Function at 0x1401c2d50
Capabilities:
Create process on windows
Manipulate boot configuration

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x1bd8
call fcn.1401e9500
sub rsp, rax
mov qword [rsp + 0x1a58], 0xfffffffffffffffe
mov rax, qword [0x1402bd5c0]
xor rax, rsp
mov qword [rsp + 0x1bc0], rax
cmp dword [rsp + 0x1bf8], 0x46e
jne 0x1401c2f97
cmp qword [rsp + 0x1c08], 0x201
jne 0x1401c2f97
mov rax, qword [rsp + 0x1bf0]
cmp dword [rax + 0x8e8], 0
je 0x1401c2f97
mov rcx, qword [rsp + 0x1bf0]
call fcn.14000dc10
test eax, eax
jne 0x1401c2f90
mov rax, qword [rsp + 0x1bf0]
cmp qword [rax + 0x8e0], 0
jne 0x1401c2f90
mov ecx, 0x220
call fcn.140002fd0
mov qword [rsp + 0x16f8], rax
cmp qword [rsp + 0x16f8], 0
je 0x1401c2e29
xor edx, edx
mov rcx, qword [rsp + 0x16f8]
call fcn.14015c9f0
mov qword [rsp + 0x1a60], rax
jmp 0x1401c2e35
mov qword [rsp + 0x1a60], 0
mov rax, qword [rsp + 0x1a60]
mov qword [rsp + 0x16f0], rax
mov rcx, qword [rsp + 0x1bf0]
mov rax, qword [rsp + 0x16f0]
mov qword [rcx + 0x8e0], rax
mov rax, qword [rsp + 0x1bf0]
mov rax, qword [rax + 0x8e0]
mov rcx, qword [rsp + 0x1bf0]
mov rcx, qword [rcx + 0x8e0]
mov rax, qword [rax]
call qword [rax + 0x298]
cmp rax, 2
jne 0x1401c2f06
mov rax, qword [rsp + 0x1bf0]
mov rax, qword [rax + 0x8e0]
mov qword [rsp + 0x1708], rax
mov rax, qword [rsp + 0x1708]
mov qword [rsp + 0x1700], rax
cmp qword [rsp + 0x1700], 0
je 0x1401c2ee0
mov rax, qword [rsp + 0x1700]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x1700]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x1a68], rax
jmp 0x1401c2eec
mov qword [rsp + 0x1a68], 0
mov rax, qword [rsp + 0x1bf0]
mov qword [rax + 0x8e0], 0
xor eax, eax
jmp 0x1401c5f8b
mov rax, qword [rsp + 0x1bf0]
mov rax, qword [rax + 0x8e0]
mov qword [rsp + 0x1718], rax
mov rax, qword [rsp + 0x1718]
mov qword [rsp + 0x1710], rax
cmp qword [rsp + 0x1710], 0
je 0x1401c2f5d
mov rax, qword [rsp + 0x1710]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x1710]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x1a70], rax
jmp 0x1401c2f69
mov qword [rsp + 0x1a70], 0
mov rax, qword [rsp + 0x1bf0]
mov qword [rax + 0x8e0], 0
mov rax, qword [rsp + 0x1bf0]
mov dword [rax + 0x8e8], 0
jmp 0x1401c2f97
xor eax, eax
jmp 0x1401c5f8b
cmp dword [rsp + 0x1bf8], 0x8040
jne 0x1401c30fb
lea rcx, [rsp + 0x1720]
call fcn.140001000
mov qword [rsp + 0x1a78], rax
mov rax, qword [rsp + 0x1a78]
mov qword [rsp + 0x1a80], rax
lea r8, [0x14025b508]
mov rdx, qword [rsp + 0x1a80]
lea rcx, [rsp + 0x378]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x1720]
call fcn.140007060
lea rcx, [rsp + 0x370]
call fcn.140002d10
nop
lea rcx, [rsp + 0x30]
call fcn.1401e0790
nop
mov eax, dword [rsp + 0x1c08]
mov dword [rsp + 0x1c8], eax
lea rcx, [rsp + 0x30]
call fcn.1401e5810
cmp qword [rsp + 0x1c00], 0
jne 0x1401c303f
mov qword [rsp + 0x1c00], 0x1af4
mov rax, qword [rsp + 0x1c00]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x1e8]
mov r8, qword [rsp + 0x378]
lea rdx, [0x14025b520]
lea rcx, [rsp + 0x370]
call fcn.140002ba0
lea rcx, [rsp + 0x378]
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0x370]
call fcn.140050200
mov r9d, 1
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call fcn.140004880
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x8b8
mov edx, dword [rsp + 0x1c08]
call fcn.14000dbd0
mov qword [rsp + 0x1728], 0
lea rcx, [rsp + 0x30]
call fcn.140005e30
nop
lea rcx, [rsp + 0x370]
call fcn.140007060
nop
lea rcx, [rsp + 0x378]
call fcn.140007060
mov rax, qword [rsp + 0x1728]
jmp 0x1401c5f8b
cmp dword [rsp + 0x1bf8], 0x8045
jne 0x1401c463a
cmp qword [rsp + 0x1c00], 0
je 0x1401c3122
cmp qword [rsp + 0x1c08], 0
jne 0x1401c3129
xor eax, eax
jmp 0x1401c5f8b
mov dword [rsp + 0x3c8], 0
mov dword [rsp + 0x830], 0
xor r8d, r8d
lea rdx, [rsp + 0x1738]
mov rcx, qword [rsp + 0x1bf0]
call fcn.140199b60
mov qword [rsp + 0x1a88], rax
lea rdx, [0x14025b550]
mov rcx, qword [rsp + 0x1a88]
call fcn.140006dd0
mov byte [rsp + 0x1730], al
lea rcx, [rsp + 0x1738]
call fcn.140007060
movzx edx, byte [rsp + 0x1730]
test edx, edx
je 0x1401c3207
mov dword [rsp + 0x3c8], 0
jmp 0x1401c31b1
mov eax, dword [rsp + 0x3c8]
add eax, 1
mov dword [rsp + 0x3c8], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000dba0
cmp dword [rsp + 0x3c8], eax
jge 0x1401c3207
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0x3c8]
call fcn.140083bd4
mov rdx, rax
mov eax, dword [rsp + 0x1c00]
cmp rdx, rax
jne 0x1401c3205
mov dword [rsp + 0x830], 1
jmp 0x1401c3207
jmp 0x1401c31a0
xor r8d, r8d
lea rdx, [rsp + 0x1748]
mov rcx, qword [rsp + 0x1bf0]
call fcn.140199b60
mov qword [rsp + 0x1a90], rax
lea rdx, [0x14025b570]
mov rcx, qword [rsp + 0x1a90]
call fcn.140006dd0
mov byte [rsp + 0x1740], al
lea rcx, [rsp + 0x1748]
call fcn.140007060
movzx edx, byte [rsp + 0x1740]
test edx, edx
je 0x1401c3333
lea rcx, [rsp + 0x850]
call fcn.1401e0790
nop
mov eax, dword [rsp + 0x1c00]
mov dword [rsp + 0x9e8], eax
lea rcx, [rsp + 0x850]
call fcn.1401e5810
test eax, eax
jne 0x1401c32b2
mov qword [rsp + 0x1750], 0
lea rcx, [rsp + 0x850]
call fcn.140005e30
mov rax, qword [rsp + 0x1750]
jmp 0x1401c5f8b
mov dword [rsp + 0x3c8], 0
jmp 0x1401c32d0
mov eax, dword [rsp + 0x3c8]
add eax, 1
mov dword [rsp + 0x3c8], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000dba0
cmp dword [rsp + 0x3c8], eax
jge 0x1401c3326
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0x3c8]
call fcn.140083bd4
mov rdx, rax
mov eax, dword [rsp + 0x1c00]
cmp rdx, rax
jne 0x1401c3324
mov dword [rsp + 0x830], 1
jmp 0x1401c3326
jmp 0x1401c32bf
lea rcx, [rsp + 0x850]
call fcn.140005e30
cmp dword [rsp + 0x830], 0
jne 0x1401c3344
xor eax, eax
jmp 0x1401c5f8b
lea rcx, [rsp + 0x750]
call fcn.140002d10
nop
mov r8, qword [rsp + 0x1c08]
lea rdx, [0x14025b598]
lea rcx, [rsp + 0x750]
call fcn.140002ba0
mov edx, 0xa
lea rcx, [rsp + 0x388]
call fcn.140089bac
nop
lea rcx, [rsp + 0x750]
call fcn.140050200
lea rdx, [rsp + 0x388]
mov rcx, rax
call fcn.1400e0da0
lea rcx, [rsp + 0x3e0]
call fcn.1401e0790
nop
mov dword [rsp + 0x380], 0
mov eax, dword [rsp + 0x1c00]
mov dword [rsp + 0x578], eax
lea rcx, [rsp + 0x3e0]
call fcn.1401e5810
