Function at 0x1401a1070
Capabilities:
Create process on windows
Create thread
Get disk information
Get disk size
Get networking parameters
Manipulate boot configuration
Read .ini file
Self delete

Disassembly:
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x3200
call fcn.1401d5c30
sub rsp, rax
mov qword [rsp + 0x2ee0], 0xfffffffffffffffe
mov rax, qword [0x1402a25c0]
xor rax, rsp
mov qword [rsp + 0x31f8], rax
mov rcx, qword [rsp + 0x3210]
call fcn.1400f39a0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x15f8
mov edx, reloc.WS2_32.dll___WSAFDIsSet
call fcn.140010590
mov rcx, qword [rsp + 0x3210]
add rcx, 0x15f8
call fcn.1400ef310
lea rcx, [rsp + 0xb0]
call fcn.140002d50
nop
lea rcx, [rsp + 0x1438]
call fcn.1400020f0
nop
mov r9d, 4
mov r8d, 4
lea rdx, [rsp + 0x2c80]
lea rcx, [rsp + 0x1438]
call fcn.140002230
mov qword [rsp + 0x2ee8], rax
mov rax, qword [rsp + 0x2ee8]
mov qword [rsp + 0x2ef0], rax
mov r9d, 4
xor r8d, r8d
lea rdx, [rsp + 0x2c88]
lea rcx, [rsp + 0x1438]
call fcn.140002230
mov qword [rsp + 0x2ef8], rax
mov rax, qword [rsp + 0x2ef8]
mov qword [rsp + 0x2f00], rax
mov edx, 0xd4
lea rcx, [rsp + 0x2c90]
call fcn.1400efaa0
mov qword [rsp + 0x2f08], rax
mov rax, qword [rsp + 0x2f08]
mov qword [rsp + 0x2f10], rax
mov rcx, qword [rsp + 0x2f10]
call fcn.1400012c0
mov r9, qword [rsp + 0x2ef0]
mov r9, qword [r9]
mov r8, qword [rsp + 0x2f00]
mov r8, qword [r8]
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.140002be0
nop
lea rcx, [rsp + 0x2c90]
call fcn.140001470
nop
lea rcx, [rsp + 0x2c88]
call fcn.140001470
nop
lea rcx, [rsp + 0x2c80]
call fcn.140001470
lea rcx, [rsp + 0x2ca0]
call fcn.140185b10
mov qword [rsp + 0x2f18], rax
mov rax, qword [rsp + 0x2f18]
mov qword [rsp + 0x2f20], rax
mov rcx, qword [rsp + 0x2f20]
call fcn.1400012c0
mov rcx, rax
call fcn.140005060
test eax, eax
jne 0x1401a1238
mov dword [rsp + 0x2f28], 1
jmp 0x1401a1243
mov dword [rsp + 0x2f28], 0
movzx eax, byte [rsp + 0x2f28]
mov byte [rsp + 0x2c98], al
lea rcx, [rsp + 0x2ca0]
call fcn.140001470
movzx edx, byte [rsp + 0x2c98]
test edx, edx
je 0x1401a149e
mov ecx, 0x1e
call fcn.1400d7f20
mov dword [rsp + 0x1810], eax
cmp dword [rsp + 0x1810], 0xffffffff
jmp 0x1401a139d
mov r9d, 4
mov r8d, 4
lea rdx, [rsp + 0x2cc0]
lea rcx, [rsp + 0x1438]
call fcn.140002230
mov qword [rsp + 0x2f60], rax
mov rax, qword [rsp + 0x2f60]
mov qword [rsp + 0x2f68], rax
mov r9d, 4
xor r8d, r8d
lea rdx, [rsp + 0x2cc8]
lea rcx, [rsp + 0x1438]
call fcn.140002230
mov qword [rsp + 0x2f70], rax
mov rax, qword [rsp + 0x2f70]
mov qword [rsp + 0x2f78], rax
mov edx, 0xd6
lea rcx, [rsp + 0x2cd0]
call fcn.1400efaa0
mov qword [rsp + 0x2f80], rax
mov rax, qword [rsp + 0x2f80]
mov qword [rsp + 0x2f88], rax
mov rcx, qword [rsp + 0x2f88]
call fcn.1400012c0
mov rdx, rax
mov eax, dword [rsp + 0x1810]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x2f68]
mov r9, qword [r9]
mov r8, qword [rsp + 0x2f78]
mov r8, qword [r8]
lea rcx, [rsp + 0xb0]
call fcn.140002be0
nop
lea rcx, [rsp + 0x2cd0]
call fcn.140001470
nop
lea rcx, [rsp + 0x2cc8]
call fcn.140001470
nop
lea rcx, [rsp + 0x2cc0]
call fcn.140001470
lea rdx, [0x1402446d0]
lea rcx, [rsp + 0x2ce0]
call fcn.1400eeb20
mov qword [rsp + 0x2f90], rax
lea rdx, [0x1402446c0]
mov rcx, qword [rsp + 0x2f90]
call fcn.140006d30
mov byte [rsp + 0x2cd8], al
lea rcx, [rsp + 0x2ce0]
call fcn.140001470
movzx edx, byte [rsp + 0x2cd8]
test edx, edx
je 0x1401a153d
lea rdx, [0x1402446e0]
lea rcx, [rsp + 0x2ce8]
call fcn.1400eeb20
mov qword [rsp + 0x2f98], rax
