Function at 0x1401a6560
Capabilities:
Check for time delay via gettickcount
Check if file exists
Create process on windows
Delete file
Get disk size
Manipulate boot configuration
Open clipboard
Write clipboard data

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
mov eax, 0x7870
call fcn.1401d5c30
sub rsp, rax
mov qword [rsp + 0x7470], 0xfffffffffffffffe
mov dword [rsp + 0x7468], 0
mov rax, qword [rsp + 0x7888]
mov qword [rsp + 0x7478], rax
cmp qword [rsp + 0x7478], 0x800e
ja 0x1401a65ff
cmp qword [rsp + 0x7478], 0x800e
je 0x1401a7a48
cmp qword [rsp + 0x7478], 0x10b
je 0x1401ac20b
cmp qword [rsp + 0x7478], 0x10c
je 0x1401ac036
cmp qword [rsp + 0x7478], 0x10d
je 0x1401abe61
jmp case.0x1401a6668.32801
cmp qword [rsp + 0x7478], 0x8144
ja 0x1401a666a
cmp qword [rsp + 0x7478], 0x8144
je 0x1401aa593
mov rax, qword [rsp + 0x7478]
sub rax, 0x800f
mov qword [rsp + 0x7478], rax
cmp qword [rsp + 0x7478], 0xca
ja case.0x1401a6668.32801
lea rcx, [0x140000000]
mov rax, qword [rsp + 0x7478]
movzx eax, byte [rcx + rax + 0x1ac718]
mov eax, dword [rcx + rax*4 + 0x1ac6cc]
add rax, rcx
jmp rax
cmp qword [rsp + 0x7478], 0x8146
je 0x1401aa844
cmp qword [rsp + 0x7478], 0x8154
je 0x1401aa788
cmp qword [rsp + 0x7478], 0x8166
je 0x1401ac3e0
jmp case.0x1401a6668.32801
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jl 0x1401a674b
cmp dword [rsp + 0x30], 0
jl 0x1401a674b
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, 1
mov r8d, dword [rsp + 0x30]
lea rdx, [rsp + 0x7120]
call fcn.14008323c
mov qword [rsp + 0x7480], rax
mov rcx, qword [rsp + 0x7480]
call fcn.1400012c0
mov rcx, rax
call fcn.1400d6f90
lea rcx, [rsp + 0x7120]
call fcn.140001470
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x30]
call fcn.14000f050
mov dword [rsp + 0x30], eax
jmp 0x1401a66cf
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jl 0x1401a6977
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x34]
lea rdx, [rsp + 0x7128]
call fcn.14008323c
mov qword [rsp + 0x7488], rax
mov rax, qword [rsp + 0x7488]
mov qword [rsp + 0x7490], rax
lea rdx, [0x140246e50]
lea rcx, [rsp + 0x7130]
call fcn.1400eeb20
mov qword [rsp + 0x7498], rax
mov rax, qword [rsp + 0x7498]
mov qword [rsp + 0x74a0], rax
lea r8, [0x140246df4]
mov rdx, qword [rsp + 0x74a0]
lea rcx, [rsp + 0x7138]
call fcn.1400010b0
mov qword [rsp + 0x74a8], rax
mov rax, qword [rsp + 0x74a8]
mov qword [rsp + 0x74b0], rax
mov r8, qword [rsp + 0x7490]
mov rdx, qword [rsp + 0x74b0]
lea rcx, [rsp + 0x7140]
call fcn.140006b70
mov qword [rsp + 0x74b8], rax
mov rax, qword [rsp + 0x74b8]
mov qword [rsp + 0x74c0], rax
lea r8, [0x14024522c]
mov rdx, qword [rsp + 0x74c0]
lea rcx, [rsp + 0x38]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x7140]
call fcn.140001470
nop
lea rcx, [rsp + 0x7138]
call fcn.140001470
nop
lea rcx, [rsp + 0x7130]
call fcn.140001470
nop
lea rcx, [rsp + 0x7128]
call fcn.140001470
lea rcx, [rsp + 0x38]
call fcn.1400012c0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef150
cmp eax, 7
jne 0x1401a68d0
lea rcx, [rsp + 0x38]
call fcn.140001470
jmp case.0x1401a6668.32801
cmp dword [rsp + 0x34], 0
jl 0x1401a696d
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x34]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8044
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x34]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x34]
call fcn.14000f050
mov dword [rsp + 0x34], eax
jmp 0x1401a68d0
lea rcx, [rsp + 0x38]
call fcn.140001470
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jl 0x1401a6b69
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x40]
lea rdx, [rsp + 0x7148]
call fcn.14008323c
mov qword [rsp + 0x74c8], rax
mov rax, qword [rsp + 0x74c8]
mov qword [rsp + 0x74d0], rax
lea rdx, str.Shutdown_it_
lea rcx, [rsp + 0x7150]
call fcn.1400eeb20
mov qword [rsp + 0x74d8], rax
mov rax, qword [rsp + 0x74d8]
mov qword [rsp + 0x74e0], rax
lea r8, [0x140246e6c]
mov rdx, qword [rsp + 0x74e0]
lea rcx, [rsp + 0x7158]
call fcn.1400010b0
mov qword [rsp + 0x74e8], rax
mov rax, qword [rsp + 0x74e8]
mov qword [rsp + 0x74f0], rax
mov r8, qword [rsp + 0x74d0]
mov rdx, qword [rsp + 0x74f0]
lea rcx, [rsp + 0x7160]
call fcn.140006b70
mov qword [rsp + 0x74f8], rax
mov rax, qword [rsp + 0x74f8]
mov qword [rsp + 0x7500], rax
lea r8, [0x14024529c]
mov rdx, qword [rsp + 0x7500]
lea rcx, [rsp + 0x48]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x7160]
call fcn.140001470
nop
lea rcx, [rsp + 0x7158]
call fcn.140001470
nop
lea rcx, [rsp + 0x7150]
call fcn.140001470
nop
lea rcx, [rsp + 0x7148]
call fcn.140001470
lea rcx, [rsp + 0x48]
call fcn.1400012c0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef150
cmp eax, 7
jne 0x1401a6afc
lea rcx, [rsp + 0x48]
call fcn.140001470
jmp case.0x1401a6668.32801
cmp dword [rsp + 0x40], 0
jl 0x1401a6b5f
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x40]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
mov r9, 0xffffffffffffffff
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x40]
call fcn.14000f050
mov dword [rsp + 0x40], eax
jmp 0x1401a6afc
lea rcx, [rsp + 0x48]
call fcn.140001470
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0
jl 0x1401a6d95
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x50]
lea rdx, [rsp + 0x7168]
call fcn.14008323c
mov qword [rsp + 0x7508], rax
mov rax, qword [rsp + 0x7508]
mov qword [rsp + 0x7510], rax
lea rdx, str.Reboot_it_
lea rcx, [rsp + 0x7170]
call fcn.1400eeb20
mov qword [rsp + 0x7518], rax
mov rax, qword [rsp + 0x7518]
mov qword [rsp + 0x7520], rax
lea r8, [0x140246e94]
mov rdx, qword [rsp + 0x7520]
lea rcx, [rsp + 0x7178]
call fcn.1400010b0
mov qword [rsp + 0x7528], rax
mov rax, qword [rsp + 0x7528]
mov qword [rsp + 0x7530], rax
mov r8, qword [rsp + 0x7510]
mov rdx, qword [rsp + 0x7530]
lea rcx, [rsp + 0x7180]
call fcn.140006b70
mov qword [rsp + 0x7538], rax
mov rax, qword [rsp + 0x7538]
mov qword [rsp + 0x7540], rax
lea r8, [0x14024533c]
mov rdx, qword [rsp + 0x7540]
lea rcx, [rsp + 0x58]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x7180]
call fcn.140001470
nop
lea rcx, [rsp + 0x7178]
call fcn.140001470
nop
lea rcx, [rsp + 0x7170]
call fcn.140001470
nop
lea rcx, [rsp + 0x7168]
call fcn.140001470
lea rcx, [rsp + 0x58]
call fcn.1400012c0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef150
cmp eax, 7
jne 0x1401a6cee
lea rcx, [rsp + 0x58]
call fcn.140001470
jmp case.0x1401a6668.32801
cmp dword [rsp + 0x50], 0
jl 0x1401a6d8b
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x50]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8044
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x50]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
mov r9d, 2
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x50]
call fcn.14000f050
mov dword [rsp + 0x50], eax
jmp 0x1401a6cee
lea rcx, [rsp + 0x58]
call fcn.140001470
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jl 0x1401a6f83
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x60]
lea rdx, [rsp + 0x7188]
call fcn.14008323c
mov qword [rsp + 0x7548], rax
mov rax, qword [rsp + 0x7548]
mov qword [rsp + 0x7550], rax
lea rdx, str.Logoff_it_
lea rcx, [rsp + 0x7190]
call fcn.1400eeb20
mov qword [rsp + 0x7558], rax
mov rax, qword [rsp + 0x7558]
mov qword [rsp + 0x7560], rax
lea r8, [0x140246eb8]
mov rdx, qword [rsp + 0x7560]
lea rcx, [rsp + 0x7198]
call fcn.1400010b0
mov qword [rsp + 0x7568], rax
mov rax, qword [rsp + 0x7568]
mov qword [rsp + 0x7570], rax
mov r8, qword [rsp + 0x7550]
mov rdx, qword [rsp + 0x7570]
lea rcx, [rsp + 0x71a0]
call fcn.140006b70
mov qword [rsp + 0x7578], rax
mov rax, qword [rsp + 0x7578]
mov qword [rsp + 0x7580], rax
lea r8, [0x140245384]
mov rdx, qword [rsp + 0x7580]
lea rcx, [rsp + 0x68]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x71a0]
call fcn.140001470
nop
lea rcx, [rsp + 0x7198]
call fcn.140001470
nop
lea rcx, [rsp + 0x7190]
call fcn.140001470
nop
lea rcx, [rsp + 0x7188]
call fcn.140001470
lea rcx, [rsp + 0x68]
call fcn.1400012c0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef150
cmp eax, 7
jne 0x1401a6f1a
lea rcx, [rsp + 0x68]
call fcn.140001470
jmp case.0x1401a6668.32801
cmp dword [rsp + 0x60], 0
jl 0x1401a6f79
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x60]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x60]
call fcn.14000f050
mov dword [rsp + 0x60], eax
jmp 0x1401a6f1a
lea rcx, [rsp + 0x68]
call fcn.140001470
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 0
jl 0x1401a7000
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r11d, eax
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x8b0], r11d
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x70]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8042
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x74], eax
cmp dword [rsp + 0x74], 0
jl 0x1401a7090
cmp dword [rsp + 0x74], 0
jl 0x1401a7090
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x74]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8049
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x74]
call fcn.14000f050
mov dword [rsp + 0x74], eax
jmp 0x1401a7031
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x78], 0
jl 0x1401a710d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r11d, eax
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x8b0], r11d
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x78]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8043
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
xor eax, eax
jmp 0x1401ac6c3
xor edx, edx
lea rcx, [rsp + 0x80]
call fcn.14016dec0
nop
lea rcx, [rsp + 0x80]
call fcn.1400819f8
nop
lea rcx, [rsp + 0x80]
call fcn.14016de10
xor eax, eax
jmp 0x1401ac6c3
xor r8d, r8d
lea rdx, [rsp + 0x71b0]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x7588], rax
mov rax, qword [rsp + 0x7588]
mov qword [rsp + 0x7590], rax
mov eax, dword [rsp + 0x7468]
or eax, 1
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246ed8]
mov rcx, qword [rsp + 0x7590]
call fcn.140006cf0
movzx eax, al
test eax, eax
jne 0x1401a71fb
xor r8d, r8d
lea rdx, [rsp + 0x71b8]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x7598], rax
mov eax, dword [rsp + 0x7468]
or eax, 2
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246ef8]
mov rcx, qword [rsp + 0x7598]
call fcn.140006cf0
movzx eax, al
test eax, eax
jne 0x1401a71fb
mov dword [rsp + 0x75a0], 0
jmp 0x1401a7206
mov dword [rsp + 0x75a0], 1
movzx eax, byte [rsp + 0x75a0]
mov byte [rsp + 0x71a8], al
mov eax, dword [rsp + 0x7468]
and eax, 2
test eax, eax
je 0x1401a7239
and dword [rsp + 0x7468], 0xfffffffd
lea rcx, [rsp + 0x71b8]
call fcn.140001470
nop
mov eax, dword [rsp + 0x7468]
and eax, 1