lea rcx, [rsp + 0x760]
call fcn.1400e82c0
nop
lea rcx, [rsp + 0x1758]
call fcn.140001000
mov qword [rsp + 0x1a98], rax
mov rax, qword [rsp + 0x1a98]
mov qword [rsp + 0x1aa0], rax
lea r8, [0x14025b5a0]
mov rdx, qword [rsp + 0x1aa0]
lea rcx, [rsp + 0x1760]
call fcn.1400010b0
mov qword [rsp + 0x1aa8], rax
mov rax, qword [rsp + 0x1aa8]
mov qword [rsp + 0x1ab0], rax
mov rcx, qword [rsp + 0x1ab0]
call fcn.140050200
mov dword [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_WSACleanup
mov r8, rax
lea rdx, [rsp + 0x1768]
lea rcx, [rsp + 0x760]
call fcn.1400eb690
nop
lea rcx, [rsp + 0x1760]
call fcn.140007060
nop
lea rcx, [rsp + 0x1758]
call fcn.140007060
lea rcx, [rsp + 0x3d0]
call fcn.140002d10
nop
mov r8, qword [rsp + 0x5a8]
lea rdx, [0x14025b5d0]
lea rcx, [rsp + 0x3d0]
call fcn.140002ba0
lea rdx, str.__server_initiatorinfo_initiatorinfo_mac
lea rcx, [rsp + 0x720]
call fcn.140002050
nop
lea rcx, [rsp + 0x720]
call fcn.140050200
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x728]
lea rcx, [rsp + 0x760]
call fcn.1400ebff0
nop
lea rcx, [rsp + 0x728]
call fcn.1400e4720
test rax, rax
jne 0x1401c35fa
xor r9d, r9d
lea r8, [0x14025b51c]
lea rdx, [rsp + 0xb90]
lea rcx, [rsp + 0x760]
call fcn.1400ebff0
nop
xor edx, edx
lea rcx, [rsp + 0xb90]
call fcn.1400e46f0
lea rdx, [rsp + 0x1780]
mov rcx, rax
call fcn.1400e7990
lea r8, str.server
lea rdx, [rsp + 0x1788]
mov rcx, rax
call fcn.1400eaa70
xor r9d, r9d
lea r8, [0x14025b5b8]
lea rdx, [rsp + 0x1790]
lea rcx, [rsp + 0x760]
call fcn.1400ebff0
mov qword [rsp + 0x1ab8], rax
mov rax, qword [rsp + 0x1ab8]
mov qword [rsp + 0x1ac0], rax
mov rdx, qword [rsp + 0x1ac0]
lea rcx, [rsp + 0xb90]
call fcn.1400e6340
nop
lea rcx, [rsp + 0x1790]
call fcn.1400e4770
xor edx, edx
lea rcx, [rsp + 0xb90]
call fcn.1400e46f0
lea rdx, [rsp + 0x17b8]
mov rcx, rax
call fcn.1400e7990
lea r8, str.initiatorinfo
lea rdx, [rsp + 0x17c0]
mov rcx, rax
call fcn.1400eaa70
nop
lea rcx, [rsp + 0xb90]
call fcn.1400e4770
mov dx, 0x2f
lea rcx, [rsp + 0x720]
call fcn.140006920
mov r9d, eax
xor r8d, r8d
lea rdx, [rsp + 0x17c8]
lea rcx, [rsp + 0x720]
call fcn.1400021f0
mov qword [rsp + 0x1ac8], rax
mov rax, qword [rsp + 0x1ac8]
mov qword [rsp + 0x1ad0], rax
mov rdx, qword [rsp + 0x1ad0]
lea rcx, [rsp + 0x720]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x17c8]
call fcn.140007060
lea rcx, [rsp + 0x3d0]
call fcn.140050200
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x838]
lea rcx, [rsp + 0x760]
call fcn.1400ebf20
lea rcx, [rsp + 0x17d0]
call fcn.1400e64c0
mov rdx, rax
lea rcx, [rsp + 0x838]
call fcn.1400e6410
movzx eax, al
test eax, eax
je 0x1401c37ec
xor r9d, r9d
lea r8, str.__server_initiatorinfo
lea rdx, [rsp + 0xbc0]
lea rcx, [rsp + 0x760]
call fcn.1400ebf20
lea rcx, [rsp + 0xbb8]
call fcn.1400e56e0
lea rcx, [rsp + 0xbd0]
call fcn.1400e56e0
lea rdx, [rsp + 0x17e8]
lea rcx, [rsp + 0xbc0]
call fcn.1400e7990
mov rcx, rax
call fcn.1400e5510
mov rdi, rax
lea rdx, [rsp + 0x17e0]
lea rcx, [rsp + 0xbc0]
call fcn.1400e7990
mov r8, rdi
lea rdx, [rsp + 0x17f0]
mov rcx, rax
call fcn.1400eaa70
mov rax, qword [rax]
mov qword [rsp + 0xbb8], rax
lea r8, [0x14025b6f8]
lea rdx, [rsp + 0x17f8]
lea rcx, [rsp + 0xbb8]
call fcn.1400eaa70
mov rax, qword [rax]
mov qword [rsp + 0xbd0], rax
lea rcx, [rsp + 0x5a8]
call fcn.140050200
mov rdi, rax
lea r8, [0x14025b700]
lea rdx, [rsp + 0x1800]
lea rcx, [rsp + 0xbd0]
call fcn.1400ea0c0
mov rdx, rdi
mov rcx, rax
call fcn.1400e9ec0
lea rcx, [rsp + 0x3d0]
call fcn.140050200
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x1808]
lea rcx, [rsp + 0x760]
call fcn.1400ebf20
lea rdi, [rsp + 0x1a48]
mov rsi, rax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x838]
lea rsi, [rsp + 0x1a48]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x388]
call fcn.140089b24
mov qword [rsp + 0x3c0], rax
cmp qword [rsp + 0x3c0], 0
je 0x1401c450b
lea rdx, [0x14025b710]
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c385d
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, 9
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
lea rdx, [0x14025b728]
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c38ec
mov rdx, qword [rsp + 0x3c0]
add rdx, 8
lea r8, [0x14025b56c]
lea rcx, [rsp + 0x1818]
call fcn.1400010b0
mov qword [rsp + 0x1ad8], rax
mov rax, qword [rsp + 0x1ad8]
mov qword [rsp + 0x1ae0], rax
mov rcx, qword [rsp + 0x1ae0]
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
nop
lea rcx, [rsp + 0x1818]
call fcn.140007060
lea rdx, [0x14025b740]
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c397b
mov rdx, qword [rsp + 0x3c0]
add rdx, 8
lea r8, [0x14025b5b4]
lea rcx, [rsp + 0x1820]
call fcn.1400010b0
mov qword [rsp + 0x1ae8], rax
mov rax, qword [rsp + 0x1ae8]
mov qword [rsp + 0x1af0], rax
mov rcx, qword [rsp + 0x1af0]
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.WS2_32.dll_setsockopt
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
nop
lea rcx, [rsp + 0x1820]
call fcn.140007060
lea rdx, [0x14025b758]
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c3a67
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
lea rdx, [0x14025b76c]
call fcn.140006130
test eax, eax
je 0x1401c39e0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
lea rdx, [0x14025b780]
call fcn.140006130
test eax, eax
je 0x1401c39e0
lea rax, [0x14025b7d0]
mov qword [rsp + 0x1af8], rax
jmp 0x1401c39ef
lea rax, [0x14025b63c]
mov qword [rsp + 0x1af8], rax
mov rdx, qword [rsp + 0x3c0]
add rdx, 8
mov r8, qword [rsp + 0x1af8]
lea rcx, [rsp + 0x1828]
call fcn.1400010b0
mov qword [rsp + 0x1b00], rax
mov rax, qword [rsp + 0x1b00]
mov qword [rsp + 0x1b08], rax
mov rcx, qword [rsp + 0x1b08]
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.WS2_32.dll_shutdown
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
nop
lea rcx, [rsp + 0x1828]
call fcn.140007060
lea rdx, str.gpu_temp
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c3b53
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
lea rdx, [0x14025b7ec]
call fcn.140006130
test eax, eax
je 0x1401c3acc
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
lea rdx, str.You_need_install_.net_framework_3.5.
