1d70]
mov rcx, qword [rsp + 0x7e8]
call fcn.1400dc830
nop
lea rcx, [rsp + 0x2320]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x7f0], rax
lea rdx, [rsp + 0x1d70]
mov rcx, qword [rsp + 0x7f0]
call fcn.1400918b0
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x7f8], rax
mov rax, qword [rsp + 0x3590]
mov eax, dword [rax + 0x2c]
mov dword [rsp + 0x278], eax
mov edx, dword [rsp + 0x278]
mov rcx, qword [rsp + 0x7f8]
call fcn.140091960
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x820], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x800], rax
mov rax, qword [rsp + 0x3590]
mov r8d, dword [rax + 0x2c]
lea rdx, [rsp + 0x2340]
mov rcx, qword [rsp + 0x800]
call fcn.140094ef0
mov qword [rsp + 0x808], rax
mov rax, qword [rsp + 0x808]
mov qword [rsp + 0x810], rax
mov rax, qword [rsp + 0x810]
mov qword [rsp + 0x818], rax
mov rdx, qword [rsp + 0x818]
mov rcx, qword [rsp + 0x820]
call fcn.140091860
nop
lea rcx, [rsp + 0x2340]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x848], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x828], rax
mov rax, qword [rsp + 0x3590]
mov r8d, dword [rax + 0x2c]
lea rdx, [rsp + 0x2360]
mov rcx, qword [rsp + 0x828]
call fcn.140094940
mov qword [rsp + 0x830], rax
mov rax, qword [rsp + 0x830]
mov qword [rsp + 0x838], rax
xor r9d, r9d
mov r8, qword [rsp + 0x838]
lea rdx, [rsp + 0x1760]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
mov qword [rsp + 0x840], rax
mov rdx, qword [rsp + 0x840]
mov rcx, qword [rsp + 0x848]
call fcn.140092990
nop
lea rcx, [rsp + 0x2360]
call fcn.14000a800
mov edx, 6
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3598]
mov dword [rax], 1
lea rcx, [rsp + 0x1d70]
call fcn.14000a800
jmp 0x14009f8bf
cmp qword [rsp + 0xd8], 0x3fb
jne 0x14009f8b0
mov rax, qword [rsp + 0x3590]
add rax, 0x4c8
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140067340
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14002ce90
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x2c], 5
lea rcx, [rsp + 0x1d90]
call fcn.14000a280
nop
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x850], rax
lea rdx, [rsp + 0x2380]
mov rcx, qword [rsp + 0x850]
call fcn.140091e00
mov qword [rsp + 0x858], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xd8
mov rdx, qword [rsp + 0x858]
mov rcx, rax
call fcn.14001e7a0
lea rcx, [rsp + 0x2380]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140072260
mov dword [rsp + 0x20c], eax
lea rcx, [rsp + 0x14a0]
call fcn.140072120
mov qword [rsp + 0x860], rax
mov rdx, qword [rsp + 0x860]
lea rcx, [rsp + 0x78]
call fcn.140071670
lea rcx, [rsp + 0x14a0]
call fcn.1400183a0
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x868], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xd8
mov rdx, rax
mov rcx, qword [rsp + 0x868]
call fcn.140091830
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x870], rax
mov edx, dword [rsp + 0x20c]
mov rcx, qword [rsp + 0x870]
call fcn.1400d46b0
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x878], rax
lea rdx, [rsp + 0x23a0]
mov rcx, qword [rsp + 0x878]
call fcn.140091e00
mov qword [rsp + 0x880], rax
mov rax, qword [rsp + 0x880]
mov qword [rsp + 0x888], rax
lea rdx, [rsp + 0x1d90]
mov rcx, qword [rsp + 0x888]
call fcn.1400dc830
nop
lea rcx, [rsp + 0x23a0]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x890], rax
lea rdx, [rsp + 0x1d90]
mov rcx, qword [rsp + 0x890]
call fcn.1400918b0
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x898], rax
mov rax, qword [rsp + 0x3590]
mov eax, dword [rax + 0x2c]
mov dword [rsp + 0x1c8], eax
mov edx, dword [rsp + 0x1c8]
mov rcx, qword [rsp + 0x898]
call fcn.140091960
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x8c0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x8a0], rax
mov rax, qword [rsp + 0x3590]
mov r8d, dword [rax + 0x2c]
lea rdx, [rsp + 0x23c0]
mov rcx, qword [rsp + 0x8a0]
call fcn.140094ef0
mov qword [rsp + 0x8a8], rax
mov rax, qword [rsp + 0x8a8]
mov qword [rsp + 0x8b0], rax
mov rax, qword [rsp + 0x8b0]
mov qword [rsp + 0x8b8], rax
mov rdx, qword [rsp + 0x8b8]
mov rcx, qword [rsp + 0x8c0]
call fcn.140091860
nop
lea rcx, [rsp + 0x23c0]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x8e8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x8c8], rax
mov rax, qword [rsp + 0x3590]
mov r8d, dword [rax + 0x2c]
lea rdx, [rsp + 0x23e0]
mov rcx, qword [rsp + 0x8c8]
call fcn.140094940
mov qword [rsp + 0x8d0], rax
mov rax, qword [rsp + 0x8d0]
mov qword [rsp + 0x8d8], rax
xor r9d, r9d
mov r8, qword [rsp + 0x8d8]
lea rdx, [rsp + 0x1778]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
mov qword [rsp + 0x8e0], rax
mov rdx, qword [rsp + 0x8e0]
mov rcx, qword [rsp + 0x8e8]
call fcn.140092990
nop
lea rcx, [rsp + 0x23e0]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x86]
test eax, eax
je 0x14009f884
mov edx, 0xa
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009f893
mov edx, 6
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3598]
mov dword [rax], 1
lea rcx, [rsp + 0x1d90]
call fcn.14000a800
jmp 0x14009f8bf
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
lea rcx, [rsp + 0x1db0]
call fcn.14000a280
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x150
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x14009f942
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x2400]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8a00
mov qword [rsp + 0x8f0], rax
mov rdx, qword [rsp + 0x8f0]
lea rcx, [rsp + 0x1db0]
call fcn.14001e7a0
lea rcx, [rsp + 0x2400]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x4a8
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x910], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x8f8], rax
lea rdx, [rsp + 0x1db0]
mov rcx, qword [rsp + 0x8f8]
call fcn.140094390
cdqe
mov qword [rsp + 0x900], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x908], rax
mov r8, qword [rsp + 0x900]
mov rdx, qword [rsp + 0x908]
mov rcx, qword [rsp + 0x910]
call fcn.1400d3130
mov qword [rsp + 0x228], rax
cmp qword [rsp + 0x228], 2
jne 0x14009f9e2
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009fdbe
cmp qword [rsp + 0x228], 0x3ef
jne 0x14009fa04
mov edx, reloc.WSOCK32.dll_ntohl
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009fdbe
cmp qword [rsp + 0x228], 1
jne 0x14009fdae
mov rax, qword [rsp + 0x3590]
add rax, 0x4a8
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140060280
mov rdx, rax
lea rcx, [rsp + 0x3d8]
call fcn.140017b20
nop
lea rcx, [rsp + 0x3d8]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov dword [rsp + 0xd0], eax
lea rcx, [rsp + 0x3d8]
call fcn.14000e130
mov qword [rsp + 0x938], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x918], rax
mov r8d, dword [rsp + 0xd0]
lea rdx, [rsp + 0x2420]
mov rcx, qword [rsp + 0x918]
call fcn.140094940
mov qword [rsp + 0x920], rax
mov rax, qword [rsp + 0x920]
mov qword [rsp + 0x928], rax
xor r9d, r9d
mov r8, qword [rsp + 0x928]
lea rdx, [rsp + 0x1790]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
mov qword [rsp + 0x930], rax
mov rdx, qword [rsp + 0x930]
mov rcx, qword [rsp + 0x938]
call fcn.140092990
nop
lea rcx, [rsp + 0x2420]
call fcn.14000a800
lea rdx, [rsp + 0x3d8]
lea rcx, [rsp + 0x78]
call fcn.14002ce90
mov rax, qword [rsp + 0x3598]
mov dword [rax], 1
cmp dword [rsp + 0xd0], 2
je 0x14009fb3b
cmp dword [rsp + 0xd0], 3
jne 0x14009fb79
mov edx, reloc.ODBC32.dll_SQLFetch
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x940], rax
xor edx, edx
mov rcx, qword [rsp + 0x940]
call fcn.1400d4770
jmp 0x14009fbda
cmp dword [rsp + 0xd0], 4
je 0x14009fb8d
cmp dword [rsp + 0xd0], 5
jne 0x14009fbcb
mov edx, reloc.ODBC32.dll_SQLFetch
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x948], rax
mov dl, 1
mov rcx, qword [rsp + 0x948]
call fcn.1400d4770
jmp 0x14009fbda
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3590]
add rax, 0x150
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x14009fcca
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x950], rax
lea rdx, [rsp + 0x2460]
mov rcx, qword [rsp + 0x950]
call fcn.140091900
mov qword [rsp + 0x958], rax
mov rax, qword [rsp + 0x958]
mov qword [rsp + 0x960], rax
mov eax, dword [rsp + 0x60]
or eax, 4
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x960]
mov qword [rsp + 0x970], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x2440]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8a00
mov qword [rsp + 0x968], rax
mov eax, dword [rsp + 0x60]
or eax, 8
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x968]
mov qword [rsp + 0x978], rax
mov rdx, qword [rsp + 0x970]
mov rcx, qword [rsp + 0x978]
call fcn.14003a7d0
movzx eax, al
test eax, eax
jne 0x14009fcca
mov dword [rsp + 0x198], 0
jmp 0x14009fcd5
mov dword [rsp + 0x198], 1
movzx eax, byte [rsp + 0x198]
mov byte [rsp + 0x97], al
mov eax, dword [rsp + 0x60]
and eax, 8
test eax, eax
je 0x14009fd02
and dword [rsp + 0x60], 0xfffffff7
lea rcx, [rsp + 0x2440]
call fcn.14000a800
nop
mov eax, dword [rsp + 0x60]
and eax, 4
test eax, eax
je 0x14009fd1f
and dword [rsp + 0x60], 0xfffffffb
lea rcx, [rsp + 0x2460]
call fcn.14000a800
movzx eax, byte [rsp + 0x97]
test eax, eax
je 0x14009fd9f
mov rax, qword [rsp + 0x3590]
mov byte [rax + 0x88], 1
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x980], rax
mov r8d, dword [rsp + 0xd0]
lea rdx, [rsp + 0x2480]
mov rcx, qword [rsp + 0x980]
call fcn.140094940
mov qword [rsp + 0x988], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x150
mov rdx, qword [rsp + 0x988]
mov rcx, rax
call fcn.14001e7a0
lea rcx, [rsp + 0x2480]
call fcn.14000a800
nop
lea rcx, [rsp + 0x3d8]
call fcn.1400183a0
jmp 0x14009fdbe
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
nop
lea rcx, [rsp + 0x1db0]
call fcn.14000a800
jmp 0x1400a1905
lea rcx, [rsp + 0x1dd0]
call fcn.14000a280
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x150
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x14009fe4e
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x24a0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8a00
mov qword [rsp + 0x990], rax
mov rdx, qword [rsp + 0x990]
lea rcx, [rsp + 0x1dd0]
call fcn.14001e7a0
lea rcx, [rsp + 0x24a0]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x998], rax
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0x998]
call fcn.140061400
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x9a0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov rdx, rax
mov rcx, qword [rsp + 0x9a0]
call fcn.140061490
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x9c0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x9a8], rax
lea rdx, [rsp + 0x1dd0]
mov rcx, qword [rsp + 0x9a8]
call fcn.140094390
cdqe
mov qword [rsp + 0x9b0], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x9b8], rax
mov r8, qword [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b8]
mov rcx, qword [rsp + 0x9c0]
call fcn.1400d3130
mov qword [rsp + 0x230], rax
cmp qword [rsp + 0x230], 2
jne 0x14009ff58
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a01e2
cmp qword [rsp + 0x230], 0x3ef
jne 0x14009ff7a
mov edx, reloc.WSOCK32.dll_inet_ntoa
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a01e2
cmp qword [rsp + 0x230], 1
jne 0x1400a01d2
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov rcx, qword [rsp + 0x3590]
mov dword [rcx + 0x2c], eax
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400614d0
movzx eax, al
test eax, eax
jne 0x14009fff0
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400614f0
movzx eax, al
test eax, eax
je 0x1400a003a
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140072280
movzx eax, al
test eax, eax
je 0x1400a0026
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x2c], 4
jmp 0x1400a0035
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x2c], 2
jmp 0x1400a00e5
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140072280
movzx eax, al
test eax, eax
je 0x1400a0070
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x2c], 5
jmp 0x1400a007f
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x2c], 3
mov rax, qword [rsp + 0x3590]
add rax, 0x498
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x9c8], rax
lea rdx, [rsp + 0x24c0]
mov rcx, qword [rsp + 0x9c8]
call fcn.140061440
mov qword [rsp + 0x9d0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xd8
mov rdx, qword [rsp + 0x9d0]
mov rcx, rax
call fcn.14001e7a0
lea rcx, [rsp + 0x24c0]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x9f8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x9d8], rax
mov rax, qword [rsp + 0x3590]
mov r8d, dword [rax + 0x2c]
lea rdx, [rsp + 0x24e0]
mov rcx, qword [rsp + 0x9d8]
call fcn.140094940
mov qword [rsp + 0x9e0], rax
mov rax, qword [rsp + 0x9e0]
mov qword [rsp + 0x9e8], rax
xor r9d, r9d
mov r8, qword [rsp + 0x9e8]
lea rdx, [rsp + 0x17a8]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
mov qword [rsp + 0x9f0], rax
mov rdx, qword [rsp + 0x9f0]
mov rcx, qword [rsp + 0x9f8]
call fcn.140092990
nop
lea rcx, [rsp + 0x24e0]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x86]
test eax, eax
je 0x1400a01b3
mov edx, 0xa
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a01c2
mov edx, 6
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3598]
mov dword [rax], 1
jmp 0x1400a01e2
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
nop
lea rcx, [rsp + 0x1dd0]
call fcn.14000a800
jmp 0x1400a1905
lea rcx, [rsp + 0x1bb0]
call fcn.14000a280
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x150
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a0299
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x2500]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8a00
mov qword [rsp + 0xa00], rax
mov rdx, qword [rsp + 0xa00]
lea rcx, [rsp + 0x1bb0]
call fcn.14001e7a0
lea rcx, [rsp + 0x2500]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xa08], rax
lea rdx, [rsp + 0x1bb0]
mov rcx, qword [rsp + 0xa08]
call fcn.140091c60
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x1400a031a
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0xa10], rax
lea r8, [rsp + 0x1bb0]
lea rdx, [rsp + 0x2520]
mov rcx, qword [rsp + 0xa10]
call fcn.140094420