test eax, eax
je 0x1401a725c
and dword [rsp + 0x7468], 0xfffffffe
lea rcx, [rsp + 0x71b0]
call fcn.140001470
movzx eax, byte [rsp + 0x71a8]
test eax, eax
je 0x1401a736b
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x4e0], eax
cmp dword [rsp + 0x4e0], 0
jge 0x1401a72a1
jmp case.0x1401a6668.32801
mov r8d, 0xffffffff
mov edx, 0x144
mov ecx, 0x76
call fcn.1400f0ec0
cmp eax, 6
jne 0x1401a736b
cmp dword [rsp + 0x4e0], 0
jl 0x1401a736b
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x4e0]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x4e0]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x4e0]
call fcn.14000f050
mov dword [rsp + 0x4e0], eax
jmp 0x1401a72bf
xor eax, eax
jmp 0x1401ac6c3
xor r8d, r8d
lea rdx, [rsp + 0x71c8]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x75a8], rax
mov rax, qword [rsp + 0x75a8]
mov qword [rsp + 0x75b0], rax
mov eax, dword [rsp + 0x7468]
or eax, 4
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246f20]
mov rcx, qword [rsp + 0x75b0]
call fcn.140006cf0
movzx eax, al
test eax, eax
jne 0x1401a7427
xor r8d, r8d
lea rdx, [rsp + 0x71d0]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x75b8], rax
mov eax, dword [rsp + 0x7468]
or eax, 8
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246f40]
mov rcx, qword [rsp + 0x75b8]
call fcn.140006cf0
movzx eax, al
test eax, eax
jne 0x1401a7427
mov dword [rsp + 0x75c0], 0
jmp 0x1401a7432
mov dword [rsp + 0x75c0], 1
movzx eax, byte [rsp + 0x75c0]
mov byte [rsp + 0x71c0], al
mov eax, dword [rsp + 0x7468]
and eax, 8
test eax, eax
je 0x1401a7465
and dword [rsp + 0x7468], 0xfffffff7
lea rcx, [rsp + 0x71d0]
call fcn.140001470
nop
mov eax, dword [rsp + 0x7468]
and eax, 4
test eax, eax
je 0x1401a7488
and dword [rsp + 0x7468], 0xfffffffb
lea rcx, [rsp + 0x71c8]
call fcn.140001470
movzx eax, byte [rsp + 0x71c0]
test eax, eax
je 0x1401a7555
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x4e4], eax
cmp dword [rsp + 0x4e4], 0
jge 0x1401a74cd
jmp case.0x1401a6668.32801
mov r8d, 0xffffffff
mov edx, 0x144
mov ecx, 0x77
call fcn.1400f0ec0
cmp eax, 6
jne 0x1401a7555
cmp dword [rsp + 0x4e4], 0
jl 0x1401a7555
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x4e4]
call fcn.1400824e8
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x4e4]
call fcn.14000f050
mov dword [rsp + 0x4e4], eax
jmp 0x1401a74e7
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
call fcn.14019af00
xor eax, eax
jmp 0x1401ac6c3
xor r8d, r8d
lea rdx, [rsp + 0x71e0]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x75c8], rax
mov rax, qword [rsp + 0x75c8]
mov qword [rsp + 0x75d0], rax
mov eax, dword [rsp + 0x7468]
or eax, 0x10
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246f68]
mov rcx, qword [rsp + 0x75d0]
call fcn.140006cf0
movzx eax, al
test eax, eax
jne 0x1401a7625
xor r8d, r8d
lea rdx, [rsp + 0x71e8]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x75d8], rax
mov eax, dword [rsp + 0x7468]
or eax, 0x20
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246f88]
mov rcx, qword [rsp + 0x75d8]
call fcn.140006cf0
movzx eax, al
test eax, eax
jne 0x1401a7625
mov dword [rsp + 0x75e0], 0
jmp 0x1401a7630
mov dword [rsp + 0x75e0], 1
movzx eax, byte [rsp + 0x75e0]
mov byte [rsp + 0x71d8], al
mov eax, dword [rsp + 0x7468]
and eax, 0x20
test eax, eax
je 0x1401a7663
and dword [rsp + 0x7468], 0xffffffdf
lea rcx, [rsp + 0x71e8]
call fcn.140001470
nop
mov eax, dword [rsp + 0x7468]
and eax, 0x10
test eax, eax
je 0x1401a7686
and dword [rsp + 0x7468], 0xffffffef
lea rcx, [rsp + 0x71e0]
call fcn.140001470
movzx eax, byte [rsp + 0x71d8]
test eax, eax
je 0x1401a7a41
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x518], eax
cmp dword [rsp + 0x518], 0
jge 0x1401a76cd
xor eax, eax
jmp 0x1401ac6c3
lea rcx, [rsp + 0x520]
call fcn.1401cd320
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x518]
call fcn.1400824e8
mov dword [rsp + 0x6b8], eax
lea rcx, [rsp + 0x520]
call fcn.1401d1f50
mov r11d, dword [rsp + 0x6b8]
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov dword [rsp + 0x860], eax
cmp dword [rsp + 0x860], 0
jne 0x1401a7763
mov dword [rsp + 0x71f0], 0
lea rcx, [rsp + 0x520]
call fcn.140005d50
mov eax, dword [rsp + 0x71f0]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x8a8]
call fcn.140002d50
nop
mov r8d, dword [rsp + 0x860]
lea rdx, [0x140246fb0]
lea rcx, [rsp + 0x8a8]
call fcn.140002be0
lea rcx, [rsp + 0x8a8]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x8a0], rax
lea rcx, [rsp + 0x4e8]
call fcn.140076030
nop
lea r8, [rsp + 0x6c0]
lea rdx, [rsp + 0x8a8]
lea rcx, [rsp + 0x71f8]
call fcn.140006b70
mov qword [rsp + 0x75e8], rax
mov rax, qword [rsp + 0x75e8]
mov qword [rsp + 0x75f0], rax
lea r8, [0x140246fc0]
mov rdx, qword [rsp + 0x75f0]
lea rcx, [rsp + 0x7200]
call fcn.1400010b0
mov qword [rsp + 0x75f8], rax
mov rax, qword [rsp + 0x75f8]
mov qword [rsp + 0x7600], rax
mov rcx, qword [rsp + 0x7600]
call fcn.1400012c0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x4e8]
call fcn.140076134
mov dword [rsp + 0x898], eax
lea rcx, [rsp + 0x7200]
call fcn.140001470
nop
lea rcx, [rsp + 0x71f8]
call fcn.140001470
lea rcx, [rsp + 0x868]
call fcn.14001e700
nop
cmp dword [rsp + 0x898], 0
je 0x1401a7907
lea rcx, [rsp + 0x4e8]
call fcn.140075d3c
mov dword [rsp + 0x898], eax
lea rdx, [rsp + 0x7210]
lea rcx, [rsp + 0x4e8]
call fcn.140076588
mov qword [rsp + 0x7608], rax
mov rax, qword [rsp + 0x7608]
mov qword [rsp + 0x7610], rax
mov rcx, qword [rsp + 0x7610]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x7208], rax
lea rdx, [rsp + 0x7208]
lea rcx, [rsp + 0x868]
call fcn.1400227b0
nop
lea rcx, [rsp + 0x7210]
call fcn.140001470
jmp 0x1401a7872
lea rcx, [rsp + 0x868]
call fcn.140007db0
test rax, rax
je 0x1401a7950
xor edx, edx
lea rcx, [rsp + 0x868]
call fcn.14001e980
mov rbx, rax
lea rcx, [rsp + 0x868]
call fcn.140007db0
xor r9d, r9d
mov r8, rbx
mov edx, eax
mov rcx, qword [rsp + 0x8a0]
call qword [sym.imp.SHELL32.dll_SHOpenFolderAndSelectItems]
jmp 0x1401a797e
lea rcx, [rsp + 0x8a8]
call fcn.1400012c0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp qword [rsp + 0x8a0], 0
je 0x1401a7997
mov rcx, qword [rsp + 0x8a0]
call qword [sym.imp.SHELL32.dll_ILFree]
mov dword [rsp + 0x8b0], 0
jmp 0x1401a79b5
mov eax, dword [rsp + 0x8b0]
add eax, 1
mov dword [rsp + 0x8b0], eax
movsxd rbx, dword [rsp + 0x8b0]
lea rcx, [rsp + 0x868]
call fcn.140007db0
cmp rbx, rax
jae 0x1401a7a0a
movsxd rdx, dword [rsp + 0x8b0]
lea rcx, [rsp + 0x868]
call fcn.14001e980
cmp qword [rax], 0
je 0x1401a7a08
movsxd rdx, dword [rsp + 0x8b0]
lea rcx, [rsp + 0x868]
call fcn.14001e980
mov rcx, qword [rax]
call qword [sym.imp.SHELL32.dll_ILFree]
jmp 0x1401a79a4
lea rcx, [rsp + 0x868]
call fcn.14001e750
nop
lea rcx, [rsp + 0x4e8]
call fcn.14007608c
nop
lea rcx, [rsp + 0x8a8]
call fcn.140001470
nop
lea rcx, [rsp + 0x520]
call fcn.140005d50
xor eax, eax
jmp 0x1401ac6c3
mov rdx, qword [rsp + 0x7880]
lea rcx, [rsp + 0x8c0]
call fcn.1401650c0
nop
mov dword [rsp + 0xf50], 0
xor r8d, r8d
lea rdx, [rsp + 0x7220]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x7618], rax
lea rdx, [0x140246fd0]
mov rcx, qword [rsp + 0x7618]
call fcn.140006cf0
mov byte [rsp + 0x7218], al
lea rcx, [rsp + 0x7220]
call fcn.140001470
movzx r11d, byte [rsp + 0x7218]
test r11d, r11d
je 0x1401a7ad5
xor edx, edx
mov rcx, qword [rsp + 0x7880]
call fcn.14018b520
mov dword [rsp + 0xfd8], eax
lea rcx, [rsp + 0x8c0]
call fcn.1400819f8
cmp rax, 1
jne 0x1401a7c59
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000f500
mov dword [rsp + 0x1020], eax
xor r8d, r8d
lea rdx, [rsp + 0x7230]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x7620], rax
lea rdx, [0x140246ff8]
mov rcx, qword [rsp + 0x7620]
call fcn.140006cf0
mov byte [rsp + 0x7228], al
lea rcx, [rsp + 0x7230]
call fcn.140001470
movzx r11d, byte [rsp + 0x7228]
test r11d, r11d
je 0x1401a7c2c
xor edx, edx
mov rcx, qword [rsp + 0x7880]
call fcn.14018b520
mov edx, eax
lea rcx, [rsp + 0x1030]
call fcn.1401cd710
nop
mov eax, dword [rsp + 0xf54]
mov dword [rsp + 0x11c8], eax
lea rcx, [rsp + 0x1030]
call fcn.1401cedc0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000f500
mov rdx, qword [rsp + 0x7880]
add rdx, 0xdc8
mov r9d, dword [rsp + 0xf54]
mov r8d, eax
mov rcx, qword [rsp + 0x7880]
call fcn.1401a6370
mov ebx, dword [rsp + 0x11c8]
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000f500
mov edx, eax
sub edx, 1
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8, rbx
call fcn.14000ee90
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
nop
lea rcx, [rsp + 0x1030]
call fcn.140015760
jmp 0x1401a7c59
mov rdx, qword [rsp + 0x7880]
add rdx, 0xdc8
mov r9d, dword [rsp + 0xf54]
mov r8d, dword [rsp + 0x1020]
mov rcx, qword [rsp + 0x7880]
call fcn.1401a6370
nop
lea rcx, [rsp + 0x8c0]
call fcn.140164d60
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x1370], eax
cmp dword [rsp + 0x1370], 0
jge 0x1401a7ca2
jmp case.0x1401a6668.32801
lea rcx, [rsp + 0x1378]
call fcn.140002d50
nop
cmp dword [rsp + 0x1370], 0
jl 0x1401a7dab
mov dword [rsp + 0x1380], 0
jmp 0x1401a7cdc
mov eax, dword [rsp + 0x1380]
add eax, 1
mov dword [rsp + 0x1380], eax
cmp dword [rsp + 0x1380], 0x1c
jge 0x1401a7d6a
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, dword [rsp + 0x1380]
mov r8d, dword [rsp + 0x1370]
lea rdx, [rsp + 0x7238]
call fcn.14008323c
mov qword [rsp + 0x7628], rax
mov rax, qword [rsp + 0x7628]
mov qword [rsp + 0x7630], rax
mov rdx, qword [rsp + 0x7630]
lea rcx, [rsp + 0x1378]
call fcn.140005f70
nop
lea rcx, [rsp + 0x7238]
call fcn.140001470
lea rdx, [0x14024539c]
lea rcx, [rsp + 0x1378]
call fcn.140005fa0
jmp 0x1401a7ccb
lea rdx, [0x140247020]
lea rcx, [rsp + 0x1378]
call fcn.140005fa0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x1370]
call fcn.14000f050
mov dword [rsp + 0x1370], eax
jmp 0x1401a7cb0
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x1401a7e59
call qword [sym.imp.USER32.dll_EmptyClipboard]
lea rcx, [rsp + 0x1378]
call fcn.1400019f0
add eax, 1
movsxd rdx, eax
shl rdx, 1
mov ecx, 0x2000
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [rsp + 0x1388], rax
mov rcx, qword [rsp + 0x1388]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov qword [rsp + 0x1390], rax
lea rcx, [rsp + 0x1378]
call fcn.1400012c0
mov rdx, rax
mov rcx, qword [rsp + 0x1390]
call fcn.1400a9460
mov rcx, qword [rsp + 0x1388]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rdx, qword [rsp + 0x1388]
mov ecx, reloc.WS2_32.dll_listen
call qword [sym.imp.USER32.dll_SetClipboardData]
call qword [sym.imp.USER32.dll_CloseClipboard]
xor r8d, r8d
mov edx, 0x40
lea rcx, str.The_client_information_is_already_copied_to_the_clipboard.