call fcn.140006130
test eax, eax
je 0x1401c3acc
lea rax, [0x14025b850]
mov qword [rsp + 0x1b10], rax
jmp 0x1401c3adb
lea rax, [0x14025b6c4]
mov qword [rsp + 0x1b10], rax
mov rdx, qword [rsp + 0x3c0]
add rdx, 8
mov r8, qword [rsp + 0x1b10]
lea rcx, [rsp + 0x1830]
call fcn.1400010b0
mov qword [rsp + 0x1b18], rax
mov rax, qword [rsp + 0x1b18]
mov qword [rsp + 0x1b20], rax
mov rcx, qword [rsp + 0x1b20]
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayUnaccessData
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
nop
lea rcx, [rsp + 0x1830]
call fcn.140007060
lea rdx, str.activeprocess
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c3ba0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
lea rdx, [0x14025b878]
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c3dd0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
lea rcx, [rsp + 0xbd8]
call fcn.140002d10
nop
lea rdx, [rsp + 0x1838]
lea rcx, [rsp + 0x838]
call fcn.1400e7990
lea r8, [0x14025b880]
lea rdx, [rsp + 0xbe0]
mov rcx, rax
call fcn.1400e6ea0
lea rcx, [rsp + 0x1840]
call fcn.1400e56e0
mov rdx, rax
lea rcx, [rsp + 0xbe0]
call fcn.1400e55e0
movzx eax, al
test eax, eax
je 0x1401c3c83
lea r8, [0x14025b888]
lea rdx, [rsp + 0x1848]
lea rcx, [rsp + 0xbe0]
call fcn.1400e6df0
mov rcx, rax
call fcn.1400e5720
mov rdx, rax
lea rcx, [rsp + 0xbd8]
call fcn.140002020
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xbd8]
call fcn.140006130
test eax, eax
je 0x1401c3dc3
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140006ea0
movzx eax, al
test eax, eax
jne 0x1401c3dc3
lea rcx, [rsp + 0x1850]
call fcn.1400e56e0
mov rdx, rax
lea rcx, [rsp + 0xbe0]
call fcn.1400e5620
movzx eax, al
test eax, eax
je 0x1401c3d23
lea rdx, [rsp + 0x1858]
lea rcx, [rsp + 0x838]
call fcn.1400e7990
lea r8, [0x14025b898]
lea rdx, [rsp + 0x1860]
mov rcx, rax
call fcn.1400eaa70
mov rax, qword [rax]
mov qword [rsp + 0xbe0], rax
lea rcx, [rsp + 0x1870]
call fcn.1400e5900
mov rdi, rax
lea r8, [0x14025b8a0]
lea rdx, [rsp + 0x1868]
lea rcx, [rsp + 0xbe0]
call fcn.1400e6df0
mov rdx, rdi
mov rcx, rax
call fcn.1400e5840
movzx eax, al
test eax, eax
je 0x1401c3d7d
lea r8, [0x14025b8b0]
lea rdx, [rsp + 0x1878]
lea rcx, [rsp + 0xbe0]
call fcn.1400ea0c0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rdi, rax
lea r8, [0x14025b8c0]
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xbe0]
call fcn.1400e6df0
mov rdx, rdi
mov rcx, rax
call fcn.1400e9ec0
mov dword [rsp + 0x380], 1
lea rcx, [rsp + 0xbd8]
call fcn.140007060
lea rdx, [0x14025b8cc]
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c4000
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.WS2_32.dll_select
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
lea rcx, [rsp + 0xbe8]
call fcn.140002d10
nop
lea rdx, [rsp + 0x1888]
lea rcx, [rsp + 0x838]
call fcn.1400e7990
lea r8, [0x14025b8d4]
lea rdx, [rsp + 0xbf0]
mov rcx, rax
call fcn.1400e6ea0
lea rcx, [rsp + 0x1890]
call fcn.1400e56e0
mov rdx, rax
lea rcx, [rsp + 0xbf0]
call fcn.1400e55e0
movzx eax, al
test eax, eax
je 0x1401c3eb3
lea r8, [0x14025b8e0]
lea rdx, [rsp + 0x1898]
lea rcx, [rsp + 0xbf0]
call fcn.1400e6df0
mov rcx, rax
call fcn.1400e5720
mov rdx, rax
lea rcx, [rsp + 0xbe8]
call fcn.140002020
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xbe8]
call fcn.140006130
test eax, eax
je 0x1401c3ff3
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140006ea0
movzx eax, al
test eax, eax
jne 0x1401c3ff3
lea rcx, [rsp + 0x18a0]
call fcn.1400e56e0
mov rdx, rax
lea rcx, [rsp + 0xbf0]
call fcn.1400e5620
movzx eax, al
test eax, eax
je 0x1401c3f53
lea rdx, [rsp + 0x18a8]
lea rcx, [rsp + 0x838]
call fcn.1400e7990
lea r8, [0x14025b8ec]
lea rdx, [rsp + 0x18b0]
mov rcx, rax
call fcn.1400eaa70
mov rax, qword [rax]
mov qword [rsp + 0xbf0], rax
lea rcx, [rsp + 0x18c0]
call fcn.1400e5900
mov rdi, rax
lea r8, [0x14025b8f8]
lea rdx, [rsp + 0x18b8]
lea rcx, [rsp + 0xbf0]
call fcn.1400e6df0
mov rdx, rdi
mov rcx, rax
call fcn.1400e5840
movzx eax, al
test eax, eax
je 0x1401c3fad
lea r8, [0x14025b908]
lea rdx, [rsp + 0x18c8]
lea rcx, [rsp + 0xbf0]
call fcn.1400ea0c0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rdi, rax
lea r8, [0x14025b918]
lea rdx, [rsp + 0x18d0]
lea rcx, [rsp + 0xbf0]
call fcn.1400e6df0
mov rdx, rdi
mov rcx, rax
call fcn.1400e9ec0
mov dword [rsp + 0x380], 1
lea rcx, [rsp + 0xbe8]
call fcn.140007060
lea rdx, [0x14025b928]
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c4230
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.WS2_32.dll_recvfrom
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
lea rcx, [rsp + 0xbf8]
call fcn.140002d10
nop
lea rdx, [rsp + 0x18d8]
lea rcx, [rsp + 0x838]
call fcn.1400e7990
lea r8, [0x14025b930]
lea rdx, [rsp + 0xc00]
mov rcx, rax
call fcn.1400e6ea0
lea rcx, [rsp + 0x18e0]
call fcn.1400e56e0
mov rdx, rax
lea rcx, [rsp + 0xc00]
call fcn.1400e55e0
movzx eax, al
test eax, eax
je 0x1401c40e3
lea r8, [0x14025b938]
lea rdx, [rsp + 0x18e8]
lea rcx, [rsp + 0xc00]
call fcn.1400e6df0
mov rcx, rax
call fcn.1400e5720
mov rdx, rax
lea rcx, [rsp + 0xbf8]
call fcn.140002020
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xbf8]
call fcn.140006130
test eax, eax
je 0x1401c4223
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140006ea0
movzx eax, al
test eax, eax
jne 0x1401c4223
lea rcx, [rsp + 0x18f0]
call fcn.1400e56e0
mov rdx, rax
lea rcx, [rsp + 0xc00]
call fcn.1400e5620
movzx eax, al
test eax, eax
je 0x1401c4183
lea rdx, [rsp + 0x18f8]
lea rcx, [rsp + 0x838]
call fcn.1400e7990
lea r8, [0x14025b948]