mov qword [rsp + 0xa18], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rdx, qword [rsp + 0xa18]
mov rcx, rax
call fcn.14001e7a0
lea rcx, [rsp + 0x2520]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a03a3
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xa20], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rdx, rax
mov rcx, qword [rsp + 0xa20]
call fcn.140091830
mov rax, qword [rsp + 0x3590]
add rax, 0x488
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xa28], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rdx, rax
mov rcx, qword [rsp + 0xa28]
call fcn.140063e40
mov rax, qword [rsp + 0x3590]
add rax, 0xf8
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a03fc
mov rax, qword [rsp + 0x3590]
add rax, 0x488
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xa30], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xf8
mov rdx, rax
mov rcx, qword [rsp + 0xa30]
call fcn.140063e80
mov rax, qword [rsp + 0x3590]
add rax, 0x488
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xa38], rax
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0xa38]
call fcn.140063e00
mov rax, qword [rsp + 0x3590]
add rax, 0x488
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xa58], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0xa40], rax
lea rdx, [rsp + 0x1bb0]
mov rcx, qword [rsp + 0xa40]
call fcn.140094390
cdqe
mov qword [rsp + 0xa48], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xa50], rax
mov r8, qword [rsp + 0xa48]
mov rdx, qword [rsp + 0xa50]
mov rcx, qword [rsp + 0xa58]
call fcn.1400d3130
mov qword [rsp + 0x238], rax
cmp qword [rsp + 0x238], 2
jne 0x1400a04cc
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0617
cmp qword [rsp + 0x238], 0x3ef
jne 0x1400a04ee
mov edx, reloc.WSOCK32.dll_inet_ntoa
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0617
cmp qword [rsp + 0x238], 1
jne 0x1400a0607
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov rcx, qword [rsp + 0x3590]
mov dword [rcx + 0x2c], eax
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xa80], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0xa60], rax
mov rax, qword [rsp + 0x3590]
mov r8d, dword [rax + 0x2c]
lea rdx, [rsp + 0x2540]
mov rcx, qword [rsp + 0xa60]
call fcn.140094940
mov qword [rsp + 0xa68], rax
mov rax, qword [rsp + 0xa68]
mov qword [rsp + 0xa70], rax
xor r9d, r9d
mov r8, qword [rsp + 0xa70]
lea rdx, [rsp + 0x17c0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
mov qword [rsp + 0xa78], rax
mov rdx, qword [rsp + 0xa78]
mov rcx, qword [rsp + 0xa80]
call fcn.140092990
nop
lea rcx, [rsp + 0x2540]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x86]
test eax, eax
je 0x1400a05e8
mov edx, 0xa
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a05f7
mov edx, 6
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3598]
mov dword [rax], 1
jmp 0x1400a0617
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
nop
lea rcx, [rsp + 0x1bb0]
call fcn.14000a800
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
add rax, 0x518
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xa88], rax
movzx edx, byte [rsp + 0x98]
mov rcx, qword [rsp + 0xa88]
call fcn.1400d40e0
mov rax, qword [rsp + 0x3590]
add rax, 0x518
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xa98], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xa90], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xa90]
mov rcx, qword [rsp + 0xa98]
call fcn.1400d3130
mov qword [rsp + 0x240], rax
cmp qword [rsp + 0x240], 2
jne 0x1400a06c1
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0730
cmp qword [rsp + 0x240], 1
jne 0x1400a0702
mov rax, qword [rsp + 0x3590]
add rax, 0x518
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d31f0
movzx eax, al
test eax, eax
je 0x1400a0700
mov edx, 6
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0730
cmp qword [rsp + 0x240], 0x3ef
jne 0x1400a0721
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0730
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 0
jne 0x1400a0760
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov rcx, qword [rsp + 0x3590]
mov dword [rcx + 0x2c], eax
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov rdx, rax
lea rcx, [rsp + 0x1648]
call fcn.140172450
mov rax, qword [rsp + 0x1648]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xaa0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rsp + 0x17d8]
call fcn.1401723f0
mov rdx, rax
lea rcx, [rsp + 0x1648]
call qword [rsp + 0xaa0]
movzx eax, al
test eax, eax
je 0x1400a0806
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x90], 3
je 0x1400a07f4
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x90], 0
jne 0x1400a0806
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x90], 2
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a083f
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
jne 0x1400a083f
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x90], 0
jne 0x1400a083f
mov dword [rsp + 0x19c], 1
jmp 0x1400a084a
mov dword [rsp + 0x19c], 0
movzx eax, byte [rsp + 0x19c]
mov byte [rsp + 0x8a], al
movzx eax, byte [rsp + 0x8a]
test eax, eax
je 0x1400a0895
mov rax, qword [rsp + 0x3590]
add rax, 0x448
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xaa8], rax
mov edx, 3
mov rcx, qword [rsp + 0xaa8]
call fcn.140015a80
mov rax, qword [rsp + 0x3590]
mov eax, dword [rax + 0x2c]
mov dword [rsp + 0x1cc], eax
cmp dword [rsp + 0x1cc], 6
je 0x1400a08b3
jmp 0x1400a0924
movzx eax, byte [rsp + 0x8a]
test eax, eax
je 0x1400a0915
mov rax, qword [rsp + 0x3590]
add rax, 0x438
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xab8], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xab0], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xab0]
mov rcx, qword [rsp + 0xab8]
call fcn.1400d3130
cmp rax, 2
jne 0x1400a0915
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x30], 1
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c52f0
movzx eax, al
test eax, eax
je 0x1400a093c
jmp 0x1400a1905
movzx eax, byte [rsp + 0x8a]
test eax, eax
je 0x1400a099a
mov rax, qword [rsp + 0x3590]
add rax, 0x438
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400e0350
movzx eax, al
test eax, eax
je 0x1400a097a
mov dword [rsp + 0x1a0], 1
jmp 0x1400a0985
mov dword [rsp + 0x1a0], 2
mov rax, qword [rsp + 0x3590]
mov ecx, dword [rsp + 0x1a0]
mov dword [rax + 0x90], ecx
mov rax, qword [rsp + 0x3590]
add rax, 0x448
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xac0], rax
lea rdx, [rsp + 0x2a0]
mov rcx, qword [rsp + 0xac0]
call fcn.14000ef20
lea rcx, [rsp + 0x2a0]
call fcn.14000c970
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0xac8], rax
mov rax, qword [rsp + 0x3590]
mov r8d, dword [rax + 0x2c]
lea rdx, [rsp + 0x2560]
mov rcx, qword [rsp + 0xac8]
call fcn.140094940
mov qword [rsp + 0xad0], rax
mov rax, qword [rsp + 0xad0]
mov qword [rsp + 0xad8], rax
xor r9d, r9d
mov r8, qword [rsp + 0xad8]
lea rdx, [rsp + 0x17f0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
mov rcx, qword [rsp + 0x3598]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x2a0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400bd1c0
nop
lea rcx, [rsp + 0x2560]
call fcn.14000a800
mov dl, 1
lea rcx, [rsp + 0x2a0]
call fcn.14000d0d0
test rax, rax
jbe 0x1400a0dd5
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xae0], rax
lea rdx, [rsp + 0x2580]
mov rcx, qword [rsp + 0xae0]
call fcn.140091e00
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rdx, qword [rsp + 0xae8]
mov rcx, rax
call fcn.14001e7a0
lea rcx, [rsp + 0x2580]
call fcn.14000a800
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a0b2b
mov rax, qword [rsp + 0x3590]
add rax, 0x448
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xaf0], rax
xor edx, edx
mov rcx, qword [rsp + 0xaf0]
call fcn.1400d4180
mov rax, qword [rsp + 0x3590]
add rax, 0x448
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xaf8], rax
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x84]
mov byte [rsp + 0x99], al
movzx edx, byte [rsp + 0x99]
mov rcx, qword [rsp + 0xaf8]
call fcn.1400d4280
mov rax, qword [rsp + 0x3590]
add rax, 0x448
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xb08], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xb00], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xb00]
mov rcx, qword [rsp + 0xb08]
call fcn.1400d3130
mov qword [rsp + 0x248], rax
lea rcx, [rsp + 0x1400]
call fcn.14000df30
nop
lea rdx, [rsp + 0x1400]
lea rcx, [rsp + 0x2a0]
call fcn.14000d1d0
lea rdx, [rsp + 0x1400]
mov rcx, qword [rsp + 0x3590]
call fcn.1400ba510
cmp qword [rsp + 0x248], 2
jne 0x1400a0c14
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0dc6
cmp qword [rsp + 0x248], 1
jne 0x1400a0d79
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
jne 0x1400a0c52
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 1
jne 0x1400a0c52
mov edx, 4
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0d77
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a0c81
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
jne 0x1400a0c81
mov edx, 5
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0d77
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
je 0x1400a0c9f
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 3
jne 0x1400a0d68
mov rax, qword [rsp + 0x3590]
mov ecx, dword [rax + 0x2c]
call fcn.1400dcd40
movzx eax, al
test eax, eax
je 0x1400a0d68
mov edx, 7
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a0d66
mov rax, qword [rsp + 0x3590]
add rax, 0x70
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0xb10], rax
mov rax, qword [rsp + 0x3590]
mov eax, dword [rax + 0x2c]
mov dword [rsp + 0x1d0], eax
mov rdx, qword [rsp + 0xb10]
mov ecx, dword [rsp + 0x1d0]
call fcn.1400dcd80
movzx eax, al
test eax, eax
jne 0x1400a0d66
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
jne 0x1400a0d57
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a0d57
mov edx, 8
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0d66
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0d77
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0dc6
cmp qword [rsp + 0x248], 0x3ef
jne 0x1400a0db6
movzx eax, byte [rsp + 0x8a]
test eax, eax
je 0x1400a0da5
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x90], 0
mov edx, 6
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a0dc6
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
nop
lea rcx, [rsp + 0x1400]
call fcn.1400154d0
jmp 0x1400a0de4
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x90], 1
jne 0x1400a0ee1
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x8a]
test eax, eax
jne 0x1400a0ee1
mov qword [rsp + 0x250], 1
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov rdx, rax
lea rcx, [rsp + 0x1808]
call fcn.140172450
mov rax, qword [rsp + 0x3590]
add rax, 0x458
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xb20], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xb18], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xb18]
mov rcx, qword [rsp + 0xb20]
call fcn.1400d3130
mov qword [rsp + 0x250], rax
cmp qword [rsp + 0x250], 2
jne 0x1400a0ead
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
cmp qword [rsp + 0x250], 0x3ef
jne 0x1400a0ee1
mov rax, qword [rsp + 0x3590]
mov dword [rax + 0x90], 0
mov edx, 6
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
mov ecx, dword [rax + 0x2c]
call fcn.1400dcd40
movzx eax, al
test eax, eax
je 0x1400a0f67
mov edx, 7
lea rcx, [rsp + 0x68]
call fcn.1400c5280
mov rax, qword [rsp + 0x3590]
add rax, 0x70
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0xb28], rax
mov rax, qword [rsp + 0x3590]
mov eax, dword [rax + 0x2c]
mov dword [rsp + 0x1d4], eax
mov rdx, qword [rsp + 0xb28]
mov ecx, dword [rsp + 0x1d4]
call fcn.1400dcd80
movzx eax, al
test eax, eax
jne 0x1400a0f67
mov edx, 8
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
add rax, 0x558
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xb30], rax
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x360]
mov byte [rsp + 0x9a], al
movzx edx, byte [rsp + 0x9a]
mov rcx, qword [rsp + 0xb30]
call fcn.14006bca0
mov rax, qword [rsp + 0x3590]
add rax, 0x558
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xb40], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xb38], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xb38]
mov rcx, qword [rsp + 0xb40]
call fcn.1400d3130
mov qword [rsp + 0x3a0], rax
cmp qword [rsp + 0x3a0], 2
jne 0x1400a101d
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a10a0
cmp qword [rsp + 0x3a0], 1
jne 0x1400a1091
mov rax, qword [rsp + 0x3590]
add rax, 0x558
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.14006bcc0
mov rcx, qword [rsp + 0x3590]
mov byte [rcx + 0x360], al
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
jne 0x1400a1080
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a1080
mov edx, 8
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a108f
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a10a0
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
add rax, 0x568
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xb48], rax
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x361]
mov byte [rsp + 0x9b], al
movzx edx, byte [rsp + 0x9b]
mov rcx, qword [rsp + 0xb48]
call fcn.1400d41a0
mov rax, qword [rsp + 0x3590]
add rax, 0x568
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xb58], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xb50], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xb50]
mov rcx, qword [rsp + 0xb58]
call fcn.1400d3130
mov qword [rsp + 0x3a8], rax
cmp qword [rsp + 0x3a8], 2
jne 0x1400a1153
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a11ce
cmp qword [rsp + 0x3a8], 1
jne 0x1400a11bf
mov rax, qword [rsp + 0x3590]
add rax, 0x568
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d1db0
mov rcx, qword [rsp + 0x3590]
mov byte [rcx + 0x361], al
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x361]
test eax, eax
je 0x1400a11ae
mov edx, 9
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a11bd
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a11ce
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14002d1c0
movzx eax, al
test eax, eax
je 0x1400a157c
mov rax, qword [rsp + 0x3590]