mov rax, qword [rsp + 0x2f98]
mov qword [rsp + 0x2fa0], rax
mov rdx, qword [rsp + 0x2fa0]
lea rcx, [rsp + 0xb0]
call fcn.140002d20
nop
lea rcx, [rsp + 0x2ce8]
call fcn.140001470
lea rcx, [rsp + 0xb0]
call fcn.1400012c0
mov rdx, rax
mov rcx, qword [rsp + 0x3210]
call fcn.1400783b8
lea rcx, [rsp + 0xb0]
call fcn.1400012c0
mov rdx, rax
xor ecx, ecx
call fcn.1400dc5d0
mov dword [rsp + 0x17e8], 0x8004
mov dword [rsp + 0x17ec], 0
mov dword [rsp + 0x17f0], 0x800c
mov dword [rsp + 0x17f4], 0x800d
mov dword [rsp + 0x17f8], 0x8030
mov dword [rsp + 0x17fc], 0
mov dword [rsp + 0x1800], 0x10f
mov dword [rsp + 0x1804], 0x8011
mov dword [rsp + 0x1808], 0
mov dword [rsp + 0x180c], 0x8003
mov r8d, 0xa
lea rdx, [rsp + 0x17e8]
mov rcx, qword [rsp + 0x3210]
call fcn.1400f1f80
lea rcx, [rsp + 0x50]
call fcn.14001a0a0
mov edx, 0x53f
mov rcx, qword [rsp + 0x3210]
call fcn.14007820c
test rax, rax
je 0x1401a167a
mov edx, 0x53f
mov rcx, qword [rsp + 0x3210]
call fcn.14007820c
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140010540
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x3210]
call fcn.140086ad4
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1360
mov dword [rsp + 0x20], 1
mov r9, qword [rsp + 0x3210]
lea r8, [rsp + 0x50]
mov edx, 0x50000b44
call fcn.140082334
mov edx, 0x53f
mov rcx, qword [rsp + 0x3210]
call fcn.14007820c
test rax, rax
je 0x1401a17b6
mov edx, 0x53f
mov rcx, qword [rsp + 0x3210]
call fcn.14007820c
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140010540
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x3210]
call fcn.140086ad4
mov eax, dword [rsp + 0x54]
sub eax, 1
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x5c]
add eax, 1
mov dword [rsp + 0x5c], eax
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1408
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax + 0x1408]
mov dword [rsp + 0x20], 0xe804
mov r9d, 0x56000700
mov r8d, 0x400
mov rdx, qword [rsp + 0x3210]
call qword [rax + 0x300]
mov rdx, qword [rsp + 0x3210]
add rdx, 0x1360
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1408
mov dword [rsp + 0x20], 0x100
xor r9d, r9d
xor r8d, r8d
call fcn.14008395c
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1408
mov edx, 1
call fcn.1400784a0
lea rcx, [rsp + 0x50]
call fcn.14001a0a0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1408
mov r8d, 1
mov rdx, rax
call fcn.1400104d0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1d0
mov r8d, 7
mov rdx, qword [rsp + 0x3210]
mov rdx, qword [rdx + 0x1448]
call fcn.1400103d0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1518
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400831d0
lea rdx, str.Edit_DiskAdd_ImageEdit_ImageDelete_ImageAdd_GroupDelete_GroupAdd_ClientAdd_ClientsAuto_ScanEdit_ClientDelete_ClientEnable_Super_ClientDisable_Super_ClientKeySearch
lea rcx, [rsp + 0x1450]
call fcn.1400eeb20
nop
xor eax, eax
mov word [rsp + 0x410], ax
lea rdi, [rsp + 0x412]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
lea rcx, [rsp + 0x1450]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x410]
call fcn.1400a9460
mov dword [rsp + 0x1814], 0
jmp 0x1401a1856
mov eax, dword [rsp + 0x1814]
add eax, 1
mov dword [rsp + 0x1814], eax
lea rcx, [rsp + 0x1450]
call fcn.1400019f0
cmp dword [rsp + 0x1814], eax
jge 0x1401a1895
movsxd rax, dword [rsp + 0x1814]
movzx eax, word [rsp + rax*2 + 0x410]
cmp eax, 0x7c
jne 0x1401a1893
movsxd rcx, dword [rsp + 0x1814]
xor eax, eax
mov word [rsp + rcx*2 + 0x410], ax
jmp 0x1401a1845
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1360