lea rdx, [rsp + 0x1900]
mov rcx, rax
call fcn.1400eaa70
mov rax, qword [rax]
mov qword [rsp + 0xc00], rax
lea rcx, [rsp + 0x1910]
call fcn.1400e5900
mov rdi, rax
lea r8, [0x14025b950]
lea rdx, [rsp + 0x1908]
lea rcx, [rsp + 0xc00]
call fcn.1400e6df0
mov rdx, rdi
mov rcx, rax
call fcn.1400e5840
movzx eax, al
test eax, eax
je 0x1401c41dd
lea r8, [0x14025b960]
lea rdx, [rsp + 0x1918]
lea rcx, [rsp + 0xc00]
call fcn.1400ea0c0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rdi, rax
lea r8, [0x14025b970]
lea rdx, [rsp + 0x1920]
lea rcx, [rsp + 0xc00]
call fcn.1400e6df0
mov rdx, rdi
mov rcx, rax
call fcn.1400e9ec0
mov dword [rsp + 0x380], 1
lea rcx, [rsp + 0xbf8]
call fcn.140007060
lea rdx, [0x14025b980]
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c427d
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetLBound
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
lea rdx, [0x14025b988]
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c449c
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xc10]
call fcn.1400df9f0
nop
lea rcx, [rsp + 0xc08]
call fcn.140002d10
nop
lea rdx, [rsp + 0x1928]
lea rcx, [rsp + 0x838]
call fcn.1400e7990
lea r8, [0x14025b990]
lea rdx, [rsp + 0xc18]
mov rcx, rax
call fcn.1400e6ea0
lea rcx, [rsp + 0x1930]
call fcn.1400e56e0
mov rdx, rax
lea rcx, [rsp + 0xc18]
call fcn.1400e55e0
movzx eax, al
test eax, eax
je 0x1401c434d
lea r8, [0x14025b998]
lea rdx, [rsp + 0x1938]
lea rcx, [rsp + 0xc18]
call fcn.1400e6df0
mov rcx, rax
call fcn.1400e5720
mov rdx, rax
lea rcx, [rsp + 0xc08]
call fcn.140002020
lea rcx, [rsp + 0xc10]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xc08]
call fcn.140006130
test eax, eax
je 0x1401c4481
lea rcx, [rsp + 0xc10]
call fcn.140006ea0
movzx eax, al
test eax, eax
jne 0x1401c4481
lea rcx, [rsp + 0x1940]
call fcn.1400e56e0
mov rdx, rax
lea rcx, [rsp + 0xc18]
call fcn.1400e5620
movzx eax, al
test eax, eax
je 0x1401c43e5
lea rdx, [rsp + 0x1948]
lea rcx, [rsp + 0x838]
call fcn.1400e7990
lea r8, [0x14025b9a8]
lea rdx, [rsp + 0x1950]
mov rcx, rax
call fcn.1400eaa70
mov rax, qword [rax]
mov qword [rsp + 0xc18], rax
lea rcx, [rsp + 0x1960]
call fcn.1400e5900
mov rdi, rax
lea r8, [0x14025b9b0]
lea rdx, [rsp + 0x1958]
lea rcx, [rsp + 0xc18]
call fcn.1400e6df0
mov rdx, rdi
mov rcx, rax
call fcn.1400e5840
movzx eax, al
test eax, eax
je 0x1401c443f
lea r8, [0x14025b9c0]
lea rdx, [rsp + 0x1968]
lea rcx, [rsp + 0xc18]
call fcn.1400ea0c0
lea rcx, [rsp + 0xc10]
call fcn.140050200
mov rdi, rax
lea r8, [0x14025b9d0]
lea rdx, [rsp + 0x1970]
lea rcx, [rsp + 0xc18]
call fcn.1400e6df0
mov rdx, rdi
mov rcx, rax
call fcn.1400e9ec0
mov dword [rsp + 0x380], 1
lea rcx, [rsp + 0xc08]
call fcn.140007060
nop
lea rcx, [rsp + 0xc10]
call fcn.140007060
lea rdx, str.checklocalhdd
mov rcx, qword [rsp + 0x3c0]
call fcn.140006130
test eax, eax
jne 0x1401c44e9
mov rcx, qword [rsp + 0x1bf0]
call fcn.1401a4e50
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
lea r9, [0x14025ba00]
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
mov edx, dword [rsp + 0x3c8]
call fcn.140083ba4
mov rdx, qword [rsp + 0x3c0]
lea rcx, [rsp + 0x388]
call fcn.140089b54
mov qword [rsp + 0x3c0], rax
jmp 0x1401c3801
cmp dword [rsp + 0x380], 0
je 0x1401c45c0
lea rcx, [rsp + 0x1978]
call fcn.140001000
mov qword [rsp + 0x1b28], rax
mov rax, qword [rsp + 0x1b28]
mov qword [rsp + 0x1b30], rax
lea r8, [0x14025ba08]
mov rdx, qword [rsp + 0x1b30]
lea rcx, [rsp + 0x1980]
call fcn.1400010b0
mov qword [rsp + 0x1b38], rax
mov rax, qword [rsp + 0x1b38]
mov qword [rsp + 0x1b40], rax
mov rcx, qword [rsp + 0x1b40]
call fcn.140050200
mov dword [rsp + 0x20], 0
mov r9d, 1
lea r8, [0x14025b70c]
mov rdx, rax
lea rcx, [rsp + 0x760]
call fcn.1400ec070
nop
lea rcx, [rsp + 0x1980]
call fcn.140007060
nop
lea rcx, [rsp + 0x1978]
call fcn.140007060
mov qword [rsp + 0x1988], 0
lea rcx, [rsp + 0x728]
call fcn.1400e4770
nop
lea rcx, [rsp + 0x720]
call fcn.140007060
nop
lea rcx, [rsp + 0x3d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x760]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x3e0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x388]
call fcn.140089d88
nop
lea rcx, [rsp + 0x750]
call fcn.140007060
mov rax, qword [rsp + 0x1988]
jmp 0x1401c5f8b
cmp dword [rsp + 0x1bf8], 0x8058
jne 0x1401c4ada
cmp qword [rsp + 0x1c00], 0
je 0x1401c4661
cmp qword [rsp + 0x1c08], 0
jne 0x1401c4668
xor eax, eax
jmp 0x1401c5f8b
mov dword [rsp + 0xc20], 0
mov dword [rsp + 0xc30], 0
xor r8d, r8d
lea rdx, [rsp + 0x1998]
mov rcx, qword [rsp + 0x1bf0]
call fcn.140199b60
mov qword [rsp + 0x1b48], rax
lea rdx, [0x14025ba20]
mov rcx, qword [rsp + 0x1b48]
call fcn.140006dd0
mov byte [rsp + 0x1990], al
lea rcx, [rsp + 0x1998]
call fcn.140007060
movzx edx, byte [rsp + 0x1990]
test edx, edx
je 0x1401c4746
mov dword [rsp + 0xc20], 0
jmp 0x1401c46f0
mov eax, dword [rsp + 0xc20]
add eax, 1
mov dword [rsp + 0xc20], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000dba0
cmp dword [rsp + 0xc20], eax
jge 0x1401c4746
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0xc20]
call fcn.140083bd4
mov rdx, rax
mov eax, dword [rsp + 0x1c00]
cmp rdx, rax
jne 0x1401c4744
mov dword [rsp + 0xc30], 1
jmp 0x1401c4746
jmp 0x1401c46df
xor r8d, r8d
lea rdx, [rsp + 0x19a8]
mov rcx, qword [rsp + 0x1bf0]
call fcn.140199b60
mov qword [rsp + 0x1b50], rax
lea rdx, [0x14025ba40]
mov rcx, qword [rsp + 0x1b50]
call fcn.140006dd0
mov byte [rsp + 0x19a0], al
lea rcx, [rsp + 0x19a8]
call fcn.140007060
movzx edx, byte [rsp + 0x19a0]
test edx, edx
je 0x1401c4872
lea rcx, [rsp + 0xc50]