add rax, 0x320
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a126a
mov rax, qword [rsp + 0x3590]
add rax, 0x300
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a126a
mov rax, qword [rsp + 0x3590]
add rax, 0x270
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a126a
mov rax, qword [rsp + 0x3590]
add rax, 0x290
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x1400a157c
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xb60], rax
lea rdx, [0x140303598]
lea rcx, [rsp + 0x1ef0]
call fcn.1400179b0
nop
lea r8, [rsp + 0x1ef0]
lea rdx, [rsp + 0x1b30]
mov rcx, qword [rsp + 0xb60]
call fcn.140091d10
nop
lea rcx, [rsp + 0x1ef0]
call fcn.14000a800
lea rcx, [rsp + 0x1b30]
call fcn.14002a240
lea rdx, [0x1403035a8]
lea rcx, [rsp + 0x1b30]
call fcn.14001efd0
mov rax, qword [rsp + 0x3590]
add rax, 0x320
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x1400a135e
mov rax, qword [rsp + 0x3590]
add rax, 0x320
mov qword [rsp + 0xb68], rax
lea rcx, [rsp + 0x1b30]
call fcn.14000c690
mov dword [rsp + 0x30], 2
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, qword [rsp + 0xb68]
mov r9, rcx
lea r8, str.DBOwner
mov rdx, rax
mov rcx, 0xffffffff80000002
call fcn.1400f6f60
mov rax, qword [rsp + 0x3590]
add rax, 0x300
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x1400a13d5
mov rax, qword [rsp + 0x3590]
add rax, 0x300
mov qword [rsp + 0xb70], rax
lea rcx, [rsp + 0x1b30]
call fcn.14000c690
mov dword [rsp + 0x30], 2
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, qword [rsp + 0xb70]
mov r9, rcx
lea r8, str.DBServer
mov rdx, rax
mov rcx, 0xffffffff80000002
call fcn.1400f6f60
mov rax, qword [rsp + 0x3590]
add rax, 0x270
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x1400a144c
mov rax, qword [rsp + 0x3590]
add rax, 0x270
mov qword [rsp + 0xb78], rax
lea rcx, [rsp + 0x1b30]
call fcn.14000c690
mov dword [rsp + 0x30], 2
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, qword [rsp + 0xb78]
mov r9, rcx
lea r8, str.DBUser
mov rdx, rax
mov rcx, 0xffffffff80000002
call fcn.1400f6f60
mov rax, qword [rsp + 0x3590]
add rax, 0x290
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x1400a156f
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x3b0], rax
mov rax, qword [rsp + 0x3b0]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xb88], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 5
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rsp + 0x1820]
call fcn.1401723f0
mov qword [rsp + 0xb80], rax
mov rdx, qword [rsp + 0xb80]
mov rcx, qword [rsp + 0x3b0]
call qword [rsp + 0xb88]
movzx edx, al
lea rcx, [rsp + 0x1688]
call fcn.14011f3c0
nop
lea rdx, str.DBPwd
lea rcx, [rsp + 0x1f10]
call fcn.1400179b0
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x290
mov dword [rsp + 0x28], 1
lea rcx, [rsp + 0x1688]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, [rsp + 0x1f10]
lea rdx, [rsp + 0x1b30]
mov rcx, 0xffffffff80000002
call fcn.140126fb0
nop
lea rcx, [rsp + 0x1f10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1688]
call fcn.14011f490
nop
lea rcx, [rsp + 0x1b30]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x578
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xba0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x368
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x1400a15cf
mov rax, qword [rsp + 0x3590]
add rax, 0x320
mov qword [rsp + 0x3b8], rax
jmp 0x1400a15e5
mov rax, qword [rsp + 0x3590]
add rax, 0x368
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0xb90], rax
mov rax, qword [rsp + 0xb90]
mov qword [rsp + 0xb98], rax
mov rdx, qword [rsp + 0xb98]
mov rcx, qword [rsp + 0xba0]
call fcn.1400d41c0
mov rax, qword [rsp + 0x3590]
add rax, 0x578
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xbd8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x2b8
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
je 0x1400a169e
lea rdx, [0x140303314]
lea rcx, [rsp + 0x25c0]
call fcn.1400179b0
mov qword [rsp + 0xba8], rax
mov rax, qword [rsp + 0xba8]
mov qword [rsp + 0xbb0], rax
mov eax, dword [rsp + 0x60]
or eax, 0x10
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xbb0]
mov qword [rsp + 0x308], rax
jmp 0x1400a16ef
mov rax, qword [rsp + 0x3590]
add rax, 0x2b8
mov rdx, rax
lea rcx, [rsp + 0x25a0]
call fcn.140015150
mov qword [rsp + 0xbb8], rax
mov rax, qword [rsp + 0xbb8]
mov qword [rsp + 0xbc0], rax
mov eax, dword [rsp + 0x60]
or eax, 0x20
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xbc0]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0xbc8], rax
mov rax, qword [rsp + 0xbc8]
mov qword [rsp + 0xbd0], rax
mov rdx, qword [rsp + 0xbd0]
mov rcx, qword [rsp + 0xbd8]
call fcn.1400d4790
nop
mov eax, dword [rsp + 0x60]
and eax, 0x20
test eax, eax
je 0x1400a1743
and dword [rsp + 0x60], 0xffffffdf
lea rcx, [rsp + 0x25a0]
call fcn.14000a800
nop
mov eax, dword [rsp + 0x60]
and eax, 0x10
test eax, eax
je 0x1400a1760
and dword [rsp + 0x60], 0xffffffef
lea rcx, [rsp + 0x25c0]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x578
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xbe0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x2d8
mov rdx, rax
mov rcx, qword [rsp + 0xbe0]
call fcn.1400d45e0
mov rax, qword [rsp + 0x3590]
add rax, 0x578
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xbe8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x270
mov rdx, rax
mov rcx, qword [rsp + 0xbe8]
call fcn.1400d4380
mov rax, qword [rsp + 0x3590]
add rax, 0x578
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xbf0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x290
mov rdx, rax
mov rcx, qword [rsp + 0xbf0]
call fcn.1400d4350
mov rax, qword [rsp + 0x3590]
add rax, 0x578
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xc00], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xbf8], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xbf8]
mov rcx, qword [rsp + 0xc00]
call fcn.1400d3130
mov qword [rsp + 0x258], rax
cmp qword [rsp + 0x258], 2
jne 0x1400a1879
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a18f4
cmp qword [rsp + 0x258], 1
jne 0x1400a18c6
mov rcx, qword [rsp + 0x3590]
call fcn.1400aa330
mov byte [rsp + 0x9c], al
movzx eax, byte [rsp + 0x9c]
test eax, eax
je 0x1400a18b5
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a18c4
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a18f4
cmp qword [rsp + 0x258], 0x3ef
jne 0x1400a18e5
mov edx, 8
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a18f4
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x1400a1905
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c5280
jmp 0x14009dc8c
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 0
je 0x1400a1940
mov edx, 0xffffffff
lea rcx, [rsp + 0x68]
call fcn.1400c52f0
movzx eax, al
test eax, eax
jne 0x1400a1940
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1400c52f0
movzx eax, al
test eax, eax
je 0x1400a1986
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0x9d], 0
lea rcx, [rsp + 0x68]
call fcn.1400c5270
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0x9d]
jmp 0x1400a68ef
lea rcx, [rsp + 0x68]
call fcn.1400c5270
jmp 0x1400a3dc0
lea rcx, [rsp + 0x100]
call fcn.140017b60
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x19d0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8a00
nop
lea rcx, [rsp + 0xe0]
call fcn.140072120
nop
lea rcx, [rsp + 0xe0]
call fcn.14000e130
mov qword [rsp + 0xc20], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
lea r9, [rsp + 0x19d0]
mov r8, rax
lea rdx, [rsp + 0x25e0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400b80a0
mov qword [rsp + 0xc08], rax
mov rax, qword [rsp + 0xc08]
mov qword [rsp + 0xc10], rax
mov rax, qword [rsp + 0xc10]
mov qword [rsp + 0xc18], rax
mov rdx, qword [rsp + 0xc18]
mov rcx, qword [rsp + 0xc20]
call fcn.140091830
nop
lea rcx, [rsp + 0x25e0]
call fcn.14000a800
lea rcx, [rsp + 0xe0]
call fcn.14000e130
mov qword [rsp + 0xc28], rax
lea rdx, [rsp + 0x19d0]
mov rcx, qword [rsp + 0xc28]
call fcn.140091c60
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0xc30], rax
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0x318]
mov rcx, qword [rsp + 0xc30]
call fcn.140078610
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0xc38], rax
lea rdx, [rsp + 0x1418]
mov rcx, qword [rsp + 0xc38]
call fcn.140020530
mov rdx, rax
lea rcx, [rsp + 0x318]
call fcn.14001e8c0
movzx eax, al
test eax, eax
je 0x1400a1fe8
lea rcx, [rsp + 0xe0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 2
je 0x1400a1b74
lea rcx, [rsp + 0xe0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 4
je 0x1400a1b74
lea rcx, [rsp + 0xe0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 3
je 0x1400a1b74
lea rcx, [rsp + 0xe0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 5
jne 0x1400a1e25
lea rcx, [rsp + 0x150]
call fcn.140009b50
mov qword [rsp + 0xc40], rax
mov dword [rsp + 0x290], 6
mov dword [rsp + 0x294], 8
lea rax, [rsp + 0x298]
mov r8, rax
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x16c8]
call fcn.1400479a0
lea rcx, [rsp + 0x14b0]
mov rdi, rcx
mov rsi, rax
mov ecx, MsiDatabaseExportA
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x14c0]
lea rcx, [rsp + 0x14b0]
mov rdi, rax
mov rsi, rcx
mov ecx, MsiDatabaseExportA
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rsp + 0xc40]
lea rdx, [rsp + 0x14c0]
lea rcx, [rsp + 0x1600]
call fcn.1400cf150
nop
lea rax, [rsp + 0x1600]
mov qword [rsp + 0x310], rax
mov rcx, qword [rsp + 0x310]
call fcn.140009d90
mov qword [rsp + 0x1b0], rax
mov rcx, qword [rsp + 0x310]
call fcn.14000af40
mov qword [rsp + 0xc48], rax
jmp 0x1400a1c5f
mov rax, qword [rsp + 0x1b0]
add rax, 4
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0xc48]
cmp qword [rsp + 0x1b0], rax
je 0x1400a1e18
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0xc58], rax
lea rcx, [rsp + 0x3e8]
call fcn.140072120
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000e130
mov qword [rsp + 0xc50], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rdx, rax
mov rcx, qword [rsp + 0xc50]
call fcn.140091830
lea rcx, [rsp + 0x3e8]
call fcn.14000e130
mov qword [rsp + 0xc60], rax
mov rax, qword [rsp + 0xc58]
mov eax, dword [rax]
mov dword [rsp + 0x1d8], eax
mov edx, dword [rsp + 0x1d8]
mov rcx, qword [rsp + 0xc60]
call fcn.140091960
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0xc68], rax
lea r8, [rsp + 0x3e8]
lea rdx, [rsp + 0x260]
mov rcx, qword [rsp + 0xc68]
call fcn.140078610
mov rax, qword [rsp + 0x3590]
add rax, 0x38
mov qword [rsp + 0xc70], rax
lea rdx, [rsp + 0x1420]
mov rcx, qword [rsp + 0xc70]
call fcn.140020530
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.14001e940
movzx eax, al
test eax, eax
je 0x1400a1e06
lea rcx, [rsp + 0xe0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 4
je 0x1400a1da9
lea rcx, [rsp + 0xe0]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
cmp eax, 5
jne 0x1400a1dd8
lea rcx, [rsp + 0x260]
call fcn.14001e9f0
mov rcx, rax
call fcn.140009d90
mov rcx, rax
call fcn.140093c30
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14002ce90
jmp 0x1400a1e06
lea rcx, [rsp + 0x260]
call fcn.14001e9f0
mov rcx, rax
call fcn.140009d90
mov rcx, rax
call fcn.140093bf0
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14002ce90
nop
lea rcx, [rsp + 0x3e8]
call fcn.1400183a0
jmp 0x1400a1c4b
lea rcx, [rsp + 0x1600]
call fcn.14002c7c0
lea rcx, [rsp + 0x100]
call fcn.14002d1c0
movzx eax, al
test eax, eax
jne 0x1400a1fe6
lea rcx, [rsp + 0xe0]
call fcn.14000e130
mov qword [rsp + 0xc78], rax
lea rdx, [rsp + 0x2600]
mov rcx, qword [rsp + 0xc78]
call fcn.140091e00
mov qword [rsp + 0xc80], rax
mov rax, qword [rsp + 0xc80]
mov qword [rsp + 0xc88], rax
mov rcx, qword [rsp + 0xc88]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x14d0]
call fcn.14001e490
lea rcx, [rsp + 0x19d0]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x14e0]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0xc90], rax
mov eax, 0x7f2
mov word [rsp + 0x126], ax
lea rdx, [rsp + 0x126]
mov rcx, qword [rsp + 0xc90]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
lea rcx, [0x140902650]
mov qword [rsp + 0x58], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x50], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x48], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x14d0]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x14e0]
mov qword [rsp + 0x20], rcx
mov r9, rax
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
nop
lea rcx, [rsp + 0x2600]
call fcn.14000a800
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0x9e], 0
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0x9e]
jmp 0x1400a68ef
jmp 0x1400a2005
lea rcx, [rsp + 0x318]
call fcn.14001ea10
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14002ce90
mov rax, qword [rsp + 0x3590]
add rax, 0x60
lea rdx, [rsp + 0x100]
mov rcx, rax
call fcn.14002ce90
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov rcx, qword [rsp + 0x3590]
mov dword [rcx + 0x2c], eax
mov byte [rsp + 0x8e], 0
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov dword [rsp + 0xf4], eax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0xc98], rax
mov r8d, dword [rsp + 0xf4]
lea rdx, [rsp + 0x1a50]
mov rcx, qword [rsp + 0xc98]
call fcn.140094940
nop
xor r9d, r9d
lea r8, [rsp + 0x1a50]
lea rdx, [rsp + 0x160]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xca8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0xca0], rax
mov r8, qword [rsp + 0xca0]
lea rdx, [rsp + 0x1a10]
mov rcx, qword [rsp + 0xca8]
call fcn.140093740
nop
lea rcx, [rsp + 0x1a10]
call fcn.14002a240
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xcb0], rax
lea rdx, [rsp + 0x2620]
mov rcx, qword [rsp + 0xcb0]
call fcn.140091e00
mov qword [rsp + 0xcb8], rax
mov rax, qword [rsp + 0xcb8]
mov qword [rsp + 0xcc0], rax
mov rdx, qword [rsp + 0xcc0]
lea rcx, [rsp + 0x1a10]
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2620]
call fcn.14000a800
lea rcx, [rsp + 0x19f0]
call fcn.14000a280
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140072260
mov dword [rsp + 0x1dc], eax
lea rcx, [rsp + 0x1a10]
call fcn.14000c690
mov qword [rsp + 0xcc8], rax
mov eax, dword [rsp + 0x1dc]