lea rdx, [rsp + 0x410]
call fcn.140010330
mov dword [rsp + 0x17a8], 0x804c
mov dword [rsp + 0x17ac], 0x80bf
mov dword [rsp + 0x17b0], 0x80c0
mov dword [rsp + 0x17b4], 0x80c1
mov dword [rsp + 0x17b8], 0x8054
mov dword [rsp + 0x17bc], 0x8056
mov dword [rsp + 0x17c0], 0x800e
mov dword [rsp + 0x17c4], 0x80d4
mov dword [rsp + 0x17c8], 0x8014
mov dword [rsp + 0x17cc], 0x800f
mov dword [rsp + 0x17d0], 0x8010
mov dword [rsp + 0x17d4], 0x80d6
mov dword [rsp + 0x17d8], 0x80d9
mov dword [rsp + 0x17dc], 0x8166
mov dword [rsp + 0x17e0], 0x8166
mov dword [rsp + 0x4c], reloc.OLEAUT32.dll_SafeArrayDestroy
mov dword [rsp + 0x1818], 0
jmp 0x1401a197c
mov eax, dword [rsp + 0x1818]
add eax, 1
mov dword [rsp + 0x1818], eax
mov eax, dword [rsp + 0x4c]
cmp dword [rsp + 0x1818], eax
jge 0x1401a19be
movsxd rdi, dword [rsp + 0x1818]
call fcn.140010e00
mov edx, dword [rsp + rdi*4 + 0x17a8]
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1518
mov rdx, rax
call fcn.140010300
jmp 0x1401a196b
mov eax, dword [0x1404b5f70]
and eax, 1
test eax, eax
jne 0x1401a19f3
mov eax, dword [0x1404b5f70]
or eax, 1
mov dword [0x1404b5f70], eax
lea rcx, [0x1404b5f60]
call fcn.140082c1c
lea rcx, [0x1401fcdb0]
call fcn.1400a8c9c
nop
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
lea rcx, [0x1404b5f60]
call fcn.1400831d0
call fcn.140010e00
mov edx, 0xea
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xec
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xed
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xee
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xef
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xf0
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xf1
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0x80d4
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xf2
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xf3
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xf4
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xf5
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
call fcn.140010e00
mov edx, 0xf6
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f60]
call fcn.140010300
mov rdx, qword [rsp + 0x3210]
add rdx, 0x1518
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1360
call fcn.14000ffb0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1360
lea rdx, [0x1404b5f60]
call fcn.14000ff70
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov edx, gethostbyname
lea rcx, [rsp + 0x2cf0]
call fcn.14001c660
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1360
mov rdx, qword [rax]
call fcn.14000ff20
lea rdx, [0x140244878]
lea rcx, [rsp + 0x2d00]
call fcn.1400eeb20
mov qword [rsp + 0x2fa8], rax
lea rdx, [0x140244868]
mov rcx, qword [rsp + 0x2fa8]
call fcn.140006d30
mov byte [rsp + 0x2cf8], al
lea rcx, [rsp + 0x2d00]
call fcn.140001470
movzx edx, byte [rsp + 0x2cf8]
test edx, edx
je 0x1401a1ef2
lea rdx, [0x1402448a0]
lea rcx, [rsp + 0x2d10]
call fcn.1400eeb20
mov qword [rsp + 0x2fb0], rax
lea rdx, [0x140244888]
mov rcx, qword [rsp + 0x2fb0]
call fcn.140006cf0
mov byte [rsp + 0x2d08], al
lea rcx, [rsp + 0x2d10]
call fcn.140001470
movzx edx, byte [rsp + 0x2d08]
test edx, edx
je 0x1401a1d14
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
call qword [rax + 0xd8]
mov edx, 6
mov rcx, rax
call fcn.14000fec0
xor r8d, r8d
mov edx, 0x8011
mov rcx, rax
call fcn.14000fef0
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
call qword [rax + 0xd8]
mov edx, 6
mov rcx, rax
call fcn.14000fec0
xor r8d, r8d