call fcn.1401e0790
nop
mov eax, dword [rsp + 0x1c00]
mov dword [rsp + 0xde8], eax
lea rcx, [rsp + 0xc50]
call fcn.1401e5810
test eax, eax
jne 0x1401c47f1
mov qword [rsp + 0x19b0], 0
lea rcx, [rsp + 0xc50]
call fcn.140005e30
mov rax, qword [rsp + 0x19b0]
jmp 0x1401c5f8b
mov dword [rsp + 0xc20], 0
jmp 0x1401c480f
mov eax, dword [rsp + 0xc20]
add eax, 1
mov dword [rsp + 0xc20], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000dba0
cmp dword [rsp + 0xc20], eax
jge 0x1401c4865
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0xc20]
call fcn.140083bd4
mov rdx, rax
mov eax, dword [rsp + 0x1c00]
cmp rdx, rax
jne 0x1401c4863
mov dword [rsp + 0xc30], 1
jmp 0x1401c4865
jmp 0x1401c47fe
lea rcx, [rsp + 0xc50]
call fcn.140005e30
cmp dword [rsp + 0xc30], 0
jne 0x1401c4883
xor eax, eax
jmp 0x1401c5f8b
lea rcx, [rsp + 0xc28]
call fcn.140002d10
nop
mov r8, qword [rsp + 0x1c08]
lea rdx, [0x14025ba68]
lea rcx, [rsp + 0xc28]
call fcn.140002ba0
mov dword [rsp + 0xc40], 0
lea r9, [rsp + 0xc40]
lea r8, [0x14025b724]
lea rdx, [rsp + 0x19b8]
lea rcx, [rsp + 0xc28]
call fcn.140006620
lea rcx, [rsp + 0x19b8]
call fcn.140007060
cmp dword [rsp + 0xc40], 0xffffffff
je 0x1401c4924
lea r9, [rsp + 0xc40]
lea r8, [0x14025b73c]
lea rdx, [rsp + 0x19c0]
lea rcx, [rsp + 0xc28]
call fcn.140006620
lea rcx, [rsp + 0x19c0]
call fcn.140007060
lea rcx, [rsp + 0xc38]
call fcn.140002d10
nop
cmp dword [rsp + 0xc40], 0xffffffff
je 0x1401c4a75
lea r9, [rsp + 0xc40]
lea r8, [0x14025b754]
lea rdx, [rsp + 0xf90]
lea rcx, [rsp + 0xc28]
call fcn.140006620
nop
lea rcx, [rsp + 0xf90]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401c498b
lea rcx, [rsp + 0xf90]
call fcn.140007060
jmp 0x1401c4a75
lea rcx, [0x14025ba70]
call fcn.1400a99d4
mov rdi, rax
lea rcx, [rsp + 0xf90]
call fcn.140050200
mov r8, rdi
lea rdx, [0x14025ba88]
mov rcx, rax
call fcn.1400aab6c
test eax, eax
jne 0x1401c4a63
lea rcx, str.Vendor:
call fcn.1400a99d4
mov r8d, eax
lea rdx, [rsp + 0x19c8]
lea rcx, [rsp + 0xf90]
call fcn.140006a80
mov qword [rsp + 0x1b58], rax
mov rax, qword [rsp + 0x1b58]
mov qword [rsp + 0x1b60], rax
lea r8, [0x14025b874]
mov rdx, qword [rsp + 0x1b60]
lea rcx, [rsp + 0x19d0]
call fcn.1400010b0
mov qword [rsp + 0x1b68], rax
mov rax, qword [rsp + 0x1b68]
mov qword [rsp + 0x1b70], rax
mov rdx, qword [rsp + 0x1b70]
lea rcx, [rsp + 0xc38]
call fcn.140006050
nop
lea rcx, [rsp + 0x19d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x19c8]
call fcn.140007060
nop
lea rcx, [rsp + 0xf90]
call fcn.140007060
jmp 0x1401c4932
lea rcx, [rsp + 0xc38]
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, 0x1b
mov edx, dword [rsp + 0xc20]
call fcn.140083ba4
mov qword [rsp + 0x19d8], 0
lea rcx, [rsp + 0xc38]
call fcn.140007060
nop
lea rcx, [rsp + 0xc28]
call fcn.140007060
mov rax, qword [rsp + 0x19d8]
jmp 0x1401c5f8b
cmp dword [rsp + 0x1bf8], 0x8059
jne 0x1401c4b7e
mov qword [rsp + 0xf98], 0
lea rdx, [0x14025bab8]
lea rcx, [rsp + 0x19e0]
call fcn.1400f05c0
mov qword [rsp + 0x1b78], rax
mov rcx, qword [rsp + 0x1b78]
call fcn.140050200
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [rsp + 0xf98], rax
lea rcx, [rsp + 0x19e0]
call fcn.140007060
cmp qword [rsp + 0xf98], 0
jne 0x1401c4b52
xor eax, eax
jmp 0x1401c5f8b
mov r9, qword [rsp + 0x1c08]
mov r8, qword [rsp + 0x1c00]
mov edx, dword [rsp + 0x1bf8]
mov rcx, qword [rsp + 0xf98]
call qword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
jmp 0x1401c5f8b
cmp dword [rsp + 0x1bf8], 0x804c
jne 0x1401c4ca3
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
call fcn.14000db70
mov qword [rsp + 0xfa0], rax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
xor edx, edx
call fcn.14000db30
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa0]
call fcn.14000daf0
mov qword [rsp + 0xfa0], rax
cmp qword [rsp + 0xfa0], 0
je 0x1401c4c3c
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa0]
call fcn.140083d60
cmp rax, 0x3fc
jne 0x1401c4c16
jmp 0x1401c4c3c
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa0]
call fcn.14000dab0
mov qword [rsp + 0xfa0], rax
jmp 0x1401c4be5
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa0]
call fcn.14000db30
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov r8d, 1
mov rdx, qword [rsp + 0xfa0]
call fcn.14000da70
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov r8d, 2
mov rdx, qword [rsp + 0xfa0]
call fcn.14000da70
xor eax, eax
jmp 0x1401c5f8b
cmp dword [rsp + 0x1bf8], 0x8056
jne 0x1401c4dc8
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
call fcn.14000db70
mov qword [rsp + 0xfa8], rax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
xor edx, edx
call fcn.14000db30
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa8]
call fcn.14000daf0
mov qword [rsp + 0xfa8], rax
cmp qword [rsp + 0xfa8], 0
je 0x1401c4d61
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa8]
call fcn.140083d60
cmp rax, 0xa1
jne 0x1401c4d3b
jmp 0x1401c4d61
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa8]
call fcn.14000dab0
mov qword [rsp + 0xfa8], rax
jmp 0x1401c4d0a
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa8]
call fcn.14000db30
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov r8d, 1
mov rdx, qword [rsp + 0xfa8]
call fcn.14000da70
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov r8d, 2
mov rdx, qword [rsp + 0xfa8]
call fcn.14000da70
xor eax, eax
jmp 0x1401c5f8b
cmp dword [rsp + 0x1bf8], 0x8017
je 0x1401c4de6
cmp dword [rsp + 0x1bf8], 0x8039
jne 0x1401c5083
mov dword [rsp + 0xfb0], 0
xor r8d, r8d
lea rdx, [rsp + 0x19f0]
mov rcx, qword [rsp + 0x1bf0]