mov dword [rsp + 0x30], eax
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x19f0]
lea r8, [0x1403036e0]
mov rdx, qword [rsp + 0xcc8]
mov rcx, 0xffffffff80000002
call fcn.1400f6f60
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a23be
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xcd0], rax
lea rdx, [rsp + 0x160]
mov rcx, qword [rsp + 0xcd0]
call fcn.1400933b0
mov byte [rsp + 0x8e], al
movzx eax, byte [rsp + 0x8e]
test eax, eax
jne 0x1400a23be
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0xcd8], rax
mov eax, 0x7fd
mov word [rsp + 0x128], ax
lea rdx, [rsp + 0x128]
mov rcx, qword [rsp + 0xcd8]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
lea rcx, [0x140902650]
mov qword [rsp + 0x58], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x50], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x48], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x30], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x28], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x20], rcx
mov r9, rax
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0x9f], 0
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0x9f]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a395c
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov dword [rsp + 0xd4], eax
cmp dword [rsp + 0xd4], 2
je 0x1400a317d
cmp dword [rsp + 0xd4], 4
je 0x1400a317d
cmp dword [rsp + 0xd4], 3
je 0x1400a317d
cmp dword [rsp + 0xd4], 5
je 0x1400a317d
lea rcx, [rsp + 0x1a90]
call fcn.14000a280
nop
mov eax, 0x7e3
mov word [rsp + 0x140], ax
mov eax, 0x7e6
mov word [rsp + 0xf8], ax
mov rax, qword [rsp + 0x160]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xce0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 6
lea rcx, [rsp + 0x1838]
call fcn.1401723f0
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [rsp + 0xce0]
movzx eax, al
test eax, eax
je 0x1400a24b6
cmp dword [rsp + 0xd4], 6
jne 0x1400a24b6
mov eax, 0x7f1
mov word [rsp + 0xf8], ax
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xce8], rax
lea rdx, [rsp + 0x2640]
mov rcx, qword [rsp + 0xce8]
call fcn.140091e50
mov qword [rsp + 0xcf0], rax
mov rax, qword [rsp + 0xcf0]
mov qword [rsp + 0xcf8], rax
mov rcx, qword [rsp + 0xcf8]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x14f0]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0xd00], rax
lea rdx, [rsp + 0x140]
mov rcx, qword [rsp + 0xd00]
call fcn.140071720
mov rcx, rax
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1500]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0xd08], rax
lea rdx, [rsp + 0xf8]
mov rcx, qword [rsp + 0xd08]
call fcn.140071720
mov rcx, rax
call fcn.14000c690
lea r9, [rsp + 0x14f0]
lea r8, [rsp + 0x1500]
mov rdx, rax
lea rcx, [rsp + 0x1a90]
call fcn.14001d950
nop
lea rcx, [rsp + 0x2640]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x80]
test eax, eax
jne 0x1400a266b
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0xd10], rax
mov eax, 0x7d4
mov word [rsp + 0x12a], ax
lea rdx, [rsp + 0x12a]
mov rcx, qword [rsp + 0xd10]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0xd18], rax
lea rcx, [rsp + 0x1a90]
call fcn.14000c690
mov qword [rsp + 0xd20], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xd28], rax
mov r9d, reloc.WSOCK32.dll_gethostbyname
mov r8, qword [rsp + 0xd18]
mov rdx, qword [rsp + 0xd20]
mov rcx, qword [rsp + 0xd28]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x1400a2694
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov r8, rax
lea rdx, [rsp + 0x19f0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400ac7c0
movzx eax, al
test eax, eax
jne 0x1400a2736
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xa0], 0
lea rcx, [rsp + 0x1a90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xa0]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x160]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xd30], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 8
lea rcx, [rsp + 0x1850]
call fcn.1401723f0
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [rsp + 0xd30]
movzx eax, al
test eax, eax
je 0x1400a28d5
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xd40], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 8
lea rcx, [rsp + 0x1868]
call fcn.1401723f0
mov qword [rsp + 0xd38], rax
mov rdx, qword [rsp + 0xd38]
mov rcx, qword [rsp + 0x320]
call qword [rsp + 0xd40]
movzx eax, al
test eax, eax
je 0x1400a28d5
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rdx, rax
mov rcx, qword [rsp + 0x3590]
call fcn.1400acb70
movzx eax, al
test eax, eax
jne 0x1400a28d5
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xa1], 0
lea rcx, [rsp + 0x1a90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xa1]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x160]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xd48], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 9
lea rcx, [rsp + 0x1880]
call fcn.1401723f0
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [rsp + 0xd48]
movzx eax, al
test eax, eax
je 0x1400a2ac7
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x328]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xd58], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 9
lea rcx, [rsp + 0x1898]
call fcn.1401723f0
mov qword [rsp + 0xd50], rax
mov rdx, qword [rsp + 0xd50]
mov rcx, qword [rsp + 0x328]
call qword [rsp + 0xd58]
movzx eax, al
test eax, eax
je 0x1400a2ac7
lea rax, [rsp + 0x1708]
mov qword [rsp + 0xd60], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rdx, rax
mov rcx, qword [rsp + 0xd60]
call fcn.140017b20
mov qword [rsp + 0xd68], rax
mov rax, qword [rsp + 0xd68]
mov qword [rsp + 0xd70], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xd78], rax
mov r8, qword [rsp + 0xd70]
mov rdx, qword [rsp + 0xd78]
mov rcx, qword [rsp + 0x3590]
call fcn.1400adb10
movzx eax, al
test eax, eax
jne 0x1400a2ac7
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xa2], 0
lea rcx, [rsp + 0x1a90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xa2]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x160]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xd80], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 9
lea rcx, [rsp + 0x18b0]
call fcn.1401723f0
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [rsp + 0xd80]
movzx eax, al
test eax, eax
je 0x1400a2c93
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xd90], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 9
lea rcx, [rsp + 0x18c8]
call fcn.1401723f0
mov qword [rsp + 0xd88], rax
mov rdx, qword [rsp + 0xd88]
mov rcx, qword [rsp + 0x3c0]
call qword [rsp + 0xd90]
movzx eax, al
test eax, eax
je 0x1400a2c93
lea rax, [rsp + 0x16e8]
mov qword [rsp + 0xd98], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rdx, rax
mov rcx, qword [rsp + 0xd98]
call fcn.140017b20
mov qword [rsp + 0xda0], rax
mov rdx, qword [rsp + 0xda0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400ad0a0
movzx eax, al
test eax, eax
jne 0x1400a2c93
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xa3], 0
lea rcx, [rsp + 0x1a90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xa3]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x160]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0xda8], rax
mov dword [rsp + 0x20], 0
mov r9d, 2
xor r8d, r8d
mov edx, 0xa
lea rcx, [rsp + 0x18e0]
call fcn.1401723f0
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [rsp + 0xda8]
movzx eax, al
test eax, eax
je 0x1400a2e32
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0x338]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xdb8], rax
mov dword [rsp + 0x20], 0
mov r9d, 3
xor r8d, r8d
mov edx, 0xa
lea rcx, [rsp + 0x18f8]
call fcn.1401723f0
mov qword [rsp + 0xdb0], rax
mov rdx, qword [rsp + 0xdb0]
mov rcx, qword [rsp + 0x338]
call qword [rsp + 0xdb8]
movzx eax, al
test eax, eax
je 0x1400a2e32
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rdx, rax
mov rcx, qword [rsp + 0x3590]
call fcn.1400acbb0
movzx eax, al
test eax, eax
jne 0x1400a2e32
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xa4], 0
lea rcx, [rsp + 0x1a90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xa4]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x160]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xdc0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xa
lea rcx, [rsp + 0x1910]
call fcn.1401723f0
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [rsp + 0xdc0]
movzx eax, al
test eax, eax
je 0x1400a2fd1
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x340], rax
mov rax, qword [rsp + 0x340]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xdd0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xa
lea rcx, [rsp + 0x1928]
call fcn.1401723f0
mov qword [rsp + 0xdc8], rax
mov rdx, qword [rsp + 0xdc8]
mov rcx, qword [rsp + 0x340]
call qword [rsp + 0xdd0]
movzx eax, al
test eax, eax
je 0x1400a2fd1
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rdx, rax
mov rcx, qword [rsp + 0x3590]
call fcn.1400acbf0
movzx eax, al
test eax, eax
jne 0x1400a2fd1
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xa5], 0
lea rcx, [rsp + 0x1a90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xa5]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x160]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xdd8], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xa
lea rcx, [rsp + 0x1940]
call fcn.1401723f0
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [rsp + 0xdd8]
movzx eax, al
test eax, eax
je 0x1400a316b
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x348], rax
mov rax, qword [rsp + 0x348]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xde8], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xa
lea rcx, [rsp + 0x1958]
call fcn.1401723f0
mov qword [rsp + 0xde0], rax
mov rdx, qword [rsp + 0xde0]
mov rcx, qword [rsp + 0x348]
call qword [rsp + 0xde8]
movzx eax, al
test eax, eax
je 0x1400a316b
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rdx, rax
mov rcx, qword [rsp + 0x3590]
call fcn.1400ae460
movzx eax, al
test eax, eax
jne 0x1400a316b
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xa6], 0
lea rcx, [rsp + 0x1a90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xa6]
jmp 0x1400a68ef
lea rcx, [rsp + 0x1a90]
call fcn.14000a800
jmp 0x1400a33df
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0x350]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xdf8], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 4
lea rcx, [rsp + 0x1970]
call fcn.1401723f0
mov qword [rsp + 0xdf0], rax
mov rdx, qword [rsp + 0xdf0]
mov rcx, qword [rsp + 0x350]
call qword [rsp + 0xdf8]
movzx eax, al
test eax, eax
je 0x1400a33df
mov byte [rsp + 0x8f], 0
lea rax, [rsp + 0x16f8]
mov qword [rsp + 0xe00], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rdx, rax
mov rcx, qword [rsp + 0xe00]
call fcn.140017b20
mov qword [rsp + 0xe08], rax
lea rdx, [rsp + 0x8f]
mov rcx, qword [rsp + 0xe08]
call fcn.1400c5030
movzx eax, al
test eax, eax
je 0x1400a33df
movzx eax, byte [rsp + 0x8f]
test eax, eax
je 0x1400a33df
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xe30], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xe10], rax
lea rdx, [rsp + 0x2660]
mov rcx, qword [rsp + 0xe10]
call fcn.140091ea0
mov qword [rsp + 0xe18], rax
mov rax, qword [rsp + 0xe18]
mov qword [rsp + 0xe20], rax
mov rax, qword [rsp + 0xe20]
mov qword [rsp + 0xe28], rax
mov rdx, qword [rsp + 0xe28]
mov rcx, qword [rsp + 0xe30]
call fcn.140091ef0
nop
lea rcx, [rsp + 0x2660]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xe68], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xe38], rax
lea rdx, [rsp + 0x26a0]
mov rcx, qword [rsp + 0xe38]
call fcn.140091e00
mov qword [rsp + 0xe40], rax
mov rax, qword [rsp + 0xe40]
mov qword [rsp + 0xe48], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xe48]
lea rcx, [rsp + 0x2680]
call fcn.140221e10
mov qword [rsp + 0xe50], rax
mov rax, qword [rsp + 0xe50]
mov qword [rsp + 0xe58], rax
mov rax, qword [rsp + 0xe58]
mov qword [rsp + 0xe60], rax
mov rdx, qword [rsp + 0xe60]
mov rcx, qword [rsp + 0xe68]
call fcn.1400918b0
nop
lea rcx, [rsp + 0x2680]
call fcn.14000a800
nop
lea rcx, [rsp + 0x26a0]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, qword [rsp + 0x3598]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x160]
mov r8, rax
lea rdx, [rsp + 0x2a0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400bcbf0
movzx eax, al
test eax, eax
jne 0x1400a34a4
mov byte [rsp + 0xa7], 0
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xa7]
jmp 0x1400a68ef
cmp dword [rsp + 0xd4], 6
jne 0x1400a3957
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x90], 1
jne 0x1400a3626
mov rax, qword [rsp + 0x160]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xe70], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rsp + 0x1988]
call fcn.1401723f0
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [rsp + 0xe70]
movzx eax, al
test eax, eax
je 0x1400a3626
lea rax, [0x140902650]
mov qword [rsp + 0x58], rax
lea rax, [0x140902650]
mov qword [rsp + 0x50], rax
lea rax, [0x140902650]
mov qword [rsp + 0x48], rax
lea rax, [0x140902650]
mov qword [rsp + 0x40], rax
lea rax, [0x140902650]
mov qword [rsp + 0x38], rax
lea rax, [0x140902650]
mov qword [rsp + 0x30], rax
lea rax, [0x140902650]
mov qword [rsp + 0x28], rax
lea rax, [0x140902650]
mov qword [rsp + 0x20], rax
lea r9, str.Setup_assisted_queue_flushing_is_not_supported_for_source_versions_before_12.2.0
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xa8], 0
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xa8]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x90], 1
jne 0x1400a3957
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x8a]
test eax, eax
jne 0x1400a3957
lea rax, [0x140902650]
mov qword [rsp + 0x50], rax
lea rax, [0x140902650]
mov qword [rsp + 0x48], rax
lea rax, [0x140902650]
mov qword [rsp + 0x40], rax
lea rax, [0x140902650]
mov qword [rsp + 0x38], rax
lea rax, [0x140902650]
mov qword [rsp + 0x30], rax
lea rax, [0x140902650]
mov qword [rsp + 0x28], rax
lea rax, [0x140902650]
mov qword [rsp + 0x20], rax
lea r9, [0x140902650]
lea r8, str.Flushing_replication_queues...