call fcn.1400ef150
nop
lea rcx, [rsp + 0x1378]
call fcn.140001470
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x1398], eax
cmp dword [rsp + 0x1398], 0
jge 0x1401a7ea4
xor eax, eax
jmp 0x1401ac6c3
lea rcx, [rsp + 0x13a0]
call fcn.140081e00
nop
xor r8d, r8d
lea rdx, [rsp + 0x7248]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x7638], rax
lea rdx, [0x1402470a8]
mov rcx, qword [rsp + 0x7638]
call fcn.140006cf0
mov byte [rsp + 0x7240], al
lea rcx, [rsp + 0x7248]
call fcn.140001470
movzx r11d, byte [rsp + 0x7240]
test r11d, r11d
je 0x1401a80c1
mov rdx, qword [rsp + 0x7880]
lea rcx, [rsp + 0x13d0]
call fcn.1401650c0
nop
mov dword [rsp + 0x1a60], 1
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x1398]
call fcn.1400824e8
mov dword [rsp + 0x1a64], eax
cmp dword [rsp + 0x1398], 0
jl 0x1401a7fc1
mov edx, dword [rsp + 0x1398]
lea rcx, [rsp + 0x13a0]
call fcn.14000f530
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x1398]
call fcn.1400824e8
mov edx, eax
lea rcx, [rsp + 0x1ab8]
call fcn.14000f530
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x1398]
call fcn.14000f050
mov dword [rsp + 0x1398], eax
jmp 0x1401a7f4f
lea rcx, [rsp + 0x13d0]
call fcn.1400819f8
cmp rax, 1
jne 0x1401a80b4
mov qword [rsp + 0x1b30], 0
jmp 0x1401a7ffa
mov rax, qword [rsp + 0x1b30]
add rax, 1
mov qword [rsp + 0x1b30], rax
lea rcx, [rsp + 0x13a0]
call fcn.14000f920
cmp qword [rsp + 0x1b30], rax
jge 0x1401a80b4
cmp dword [rsp + 0x1ae8], 0xffffffff
jne 0x1401a8060
lea rcx, [rsp + 0x13a0]
call fcn.14000f920
mov rdx, rax
sub rdx, 1
sub rdx, qword [rsp + 0x1b30]
lea rcx, [rsp + 0x13a0]
call fcn.14000f810
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.14000ef80
jmp 0x1401a7fe6
mov rdx, qword [rsp + 0x1b30]
lea rcx, [rsp + 0x1ab8]
call fcn.14000f810
mov rbx, rax
mov rdx, qword [rsp + 0x1b30]
lea rcx, [rsp + 0x13a0]
call fcn.14000f810
mov rdx, qword [rsp + 0x7880]
add rdx, 0xdc8
mov r9d, dword [rbx]
mov r8d, dword [rax]
mov rcx, qword [rsp + 0x7880]
call fcn.1401a6370
jmp 0x1401a7fe6
lea rcx, [rsp + 0x13d0]
call fcn.140164d60
xor r8d, r8d
lea rdx, [rsp + 0x7258]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x7640], rax
lea rdx, [0x1402470c8]
mov rcx, qword [rsp + 0x7640]
call fcn.140006cf0
mov byte [rsp + 0x7250], al
lea rcx, [rsp + 0x7258]
call fcn.140001470
movzx r11d, byte [rsp + 0x7250]
test r11d, r11d
je 0x1401a83ed
xor edx, edx
mov rcx, qword [rsp + 0x7880]
call fcn.14018b520
mov edx, eax
lea rcx, [rsp + 0x1b40]
call fcn.1401cd710
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x1398]
call fcn.1400824e8
mov dword [rsp + 0x1cd8], eax
lea rcx, [rsp + 0x1b40]
call fcn.1401d1f50
mov rdx, qword [rsp + 0x7880]
lea rcx, [rsp + 0x1e80]
call fcn.1401650c0
nop
mov dword [rsp + 0x2510], 1
mov eax, dword [rsp + 0x1cd8]
mov dword [rsp + 0x2514], eax
cmp dword [rsp + 0x1398], 0
jl 0x1401a822a
mov edx, dword [rsp + 0x1398]
lea rcx, [rsp + 0x13a0]
call fcn.14000f530
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x1398]
call fcn.1400824e8
mov dword [rsp + 0x1cd8], eax
lea rcx, [rsp + 0x1b40]
call fcn.1401d1f50
mov edx, dword [rsp + 0x1cd8]
lea rcx, [rsp + 0x2568]
call fcn.14000f530
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x1398]
call fcn.14000f050
mov dword [rsp + 0x1398], eax
jmp 0x1401a8198
lea rcx, [rsp + 0x1e80]
call fcn.1400819f8
cmp rax, 1
jne 0x1401a83d1
xor edx, edx
mov rcx, qword [rsp + 0x7880]
call fcn.14018b520
cmp dword [rsp + 0x2598], eax
jne 0x1401a8357
mov qword [rsp + 0x25e0], 0
jmp 0x1401a827f
mov rax, qword [rsp + 0x25e0]
add rax, 1
mov qword [rsp + 0x25e0], rax
lea rcx, [rsp + 0x13a0]
call fcn.14000f920
cmp qword [rsp + 0x25e0], rax
jge 0x1401a8355
mov rdx, qword [rsp + 0x25e0]
lea rcx, [rsp + 0x13a0]
call fcn.14000f810
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.1400824e8
mov dword [rsp + 0x25e8], eax
mov rdx, qword [rsp + 0x25e0]
lea rcx, [rsp + 0x2568]
call fcn.14000f810
mov rbx, rax
mov rdx, qword [rsp + 0x25e0]
lea rcx, [rsp + 0x13a0]
call fcn.14000f810
mov rdx, qword [rsp + 0x7880]
add rdx, 0xdc8
mov r9d, dword [rbx]
mov r8d, dword [rax]
mov rcx, qword [rsp + 0x7880]
call fcn.1401a6370
mov ebx, dword [rsp + 0x25e8]
mov rdx, qword [rsp + 0x25e0]
lea rcx, [rsp + 0x13a0]
call fcn.14000f810
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8, rbx
mov edx, dword [rax]
call fcn.14000ee90
jmp 0x1401a826b
jmp 0x1401a83d1
mov qword [rsp + 0x25f0], 0
jmp 0x1401a8379
mov rax, qword [rsp + 0x25f0]
add rax, 1
mov qword [rsp + 0x25f0], rax
lea rcx, [rsp + 0x13a0]
call fcn.14000f920
cmp qword [rsp + 0x25f0], rax
jge 0x1401a83d1
lea rcx, [rsp + 0x13a0]
call fcn.14000f920
mov rdx, rax
sub rdx, 1
sub rdx, qword [rsp + 0x25f0]
lea rcx, [rsp + 0x13a0]
call fcn.14000f810
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.14000ef80
jmp 0x1401a8365
lea rcx, [rsp + 0x1e80]
call fcn.140164d60
nop
lea rcx, [rsp + 0x1b40]
call fcn.140015760
nop
lea rcx, [rsp + 0x13a0]
call fcn.140081e20
xor eax, eax
jmp 0x1401ac6c3
xor r8d, r8d
lea rdx, [rsp + 0x7268]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x7648], rax
mov rax, qword [rsp + 0x7648]
mov qword [rsp + 0x7650], rax
mov eax, dword [rsp + 0x7468]
or eax, 0x40
mov dword [rsp + 0x7468], eax
lea rdx, [0x1402470f0]
mov rcx, qword [rsp + 0x7650]
call fcn.140006d30
movzx eax, al
test eax, eax
je 0x1401a84b8
xor r8d, r8d
lea rdx, [rsp + 0x7270]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d6e0
mov qword [rsp + 0x7658], rax
mov eax, dword [rsp + 0x7468]
or eax, 0x80
mov dword [rsp + 0x7468], eax
lea rdx, [0x140247110]
mov rcx, qword [rsp + 0x7658]
call fcn.140006d30
movzx eax, al
test eax, eax
je 0x1401a84b8
mov dword [rsp + 0x7660], 1
jmp 0x1401a84c3
mov dword [rsp + 0x7660], 0
movzx eax, byte [rsp + 0x7660]
mov byte [rsp + 0x7260], al
mov eax, dword [rsp + 0x7468]
and eax, 0x80
test eax, eax
je 0x1401a84fb
and dword [rsp + 0x7468], 0xffffff7f
lea rcx, [rsp + 0x7270]
call fcn.140001470
nop
mov eax, dword [rsp + 0x7468]
and eax, 0x40
test eax, eax
je 0x1401a851e
and dword [rsp + 0x7468], 0xffffffbf
lea rcx, [rsp + 0x7268]
call fcn.140001470
movzx eax, byte [rsp + 0x7260]
test eax, eax
je 0x1401a852f
jmp case.0x1401a6668.32801
lea rcx, [rsp + 0x2600]
call fcn.140081e00
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x25f8], eax
cmp dword [rsp + 0x25f8], 0
jl 0x1401a8641
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f0ec0
cmp eax, 6
jne 0x1401a8641
cmp dword [rsp + 0x25f8], 0
jl 0x1401a8641
lea rcx, [rsp + 0x2630]
call fcn.1401cd320
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x25f8]
call fcn.1400824e8
mov dword [rsp + 0x27c8], eax
mov edx, dword [rsp + 0x27c8]
lea rcx, [rsp + 0x2600]
call fcn.14000f530
lea rcx, [rsp + 0x2630]
call fcn.1401b8640
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x25f8]
call fcn.14000ef80
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x25f8], eax
lea rcx, [rsp + 0x2630]
call fcn.140005d50
jmp 0x1401a858f
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov dword [rsp + 0x2970], 0
jmp 0x1401a866e
mov eax, dword [rsp + 0x2970]
add eax, 1
mov dword [rsp + 0x2970], eax
movsxd rbx, dword [rsp + 0x2970]
lea rcx, [rsp + 0x2600]
call fcn.14000f920
cmp rbx, rax
jge 0x1401a86bd
movsxd rdx, dword [rsp + 0x2970]
lea rcx, [rsp + 0x2600]
call fcn.14000f810
mov eax, dword [rax]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x803c
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
jmp 0x1401a865d
lea rcx, [rsp + 0x2600]
call fcn.140081e20
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000ee60
mov dword [rsp + 0x2974], eax
cmp dword [rsp + 0x2974], 1
je 0x1401a86fd
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x2cc0], eax
lea rcx, [rsp + 0x2cd0]
call fcn.1401cd320
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x2cc0]
call fcn.1400824e8
mov dword [rsp + 0x2e68], eax
lea rcx, [rsp + 0x2cd0]
call fcn.1401d1f50
lea rcx, [rsp + 0x2ed0]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
test eax, eax
je 0x1401a87b1
xor r8d, r8d
mov edx, 0x40
lea rcx, str.The_client_keeps_write_back_file__cannot_be_super_client.