call fcn.140199b60
mov qword [rsp + 0x1b80], rax
lea rdx, [0x14025bae0]
mov rcx, qword [rsp + 0x1b80]
call fcn.140006dd0
mov byte [rsp + 0x19e8], al
lea rcx, [rsp + 0x19f0]
call fcn.140007060
movzx edx, byte [rsp + 0x19e8]
test edx, edx
je 0x1401c4ede
mov dword [rsp + 0xfb0], 0
jmp 0x1401c4e67
mov eax, dword [rsp + 0xfb0]
add eax, 1
mov dword [rsp + 0xfb0], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000dba0
cmp dword [rsp + 0xfb0], eax
jge 0x1401c4eb2
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0xfb0]
call fcn.140083bd4
mov rdx, rax
mov eax, dword [rsp + 0x1c08]
cmp rdx, rax
jne 0x1401c4eb0
jmp 0x1401c4eb2
jmp 0x1401c4e56
mov rdx, qword [rsp + 0x1bf0]
add rdx, 0xdc8
mov r9d, dword [rsp + 0x1c08]
mov r8d, dword [rsp + 0xfb0]
mov rcx, qword [rsp + 0x1bf0]
call fcn.1401b2f90
xor r8d, r8d
lea rdx, [rsp + 0x1a00]
mov rcx, qword [rsp + 0x1bf0]
call fcn.140199b60
mov qword [rsp + 0x1b88], rax
lea rdx, [0x14025bb00]
mov rcx, qword [rsp + 0x1b88]
call fcn.140006dd0
mov byte [rsp + 0x19f8], al
lea rcx, [rsp + 0x1a00]
call fcn.140007060
movzx edx, byte [rsp + 0x19f8]
test edx, edx
je 0x1401c507c
lea rcx, [rsp + 0xfc0]
call fcn.1401e0790
nop
mov eax, dword [rsp + 0x1c08]
mov dword [rsp + 0x1158], eax
lea rcx, [rsp + 0xfc0]
call fcn.1401e5810
test eax, eax
jne 0x1401c4f89
mov qword [rsp + 0x1a08], 0
lea rcx, [rsp + 0xfc0]
call fcn.140005e30
mov rax, qword [rsp + 0x1a08]
jmp 0x1401c5f8b
lea rcx, [rsp + 0x11a8]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edi, eax
xor edx, edx
mov rcx, qword [rsp + 0x1bf0]
call fcn.140197ad0
cmp edi, eax
je 0x1401c4fd9
mov qword [rsp + 0x1a10], 0
lea rcx, [rsp + 0xfc0]
call fcn.140005e30
mov rax, qword [rsp + 0x1a10]
jmp 0x1401c5f8b
mov dword [rsp + 0xfb0], 0
jmp 0x1401c4ff7
mov eax, dword [rsp + 0xfb0]
add eax, 1
mov dword [rsp + 0xfb0], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000dba0
cmp dword [rsp + 0xfb0], eax
jge 0x1401c5042
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0xfb0]
call fcn.140083bd4
mov rdx, rax
mov eax, dword [rsp + 0x1c08]
cmp rdx, rax
jne 0x1401c5040
jmp 0x1401c5042
jmp 0x1401c4fe6
mov rdx, qword [rsp + 0x1bf0]
add rdx, 0xdc8
mov r9d, dword [rsp + 0x1c08]
mov r8d, dword [rsp + 0xfb0]
mov rcx, qword [rsp + 0x1bf0]
call fcn.1401b2f90
nop
lea rcx, [rsp + 0xfc0]
call fcn.140005e30
xor eax, eax
jmp 0x1401c5f8b
cmp dword [rsp + 0x1bf8], 0x804f
jne 0x1401c50ca
mov rdx, qword [rsp + 0x1bf0]
add rdx, 0x4e8
mov ecx, 2
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov rax, qword [rsp + 0x1bf0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1bf0]
call qword [rax + 0x2b0]
xor eax, eax
jmp 0x1401c5f8b
cmp dword [rsp + 0x1bf8], 0x8024
jne 0x1401c5ecc
lea rcx, [rsp + 0x1310]
call fcn.14018ffa0
nop
lea rcx, [rsp + 0x1308]
call fcn.140002d10
nop
mov dword [rsp + 0x1300], 0
lea rcx, [rsp + 0x1310]
call fcn.140050200
mov rcx, rax
call fcn.140005170
test eax, eax
je 0x1401c51a9
xor eax, eax
mov word [rsp + 0x1320], ax
lea rdi, [rsp + 0x1322]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rcx, [rsp + 0x1310]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x1320]
call fcn.1400aac40
lea rdx, [rsp + 0x1320]
mov qword [rsp + 0x20], rdx
mov r9d, 0x104
mov r8d, 0x804a
mov edx, 0xfffffffd
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov dword [rsp + 0x1300], eax
cmp dword [rsp + 0x1300], 0xffffffff
jne 0x1401c51a7
lea rdx, [rsp + 0x1320]
lea rcx, [rsp + 0x1308]
call fcn.140002020
jmp 0x1401c5201
mov edx, 0x69
lea rcx, [rsp + 0x1a18]
call fcn.1400f1540
mov qword [rsp + 0x1b90], rax
mov rax, qword [rsp + 0x1b90]
mov qword [rsp + 0x1b98], rax
mov rdx, qword [rsp + 0x1b98]
lea rcx, [rsp + 0x1308]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x1a18]
call fcn.140007060
mov dword [rsp + 0x1300], 0xffffffff
lea rcx, [rsp + 0x1a20]
call fcn.140001000
mov qword [rsp + 0x1ba0], rax
mov rax, qword [rsp + 0x1ba0]
mov qword [rsp + 0x1ba8], rax
lea r8, [0x14025bb28]
mov rdx, qword [rsp + 0x1ba8]
lea rcx, [rsp + 0x1a28]
call fcn.1400010b0
mov qword [rsp + 0x1bb0], rax
mov rcx, qword [rsp + 0x1bb0]
call fcn.140050200
mov r9, rax
xor r8d, r8d
lea rdx, str.RegCode
lea rcx, [0x14025bb50]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x1a28]
call fcn.140007060
nop
lea rcx, [rsp + 0x1a20]
call fcn.140007060
cmp dword [rsp + 0x1300], 0xffffffff
jne 0x1401c5eb1
mov eax, 0x4c
mov word [rsp + 0x1530], ax
mov eax, 0x69
mov word [rsp + 0x1532], ax
mov eax, 0x63
mov word [rsp + 0x1534], ax
mov eax, 0x65
mov word [rsp + 0x1536], ax
mov eax, WSASetLastError
mov word [rsp + 0x1538], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x153a], ax
mov eax, 0x65
mov word [rsp + 0x153c], ax
mov eax, 0x20
mov word [rsp + 0x153e], ax
mov eax, 0x69
mov word [rsp + 0x1540], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1542], ax
mov eax, 0x20
mov word [rsp + 0x1544], ax
mov eax, WSASetLastError
mov word [rsp + 0x1546], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1548], ax
mov eax, 0x63
mov word [rsp + 0x154a], ax
mov eax, WSAGetLastError
mov word [rsp + 0x154c], ax
mov eax, 0x65
mov word [rsp + 0x154e], ax
mov eax, 0x64
mov word [rsp + 0x1550], ax
mov eax, 0x2c
mov word [rsp + 0x1552], ax
mov eax, 0x20
mov word [rsp + 0x1554], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1556], ax
mov eax, WSASetLastError
mov word [rsp + 0x1558], ax
mov eax, 0x65
mov word [rsp + 0x155a], ax
mov eax, 0x61
mov word [rsp + 0x155c], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x155e], ax
mov eax, 0x65
mov word [rsp + 0x1560], ax
mov eax, 0x20