mov edx, reloc.msi.dll_MsiEnumClientsA
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8650
mov rdx, qword [str.util]
lea rcx, [rsp + 0x1f30]
call fcn.1400179b0
nop
xor r8d, r8d
lea rdx, [rsp + 0x1f30]
lea rcx, [rsp + 0x1c70]
call fcn.140101a40
nop
lea rcx, [rsp + 0x1f30]
call fcn.14000a800
lea rdx, [0x140303b20]
lea rcx, [rsp + 0x1c70]
call fcn.14001efd0
lea rcx, [rsp + 0x1660]
call fcn.14000df30
mov qword [rsp + 0xe78], rax
mov rax, qword [rsp + 0xe78]
mov qword [rsp + 0xe80], rax
mov r8, qword [rsp + 0xe80]
lea rdx, [rsp + 0x1c70]
lea rcx, [rsp + 0x2eb0]
call fcn.14002ba40
nop
lea rcx, [rsp + 0x1660]
call fcn.1400183c0
lea rax, [rsp + 0xa9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xa9]
call fcn.1400c5500
mov r8, qword [rsp + 0x3590]
mov rdx, rax
lea rcx, [rsp + 0x2eb0]
call fcn.1400d4700
lea rcx, [rsp + 0x2eb0]
call fcn.1401468e0
mov dword [rsp + 0x148], eax
cmp dword [rsp + 0x148], 0
jne 0x1400a37ca
cmp dword [rsp + 0x2f80], 0
je 0x1400a393c
cmp dword [rsp + 0x148], 0
jne 0x1400a37e4
mov eax, dword [rsp + 0x2f80]
mov dword [rsp + 0x1a4], eax
jmp 0x1400a37f2
mov eax, dword [rsp + 0x148]
mov dword [rsp + 0x1a4], eax
mov eax, dword [rsp + 0x1a4]
mov dword [rsp + 0x1e0], eax
mov edx, dword [rsp + 0x1e0]
lea rcx, [rsp + 0x1510]
call fcn.1400486c0
lea rax, [0x140902650]
mov qword [rsp + 0x58], rax
lea rax, [0x140902650]
mov qword [rsp + 0x50], rax
lea rax, [0x140902650]
mov qword [rsp + 0x48], rax
lea rax, [0x140902650]
mov qword [rsp + 0x40], rax
lea rax, [0x140902650]
mov qword [rsp + 0x38], rax
lea rax, [0x140902650]
mov qword [rsp + 0x30], rax
lea rax, [0x140902650]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1510]
mov qword [rsp + 0x20], rax
lea r9, [0x140303b40]
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xaa], 0
lea rcx, [rsp + 0x2eb0]
call fcn.14002c950
nop
lea rcx, [rsp + 0x1c70]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xaa]
jmp 0x1400a68ef
lea rcx, [rsp + 0x2eb0]
call fcn.14002c950
nop
lea rcx, [rsp + 0x1c70]
call fcn.14000a800
jmp 0x1400a3d53
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 5
je 0x1400a397a
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 3
jne 0x1400a3d53
lea rcx, [rsp + 0x1bd0]
call fcn.14000a280
nop
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 3
jne 0x1400a39a2
mov dword [rsp + 0x1a8], 0x7e4
jmp 0x1400a39ad
mov dword [rsp + 0x1a8], 0x7e5
movzx eax, word [rsp + 0x1a8]
mov word [rsp + 0x12c], ax
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xe88], rax
lea rdx, [rsp + 0x26c0]
mov rcx, qword [rsp + 0xe88]
call fcn.140091e50
mov qword [rsp + 0xe90], rax
mov rax, qword [rsp + 0xe90]
mov qword [rsp + 0xe98], rax
mov rcx, qword [rsp + 0xe98]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1520]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0xea0], rax
lea rdx, [rsp + 0x12c]
mov rcx, qword [rsp + 0xea0]
call fcn.140071720
mov rcx, rax
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1530]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0xea8], rax
mov eax, 0x7e6
mov word [rsp + 0x130], ax
lea rdx, [rsp + 0x130]
mov rcx, qword [rsp + 0xea8]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
lea r9, [rsp + 0x1520]
lea r8, [rsp + 0x1530]
mov rdx, rax
lea rcx, [rsp + 0x1bd0]
call fcn.14001d950
nop
lea rcx, [rsp + 0x26c0]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x80]
test eax, eax
jne 0x1400a3c20
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0xeb0], rax
mov eax, 0x7d4
mov word [rsp + 0x132], ax
lea rdx, [rsp + 0x132]
mov rcx, qword [rsp + 0xeb0]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
mov qword [rsp + 0xeb8], rax
lea rcx, [rsp + 0x1bd0]
call fcn.14000c690
mov qword [rsp + 0xec0], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xec8], rax
mov r9d, reloc.WSOCK32.dll_gethostbyname
mov r8, qword [rsp + 0xeb8]
mov rdx, qword [rsp + 0xec0]
mov rcx, qword [rsp + 0xec8]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x1400a3c20
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xab], 0
lea rcx, [rsp + 0x1bd0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xab]
jmp 0x1400a68ef
cmp dword [rsp + 0xf4], 3
je 0x1400a3d46
cmp dword [rsp + 0xf4], 5
je 0x1400a3d46
cmp dword [rsp + 0xf4], 2
je 0x1400a3d46
cmp dword [rsp + 0xf4], 4
je 0x1400a3d46
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x80]
test eax, eax
jne 0x1400a3d46
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 3
jne 0x1400a3d46
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov r8, rax
lea rdx, [rsp + 0x19f0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400ac7c0
movzx eax, al
test eax, eax
jne 0x1400a3d46
mov rax, qword [rsp + 0x3598]
mov dword [rax], 0
mov byte [rsp + 0xac], 0
lea rcx, [rsp + 0x1bd0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xac]
jmp 0x1400a68ef
lea rcx, [rsp + 0x1bd0]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x60
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14002ce90
nop
lea rcx, [rsp + 0x19f0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a50]
call fcn.14000a800
nop
lea rcx, [rsp + 0xe0]
call fcn.1400183a0
nop
lea rcx, [rsp + 0x19d0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x100]
call fcn.1400183a0
mov byte [rsp + 0x70], 1
lea rcx, [rsp + 0x1a30]
call fcn.14000a280
nop
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xed0], rax
lea rdx, [rsp + 0x26e0]
mov rcx, qword [rsp + 0xed0]
call fcn.140091e00
mov qword [rsp + 0xed8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0xb8
mov rdx, qword [rsp + 0xed8]
mov rcx, rax
call fcn.14001e7a0
lea rcx, [rsp + 0x26e0]
call fcn.14000a800
mov rax, qword [rsp + 0x3598]
mov eax, dword [rax]
mov dword [rsp + 0xf0], eax
cmp dword [rsp + 0xf0], 1
je 0x1400a3e7e
cmp dword [rsp + 0xf0], 2
je 0x1400a3e7e
cmp dword [rsp + 0xf0], 3
je 0x1400a3e7e
cmp dword [rsp + 0xf0], 4
je 0x1400a3e7e
cmp dword [rsp + 0xf0], 5
je 0x1400a64c4
jmp 0x1400a68b5
lea rcx, [rsp + 0x1af0]
call fcn.14000a280
nop
mov rax, qword [rsp + 0x3590]
add rax, 0x150
mov rcx, rax
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a3f7d
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xee0], rax
lea rdx, [rsp + 0x2720]
mov rcx, qword [rsp + 0xee0]
call fcn.140091900
mov qword [rsp + 0xee8], rax
mov rax, qword [rsp + 0xee8]
mov qword [rsp + 0xef0], rax
mov eax, dword [rsp + 0x60]
or eax, 0x40
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xef0]
mov qword [rsp + 0xf00], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x150
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x2700]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8a00
mov qword [rsp + 0xef8], rax
mov eax, dword [rsp + 0x60]
bts eax, 7
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xef8]
mov qword [rsp + 0xf08], rax
mov rdx, qword [rsp + 0xf00]
mov rcx, qword [rsp + 0xf08]
call fcn.14003a7d0
movzx eax, al
test eax, eax
jne 0x1400a3f7d
mov dword [rsp + 0x178], 0
jmp 0x1400a3f88
mov dword [rsp + 0x178], 1
movzx eax, byte [rsp + 0x178]
mov byte [rsp + 0xad], al
mov eax, dword [rsp + 0x60]
and eax, 0x80
test eax, eax
je 0x1400a3fba
and dword [rsp + 0x60], 0xffffff7f
lea rcx, [rsp + 0x2700]
call fcn.14000a800
nop
mov eax, dword [rsp + 0x60]
and eax, 0x40
test eax, eax
je 0x1400a3fd7
and dword [rsp + 0x60], 0xffffffbf
lea rcx, [rsp + 0x2720]
call fcn.14000a800
movzx eax, byte [rsp + 0xad]
test eax, eax
je 0x1400a404d
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0xf10], rax
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov r8d, eax
lea rdx, [rsp + 0x2740]
mov rcx, qword [rsp + 0xf10]
call fcn.140094940
mov qword [rsp + 0xf18], rax
mov rdx, qword [rsp + 0xf18]
lea rcx, [rsp + 0x1af0]
call fcn.14001e7a0
lea rcx, [rsp + 0x2740]
call fcn.14000a800
jmp 0x1400a406b
mov rax, qword [rsp + 0x3590]
add rax, 0x150
mov rdx, rax
lea rcx, [rsp + 0x1af0]
call fcn.1400185b0
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 2
jne 0x1400a416b
lea rcx, [rsp + 0x1af0]
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a40ea
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xf28], rax
xor r9d, r9d
lea r8, [rsp + 0x1af0]
lea rdx, [rsp + 0x19a0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a87e0
mov qword [rsp + 0xf20], rax
mov rdx, qword [rsp + 0xf20]
mov rcx, qword [rsp + 0xf28]
call fcn.140093170
movzx eax, al
test eax, eax
jne 0x1400a416b
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xf30], rax
lea rdx, [0x140303bc0]
lea rcx, [rsp + 0x1f50]
call fcn.1400179b0
nop
lea r8, [rsp + 0x1f50]
lea rdx, [rsp + 0x2760]
mov rcx, qword [rsp + 0xf30]
call fcn.140091d10
mov qword [rsp + 0xf38], rax
mov rdx, qword [rsp + 0xf38]
lea rcx, [rsp + 0x1a30]
call fcn.14001e7a0
lea rcx, [rsp + 0x2760]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1f50]
call fcn.14000a800
jmp 0x1400a5180
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xf40], rax
lea rdx, [0x140303bd8]
lea rcx, [rsp + 0x1f70]
call fcn.1400179b0
nop
lea r8, [rsp + 0x1f70]
lea rdx, [rsp + 0x1ad0]
mov rcx, qword [rsp + 0xf40]
call fcn.140091d10
nop
lea rcx, [rsp + 0x1f70]
call fcn.14000a800
lea rcx, [rsp + 0x1b70]
call fcn.14000a280
nop
lea rcx, [rsp + 0x1ad0]
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a41ec
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a4246
lea rcx, [rsp + 0x20d0]
call fcn.140129920
mov qword [rsp + 0xf48], rax
mov r9b, 1
mov r8b, 1
lea rdx, [rsp + 0x2780]
mov rcx, qword [rsp + 0xf48]
call fcn.140129ed0
mov qword [rsp + 0xf50], rax
mov rdx, qword [rsp + 0xf50]
lea rcx, [rsp + 0x1ad0]
call fcn.14001e7a0
lea rcx, [rsp + 0x2780]
call fcn.14000a800
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
je 0x1400a4260
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 1
jne 0x1400a42bf
lea rcx, [rsp + 0x2dd0]
call fcn.140129920
mov qword [rsp + 0xf58], rax
mov r9b, 1
mov r8b, 1
lea rdx, [rsp + 0x27a0]
mov rcx, qword [rsp + 0xf58]
call fcn.140129ed0
mov qword [rsp + 0xf60], rax
mov rdx, qword [rsp + 0xf60]
lea rcx, [rsp + 0x1b70]
call fcn.14001e7a0
lea rcx, [rsp + 0x27a0]
call fcn.14000a800
jmp 0x1400a442f
lea rdx, [rsp + 0x1ad0]
lea rcx, [rsp + 0x1f90]
call fcn.1400c49b0
nop
lea rcx, [rsp + 0x1df0]
call fcn.14000a280
nop
lea r8, [rsp + 0x1f90]
lea rdx, str.InstallerProducts_
lea rcx, [rsp + 0x27c0]
call fcn.14001b910
mov qword [rsp + 0xf68], rax
mov rax, qword [rsp + 0xf68]
mov qword [rsp + 0xf70], rax
mov rcx, qword [rsp + 0xf70]
call fcn.14000c690
mov dword [rsp + 0x30], 2
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x1df0]
lea r8, str.PackageCode
mov rdx, rax
mov rcx, 0xffffffff80000000
call fcn.1400f6f60
mov byte [rsp + 0xae], al
lea rcx, [rsp + 0x27c0]
call fcn.14000a800
movzx eax, byte [rsp + 0xae]
test eax, eax
je 0x1400a43b9
lea rdx, [rsp + 0x1df0]
lea rcx, [rsp + 0x27e0]
call fcn.1400c4b00
mov qword [rsp + 0xf78], rax
mov rdx, qword [rsp + 0xf78]
lea rcx, [rsp + 0x1b70]
call fcn.14001e7a0
lea rcx, [rsp + 0x27e0]
call fcn.14000a800
jmp 0x1400a4414
lea rcx, [rsp + 0x2dc0]
call fcn.140129920
mov qword [rsp + 0xf80], rax
mov r9b, 1
mov r8b, 1
lea rdx, [rsp + 0x2800]
mov rcx, qword [rsp + 0xf80]
call fcn.140129ed0
mov qword [rsp + 0xf88], rax
mov rdx, qword [rsp + 0xf88]
lea rcx, [rsp + 0x1b70]
call fcn.14001e7a0
lea rcx, [rsp + 0x2800]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1df0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1f90]
call fcn.14000a800
lea rcx, [rsp + 0x1ab0]
call fcn.14000a280
nop
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xf90], rax
lea rdx, [0x140303c30]
lea rcx, [rsp + 0x1fb0]
call fcn.1400179b0
nop
lea r8, [rsp + 0x1fb0]
lea rdx, [rsp + 0x1c90]
mov rcx, qword [rsp + 0xf90]
call fcn.140091d10
nop
lea rcx, [rsp + 0x1fb0]
call fcn.14000a800
lea rcx, [rsp + 0x1c90]
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a4514
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140072260
mov dword [rsp + 0x1e4], eax
lea rcx, [rsp + 0x1c90]