call fcn.1400ef150
mov dword [rsp + 0x7278], 0
lea rcx, [rsp + 0x2cd0]
call fcn.140005d50
mov eax, dword [rsp + 0x7278]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x3300]
call fcn.140081e00
nop
mov edx, dword [rsp + 0x2e68]
lea rcx, [rsp + 0x2980]
call fcn.14000edf0
nop
lea rcx, [rsp + 0x3328]
call fcn.140007bb0
nop
lea rdx, [rsp + 0x3328]
lea rcx, [rsp + 0x2980]
call fcn.1401b8110
mov dword [rsp + 0x3358], 0
jmp 0x1401a8815
mov eax, dword [rsp + 0x3358]
add eax, 1
mov dword [rsp + 0x3358], eax
movsxd rbx, dword [rsp + 0x3358]
lea rcx, [rsp + 0x3328]
call fcn.140007c30
cmp rbx, rax
jae 0x1401a886c
movsxd rdx, dword [rsp + 0x3358]
lea rcx, [rsp + 0x3328]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a0
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edx, eax
lea rcx, [rsp + 0x3300]
call fcn.14000f530
jmp 0x1401a8804
xor edx, edx
lea rcx, [rsp + 0x3010]
call fcn.140159660
nop
lea rdx, [rsp + 0x3300]
lea rcx, [rsp + 0x32c8]
call fcn.140081fd8
mov r11d, dword [rsp + 0x2e68]
mov dword [rsp + 0x32f0], r11d
lea rcx, [rsp + 0x3010]
call fcn.1400819f8
cmp rax, 1
je 0x1401a8910
mov dword [rsp + 0x727c], 0
lea rcx, [rsp + 0x3010]
call fcn.140159600
nop
lea rcx, [rsp + 0x3328]
call fcn.140007c00
nop
lea rcx, [rsp + 0x2980]
call fcn.140005d50
nop
lea rcx, [rsp + 0x3300]
call fcn.140081e20
nop
lea rcx, [rsp + 0x2cd0]
call fcn.140005d50
mov eax, dword [rsp + 0x727c]
jmp 0x1401ac6c3
mov dword [rsp + 0x335c], 0
jmp 0x1401a892e
mov eax, dword [rsp + 0x335c]
add eax, 1
mov dword [rsp + 0x335c], eax
movsxd rbx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.14000f920
cmp rbx, rax
jge 0x1401a8ad9
movsxd rdx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x3368]
call fcn.1401ce4f0
nop
movsxd rdx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.14000f810
mov rbx, rax
lea rcx, [rsp + 0x2ec0]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
cmp dword [rbx], eax
jne 0x1401a8a52
movsxd rdx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.14000f810
cmp dword [rax], 0
je 0x1401a8a52
movsxd rdx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x3370]
call fcn.14000eef0
nop
lea rax, [rsp + 0x7280]
mov qword [rsp + 0x7288], rax
lea rdx, [rsp + 0x2f78]
mov rcx, qword [rsp + 0x7288]
call fcn.140001440
mov qword [rsp + 0x7668], rax
mov rdx, qword [rsp + 0x7668]
lea rcx, [rsp + 0x3370]
call fcn.1401ce9f0
test eax, eax
je 0x1401a8a45
lea rdx, [rsp + 0x3518]
lea rcx, [rsp + 0x3368]
call fcn.140002d20
nop
lea rcx, [rsp + 0x3370]
call fcn.140005d50
lea rcx, [rsp + 0x3368]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a8a78
lea rcx, [rsp + 0x3368]
call fcn.140001470
jmp 0x1401a891d
lea rcx, [rsp + 0x3360]
call fcn.140002d50
nop
mov r8, qword [rsp + 0x3368]
lea rdx, [0x1402471b8]
lea rcx, [rsp + 0x3360]
call fcn.140002be0
lea rcx, [rsp + 0x3360]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x3360]
call fcn.140001470
nop
lea rcx, [rsp + 0x3368]
call fcn.140001470
jmp 0x1401a891d
lea rdx, [rsp + 0x32c8]
lea rcx, [rsp + 0x3300]
call fcn.140081fd8
lea rcx, [rsp + 0x2980]
call fcn.1401b8530
mov dword [rsp + 0x36b0], 0
jmp 0x1401a8b19
mov eax, dword [rsp + 0x36b0]
add eax, 1
mov dword [rsp + 0x36b0], eax
movsxd rbx, dword [rsp + 0x36b0]
lea rcx, [rsp + 0x3300]
call fcn.14000f920
cmp rbx, rax
jge 0x1401a8b6e
movsxd rdx, dword [rsp + 0x36b0]
lea rcx, [rsp + 0x3300]
call fcn.14000f810
lea rcx, [rsp + 0x2b20]
mov r8d, dword [rax]
lea rdx, [0x140247138]
call fcn.140002be0
lea rcx, [rsp + 0x2980]
call fcn.14000ec70
jmp 0x1401a8b08
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov r9d, dword [rsp + 0x2e68]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000fe50
mov r11d, dword [rsp + 0x2e68]
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov r11d, dword [rsp + 0x2e68]
mov qword [rsp + 0x20], r11
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x1402471d8]
call fcn.1400ef150
nop
lea rcx, [rsp + 0x3010]
call fcn.140159600
nop
lea rcx, [rsp + 0x3328]
call fcn.140007c00
nop
lea rcx, [rsp + 0x2980]
call fcn.140005d50
nop
lea rcx, [rsp + 0x3300]
call fcn.140081e20
nop
lea rcx, [rsp + 0x2cd0]
call fcn.140005d50
xor eax, eax
jmp 0x1401ac6c3
mov rax, qword [rsp + 0x7880]
cmp dword [rax + 0x978], 0
je 0x1401a8c5e
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000ee60
mov dword [rsp + 0x36b4], eax
cmp dword [rsp + 0x36b4], 1
je 0x1401a8c8a
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x3a00], eax
lea rcx, [rsp + 0x3a10]
call fcn.1401cd320
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x3a00]
call fcn.1400824e8
mov dword [rsp + 0x3ba8], eax
lea rcx, [rsp + 0x3a10]
call fcn.1401d1f50
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x1402453b4]
call fcn.140002060
lea rcx, [rsp + 0x3a10]
call fcn.1401cfa40
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000fe50
lea rcx, [rsp + 0x4090]
call fcn.140081e00
nop
mov edx, dword [rsp + 0x3ba8]
lea rcx, [rsp + 0x36c0]
call fcn.14000edf0
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007bb0
nop
lea rdx, [rsp + 0x40b8]
lea rcx, [rsp + 0x36c0]
call fcn.1401b8110
mov dword [rsp + 0x40e8], 0
jmp 0x1401a8d9e
mov eax, dword [rsp + 0x40e8]
add eax, 1
mov dword [rsp + 0x40e8], eax
movsxd rbx, dword [rsp + 0x40e8]
lea rcx, [rsp + 0x40b8]
call fcn.140007c30
cmp rbx, rax
jae 0x1401a8df5
movsxd rdx, dword [rsp + 0x40e8]
lea rcx, [rsp + 0x40b8]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a0
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edx, eax
lea rcx, [rsp + 0x4090]
call fcn.14000f530
jmp 0x1401a8d8d
lea rcx, [rsp + 0x40b8]
call fcn.140007c30
test rax, rax
jne 0x1401a8e43
lea rcx, [rsp + 0x3c98]
lea rdx, [0x1402453cc]
call fcn.140006cf0
movzx eax, al
test eax, eax
je 0x1401a8e43
lea rcx, [rsp + 0x3c98]
lea rdx, [0x1402454e4]
call fcn.140002060
lea rcx, [rsp + 0x3a10]
call fcn.1401cfa40
mov eax, dword [rsp + 0x3ba8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov r11, qword [rsp + 0x7880]
mov dword [r11 + 0x978], 1
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Do_you_want_to_update_the_image_
call fcn.1400ef150
cmp eax, 7
jne 0x1401a91d6
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
mov dword [rsp + 0x4430], 0
jmp 0x1401a8ec6
mov eax, dword [rsp + 0x4430]
add eax, 1
mov dword [rsp + 0x4430], eax
movsxd rbx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.14000f920
cmp rbx, rax
jge 0x1401a90d6
movsxd rdx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x4438]
call fcn.1401ce4f0
nop
movsxd rdx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.14000f810
mov rbx, rax
lea rcx, [rsp + 0x3c00]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
cmp dword [rbx], eax
jne 0x1401a8fea
movsxd rdx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.14000f810
cmp dword [rax], 0
je 0x1401a8fea
movsxd rdx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x4440]
call fcn.14000eef0
nop
lea rax, [rsp + 0x7290]
mov qword [rsp + 0x7298], rax
lea rdx, [rsp + 0x3cb8]
mov rcx, qword [rsp + 0x7298]
call fcn.140001440
mov qword [rsp + 0x7670], rax
mov rdx, qword [rsp + 0x7670]
lea rcx, [rsp + 0x4440]
call fcn.1401ce9f0
test eax, eax
je 0x1401a8fdd
lea rdx, [rsp + 0x45e8]
lea rcx, [rsp + 0x4438]
call fcn.140002d20
nop
lea rcx, [rsp + 0x4440]
call fcn.140005d50
lea r8, [0x140247228]
lea rdx, [rsp + 0x4438]
lea rcx, [rsp + 0x72a8]
call fcn.1400010b0
mov qword [rsp + 0x7678], rax
mov rcx, qword [rsp + 0x7678]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401a9035
mov dword [rsp + 0x7680], 1
jmp 0x1401a9040
mov dword [rsp + 0x7680], 0
movzx eax, byte [rsp + 0x7680]
mov byte [rsp + 0x72a0], al
lea rcx, [rsp + 0x72a8]
call fcn.140001470
movzx r11d, byte [rsp + 0x72a0]
test r11d, r11d
je 0x1401a907c
lea rcx, [rsp + 0x4438]
call fcn.140001470
jmp 0x1401a8eb5
lea r8, [0x140247240]
lea rdx, [rsp + 0x4438]
lea rcx, [rsp + 0x72b0]
call fcn.1400010b0
mov qword [rsp + 0x7688], rax
mov rcx, qword [rsp + 0x7688]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x72b0]
call fcn.140001470
nop
lea rcx, [rsp + 0x4438]
call fcn.140001470
jmp 0x1401a8eb5
lea rcx, [rsp + 0x4090]
call fcn.14000ec40
mov edx, dword [rsp + 0x3ba8]
lea rcx, [rsp + 0x40f0]
call fcn.14000edf0
nop
lea rcx, [rsp + 0x40f0]
call fcn.1401b8530
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x140245504]
call fcn.140002060
lea rcx, [rsp + 0x3c98]
lea rdx, [0x14024551c]
call fcn.140002060
lea rcx, [rsp + 0x3a10]
call fcn.1401cfa40
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000fe50
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140247258]
call fcn.1400ef150
mov dword [rsp + 0x72b8], 0
lea rcx, [rsp + 0x40f0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007c00
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x4090]
call fcn.140081e20
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005d50
mov eax, dword [rsp + 0x72b8]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x4090]
call fcn.14000f920
mov dword [rsp + 0x36b4], eax
mov dword [rsp + 0x4780], 0
jmp 0x1401a9208
mov eax, dword [rsp + 0x4780]
add eax, 1
mov dword [rsp + 0x4780], eax
mov eax, dword [rsp + 0x36b4]
cmp dword [rsp + 0x4780], eax
jge 0x1401aa47a
lea rcx, [rsp + 0x47c0]
call fcn.140002d50
nop
mov dword [rsp + 0x4a20], 0
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x4a30]
call fcn.1401ce4f0
nop
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000f810
mov rbx, rax
lea rcx, [rsp + 0x3c00]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
cmp dword [rbx], eax
jne 0x1401a9332
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000f810
cmp dword [rax], 0
je 0x1401a9332
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x4d90]
call fcn.14000eef0
nop
lea rax, [rsp + 0x72c0]
mov qword [rsp + 0x72c8], rax
lea rdx, [rsp + 0x3cb8]
mov rcx, qword [rsp + 0x72c8]
call fcn.140001440
mov qword [rsp + 0x7690], rax
mov rdx, qword [rsp + 0x7690]
lea rcx, [rsp + 0x4d90]
call fcn.1401ce9f0
test eax, eax
je 0x1401a9325
lea rdx, [rsp + 0x4f38]
lea rcx, [rsp + 0x4a30]
call fcn.140002d20
mov r11d, dword [rsp + 0x4f28]
mov dword [rsp + 0x4a20], r11d