mov word [rsp + 0x1562], ax
mov eax, 0x67
mov word [rsp + 0x1564], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1566], ax
mov eax, 0x20
mov word [rsp + 0x1568], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x156a], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x156c], ax
mov eax, 0x20
mov word [rsp + 0x156e], ax
mov eax, 0x68
mov word [rsp + 0x1570], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1572], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1574], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1576], ax
mov eax, 0x3a
mov word [rsp + 0x1578], ax
mov eax, 0x2f
mov word [rsp + 0x157a], ax
mov eax, 0x2f
mov word [rsp + 0x157c], ax
mov eax, 0x63
mov word [rsp + 0x157e], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1580], ax
mov eax, 0x2e
mov word [rsp + 0x1582], ax
mov eax, 0x79
mov word [rsp + 0x1584], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1586], ax
mov eax, 0x75
mov word [rsp + 0x1588], ax
mov eax, WSASetLastError
mov word [rsp + 0x158a], ax
mov eax, 0x67
mov word [rsp + 0x158c], ax
mov eax, 0x7a
mov word [rsp + 0x158e], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1590], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1592], ax
mov eax, 0x66
mov word [rsp + 0x1594], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1596], ax
mov eax, 0x2e
mov word [rsp + 0x1598], ax
mov eax, 0x63
mov word [rsp + 0x159a], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x159c], ax
mov eax, WSASetLastError
mov word [rsp + 0x159e], ax
mov eax, 0x2f
mov word [rsp + 0x15a0], ax
mov eax, 0x20
mov word [rsp + 0x15a2], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15a4], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x15a6], ax
mov eax, 0x20
mov word [rsp + 0x15a8], ax
mov eax, 0x61
mov word [rsp + 0x15aa], ax
mov eax, 0x63
mov word [rsp + 0x15ac], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15ae], ax
mov eax, 0x69
mov word [rsp + 0x15b0], ax
mov eax, 0x76
mov word [rsp + 0x15b2], ax
mov eax, 0x65
mov word [rsp + 0x15b4], ax
mov eax, 0x20
mov word [rsp + 0x15b6], ax
mov eax, 0x69
mov word [rsp + 0x15b8], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15ba], ax
mov eax, 0x2e
mov word [rsp + 0x15bc], ax
xor eax, eax
mov word [rsp + 0x15be], ax
lea rdx, [rsp + 0x1530]
lea rcx, [rsp + 0x1308]
call fcn.1400060b0
test eax, eax
jne 0x1401c5e8a
lea rdx, [0x14025bb70]
lea rcx, [rsp + 0x1a38]
call fcn.1400f05c0
mov qword [rsp + 0x1bb8], rax
lea rdx, [0x14025bb60]
mov rcx, qword [rsp + 0x1bb8]
call fcn.140006e10
mov byte [rsp + 0x1a30], al
lea rcx, [rsp + 0x1a38]
call fcn.140007060
movzx edx, byte [rsp + 0x1a30]
test edx, edx
je 0x1401c56b1
jmp 0x1401c5eb1
mov eax, 0x4c
mov word [rsp + 0x1640], ax
mov eax, 0x69
mov word [rsp + 0x1642], ax
mov eax, 0x63
mov word [rsp + 0x1644], ax
mov eax, 0x65
mov word [rsp + 0x1646], ax
mov eax, WSASetLastError
mov word [rsp + 0x1648], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x164a], ax
mov eax, 0x65
mov word [rsp + 0x164c], ax
mov eax, 0x20
mov word [rsp + 0x164e], ax
mov eax, 0x69
mov word [rsp + 0x1650], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1652], ax
mov eax, 0x20
mov word [rsp + 0x1654], ax
mov eax, WSASetLastError
mov word [rsp + 0x1656], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1658], ax
mov eax, 0x63
mov word [rsp + 0x165a], ax
mov eax, WSAGetLastError
mov word [rsp + 0x165c], ax
mov eax, 0x65
mov word [rsp + 0x165e], ax
mov eax, 0x64
mov word [rsp + 0x1660], ax
mov eax, 0x2c
mov word [rsp + 0x1662], ax
mov eax, 0x20
mov word [rsp + 0x1664], ax
mov eax, 0x44
mov word [rsp + 0x1666], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1668], ax
mov eax, 0x20
mov word [rsp + 0x166a], ax
mov eax, 0x79
mov word [rsp + 0x166c], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x166e], ax
mov eax, 0x75
mov word [rsp + 0x1670], ax
mov eax, 0x20
mov word [rsp + 0x1672], ax
mov eax, 0x77
mov word [rsp + 0x1674], ax
mov eax, 0x61
mov word [rsp + 0x1676], ax
mov eax, WSASetLastError
mov word [rsp + 0x1678], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x167a], ax
mov eax, 0x20
mov word [rsp + 0x167c], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x167e], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1680], ax
mov eax, 0x20
mov word [rsp + 0x1682], ax
mov eax, 0x67
mov word [rsp + 0x1684], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1686], ax
mov eax, 0x20
mov word [rsp + 0x1688], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x168a], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x168c], ax
mov eax, 0x20
mov word [rsp + 0x168e], ax
mov eax, 0x68
mov word [rsp + 0x1690], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1692], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1694], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1696], ax
mov eax, 0x3a
mov word [rsp + 0x1698], ax
mov eax, 0x2f
mov word [rsp + 0x169a], ax
mov eax, 0x2f
mov word [rsp + 0x169c], ax
mov eax, 0x63
mov word [rsp + 0x169e], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x16a0], ax
mov eax, 0x2e
mov word [rsp + 0x16a2], ax
mov eax, 0x79
mov word [rsp + 0x16a4], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x16a6], ax
mov eax, 0x75
mov word [rsp + 0x16a8], ax
mov eax, WSASetLastError
mov word [rsp + 0x16aa], ax
mov eax, 0x67
mov word [rsp + 0x16ac], ax
mov eax, 0x7a
mov word [rsp + 0x16ae], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x16b0], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x16b2], ax
mov eax, 0x66