call fcn.14000c690
mov qword [rsp + 0xf98], rax
mov eax, dword [rsp + 0x1e4]
mov dword [rsp + 0x30], eax
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x1ab0]
lea r8, [0x140303c40]
mov rdx, qword [rsp + 0xf98]
mov rcx, 0xffffffff80000002
call fcn.1400f6f60
movzx eax, al
test eax, eax
jne 0x1400a455c
mov r9d, 9
xor r8d, r8d
lea rdx, [rsp + 0x2820]
lea rcx, [rsp + 0x1ad0]
call fcn.1400375d0
mov qword [rsp + 0xfa0], rax
mov rdx, qword [rsp + 0xfa0]
lea rcx, [rsp + 0x1ab0]
call fcn.14001e7a0
lea rcx, [rsp + 0x2820]
call fcn.14000a800
lea rcx, [rsp + 0x1ab0]
call fcn.140016630
cmp rax, 9
jbe 0x1400a4591
mov edx, 9
lea rcx, [rsp + 0x1ab0]
call fcn.1400d7d40
mov rdx, rax
lea rcx, [rsp + 0x1ab0]
call fcn.1400185b0
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xfa8], rax
lea rdx, [0x140303c58]
lea rcx, [rsp + 0x1fd0]
call fcn.1400179b0
nop
lea rdx, [rsp + 0x1fd0]
mov rcx, qword [rsp + 0xfa8]
call fcn.140091ca0
movzx eax, al
test eax, eax
jne 0x1400a45e1
mov dword [rsp + 0x17c], 1
jmp 0x1400a45ec
mov dword [rsp + 0x17c], 0
movzx eax, byte [rsp + 0x17c]
mov byte [rsp + 0xaf], al
lea rcx, [rsp + 0x1fd0]
call fcn.14000a800
movzx eax, byte [rsp + 0xaf]
test eax, eax
je 0x1400a4666
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0xfb0], rax
lea rdx, str.GUIDMask
lea rcx, [rsp + 0x1ff0]
call fcn.1400179b0
nop
lea r8, [rsp + 0x1ab0]
lea rdx, [rsp + 0x1ff0]
mov rcx, qword [rsp + 0xfb0]
call fcn.1400917e0
nop
lea rcx, [rsp + 0x1ff0]
call fcn.14000a800
lea rax, [rsp + 0x3140]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rdx, [rsp + 0x3140]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
lea rdx, [rsp + 0x3140]
lea rcx, [rsp + 0x1a30]
call fcn.140015550
lea rcx, [rsp + 0x1a30]
call fcn.14002a240
lea r8, [0x140303c90]
lea rdx, [rsp + 0x1ad0]
lea rcx, [rsp + 0x2840]
call fcn.14001b840
mov qword [rsp + 0xfb8], rax
mov rax, qword [rsp + 0xfb8]
mov qword [rsp + 0xfc0], rax
mov rdx, qword [rsp + 0xfc0]
lea rcx, [rsp + 0x1a30]
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2840]
call fcn.14000a800
mov dword [rsp + 0x14c], 0
lea rcx, [rsp + 0x1a30]
call fcn.14000c690
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x398], rax
cmp qword [rsp + 0x398], 0xffffffffffffffff
jne 0x1400a47f0
lea rdx, [rsp + 0x3140]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
lea rdx, [rsp + 0x3140]
lea rcx, [rsp + 0x1a30]
call fcn.140015550
lea rcx, [rsp + 0x1a30]
call fcn.14002a240
lea r8, str..msi
lea rdx, [rsp + 0x1ad0]
lea rcx, [rsp + 0x2860]
call fcn.14001b840
mov qword [rsp + 0xfc8], rax
mov rax, qword [rsp + 0xfc8]
mov qword [rsp + 0xfd0], rax
mov rdx, qword [rsp + 0xfd0]
lea rcx, [rsp + 0x1a30]
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2860]
call fcn.14000a800
jmp 0x1400a47fe
mov rcx, qword [rsp + 0x398]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x14c], 0
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
xor edx, edx
mov rcx, rax
call fcn.14006ce90
movzx eax, al
test eax, eax
je 0x1400a490b
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x80]
test eax, eax
jne 0x1400a490b
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
add rax, 8
mov rcx, rax
call fcn.1400722c0
test eax, eax
jne 0x1400a490b
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0xfe0], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0xfd8], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xfd8]
mov rcx, qword [rsp + 0xfe0]
call fcn.1400d1dd0
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
add rax, 8
mov rcx, rax
call fcn.1400722c0
test eax, eax
je 0x1400a490b
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
add rax, 8
mov qword [rsp + 0xfe8], rax
mov edx, 5
mov rcx, qword [rsp + 0xfe8]
call fcn.1400d4880
lea r9, [rsp + 0x14c]
lea r8, [rsp + 0x1a30]
lea rdx, [rsp + 0x1af0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8e20
movzx eax, al
test eax, eax
jne 0x1400a4a73
mov byte [rsp + 0x70], 0
mov edx, dword [rsp + 0x14c]
lea rcx, [rsp + 0x2880]
call fcn.1400f1950
mov qword [rsp + 0xff0], rax
mov rax, qword [rsp + 0xff0]
mov qword [rsp + 0xff8], rax
mov rcx, qword [rsp + 0xff8]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1540]
call fcn.14001e490
lea rcx, [rsp + 0x1a30]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1550]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x1000], rax
mov eax, 0x7da
mov word [rsp + 0x134], ax
lea rdx, [rsp + 0x134]
mov rcx, qword [rsp + 0x1000]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
lea rcx, [0x140902650]
mov qword [rsp + 0x58], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x50], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x48], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x1540]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x1550]
mov qword [rsp + 0x20], rcx
mov r9, rax
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
nop
lea rcx, [rsp + 0x2880]
call fcn.14000a800
jmp 0x1400a4d87
lea rcx, [rsp + 0x2de0]
call fcn.1400cf7b0
nop
lea rdx, [rsp + 0x1a30]
lea rcx, [rsp + 0x2de0]
call fcn.1400185b0
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x1008], rax
lea rdx, [rsp + 0x28a0]
mov rcx, qword [rsp + 0x1008]
call fcn.140091e00
mov qword [rsp + 0x1010], rax
mov rdx, qword [rsp + 0x1010]
lea rcx, [rsp + 0x2e00]
call fcn.14001e7a0
lea rcx, [rsp + 0x28a0]
call fcn.14000a800
lea rdx, [rsp + 0x1ad0]
lea rcx, [rsp + 0x2e20]
call fcn.1400185b0
lea rdx, [rsp + 0x1b70]
lea rcx, [rsp + 0x2e40]
call fcn.1400185b0
lea rdx, [rsp + 0x1ab0]
lea rcx, [rsp + 0x2e60]
call fcn.1400185b0
mov rax, qword [rsp + 0x3598]
mov eax, dword [rax]
mov dword [rsp + 0x2e80], eax
mov rax, qword [rsp + 0x3590]
add rax, 0x48
mov qword [rsp + 0x1018], rax
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.1400918e0
mov r8d, eax
lea rdx, [rsp + 0x28e0]
mov rcx, qword [rsp + 0x1018]
call fcn.140094640
mov qword [rsp + 0x1020], rax
mov rax, qword [rsp + 0x1020]
mov qword [rsp + 0x1028], rax
mov rax, qword [rsp + 0x1028]
mov qword [rsp + 0x1040], rax
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x1030], rax
lea rdx, [rsp + 0x28c0]
mov rcx, qword [rsp + 0x1030]
call fcn.140091e00
mov qword [rsp + 0x1038], rax
mov rax, qword [rsp + 0x1038]
mov qword [rsp + 0x1048], rax
mov rdx, qword [rsp + 0x1040]
mov rcx, qword [rsp + 0x1048]
call fcn.14003a7d0
mov byte [rsp + 0x2ea8], al
lea rcx, [rsp + 0x28c0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x28e0]
call fcn.14000a800
lea rdx, [rsp + 0x2de0]
mov rcx, qword [rsp + 0x3590]
call fcn.1400ae5c0
movzx eax, al
test eax, eax
jne 0x1400a4d7a
mov byte [rsp + 0x70], 0
lea rcx, [rsp + 0x2e88]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1560]
call fcn.14001e490
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x1050], rax
lea rdx, [rsp + 0x2900]
mov rcx, qword [rsp + 0x1050]
call fcn.140091e00
mov qword [rsp + 0x1058], rax
mov rax, qword [rsp + 0x1058]
mov qword [rsp + 0x1060], rax
mov rcx, qword [rsp + 0x1060]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1570]
call fcn.14001e490
mov rax, qword [rsp + 0x3590]
add rax, 0x400
mov qword [rsp + 0x1068], rax
mov eax, 0x7db
mov word [rsp + 0x136], ax
lea rdx, [rsp + 0x136]
mov rcx, qword [rsp + 0x1068]
call fcn.14000a980
mov rcx, rax
call fcn.14000c690
lea rcx, [0x140902650]
mov qword [rsp + 0x58], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x50], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x48], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140902650]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x1560]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x1570]
mov qword [rsp + 0x20], rcx
mov r9, rax
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
nop
lea rcx, [rsp + 0x2900]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2de0]
call fcn.1400d0990
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
jne 0x1400a4eef
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 1
je 0x1400a4eef
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14002d1c0
movzx eax, al
test eax, eax
je 0x1400a4e27
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
add rax, 8
mov rcx, rax
call fcn.1400722c0
test eax, eax
je 0x1400a4e27
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
add rax, 8
mov qword [rsp + 0x1070], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x404
mov rcx, qword [rsp + 0x1070]
call fcn.1400159d0
lea rcx, [rsp + 0x1d30]
call fcn.14000a280
nop
lea rdx, [rsp + 0x1d30]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a6950
movzx eax, al
test eax, eax
jne 0x1400a4ee2
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x80]
test eax, eax
je 0x1400a4e75
mov dword [rsp + 0x180], 2
jmp 0x1400a4ebe
lea rcx, [rsp + 0x1d30]
call fcn.14000c690
mov qword [rsp + 0x1078], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x1080], rax
mov r9d, 5
xor r8d, r8d
mov rdx, qword [rsp + 0x1078]
mov rcx, qword [rsp + 0x1080]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [rsp + 0x180], eax
mov eax, dword [rsp + 0x180]
mov dword [rsp + 0x1e8], eax
cmp dword [rsp + 0x1e8], 2
jne 0x1400a4edd
mov byte [rsp + 0x70], 0
jmp 0x1400a4ee2
jmp 0x1400a4e35
lea rcx, [rsp + 0x1d30]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x8b]
test eax, eax
jne 0x1400a4f19
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x8c]
test eax, eax
je 0x1400a50e5
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14002d1c0
movzx eax, al
test eax, eax
je 0x1400a4f96
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
add rax, 8
mov rcx, rax
call fcn.1400722c0
test eax, eax
je 0x1400a4f96
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
add rax, 8
mov qword [rsp + 0x1088], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x405
mov rcx, qword [rsp + 0x1088]
call fcn.1400159d0
mov rdx, qword [rsp + 0x3590]
lea rcx, [rsp + 0x3000]
call fcn.1400cfc00
nop
mov byte [rsp + 0x88], 1
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x8b]
test eax, eax
je 0x1400a4ff8
movzx eax, byte [rsp + 0x88]
mov dword [rsp + 0x1ec], eax
lea rcx, [rsp + 0x3000]
call fcn.1400d3a90
movzx eax, al
mov ecx, dword [rsp + 0x1ec]
and ecx, eax
mov eax, ecx
mov byte [rsp + 0x88], al
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x8c]
test eax, eax
je 0x1400a503c
movzx eax, byte [rsp + 0x88]
mov dword [rsp + 0x1f0], eax
lea rcx, [rsp + 0x3000]
call fcn.1400d3ab0
movzx eax, al
mov ecx, dword [rsp + 0x1f0]
and ecx, eax
mov eax, ecx
mov byte [rsp + 0x88], al
movzx eax, byte [rsp + 0x88]
test eax, eax
jne 0x1400a50d8
mov rax, qword [rsp + 0x3590]
movzx eax, byte [rax + 0x80]
test eax, eax
jne 0x1400a507b
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Failed_to_update_redistributable__please_check_the_logs
mov rcx, rax
call qword [sym.imp.USER32.dll_MessageBoxW]
mov byte [rsp + 0x70], 0
lea rcx, [rsp + 0x3000]
call fcn.1400d0b90
nop
lea rcx, [rsp + 0x1c90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1ab0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b70]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1ad0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1af0]
call fcn.14000a800
jmp 0x1400a68b5
lea rcx, [rsp + 0x3000]
call fcn.1400d0b90
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
xor edx, edx
mov rcx, rax
call fcn.14006ce90
movzx eax, al
test eax, eax
je 0x1400a5149
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
add rax, 8
mov rcx, rax
call fcn.1400722c0
test eax, eax
je 0x1400a5149
mov rax, qword [rsp + 0x3590]
add rax, 0x4d8
mov rcx, rax
call fcn.14000e130
mov rcx, rax
call fcn.1400d1f90
nop
lea rcx, [rsp + 0x1c90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1ab0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b70]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1ad0]
call fcn.14000a800
movzx eax, byte [rsp + 0x70]
test eax, eax
je 0x1400a64b2
mov rax, qword [rsp + 0x3590]
add rax, 0x60
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14002ce90