lea rcx, [rsp + 0x4d90]
call fcn.140005d50
lea rcx, [rsp + 0x4a30]
call fcn.1400012c0
mov rcx, rax
call fcn.1400f8fa0
mov dword [rsp + 0x4784], eax
lea rdx, [0x14024552c]
lea rcx, [rsp + 0x47c8]
call fcn.140002090
nop
lea rcx, [rsp + 0x4a40]
call fcn.14000fb00
nop
mov dword [rsp + 0x4bd8], 1
lea rcx, [rsp + 0x4a40]
call fcn.1401d0bc0
lea rdx, [rsp + 0x4be8]
lea rcx, [rsp + 0x47b8]
call fcn.140001440
nop
mov dword [rsp + 0x4d80], 0
cmp dword [rsp + 0x4d80], 0
jl 0x1401a9689
lea r9, [rsp + 0x4d80]
lea r8, [0x140245574]
lea rdx, [rsp + 0x50d8]
lea rcx, [rsp + 0x47b8]
call fcn.140006540
nop
lea rcx, [rsp + 0x50d8]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a9403
lea rcx, [rsp + 0x50d8]
call fcn.140001470
jmp 0x1401a9689
xor edx, edx
lea rcx, [rsp + 0x50d8]
call fcn.140006d70
movzx r8d, ax
lea rdx, [0x140247260]
lea rcx, [rsp + 0x50d8]
call fcn.140002be0
lea rcx, [rsp + 0x50d0]
call fcn.140002d50
nop
lea rcx, [rsp + 0x4a30]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x72d0]
call fcn.140105d90
mov qword [rsp + 0x7698], rax
mov rax, qword [rsp + 0x7698]
mov qword [rsp + 0x76a0], rax
lea rcx, [rsp + 0x4a30]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x72d8]
call fcn.1400f9840
mov qword [rsp + 0x76a8], rax
mov rax, qword [rsp + 0x76a8]
mov qword [rsp + 0x76b0], rax
mov rax, qword [rsp + 0x76a0]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x76b0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x3bb0]
mov r8, qword [rsp + 0x50d8]
lea rdx, [0x140247270]
lea rcx, [rsp + 0x50d0]
call fcn.140002be0
nop
lea rcx, [rsp + 0x72d8]
call fcn.140001470
nop
lea rcx, [rsp + 0x72d0]
call fcn.140001470
lea rcx, [rsp + 0x50d0]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401a9552
lea rdx, [rsp + 0x50d0]
lea rcx, [rsp + 0x47c8]
call fcn.140002d20
nop
lea rcx, [rsp + 0x50d0]
call fcn.140001470
nop
lea rcx, [rsp + 0x50d8]
call fcn.140001470
jmp 0x1401a9689
lea rcx, [rsp + 0x4a30]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x72e0]
call fcn.140105d90
mov qword [rsp + 0x76b8], rax
mov rax, qword [rsp + 0x76b8]
mov qword [rsp + 0x76c0], rax
lea rcx, [rsp + 0x4a30]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x72e8]
call fcn.1400f9840
mov qword [rsp + 0x76c8], rax
mov rax, qword [rsp + 0x76c8]
mov qword [rsp + 0x76d0], rax
mov rax, qword [rsp + 0x76c0]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x76d0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x3bc8]
mov r8, qword [rsp + 0x50d8]
lea rdx, [0x140247290]
lea rcx, [rsp + 0x50d0]
call fcn.140002be0
nop
lea rcx, [rsp + 0x72e8]
call fcn.140001470
nop
lea rcx, [rsp + 0x72e0]
call fcn.140001470
lea rcx, [rsp + 0x50d0]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401a9669
lea rdx, [rsp + 0x50d0]
lea rcx, [rsp + 0x47c8]
call fcn.140002d20
nop
lea rcx, [rsp + 0x50d0]
call fcn.140001470
nop
lea rcx, [rsp + 0x50d8]
call fcn.140001470
jmp 0x1401a9689
lea rcx, [rsp + 0x50d0]
call fcn.140001470
nop
lea rcx, [rsp + 0x50d8]
call fcn.140001470
jmp 0x1401a93aa
lea r8, [0x1402472b0]
lea rdx, [rsp + 0x4a30]
lea rcx, [rsp + 0x72f0]
call fcn.1400010b0
mov qword [rsp + 0x76d8], rax
mov rax, qword [rsp + 0x76d8]
mov qword [rsp + 0x76e0], rax
mov rdx, qword [rsp + 0x76e0]
lea rcx, [rsp + 0x47c0]
call fcn.140002d20
nop
lea rcx, [rsp + 0x72f0]
call fcn.140001470
lea rcx, [rsp + 0x47c0]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401a975a
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.140082094
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005d50
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001470
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001470
jmp 0x1401a91f7
lea rcx, [rsp + 0x4788]
call fcn.140076030
nop
lea rcx, [rsp + 0x47c0]
call fcn.1400012c0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x4788]
call fcn.140076134
lea rcx, [rsp + 0x4788]
call fcn.140075d3c
mov qword [rsp + 0x4a28], 0
mov qword [rsp + 0x4a10], 0
mov qword [rsp + 0x47d0], 0
lea rdx, [rsp + 0x7300]
lea rcx, [rsp + 0x4788]
call fcn.1400760d8
mov qword [rsp + 0x76e8], rax
mov rcx, qword [rsp + 0x76e8]
call fcn.1400012c0
lea r9, [rsp + 0x47d0]
lea r8, [rsp + 0x4a10]
lea rdx, [rsp + 0x4a28]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401a9815
mov dword [rsp + 0x76f0], 1
jmp 0x1401a9820
mov dword [rsp + 0x76f0], 0
movzx eax, byte [rsp + 0x76f0]
mov byte [rsp + 0x72f8], al
lea rcx, [rsp + 0x7300]
call fcn.140001470
movzx r11d, byte [rsp + 0x72f8]
test r11d, r11d
je 0x1401a9963
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x140245584]
call fcn.140002060
lea rcx, [rsp + 0x3a10]
call fcn.1401cfa40
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000fe50
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x1402472d0]
call fcn.1400ef150
mov dword [rsp + 0x7308], 0
lea rcx, [rsp + 0x4788]
call fcn.14007608c
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005d50
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001470
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001470
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007c00
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x4090]
call fcn.140081e20
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005d50
mov eax, dword [rsp + 0x7308]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x4788]
call fcn.140075d88
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401a9986
addsd xmm1, qword [0x14025b050]
mov rax, qword [rsp + 0x47d0]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401a99a4
addsd xmm0, qword [0x14025b050]
mulsd xmm0, qword [0x14025d228]
comisd xmm1, xmm0
jbe 0x1401a9acb
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x140245594]
call fcn.140002060
lea rcx, [rsp + 0x3a10]
call fcn.1401cfa40
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000fe50
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140247340]
call fcn.1400ef150
mov dword [rsp + 0x730c], 0
lea rcx, [rsp + 0x4788]
call fcn.14007608c
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005d50
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001470
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001470
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007c00
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x4090]
call fcn.140081e20
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005d50
mov eax, dword [rsp + 0x730c]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x4a18]
call fcn.140002d50
nop
mov edx, 0xc2
lea rcx, [rsp + 0x7310]
call fcn.1400efaa0
mov qword [rsp + 0x76f8], rax
mov rax, qword [rsp + 0x76f8]
mov qword [rsp + 0x7700], rax
mov rcx, qword [rsp + 0x7700]
call fcn.1400012c0
mov r8, qword [rsp + 0x4a30]
mov rdx, rax
lea rcx, [rsp + 0x4a18]
call fcn.140002be0
nop
lea rcx, [rsp + 0x7310]
call fcn.140001470
cmp dword [rsp + 0x4784], 3
je 0x1401a9b54
cmp dword [rsp + 0x4784], 4
je 0x1401a9b54
cmp dword [rsp + 0x4784], 5
jne 0x1401a9bd0
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.140082094
nop
lea rcx, [rsp + 0x4a18]
call fcn.140001470
nop
lea rcx, [rsp + 0x4788]
call fcn.14007608c
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005d50
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001470
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001470
jmp 0x1401a91f7
lea rcx, [rsp + 0x4a18]
call fcn.1400012c0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef150
cmp eax, 7
jne 0x1401a9eed
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x968], 0
je 0x1401a9c28
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401a9c72
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call fcn.14007c98c
xor edx, edx
mov rcx, rax
call fcn.14007c06c
mov edx, 5
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x47c0]
call fcn.1400012c0
mov r9, qword [rsp + 0x7880]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.140103260
test eax, eax
jne 0x1401a9e08
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401a9cd2
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x1402455b4]
call fcn.140002060
lea rcx, [rsp + 0x3a10]
call fcn.1401cfa40
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000fe50
mov r8, qword [rsp + 0x4a30]
lea rdx, [0x1402473b0]
xor ecx, ecx
call fcn.1400dc5d0
xor r8d, r8d
xor edx, edx
lea rcx, [0x140247400]
call fcn.1400ef150
mov dword [rsp + 0x7318], 0
lea rcx, [rsp + 0x4a18]
call fcn.140001470
nop
lea rcx, [rsp + 0x4788]
call fcn.14007608c
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005d50
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001470
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001470
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007c00
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x4090]
call fcn.140081e20
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005d50
mov eax, dword [rsp + 0x7318]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x47c0]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x47c8]
call fcn.140007b70
movzx eax, al
test eax, eax
jne 0x1401a9e48
lea rcx, [rsp + 0x47c8]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.140082094
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401a9e87
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rsp + 0x4a18]
call fcn.140001470
nop
lea rcx, [rsp + 0x4788]
call fcn.14007608c
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005d50
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001470
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001470
jmp 0x1401a91f7
xor edx, edx
lea rcx, [rsp + 0x47e0]
call fcn.14015a790
nop
lea rdx, [rsp + 0x4a30]
lea rcx, [rsp + 0x49f0]
call fcn.140002d20
lea rcx, [rsp + 0x7320]
call fcn.14000f6f0
lea r8, [0x140247410]
lea rdx, [rsp + 0x7328]
mov rcx, rax
call fcn.14000f090
mov qword [rsp + 0x7708], rax
mov rax, qword [rsp + 0x7708]
mov qword [rsp + 0x7710], rax
mov rdx, qword [rsp + 0x7710]
lea rcx, [rsp + 0x49f8]
call fcn.140002d20
nop
lea rcx, [rsp + 0x7328]
call fcn.140001470
lea rcx, [rsp + 0x47e0]
call fcn.1400819f8
cmp rax, 1
je 0x1401aa0a5
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x1402455cc]
call fcn.140002060