mov word [rsp + 0x16b4], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x16b6], ax
mov eax, 0x2e
mov word [rsp + 0x16b8], ax
mov eax, 0x63
mov word [rsp + 0x16ba], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x16bc], ax
mov eax, WSASetLastError
mov word [rsp + 0x16be], ax
mov eax, 0x2f
mov word [rsp + 0x16c0], ax
mov eax, 0x20
mov word [rsp + 0x16c2], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x16c4], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x16c6], ax
mov eax, 0x20
mov word [rsp + 0x16c8], ax
mov eax, 0x61
mov word [rsp + 0x16ca], ax
mov eax, 0x63
mov word [rsp + 0x16cc], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x16ce], ax
mov eax, 0x69
mov word [rsp + 0x16d0], ax
mov eax, 0x76
mov word [rsp + 0x16d2], ax
mov eax, 0x65
mov word [rsp + 0x16d4], ax
mov eax, 0x20
mov word [rsp + 0x16d6], ax
mov eax, 0x69
mov word [rsp + 0x16d8], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x16da], ax
mov eax, 0x3f
mov word [rsp + 0x16dc], ax
xor eax, eax
mov word [rsp + 0x16de], ax
xor r8d, r8d
mov edx, reloc.WS2_32.dll_gethostbyname
lea rcx, [rsp + 0x1640]
call fcn.1400f0bf0
cmp eax, 7
jne 0x1401c5add
jmp 0x1401c5eb1
lea rcx, [rsp + 0x16e0]
call fcn.140002d10
nop
mov eax, 0x68
mov word [rsp + 0x15c0], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15c2], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15c4], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x15c6], ax
mov eax, 0x3a
mov word [rsp + 0x15c8], ax
mov eax, 0x2f
mov word [rsp + 0x15ca], ax
mov eax, 0x2f
mov word [rsp + 0x15cc], ax
mov eax, 0x75
mov word [rsp + 0x15ce], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x15d0], ax
mov eax, 0x65
mov word [rsp + 0x15d2], ax
mov eax, WSACleanup
mov word [rsp + 0x15d4], ax
mov eax, 0x2e
mov word [rsp + 0x15d6], ax
mov eax, 0x79
mov word [rsp + 0x15d8], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x15da], ax
mov eax, 0x75
mov word [rsp + 0x15dc], ax
mov eax, WSASetLastError
mov word [rsp + 0x15de], ax
mov eax, 0x67
mov word [rsp + 0x15e0], ax
mov eax, 0x7a
mov word [rsp + 0x15e2], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x15e4], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x15e6], ax
mov eax, 0x66
mov word [rsp + 0x15e8], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15ea], ax
mov eax, 0x2e
mov word [rsp + 0x15ec], ax
mov eax, 0x63
mov word [rsp + 0x15ee], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x15f0], ax
mov eax, WSASetLastError
mov word [rsp + 0x15f2], ax
mov eax, 0x2f
mov word [rsp + 0x15f4], ax
mov eax, 0x61
mov word [rsp + 0x15f6], ax
mov eax, 0x63
mov word [rsp + 0x15f8], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15fa], ax
mov eax, 0x69
mov word [rsp + 0x15fc], ax
mov eax, 0x76
mov word [rsp + 0x15fe], ax
mov eax, 0x65
mov word [rsp + 0x1600], ax
mov eax, 0x2e
mov word [rsp + 0x1602], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1604], ax
mov eax, 0x68
mov word [rsp + 0x1606], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1608], ax
mov eax, 0x3f
mov word [rsp + 0x160a], ax
mov eax, WSACleanup
mov word [rsp + 0x160c], ax
mov eax, 0x65
mov word [rsp + 0x160e], ax
mov eax, 0x67
mov word [rsp + 0x1610], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1612], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1614], ax
mov eax, 0x66
mov word [rsp + 0x1616], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1618], ax
mov eax, 0x77
mov word [rsp + 0x161a], ax
mov eax, 0x61
mov word [rsp + 0x161c], ax
mov eax, WSACleanup
mov word [rsp + 0x161e], ax
mov eax, 0x65
mov word [rsp + 0x1620], ax
mov eax, 0x3d
mov word [rsp + 0x1622], ax
mov eax, 0x63
mov word [rsp + 0x1624], ax
mov eax, 0x63
mov word [rsp + 0x1626], ax
mov eax, 0x62
mov word [rsp + 0x1628], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x162a], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x162c], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x162e], ax
mov eax, 0x26
mov word [rsp + 0x1630], ax
mov eax, WSACleanup
mov word [rsp + 0x1632], ax
mov eax, 0x65
mov word [rsp + 0x1634], ax
mov eax, 0x67
mov word [rsp + 0x1636], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1638], ax
mov eax, WSASetLastError
mov word [rsp + 0x163a], ax
mov eax, 0x3d
mov word [rsp + 0x163c], ax
xor eax, eax
mov word [rsp + 0x163e], ax
mov r9, qword [rsp + 0x1310]
lea r8, [rsp + 0x15c0]
lea rdx, [0x14025bb80]
lea rcx, [rsp + 0x16e0]
call fcn.140002ba0
lea rcx, [rsp + 0x16e0]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x16e0]
call fcn.140007060
jmp 0x1401c5eb1
lea rcx, [rsp + 0x1308]
call fcn.140050200
xor r8d, r8d
mov edx, gethostbyname
mov rcx, rax
call fcn.1400f0bf0
xor eax, eax
test eax, eax
jne 0x1401c529a
lea rcx, [rsp + 0x1308]
call fcn.140007060
nop
lea rcx, [rsp + 0x1310]
call fcn.140007060
cmp dword [rsp + 0x1bf8], 0x805a
jne 0x1401c5f67
mov rdx, qword [rsp + 0x1c08]
lea rcx, [rsp + 0x16e8]
call fcn.140002050
nop
lea rcx, [rsp + 0x16e8]
call fcn.140050200
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x3d8
mov r9d, 1
mov r8, rax
mov edx, 2
call fcn.140089428
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x3d8
xor r9d, r9d
mov r8d, 0x1002
mov edx, 0x40b
call fcn.14000da30
mov qword [rsp + 0x1a40], 0
lea rcx, [rsp + 0x16e8]
call fcn.140007060
mov rax, qword [rsp + 0x1a40]
jmp 0x1401c5f8b
mov r9, qword [rsp + 0x1c08]
mov r8, qword [rsp + 0x1c00]
mov edx, dword [rsp + 0x1bf8]
mov rcx, qword [rsp + 0x1bf0]
call fcn.1400f3f80
mov rcx, qword [rsp + 0x1bc0]
xor rcx, rsp
call fcn.1400a9820
add rsp, 0x1bd8
pop rdi
pop rsi
ret