mov rax, qword [rsp + 0x3590]
add rax, 0x70
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14002ce90
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x1090], rax
lea rdx, [rsp + 0x2920]
mov rcx, qword [rsp + 0x1090]
call fcn.140091ea0
mov qword [rsp + 0x1098], rax
mov rcx, qword [rsp + 0x1098]
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a520f
mov dword [rsp + 0x184], 1
jmp 0x1400a521a
mov dword [rsp + 0x184], 0
movzx eax, byte [rsp + 0x184]
mov byte [rsp + 0xb0], al
lea rcx, [rsp + 0x2920]
call fcn.14000a800
movzx eax, byte [rsp + 0xb0]
test eax, eax
je 0x1400a559f
lea rdx, str.WixUI_Mode
lea rcx, [rsp + 0x2010]
call fcn.1400179b0
nop
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x2010]
lea r8, [rsp + 0x1a30]
lea rdx, [rsp + 0x2940]
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8aa0
mov qword [rsp + 0x10a0], rax
mov rcx, qword [rsp + 0x10a0]
call fcn.1400165c0
mov byte [rsp + 0xb1], al
lea rcx, [rsp + 0x2940]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2010]
call fcn.14000a800
movzx eax, byte [rsp + 0xb1]
test eax, eax
je 0x1400a53bd
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x10a8], rax
lea rdx, [rsp + 0x29a0]
mov rcx, qword [rsp + 0x10a8]
call fcn.140091ea0
mov qword [rsp + 0x10b0], rax
mov rax, qword [rsp + 0x10b0]
mov qword [rsp + 0x10b8], rax
mov rdx, qword [rsp + 0x10b8]
lea rcx, [rsp + 0x2980]
call fcn.1400c2530
mov qword [rsp + 0x10c0], rax
mov rax, qword [rsp + 0x10c0]
mov qword [rsp + 0x10c8], rax
mov r8, qword [rsp + 0x10c8]
lea rdx, str._TARGETDIR
lea rcx, [rsp + 0x2960]
call fcn.14001b910
mov qword [rsp + 0x10d0], rax
mov rax, qword [rsp + 0x10d0]
mov qword [rsp + 0x10d8], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov rdx, qword [rsp + 0x10d8]
mov rcx, rax
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2960]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2980]
call fcn.14000a800
nop
lea rcx, [rsp + 0x29a0]
call fcn.14000a800
jmp 0x1400a559f
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x10e0], rax
lea rdx, [rsp + 0x2a00]
mov rcx, qword [rsp + 0x10e0]
call fcn.140091ea0
mov qword [rsp + 0x10e8], rax
mov rax, qword [rsp + 0x10e8]
mov qword [rsp + 0x10f0], rax
mov rdx, qword [rsp + 0x10f0]
lea rcx, [rsp + 0x29e0]
call fcn.1400c2530
mov qword [rsp + 0x10f8], rax
mov rax, qword [rsp + 0x10f8]
mov qword [rsp + 0x1100], rax
mov r8, qword [rsp + 0x1100]
lea rdx, [0x140303d90]
lea rcx, [rsp + 0x29c0]
call fcn.14001b910
mov qword [rsp + 0x1108], rax
mov rax, qword [rsp + 0x1108]
mov qword [rsp + 0x1110], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov rdx, qword [rsp + 0x1110]
mov rcx, rax
call fcn.14001efa0
nop
lea rcx, [rsp + 0x29c0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x29e0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2a00]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 5
jne 0x1400a559f
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x1118], rax
lea rdx, [rsp + 0x2a60]
mov rcx, qword [rsp + 0x1118]
call fcn.140091ea0
mov qword [rsp + 0x1120], rax
mov rax, qword [rsp + 0x1120]
mov qword [rsp + 0x1128], rax
mov rdx, qword [rsp + 0x1128]
lea rcx, [rsp + 0x2a40]
call fcn.1400c2530
mov qword [rsp + 0x1130], rax
mov rax, qword [rsp + 0x1130]
mov qword [rsp + 0x1138], rax
mov r8, qword [rsp + 0x1138]
lea rdx, str._INSTALLDIR32
lea rcx, [rsp + 0x2a20]
call fcn.14001b910
mov qword [rsp + 0x1140], rax
mov rax, qword [rsp + 0x1140]
mov qword [rsp + 0x1148], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov rdx, qword [rsp + 0x1148]
mov rcx, rax
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2a20]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2a40]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2a60]
call fcn.14000a800
lea rax, [rsp + 0x3350]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
xor r9d, r9d
mov r8d, MsiGetComponentStateW
lea rdx, [rsp + 0x3350]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0x360]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x1158], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 9
lea rcx, [rsp + 0x19b8]
call fcn.1401723f0
mov qword [rsp + 0x1150], rax
mov rdx, qword [rsp + 0x1150]
mov rcx, qword [rsp + 0x360]
call qword [rsp + 0x1158]
mov byte [rsp + 0xb2], al
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
jne 0x1400a56fd
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a56fd
mov eax, 2
imul rax, rax, 0
movzx eax, word [rsp + rax + 0x3350]
test eax, eax
je 0x1400a56e4
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x1160], rax
lea rdx, [rsp + 0x2a80]
mov rcx, qword [rsp + 0x1160]
call fcn.140091ea0
mov qword [rsp + 0x1168], rax
mov eax, dword [rsp + 0x60]
bts eax, 8
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x1168]
mov qword [rsp + 0x1170], rax
xor r8d, r8d
lea rdx, [rsp + 0x3350]
mov rcx, qword [rsp + 0x1170]
call fcn.140036b80
cmp rax, 0xffffffffffffffff
jne 0x1400a56f0
movzx eax, byte [rsp + 0xb2]
test eax, eax
je 0x1400a56fd
mov dword [rsp + 0x188], 1
jmp 0x1400a5708
mov dword [rsp + 0x188], 0
movzx eax, byte [rsp + 0x188]
mov byte [rsp + 0xb3], al
mov eax, dword [rsp + 0x60]
and eax, 0x100
test eax, eax
je 0x1400a5739
and dword [rsp + 0x60], 0xfffffeff
lea rcx, [rsp + 0x2a80]
call fcn.14000a800
movzx eax, byte [rsp + 0xb3]
test eax, eax
je 0x1400a5762
mov rax, qword [rsp + 0x3590]
add rax, 0x130
lea rdx, str._ARCHUPGRADEALL
mov rcx, rax
call fcn.14001efd0
lea rcx, [rsp + 0x1bf0]
call fcn.1400debe0
nop
lea rcx, [rsp + 0x1bf0]
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a5823
lea rdx, [rsp + 0x1bf0]
lea rcx, [rsp + 0x2ac0]
call fcn.1400c2530
mov qword [rsp + 0x1178], rax
mov rax, qword [rsp + 0x1178]
mov qword [rsp + 0x1180], rax
mov r8, qword [rsp + 0x1180]
lea rdx, str._RESTORELANGFILES
lea rcx, [rsp + 0x2aa0]
call fcn.14001b910
mov qword [rsp + 0x1188], rax
mov rax, qword [rsp + 0x1188]
mov qword [rsp + 0x1190], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov rdx, qword [rsp + 0x1190]
mov rcx, rax
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2aa0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2ac0]
call fcn.14000a800
lea rcx, [rsp + 0x1b90]
call fcn.1400e4320
nop
lea rcx, [rsp + 0x1b90]
call fcn.1400165c0
movzx eax, al
test eax, eax
jne 0x1400a58e4
lea rdx, [rsp + 0x1b90]
lea rcx, [rsp + 0x2b00]
call fcn.1400c2530
mov qword [rsp + 0x1198], rax
mov rax, qword [rsp + 0x1198]
mov qword [rsp + 0x11a0], rax
mov r8, qword [rsp + 0x11a0]
lea rdx, str._RESTOREREGISTRY
lea rcx, [rsp + 0x2ae0]
call fcn.14001b910
mov qword [rsp + 0x11a8], rax
mov rax, qword [rsp + 0x11a8]
mov qword [rsp + 0x11b0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov rdx, qword [rsp + 0x11b0]
mov rcx, rax
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2ae0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2b00]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x368], rax
mov rax, qword [rsp + 0x368]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x11c0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 5
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rsp + 0x1718]
call fcn.1401723f0
mov qword [rsp + 0x11b8], rax
mov rdx, qword [rsp + 0x11b8]
mov rcx, qword [rsp + 0x368]
call qword [rsp + 0x11c0]
mov byte [rsp + 0x90], al
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
je 0x1400a597e
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 8
jne 0x1400a5b87
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a5b87
mov rdx, qword [0x1408ce828]
lea rcx, [rsp + 0x2030]
call fcn.1400179b0
nop
mov r8b, 1
lea rdx, [rsp + 0x2030]
lea rcx, [rsp + 0x2b60]
call fcn.140101a40
mov qword [rsp + 0x11c8], rax
mov rax, qword [rsp + 0x11c8]
mov qword [rsp + 0x11d0], rax
mov rdx, qword [rsp + 0x11d0]
lea rcx, [rsp + 0x2b40]
call fcn.1400c2530
mov qword [rsp + 0x11d8], rax
mov rax, qword [rsp + 0x11d8]
mov qword [rsp + 0x11e0], rax
mov r8, qword [rsp + 0x11e0]
lea rdx, str._PSTEMPDIR
lea rcx, [rsp + 0x2b20]
call fcn.14001b910
mov qword [rsp + 0x11e8], rax
mov rax, qword [rsp + 0x11e8]
mov qword [rsp + 0x11f0], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov rdx, qword [rsp + 0x11f0]
mov rcx, rax
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2b20]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2b40]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2b60]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2030]
call fcn.14000a800
mov rdx, qword [str.locks]
lea rcx, [rsp + 0x2050]
call fcn.1400179b0
nop
mov r8b, 1
lea rdx, [rsp + 0x2050]
lea rcx, [rsp + 0x2bc0]
call fcn.140101a40
mov qword [rsp + 0x11f8], rax
mov rax, qword [rsp + 0x11f8]
mov qword [rsp + 0x1200], rax
mov rdx, qword [rsp + 0x1200]
lea rcx, [rsp + 0x2ba0]
call fcn.1400c2530
mov qword [rsp + 0x1208], rax
mov rax, qword [rsp + 0x1208]
mov qword [rsp + 0x1210], rax
mov r8, qword [rsp + 0x1210]
lea rdx, str._PSLOCKDIR
lea rcx, [rsp + 0x2b80]
call fcn.14001b910
mov qword [rsp + 0x1218], rax
mov rax, qword [rsp + 0x1218]
mov qword [rsp + 0x1220], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov rdx, qword [rsp + 0x1220]
mov rcx, rax
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2b80]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2ba0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2bc0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2050]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
cmp dword [rax + 0x2c], 6
jne 0x1400a6224
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a6224
movzx eax, byte [rsp + 0x90]
test eax, eax
je 0x1400a5c81
mov dl, 1
mov ecx, dword [reloc.OLEAUT32.dll_SysReAllocString]
call fcn.1400fdbb0
mov rdx, rax
lea rcx, [rsp + 0x2070]
call fcn.1400179b0
nop
lea rdx, [rsp + 0x2070]
lea rcx, [rsp + 0x2c00]
call fcn.1400c2530
mov qword [rsp + 0x1228], rax
mov rax, qword [rsp + 0x1228]
mov qword [rsp + 0x1230], rax
mov r8, qword [rsp + 0x1230]
lea rdx, str._PREVIOUS_REGPATH
lea rcx, [rsp + 0x2be0]
call fcn.14001b910
mov qword [rsp + 0x1238], rax
mov rax, qword [rsp + 0x1238]
mov qword [rsp + 0x1240], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov rdx, qword [rsp + 0x1240]
mov rcx, rax
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2be0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2c00]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2070]
call fcn.14000a800
lea rcx, [rsp + 0x1d10]
call fcn.1400f3040
nop
lea rdx, [rsp + 0x1d10]
lea rcx, [rsp + 0x2c40]
call fcn.1400c2530
mov qword [rsp + 0x1248], rax
mov rax, qword [rsp + 0x1248]
mov qword [rsp + 0x1250], rax
mov r8, qword [rsp + 0x1250]
lea rdx, str._IDDBCFG_BACKUPDIR
lea rcx, [rsp + 0x2c20]
call fcn.14001b910
mov qword [rsp + 0x1258], rax
mov rax, qword [rsp + 0x1258]
mov qword [rsp + 0x1260], rax
mov rax, qword [rsp + 0x3590]
add rax, 0x130
mov rdx, qword [rsp + 0x1260]
mov rcx, rax
call fcn.14001efa0
nop
lea rcx, [rsp + 0x2c20]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2c40]
call fcn.14000a800
lea rcx, [rsp + 0x1b10]
call fcn.14021ef50
nop
lea rcx, [rsp + 0x1b50]
call fcn.14000a280
nop
xor r8d, r8d
lea rdx, [rsp + 0x1b50]
lea rcx, [rsp + 0x1b10]
call fcn.1400f3ce0
movzx eax, al
test eax, eax
jne 0x1400a5eb0
lea rcx, [rsp + 0x1b50]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1580]
call fcn.14001e490
lea rcx, [rsp + 0x1b10]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x1590]
call fcn.14001e490
lea rax, [0x140902650]
mov qword [rsp + 0x58], rax
lea rax, [0x140902650]
mov qword [rsp + 0x50], rax
lea rax, [0x140902650]
mov qword [rsp + 0x48], rax
lea rax, [0x140902650]
mov qword [rsp + 0x40], rax
lea rax, [0x140902650]
mov qword [rsp + 0x38], rax
lea rax, [0x140902650]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1580]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1590]
mov qword [rsp + 0x20], rax
lea r9, str.Failed_to_create_backup_directory___S__for_idmlogsvc_due_to_error___S_.