lea rcx, [rsp + 0x3a10]
call fcn.1401cfa40
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000fe50
mov dword [rsp + 0x7330], 0
lea rcx, [rsp + 0x47e0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x4a18]
call fcn.140001470
nop
lea rcx, [rsp + 0x4788]
call fcn.14007608c
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005d50
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001470
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001470
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007c00
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x4090]
call fcn.140081e20
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005d50
mov eax, dword [rsp + 0x7330]
jmp 0x1401ac6c3
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000f810
mov rbx, rax
lea rcx, [rsp + 0x49f0]
call fcn.1400012c0
mov r9d, dword [rsp + 0x4a20]
mov r8d, dword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x4a38]
call fcn.1400fff60
nop
cmp dword [rsp + 0x4a20], 0
je 0x1401aa1d9
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000f810
mov r8d, dword [rsp + 0x4a20]
mov edx, dword [rax]
lea rcx, [rsp + 0x50e0]
call fcn.1401cd160
nop
mov dx, 0x2e
lea rcx, [rsp + 0x4a38]
call fcn.140006840
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x7338]
lea rcx, [rsp + 0x4a38]
call fcn.1400069a0
mov qword [rsp + 0x7718], rax
mov rcx, qword [rsp + 0x7718]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x5420], eax
lea rcx, [rsp + 0x7338]
call fcn.140001470
lea rcx, [rsp + 0x5280]
mov r8d, dword [rsp + 0x5420]
lea rdx, [0x140247434]
call fcn.140002be0
lea rcx, [rsp + 0x5288]
lea rdx, [rsp + 0x4a00]
call fcn.140002d20
lea rcx, [rsp + 0x5290]
lea rdx, [rsp + 0x49f8]
call fcn.140002d20
lea rcx, [rsp + 0x50e0]
call fcn.1401b8b50
nop
lea rcx, [rsp + 0x50e0]
call fcn.140005d50
jmp 0x1401aa2b7
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x5430]
call fcn.1401cd210
nop
mov dx, 0x2e
lea rcx, [rsp + 0x4a38]
call fcn.140006840
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x7340]
lea rcx, [rsp + 0x4a38]
call fcn.1400069a0
mov qword [rsp + 0x7720], rax
mov rcx, qword [rsp + 0x7720]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x5770], eax
lea rcx, [rsp + 0x7340]
call fcn.140001470
lea rcx, [rsp + 0x55d0]
mov r8d, dword [rsp + 0x5770]
lea rdx, [0x14024743c]
call fcn.140002be0
lea rcx, [rsp + 0x55d8]
lea rdx, [rsp + 0x4a00]
call fcn.140002d20
lea rcx, [rsp + 0x55e0]
lea rdx, [rsp + 0x49f8]
call fcn.140002d20
lea rcx, [rsp + 0x5430]
call fcn.1401b8b50
nop
lea rcx, [rsp + 0x5430]
call fcn.140005d50
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x968], 0
je 0x1401aa2f8
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401aa342
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call fcn.14007c98c
xor edx, edx
mov rcx, rax
call fcn.14007c06c
mov edx, 5
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x4a38]
call fcn.1400012c0
mov rbx, rax
lea rcx, [rsp + 0x47c0]
call fcn.1400012c0
mov r8, qword [rsp + 0x7880]
mov r8, qword [r8 + 0x968]
mov rdx, rbx
mov rcx, rax
call fcn.140104b60
lea rcx, [rsp + 0x47c0]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x47c8]
call fcn.140007b70
movzx eax, al
test eax, eax
jne 0x1401aa3b9
lea rcx, [rsp + 0x47c8]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.140082094
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401aa3f8
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rsp + 0x4a38]
call fcn.140001470
nop
lea rcx, [rsp + 0x47e0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x4a18]
call fcn.140001470
nop
lea rcx, [rsp + 0x4788]
call fcn.14007608c
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005d50
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001470
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001470
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001470
jmp 0x1401a91f7
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4090]
call fcn.14000ec40
mov edx, dword [rsp + 0x3ba8]
lea rcx, [rsp + 0x3d50]
call fcn.14000edf0
nop
lea rcx, [rsp + 0x3d50]
call fcn.1401b8530
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x1402455dc]
call fcn.140002060
lea rcx, [rsp + 0x3c98]
lea rdx, [0x1402455ec]
call fcn.140002060
lea rcx, [rsp + 0x3a10]
call fcn.1401cfa40
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000fe50
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140247448]
call fcn.1400ef150
mov dword [rsp + 0x7348], 0
lea rcx, [rsp + 0x3d50]
call fcn.140005d50
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007c00
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x4090]
call fcn.140081e20
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005d50
mov eax, dword [rsp + 0x7348]
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000ee60
mov dword [rsp + 0x5774], eax
cmp dword [rsp + 0x5774], 1
je 0x1401aa5bf
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x5778], eax
lea rcx, [rsp + 0x5780]
call fcn.1401cd320
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x5778]
call fcn.1400824e8
mov dword [rsp + 0x5918], eax
lea rcx, [rsp + 0x5780]
call fcn.1401d1f50
test eax, eax
jne 0x1401aa64a
mov dword [rsp + 0x734c], 0
lea rcx, [rsp + 0x5780]
call fcn.140005d50
mov eax, dword [rsp + 0x734c]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x5980]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x577c], eax
cmp dword [rsp + 0x577c], 0
jne 0x1401aa67d
mov dword [rsp + 0x7728], 1
jmp 0x1401aa688
mov dword [rsp + 0x7728], 0
lea rcx, [rsp + 0x5980]
mov r8d, dword [rsp + 0x7728]
lea rdx, [0x140247450]
call fcn.140002be0
lea rcx, [rsp + 0x5780]
call fcn.1401cfa40
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
cmp dword [rsp + 0x577c], 0
jne 0x1401aa740
mov eax, dword [rsp + 0x5918]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov qword [rsp + 0x5ac0], rax
cmp qword [rsp + 0x5ac0], 0
jne 0x1401aa740
mov r8d, 0xffffffff
mov edx, 0x44
mov ecx, 0x77
call fcn.1400f0ec0
cmp eax, 6
jne 0x1401aa740
mov eax, dword [rsp + 0x5918]
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov r9d, dword [rsp + 0x5918]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000fe50
mov dword [rsp + 0x7350], 0
lea rcx, [rsp + 0x5780]
call fcn.140005d50
mov eax, dword [rsp + 0x7350]
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000ee60
mov dword [rsp + 0x5ac8], eax
cmp dword [rsp + 0x5ac8], 1
je 0x1401aa7b4
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x5acc], eax
xor edx, edx
lea rcx, [rsp + 0x5ad0]
call fcn.1401631b0
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x5acc]
call fcn.1400824e8
mov dword [rsp + 0x5ce0], eax
lea rcx, [rsp + 0x5ad0]
call fcn.1400819f8
mov dword [rsp + 0x7354], 0
lea rcx, [rsp + 0x5ad0]
call fcn.140163160
mov eax, dword [rsp + 0x7354]
jmp 0x1401ac6c3
mov rax, qword [rsp + 0x7880]
cmp dword [rax + 0x978], 0
je 0x1401aa85c
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000ee60
mov dword [rsp + 0x5da8], eax
cmp dword [rsp + 0x5da8], 1
je 0x1401aa888
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x5dac], eax
lea rcx, [rsp + 0x5db0]
call fcn.1401cd320
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x5dac]
call fcn.1400824e8
mov dword [rsp + 0x5f48], eax
lea rcx, [rsp + 0x5db0]
call fcn.1401d1f50
test eax, eax
jne 0x1401aa913
mov dword [rsp + 0x7358], 0
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x7358]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x5ff8]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
test eax, eax
je 0x1401aa997
lea rcx, [rsp + 0x5fb0]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
test eax, eax
jne 0x1401aa997
lea rcx, [rsp + 0x6008]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
test eax, eax
jne 0x1401aa997
mov r8d, 0xffffffff
mov edx, 0x40
mov ecx, 0xc1
call fcn.1400f0ec0
mov dword [rsp + 0x735c], 0
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x735c]
jmp 0x1401ac6c3
mov eax, dword [rsp + 0x5f48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov qword [rsp + 0x6328], rax
cmp qword [rsp + 0x6328], 0
je 0x1401aaa06
mov r8d, 0xffffffff
mov edx, 0x40
mov ecx, 0xab
call fcn.1400f0ec0
mov dword [rsp + 0x7360], 0
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x7360]
jmp 0x1401ac6c3
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f0ec0
cmp eax, 6
je 0x1401aaa44
mov dword [rsp + 0x7364], 0
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x7364]
jmp 0x1401ac6c3
xor edx, edx
lea rcx, [rsp + 0x60f0]
call fcn.14015a790
nop
lea rdx, [rsp + 0x5da0]
lea rcx, [rsp + 0x5db0]
call fcn.1401cf690
nop
mov dword [rsp + 0x6320], 0
cmp dword [rsp + 0x6320], 0xffffffff
je 0x1401abe1a
lea r9, [rsp + 0x6320]
lea r8, [0x140245614]
lea rdx, [rsp + 0x7368]
lea rcx, [rsp + 0x5da0]
call fcn.140006540
mov qword [rsp + 0x7730], rax
mov rax, qword [rsp + 0x7730]
mov qword [rsp + 0x7738], rax
mov rdx, qword [rsp + 0x7738]
lea rcx, [rsp + 0x6300]
call fcn.140002d20
nop
lea rcx, [rsp + 0x7368]
call fcn.140001470
lea rcx, [rsp + 0x6300]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401aaafb
jmp 0x1401abe1a
lea rcx, [rsp + 0x63a0]
call fcn.14000efb0
nop
lea rax, [rsp + 0x7370]
mov qword [rsp + 0x7378], rax
lea rdx, [rsp + 0x6300]
mov rcx, qword [rsp + 0x7378]
call fcn.140001440
mov qword [rsp + 0x7740], rax
mov rdx, qword [rsp + 0x7740]
lea rcx, [rsp + 0x63a0]
call fcn.1401d05c0
test eax, eax
jne 0x1401aab61
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
jmp 0x1401aaa75
lea rcx, [rsp + 0x6368]
call fcn.140002d50
nop
mov eax, dword [rsp + 0x5f48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov dword [rsp + 0x6388], eax
cmp dword [rsp + 0x6388], 0
jne 0x1401aabff
mov dword [rsp + 0x7380], 0
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001470
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x7380]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x6398]
call fcn.140002d50
nop
mov r8d, dword [rsp + 0x6388]
lea rdx, [0x140247458]
lea rcx, [rsp + 0x6398]
call fcn.140002be0
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x7388]
call fcn.140105d90
mov qword [rsp + 0x7748], rax
mov rax, qword [rsp + 0x7748]
mov qword [rsp + 0x7750], rax
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x7390]
call fcn.1400f9840
mov qword [rsp + 0x7758], rax
mov rax, qword [rsp + 0x7758]
mov qword [rsp + 0x7760], rax
mov rax, qword [rsp + 0x7750]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x7760]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f50]
mov r8, qword [rsp + 0x6398]
lea rdx, str._s_s__s_s
lea rcx, [rsp + 0x6368]
call fcn.140002be0
nop
lea rcx, [rsp + 0x7390]
call fcn.140001470
nop
lea rcx, [rsp + 0x7388]
call fcn.140001470
lea rcx, [rsp + 0x6368]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401aad3b
lea rcx, [rsp + 0x6398]
call fcn.140001470
nop
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
jmp 0x1401aaa75
lea rcx, [rsp + 0x6380]
call fcn.140002d50
nop
mov edx, 0xc3
lea rcx, [rsp + 0x7398]
call fcn.1400efaa0
mov qword [rsp + 0x7768], rax
mov rax, qword [rsp + 0x7768]
mov qword [rsp + 0x7770], rax
mov rcx, qword [rsp + 0x7770]
call fcn.1400012c0
mov r8, qword [rsp + 0x6300]
mov rdx, rax
lea rcx, [rsp + 0x6380]
call fcn.140002be0
nop
lea rcx, [rsp + 0x7398]
call fcn.140001470
lea rcx, [rsp + 0x6380]
call fcn.1400012c0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef150
cmp eax, 7
jne 0x1401aae04
lea rcx, [rsp + 0x6380]
call fcn.140001470
nop
lea rcx, [rsp + 0x6398]
call fcn.140001470
nop
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
jmp 0x1401aaa75
lea rcx, [rsp + 0x6300]
call fcn.1400012c0
mov rcx, rax
call fcn.1400f8fa0
mov dword [rsp + 0x6330], eax
cmp dword [rsp + 0x6330], 3
je 0x1401aae42
cmp dword [rsp + 0x6330], 4
je 0x1401aae42
cmp dword [rsp + 0x6330], 5
jne 0x1401aaecc
mov r8d, 0xffffffff
xor edx, edx
mov ecx, ILCreateFromPathW
call fcn.1400f0ec0
mov dword [rsp + 0x73a0], 0
lea rcx, [rsp + 0x6380]
call fcn.140001470
nop
lea rcx, [rsp + 0x6398]
call fcn.140001470
nop
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001470
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x73a0]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x6338]
call fcn.140076030
nop
lea rcx, [rsp + 0x6368]
call fcn.1400012c0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6338]
call fcn.140076134
lea rcx, [rsp + 0x6338]
call fcn.140075d3c
mov qword [rsp + 0x6390], 0
mov qword [rsp + 0x6378], 0
mov qword [rsp + 0x6370], 0
mov r9d, 3
xor r8d, r8d
lea rdx, [rsp + 0x73a8]
lea rcx, [rsp + 0x6300]
call fcn.140002230
mov qword [rsp + 0x7778], rax
mov rcx, qword [rsp + 0x7778]
call fcn.1400012c0
lea r9, [rsp + 0x6370]
lea r8, [rsp + 0x6378]
lea rdx, [rsp + 0x6390]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401aaf90
mov dword [rsp + 0x7780], 1
jmp 0x1401aaf9b
mov dword [rsp + 0x7780], 0
movzx eax, byte [rsp + 0x7780]
mov byte [rsp + 0x73a4], al
lea rcx, [rsp + 0x73a8]
call fcn.140001470
movzx r11d, byte [rsp + 0x73a4]
test r11d, r11d
je 0x1401ab063
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140247480]
call fcn.1400ef150
mov dword [rsp + 0x73b0], 0
lea rcx, [rsp + 0x6338]
call fcn.14007608c
nop
lea rcx, [rsp + 0x6380]
call fcn.140001470
nop
lea rcx, [rsp + 0x6398]
call fcn.140001470
nop
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001470
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x73b0]
jmp 0x1401ac6c3
lea rcx, [rsp + 0x6338]
call fcn.140075d88
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401ab086
addsd xmm1, qword [0x14025b050]
mov rax, qword [rsp + 0x6370]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401ab0a4
addsd xmm0, qword [0x14025b050]
mulsd xmm0, qword [0x14025d228]
comisd xmm1, xmm0
jbe 0x1401ab150
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Disk_space_is_not_enough._Please_try_to_merge_all.
call fcn.1400ef150
mov dword [rsp + 0x73b4], 0
lea rcx, [rsp + 0x6338]
call fcn.14007608c
nop
lea rcx, [rsp + 0x6380]
call fcn.140001470
nop
lea rcx, [rsp + 0x6398]
call fcn.140001470
nop
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001470
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x73b4]
jmp 0x1401ac6c3
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Do_you_want_to_create_restore_point_
call fcn.1400ef150
cmp eax, 6
jne 0x1401ab8b1
lea rcx, [rsp + 0x73b8]
call fcn.14000f6f0
lea r8, [0x1402475b0]
lea rdx, [rsp + 0x73c0]
mov rcx, rax
call fcn.14000f090
mov qword [rsp + 0x7788], rax
mov rax, qword [rsp + 0x7788]
mov qword [rsp + 0x7790], rax
mov rdx, qword [rsp + 0x7790]
lea rcx, [rsp + 0x6308]
call fcn.140002d20
nop
lea rcx, [rsp + 0x73c0]
call fcn.140001470
lea rcx, [rsp + 0x60f0]
call fcn.1400819f8
cmp rax, 1
je 0x1401ab269
mov dword [rsp + 0x73c8], 0
lea rcx, [rsp + 0x6338]
call fcn.14007608c
nop
lea rcx, [rsp + 0x6380]
call fcn.140001470
nop
lea rcx, [rsp + 0x6398]
call fcn.140001470
nop
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001470
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x73c8]
jmp 0x1401ac6c3
mov edx, dword [rsp + 0x6538]
lea rcx, [rsp + 0x66e0]
call fcn.1401cd210
nop
lea rcx, [rsp + 0x6300]
call fcn.1400012c0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6d70]
call fcn.1400fff60
nop
mov dx, 0x2e
lea rcx, [rsp + 0x6d70]
call fcn.140006840
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x73d0]
lea rcx, [rsp + 0x6d70]
call fcn.1400069a0
mov qword [rsp + 0x7798], rax
mov rcx, qword [rsp + 0x7798]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x6a28], eax
lea rcx, [rsp + 0x73d0]
call fcn.140001470
lea rcx, [rsp + 0x6880]
mov r8d, dword [rsp + 0x6a28]
lea rdx, [0x1402475d4]
call fcn.140002be0
lea rcx, [rsp + 0x6888]
lea rdx, [rsp + 0x6310]
call fcn.140002d20
lea rcx, [rsp + 0x6890]
lea rdx, [rsp + 0x6308]
call fcn.140002d20
lea rcx, [rsp + 0x66e0]
call fcn.1401b8b50
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov r8, qword [rsp + 0x6548]
lea rdx, [0x1402475e0]
xor ecx, ecx
call fcn.1400dc5d0
mov r11d, dword [rsp + 0x5f48]
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov r11, qword [rsp + 0x7880]
mov dword [r11 + 0x978], 1
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x968], 0
je 0x1401ab3e1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401ab42b
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call fcn.14007c98c
xor edx, edx
mov rcx, rax
call fcn.14007c06c
mov edx, 5
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x6d70]
call fcn.1400012c0
mov rbx, rax
lea rcx, [rsp + 0x6368]
call fcn.1400012c0
mov r8, qword [rsp + 0x7880]
mov r8, qword [r8 + 0x968]
mov rdx, rbx
mov rcx, rax
call fcn.140104b60
test eax, eax
jne 0x1401ab56e
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401ab493
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0x6548]
lea rdx, [0x140247620]
xor ecx, ecx
call fcn.1400dc5d0
xor r8d, r8d
xor edx, edx
lea rcx, [0x140247670]
call fcn.1400ef150
mov dword [rsp + 0x73d8], 0
lea rcx, [rsp + 0x6d70]
call fcn.140001470
nop
lea rcx, [rsp + 0x66e0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x6338]
call fcn.14007608c
nop
lea rcx, [rsp + 0x6380]
call fcn.140001470
nop
lea rcx, [rsp + 0x6398]
call fcn.140001470
nop
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001470
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x73d8]
jmp 0x1401ac6c3
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401ab597
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x6368]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x6a30]
call fcn.14000fb00
nop
mov dword [rsp + 0x6bc8], 1
lea rcx, [rsp + 0x6a30]
call fcn.1401d0bc0
lea rdx, [rsp + 0x6bd8]
lea rcx, [rsp + 0x6a20]
call fcn.140001440
nop
mov dword [rsp + 0x6d78], 0
cmp dword [rsp + 0x6d78], 0
jl 0x1401ab875
lea r9, [rsp + 0x6d78]
lea r8, [0x14024562c]
lea rdx, [rsp + 0x6d88]
lea rcx, [rsp + 0x6a20]
call fcn.140006540
nop
lea rcx, [rsp + 0x6d88]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401ab65f
lea rcx, [rsp + 0x6d88]
call fcn.140001470
jmp 0x1401ab875
xor edx, edx
lea rcx, [rsp + 0x6d88]
call fcn.140006d70
movzx r8d, ax
lea rdx, [0x140247680]
lea rcx, [rsp + 0x6d88]
call fcn.140002be0
lea rcx, [rsp + 0x6d80]
call fcn.140002d50
nop
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x73e0]
call fcn.140105d90
mov qword [rsp + 0x77a0], rax
mov rax, qword [rsp + 0x77a0]
mov qword [rsp + 0x77a8], rax
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x73e8]
call fcn.1400f9840
mov qword [rsp + 0x77b0], rax
mov rax, qword [rsp + 0x77b0]
mov qword [rsp + 0x77b8], rax
mov rax, qword [rsp + 0x77a8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x77b8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f50]
mov r8, qword [rsp + 0x6d88]
lea rdx, [0x140247690]
lea rcx, [rsp + 0x6d80]
call fcn.140002be0
nop
lea rcx, [rsp + 0x73e8]
call fcn.140001470
nop
lea rcx, [rsp + 0x73e0]
call fcn.140001470
lea rcx, [rsp + 0x6d80]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x73f0]
call fcn.140105d90
mov qword [rsp + 0x77c0], rax
mov rax, qword [rsp + 0x77c0]
mov qword [rsp + 0x77c8], rax
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x73f8]
call fcn.1400f9840
mov qword [rsp + 0x77d0], rax
mov rax, qword [rsp + 0x77d0]
mov qword [rsp + 0x77d8], rax
mov rax, qword [rsp + 0x77c8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x77d8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f68]
mov r8, qword [rsp + 0x6d88]
lea rdx, [0x1402476b0]
lea rcx, [rsp + 0x6d80]
call fcn.140002be0
nop
lea rcx, [rsp + 0x73f8]
call fcn.140001470
nop
lea rcx, [rsp + 0x73f0]
call fcn.140001470
lea rcx, [rsp + 0x6d80]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x6d80]
call fcn.140001470
nop
lea rcx, [rsp + 0x6d88]
call fcn.140001470
jmp 0x1401ab606
lea rcx, [rsp + 0x6a20]
call fcn.140001470
nop
lea rcx, [rsp + 0x6a30]
call fcn.140005d50
nop
lea rcx, [rsp + 0x6d70]
call fcn.140001470
nop
lea rcx, [rsp + 0x66e0]
call fcn.140005d50
jmp 0x1401abdbb
mov r8, qword [rsp + 0x6548]
lea rdx, str.Receive_CMD_SAVE_TO_IMAGE__s
xor ecx, ecx
call fcn.1400dc5d0
mov r11d, dword [rsp + 0x5f48]
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov r11, qword [rsp + 0x7880]
mov dword [r11 + 0x978], 1