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
mov byte [rsp + 0xb4], 0
lea rcx, [rsp + 0x1b50]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1d10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1bf0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1af0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a30]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xb4]
jmp 0x1400a68ef
movzx edx, byte [rsp + 0x90]
lea rcx, [rsp + 0x1cf0]
call fcn.1401017e0
nop
lea rcx, [rsp + 0x1cf0]
call fcn.1400cd350
lea rcx, [rsp + 0x1cd0]
call fcn.14000a280
nop
lea rcx, [rsp + 0x1cb0]
call fcn.14000a280
nop
mov rdx, qword [str.service]
lea rcx, [rsp + 0x15a0]
call fcn.14001e490
lea rcx, [rsp + 0x1cf0]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x15b0]
call fcn.14001e490
lea r9, [rsp + 0x15a0]
lea r8, [rsp + 0x15b0]
lea rdx, str._S_Sidmlogsvc.cfg
lea rcx, [rsp + 0x1cd0]
call fcn.14001d950
lea rcx, [rsp + 0x1b10]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x15c0]
call fcn.14001e490
lea r8, [rsp + 0x15c0]
lea rdx, str._Sidmlogsvc.cfg
lea rcx, [rsp + 0x1cb0]
call fcn.140014cf0
lea rcx, [rsp + 0x1cb0]
call fcn.14000c690
mov qword [rsp + 0x1268], rax
lea rcx, [rsp + 0x1cd0]
call fcn.14000c690
mov qword [rsp + 0x1270], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x1268]
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x1400a6178
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rsp + 0x2c60]
call fcn.1400f1950
mov qword [rsp + 0x1278], rax
mov rdx, qword [rsp + 0x1278]
lea rcx, [rsp + 0x1b50]
call fcn.14001e7a0
lea rcx, [rsp + 0x2c60]
call fcn.14000a800
lea rcx, [rsp + 0x1b50]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x15d0]
call fcn.14001e490
lea rcx, [rsp + 0x1b10]
call fcn.14000c690
mov rdx, rax
lea rcx, [rsp + 0x15e0]
call fcn.14001e490
lea rax, [0x140902650]
mov qword [rsp + 0x58], rax
lea rax, [0x140902650]
mov qword [rsp + 0x50], rax
lea rax, [0x140902650]
mov qword [rsp + 0x48], rax
lea rax, [0x140902650]
mov qword [rsp + 0x40], rax
lea rax, [0x140902650]
mov qword [rsp + 0x38], rax
lea rax, [0x140902650]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x15d0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x15e0]
mov qword [rsp + 0x20], rax
lea r9, str.Failed_to_copy_idmlogsvc.cfg_to_backup_directory___S__due_to_error___S_.
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0x3590]
call fcn.1400a8370
mov byte [rsp + 0xb5], 0
lea rcx, [rsp + 0x1cb0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1cd0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1cf0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b50]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1d10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1bf0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1af0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1a30]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xb5]
jmp 0x1400a68ef
mov rax, qword [rsp + 0x3590]
add rax, 0x130
lea rdx, str._IDMLOGSVCBACKUP_
mov rcx, rax
call fcn.14001efd0
mov rax, qword [rsp + 0x3590]
add rax, 0x130
lea rdx, [rsp + 0x1b10]
mov rcx, rax
call fcn.14001efa0
mov rax, qword [rsp + 0x3590]
add rax, 0x130
lea rdx, [0x14030013c]
mov rcx, rax
call fcn.14001efd0
nop
lea rcx, [rsp + 0x1cb0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1cd0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1cf0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b50]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1d10]
call fcn.14000a800
mov rdx, qword [rsp + 0x3598]
mov rcx, qword [rsp + 0x3590]
call fcn.1400b8260
lea r8, [rsp + 0x78]
mov rdx, qword [rsp + 0x3598]
mov rcx, qword [rsp + 0x3590]
call fcn.1400c14c0
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 1
jne 0x1400a62c0
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x1280], rax
lea rdx, [rsp + 0x2ce0]
mov rcx, qword [rsp + 0x1280]
call fcn.140091e50
mov qword [rsp + 0x1288], rax
mov rax, qword [rsp + 0x1288]
mov qword [rsp + 0x1290], rax
mov eax, dword [rsp + 0x60]
bts eax, 9
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x1290]
mov qword [rsp + 0x378], rax
jmp 0x1400a63d2
mov rax, qword [rsp + 0x3598]
cmp dword [rax], 4
jne 0x1400a6338
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140092970
mov qword [rsp + 0x1298], rax
mov r8d, 4
lea rdx, [rsp + 0x2cc0]
mov rcx, qword [rsp + 0x1298]
call fcn.140174500
mov qword [rsp + 0x12a0], rax
mov rax, qword [rsp + 0x12a0]
mov qword [rsp + 0x12a8], rax
mov eax, dword [rsp + 0x60]
bts eax, 0xa
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x12a8]
mov qword [rsp + 0x370], rax
jmp 0x1400a6379
lea rcx, [rsp + 0x2ca0]
call fcn.14000a280
mov qword [rsp + 0x12b0], rax
mov rax, qword [rsp + 0x12b0]
mov qword [rsp + 0x12b8], rax
mov eax, dword [rsp + 0x60]
bts eax, 0xb
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x12b8]
mov qword [rsp + 0x370], rax
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x12c0], rax
mov rdx, qword [rsp + 0x12c0]
lea rcx, [rsp + 0x2c80]
call fcn.14000a200
mov qword [rsp + 0x12c8], rax
mov rax, qword [rsp + 0x12c8]
mov qword [rsp + 0x12d0], rax
mov eax, dword [rsp + 0x60]
bts eax, 0xc
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x12d0]
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0x378]
mov qword [rsp + 0x12d8], rax
mov r9, qword [rsp + 0x12d8]
lea r8, [rsp + 0x1a30]
mov rax, qword [rsp + 0x3598]
mov edx, dword [rax]
mov rcx, qword [rsp + 0x3590]
call fcn.1400afd90
nop
mov eax, dword [rsp + 0x60]
and eax, 0x1000
test eax, eax
je 0x1400a642d
and dword [rsp + 0x60], 0xffffefff
lea rcx, [rsp + 0x2c80]
call fcn.14000a800
nop
mov eax, dword [rsp + 0x60]
and eax, 0x800
test eax, eax
je 0x1400a6450
and dword [rsp + 0x60], 0xfffff7ff
lea rcx, [rsp + 0x2ca0]
call fcn.14000a800
nop
mov eax, dword [rsp + 0x60]
and eax, 0x400
test eax, eax
je 0x1400a6473
and dword [rsp + 0x60], 0xfffffbff
lea rcx, [rsp + 0x2cc0]
call fcn.14000a800
nop
mov eax, dword [rsp + 0x60]
and eax, 0x200
test eax, eax
je 0x1400a6496
and dword [rsp + 0x60], 0xfffffdff
lea rcx, [rsp + 0x2ce0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1b90]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1bf0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1af0]
call fcn.14000a800
jmp 0x1400a68b5
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140093bf0
mov rcx, rax
call fcn.14002d1c0
movzx eax, al
test eax, eax
je 0x1400a6623
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140093bf0
mov r8, rax
mov rdx, qword [rsp + 0x3598]
mov rcx, qword [rsp + 0x3590]
call fcn.1400c14c0
lea rcx, [rsp + 0x2d20]
call fcn.14000a280
mov qword [rsp + 0x12e0], rax
mov rax, qword [rsp + 0x12e0]
mov qword [rsp + 0x12e8], rax
mov rax, qword [rsp + 0x12e8]
mov qword [rsp + 0x1308], rax
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140093bf0
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x12f0], rax
lea rdx, [0x1403040a0]
lea rcx, [rsp + 0x2090]
call fcn.1400179b0
nop
lea r8, [rsp + 0x2090]
lea rdx, [rsp + 0x2d00]
mov rcx, qword [rsp + 0x12f0]
call fcn.140091d10
mov qword [rsp + 0x12f8], rax
mov rax, qword [rsp + 0x12f8]
mov qword [rsp + 0x1300], rax
mov rax, qword [rsp + 0x1300]
mov qword [rsp + 0x1310], rax
mov rax, qword [rsp + 0x3598]
mov eax, dword [rax]
mov dword [rsp + 0x1f4], eax
mov r9, qword [rsp + 0x1308]
mov r8, qword [rsp + 0x1310]
mov edx, dword [rsp + 0x1f4]
mov rcx, qword [rsp + 0x3590]
call fcn.1400afd90
nop
lea rcx, [rsp + 0x2d00]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2090]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2d20]
call fcn.14000a800
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140093c30
mov rcx, rax
call fcn.14002d1c0
movzx eax, al
test eax, eax
je 0x1400a6782
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140093c30
mov r8, rax
mov rdx, qword [rsp + 0x3598]
mov rcx, qword [rsp + 0x3590]
call fcn.1400c14c0
lea rcx, [rsp + 0x2d60]
call fcn.14000a280
mov qword [rsp + 0x1318], rax
mov rax, qword [rsp + 0x1318]
mov qword [rsp + 0x1320], rax
mov rax, qword [rsp + 0x1320]
mov qword [rsp + 0x1340], rax
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov rcx, rax
call fcn.140093c30
mov rcx, rax
call fcn.14000e130
mov qword [rsp + 0x1328], rax
lea rdx, [0x1403040b8]
lea rcx, [rsp + 0x20b0]
call fcn.1400179b0
nop
lea r8, [rsp + 0x20b0]
lea rdx, [rsp + 0x2d40]
mov rcx, qword [rsp + 0x1328]
call fcn.140091d10
mov qword [rsp + 0x1330], rax
mov rax, qword [rsp + 0x1330]
mov qword [rsp + 0x1338], rax
mov rax, qword [rsp + 0x1338]
mov qword [rsp + 0x1348], rax
mov rax, qword [rsp + 0x3598]
mov eax, dword [rax]
mov dword [rsp + 0x1f8], eax
mov r9, qword [rsp + 0x1340]
mov r8, qword [rsp + 0x1348]
mov edx, dword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x3590]
call fcn.1400afd90
nop
lea rcx, [rsp + 0x2d40]
call fcn.14000a800
nop
lea rcx, [rsp + 0x20b0]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2d60]
call fcn.14000a800
lea r8, [rsp + 0x78]
mov rdx, qword [rsp + 0x3598]
mov rcx, qword [rsp + 0x3590]
call fcn.1400c14c0
lea rcx, [rsp + 0x2da0]
call fcn.14000a280
mov qword [rsp + 0x1350], rax
mov rax, qword [rsp + 0x1350]
mov qword [rsp + 0x1358], rax
mov rax, qword [rsp + 0x1358]
mov qword [rsp + 0x1378], rax
lea rcx, [rsp + 0x78]
call fcn.14000e130
mov qword [rsp + 0x1360], rax
lea rdx, str.ProductCode
lea rcx, [rsp + 0x1e10]
call fcn.1400179b0
nop
lea r8, [rsp + 0x1e10]
lea rdx, [rsp + 0x2d80]
mov rcx, qword [rsp + 0x1360]
call fcn.140091d10
mov qword [rsp + 0x1368], rax
mov rax, qword [rsp + 0x1368]
mov qword [rsp + 0x1370], rax
mov rax, qword [rsp + 0x1370]
mov qword [rsp + 0x1380], rax
mov rax, qword [rsp + 0x3598]
mov eax, dword [rax]
mov dword [rsp + 0x1fc], eax
mov r9, qword [rsp + 0x1378]
mov r8, qword [rsp + 0x1380]
mov edx, dword [rsp + 0x1fc]
mov rcx, qword [rsp + 0x3590]
call fcn.1400afd90
nop
lea rcx, [rsp + 0x2d80]
call fcn.14000a800
nop
lea rcx, [rsp + 0x1e10]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2da0]
call fcn.14000a800
mov rax, qword [rsp + 0x3590]
add rax, 0x60
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14002ce90
movzx eax, byte [rsp + 0x70]
mov byte [rsp + 0xb6], al
lea rcx, [rsp + 0x1a30]
call fcn.14000a800
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000c8d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400183a0
movzx eax, byte [rsp + 0xb6]
mov rcx, qword [rsp + 0x3560]
xor rcx, rsp
call fcn.140222a60
add rsp, 0x3578
pop rdi
pop rsi
ret