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x968], 0
je 0x1401ab930
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401ab97a
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call fcn.14007c98c
xor edx, edx
mov rcx, rax
call fcn.14007c06c
mov edx, 5
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x6368]
call fcn.1400012c0
mov r9, qword [rsp + 0x7880]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.140103260
test eax, eax
jne 0x1401aba99
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401ab9da
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0x6548]
lea rdx, str._ERROR__Save_to_image__s_false
xor ecx, ecx
call fcn.1400dc5d0
xor r8d, r8d
xor edx, edx
lea rcx, str.False_
call fcn.1400ef150
mov dword [rsp + 0x7400], 0
lea rcx, [rsp + 0x6338]
call fcn.14007608c
nop
lea rcx, [rsp + 0x6380]
call fcn.140001470
nop
lea rcx, [rsp + 0x6398]
call fcn.140001470
nop
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001470
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x7400]
jmp 0x1401ac6c3
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401abac2
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x6368]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x6da0]
call fcn.14000fb00
nop
mov dword [rsp + 0x6f38], 1
lea rcx, [rsp + 0x6da0]
call fcn.1401d0bc0
lea rdx, [rsp + 0x6f48]
lea rcx, [rsp + 0x6d90]
call fcn.140001440
nop
mov dword [rsp + 0x70e0], 0
cmp dword [rsp + 0x70e0], 0
jl 0x1401abda0
lea r9, [rsp + 0x70e0]
lea r8, [0x14024563c]
lea rdx, [rsp + 0x70f0]
lea rcx, [rsp + 0x6d90]
call fcn.140006540
nop
lea rcx, [rsp + 0x70f0]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401abb8a
lea rcx, [rsp + 0x70f0]
call fcn.140001470
jmp 0x1401abda0
xor edx, edx
lea rcx, [rsp + 0x70f0]
call fcn.140006d70
movzx r8d, ax
lea rdx, [0x140247770]
lea rcx, [rsp + 0x70f0]
call fcn.140002be0
lea rcx, [rsp + 0x70e8]
call fcn.140002d50
nop
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x7408]
call fcn.140105d90
mov qword [rsp + 0x77e0], rax
mov rax, qword [rsp + 0x77e0]
mov qword [rsp + 0x77e8], rax
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x7410]
call fcn.1400f9840
mov qword [rsp + 0x77f0], rax
mov rax, qword [rsp + 0x77f0]
mov qword [rsp + 0x77f8], rax
mov rax, qword [rsp + 0x77e8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x77f8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f50]
mov r8, qword [rsp + 0x70f0]
lea rdx, [0x140247780]
lea rcx, [rsp + 0x70e8]
call fcn.140002be0
nop
lea rcx, [rsp + 0x7410]
call fcn.140001470
nop
lea rcx, [rsp + 0x7408]
call fcn.140001470
lea rcx, [rsp + 0x70e8]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x7418]
call fcn.140105d90
mov qword [rsp + 0x7800], rax
mov rax, qword [rsp + 0x7800]
mov qword [rsp + 0x7808], rax
lea rcx, [rsp + 0x6548]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x7420]
call fcn.1400f9840
mov qword [rsp + 0x7810], rax
mov rax, qword [rsp + 0x7810]
mov qword [rsp + 0x7818], rax
mov rax, qword [rsp + 0x7808]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x7818]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f68]
mov r8, qword [rsp + 0x70f0]
lea rdx, str._s_s_p___s_s
lea rcx, [rsp + 0x70e8]
call fcn.140002be0
nop
lea rcx, [rsp + 0x7420]
call fcn.140001470
nop
lea rcx, [rsp + 0x7418]
call fcn.140001470
lea rcx, [rsp + 0x70e8]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x70e8]
call fcn.140001470
nop
lea rcx, [rsp + 0x70f0]
call fcn.140001470
jmp 0x1401abb31
lea rcx, [rsp + 0x6d90]
call fcn.140001470
nop
lea rcx, [rsp + 0x6da0]
call fcn.140005d50
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x1402477c0]
call fcn.1400ef150
nop
lea rcx, [rsp + 0x6338]
call fcn.14007608c
nop
lea rcx, [rsp + 0x6380]
call fcn.140001470
nop
lea rcx, [rsp + 0x6398]
call fcn.140001470
nop
lea rcx, [rsp + 0x6368]
call fcn.140001470
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005d50
jmp 0x1401aaa75
mov dword [rsp + 0x7428], 0
lea rcx, [rsp + 0x5da0]
call fcn.140001470
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a730
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005d50
mov eax, dword [rsp + 0x7428]
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
call fcn.140082fec
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, 0x20
mov edx, 0x20
call fcn.1400831d0
call fcn.140010e00
mov edx, 0xdb
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0x496
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0xdc
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0x80d2
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0xda
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
mov rdx, qword [rsp + 0x7880]
add rdx, 0x1648
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000fe00
lea rcx, [rsp + 0x7430]
call fcn.140001000
mov qword [rsp + 0x7820], rax
mov rax, qword [rsp + 0x7820]
mov qword [rsp + 0x7828], rax
lea r8, [0x1402477c8]
mov rdx, qword [rsp + 0x7828]
lea rcx, [rsp + 0x7438]
call fcn.1400010b0
mov qword [rsp + 0x7830], rax
mov rcx, qword [rsp + 0x7830]
call fcn.1400012c0
mov r9, rax
lea r8, [0x1402477e0]
lea rdx, [0x1402477e8]
lea rcx, [0x140247808]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x7438]
call fcn.140001470
nop
lea rcx, [rsp + 0x7430]
call fcn.140001470
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
call fcn.140082fec
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400831d0
call fcn.140010e00
mov edx, 0xdb
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0x496
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0xdc
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0x80d2
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0xda
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
mov rdx, qword [rsp + 0x7880]
add rdx, 0x1648
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000fe00
lea rcx, [rsp + 0x7440]
call fcn.140001000
mov qword [rsp + 0x7838], rax
mov rax, qword [rsp + 0x7838]
mov qword [rsp + 0x7840], rax
lea r8, [0x140247818]
mov rdx, qword [rsp + 0x7840]
lea rcx, [rsp + 0x7448]
call fcn.1400010b0
mov qword [rsp + 0x7848], rax
mov rcx, qword [rsp + 0x7848]
call fcn.1400012c0
mov r9, rax
lea r8, [0x140247830]
lea rdx, [0x140247838]
lea rcx, [0x140247858]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x7448]
call fcn.140001470
nop
lea rcx, [rsp + 0x7440]
call fcn.140001470
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
call fcn.140082fec
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
mov edx, reloc.OLEAUT32.dll_SafeArrayLock
call fcn.1400831d0
call fcn.140010e00
mov edx, 0xdb
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0x496
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0xdc
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0x80d2
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0xda
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
mov rdx, qword [rsp + 0x7880]
add rdx, 0x1648
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000fe00
lea rcx, [rsp + 0x7450]
call fcn.140001000
mov qword [rsp + 0x7850], rax
mov rax, qword [rsp + 0x7850]
mov qword [rsp + 0x7858], rax
lea r8, [0x140247868]
mov rdx, qword [rsp + 0x7858]
lea rcx, [rsp + 0x7458]
call fcn.1400010b0
mov qword [rsp + 0x7860], rax
mov rcx, qword [rsp + 0x7860]
call fcn.1400012c0
mov r9, rax
lea r8, [0x140247880]
lea rdx, [0x140247888]
lea rcx, [0x1402478a8]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x7458]
call fcn.140001470
nop
lea rcx, [rsp + 0x7450]
call fcn.140001470
xor eax, eax
jmp 0x1401ac6c3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.140078530
lea rcx, [rsp + 0x70f8]
call fcn.140002d50
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1658
lea rdx, [rsp + 0x70f8]
call fcn.14007e254
lea rcx, [rsp + 0x70f8]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401ac456
mov dword [rsp + 0x7460], 0
lea rcx, [rsp + 0x70f8]
call fcn.140001470
mov eax, dword [rsp + 0x7460]
jmp 0x1401ac6c3
mov dword [rsp + 0x7100], 0xffffffff
mov dword [rsp + 0x7104], 0
jmp 0x1401ac47f
mov eax, dword [rsp + 0x7104]
add eax, 1
mov dword [rsp + 0x7104], eax
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000f500
cmp dword [rsp + 0x7104], eax
jge 0x1401ac576
mov dword [rsp + 0x7108], 0
jmp 0x1401ac4be
mov eax, dword [rsp + 0x7108]
add eax, 1
mov dword [rsp + 0x7108], eax
cmp dword [rsp + 0x7108], 0x1c
jge 0x1401ac565
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, dword [rsp + 0x7108]
mov r8d, dword [rsp + 0x7104]
lea rdx, [rsp + 0x7110]
call fcn.14008323c
nop
lea rcx, [rsp + 0x70f8]
call fcn.140006910
mov rcx, rax
call fcn.1400012c0
mov rbx, rax
lea rcx, [rsp + 0x7110]
call fcn.140006910
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140006720
cmp eax, 0xffffffff
jne 0x1401ac543
lea rcx, [rsp + 0x7110]
call fcn.140001470
jmp 0x1401ac4ad
mov eax, dword [rsp + 0x7104]
mov dword [rsp + 0x7100], eax
lea rcx, [rsp + 0x7110]
call fcn.140001470
jmp 0x1401ac565
cmp dword [rsp + 0x7100], 0xffffffff
je 0x1401ac571
jmp 0x1401ac576
jmp 0x1401ac46e
cmp dword [rsp + 0x7100], 0xffffffff
je 0x1401ac699
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000f050
mov dword [rsp + 0x7118], eax
cmp dword [rsp + 0x7118], 0
jl 0x1401ac602
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, 2
xor r8d, r8d
mov edx, dword [rsp + 0x7118]
call fcn.140082488
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x7118]
call fcn.14000f050
mov dword [rsp + 0x7118], eax
jmp 0x1401ac5aa
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r8d, r8d
mov edx, dword [rsp + 0x7100]
call fcn.14000ec00
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x7100]
call fcn.14000ebd0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, 2
mov r8d, 3
mov edx, dword [rsp + 0x7100]
call fcn.140082488
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, dword [rsp + 0x7100]
mov edx, dword [rsp + 0x7100]
call fcn.14000eb90
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000eb70
mov dword [rsp + 0x7464], 0
lea rcx, [rsp + 0x70f8]
call fcn.140001470
mov eax, dword [rsp + 0x7464]
jmp 0x1401ac6c3
mov eax, 1
add rsp, 0x7870
pop rbx
ret