mov edx, 0x8089
mov rcx, rax
call fcn.14000fef0
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
call qword [rax + 0xd8]
mov edx, 6
mov rcx, rax
call fcn.14000fec0
xor r8d, r8d
mov edx, 0x8087
mov rcx, rax
call fcn.14000fef0
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
call qword [rax + 0xd8]
mov edx, 6
mov rcx, rax
call fcn.14000fec0
xor r8d, r8d
mov edx, 0x50b
mov rcx, rax
call fcn.14000fef0
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
call qword [rax + 0xd8]
mov edx, 6
mov rcx, rax
call fcn.14000fec0
xor r8d, r8d
mov edx, 0x8071
mov rcx, rax
call fcn.14000fef0
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
call qword [rax + 0xd8]
mov edx, 2
mov rcx, rax
call fcn.14000fec0
xor r8d, r8d
mov edx, 0x80a0
mov rcx, rax
call fcn.14000fef0
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
call qword [rax + 0xd8]
mov edx, 6
mov rcx, rax
call fcn.14000fec0
xor r8d, r8d
mov edx, 0x8160
mov rcx, rax
call fcn.14000fef0
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
call qword [rax + 0xd8]
mov edx, 6
mov rcx, rax
call fcn.14000fec0
xor r8d, r8d
mov edx, 0x815d
mov rcx, rax
call fcn.14000fef0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x220
mov edx, 9
call fcn.14000fe90
mov rcx, qword [rsp + 0x3210]
add rcx, 0x220
mov edx, 8
call fcn.14000fe90
mov rcx, qword [rsp + 0x3210]
add rcx, 0x220
mov edx, 7
call fcn.14000fe90
mov rcx, qword [rsp + 0x3210]
add rcx, 0x220
mov edx, 6
call fcn.14000fe90
mov rcx, qword [rsp + 0x3210]
add rcx, 0xdc8
mov r9d, 0x430
xor r8d, r8d
mov edx, 0x1036
call fcn.14000fe50
mov rcx, qword [rsp + 0x3210]
add rcx, 0xe70
mov r9d, 0x430
xor r8d, r8d
mov edx, 0x1036
call fcn.14000fe50
mov rcx, qword [rsp + 0x3210]
add rcx, 0xf18
mov r9d, 0x430
xor r8d, r8d
mov edx, 0x1036
call fcn.14000fe50
mov edx, 0x3f8
mov rcx, qword [rsp + 0x3210]
call fcn.14007820c
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140010540
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x3210]
call fcn.140086ad4
mov rcx, qword [rsp + 0x3210]
add rcx, 0xdc8
mov r8d, 1
lea rdx, [rsp + 0x50]
call fcn.1400104d0
mov rcx, qword [rsp + 0x3210]
add rcx, 0xe70
mov r8d, 1
lea rdx, [rsp + 0x50]
call fcn.1400104d0
mov rcx, qword [rsp + 0x3210]
add rcx, 0xf18
mov r8d, 1
lea rdx, [rsp + 0x50]
call fcn.1400104d0
mov edx, 0x540
mov rcx, qword [rsp + 0x3210]
call fcn.14007820c
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140010540
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x3210]
call fcn.140086ad4
mov rcx, qword [rsp + 0x3210]
add rcx, 0x980
mov r8d, 1
lea rdx, [rsp + 0x50]
call fcn.1400104d0
lea rcx, [rsp + 0x2d18]
call fcn.140001000
mov qword [rsp + 0x2fb8], rax
mov rax, qword [rsp + 0x2fb8]
mov qword [rsp + 0x2fc0], rax
lea r8, [0x1402448b8]
mov rdx, qword [rsp + 0x2fc0]
lea rcx, [rsp + 0x2d20]
call fcn.1400010b0
mov qword [rsp + 0x2fc8], rax
mov rcx, qword [rsp + 0x2fc8]
call fcn.1400012c0
mov r9, rax
mov r8d, 0x20
lea rdx, [0x1402448d0]
lea rcx, [0x1402448f0]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x1430], eax
lea rcx, [rsp + 0x2d20]
call fcn.140001470
nop
lea rcx, [rsp + 0x2d18]
call fcn.140001470
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1648
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, dword [rsp + 0x1430]
mov edx, dword [rsp + 0x1430]
call fcn.1400831d0
call fcn.140010e00
mov edx, 0xdb
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0x496
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0xdc
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0x80d2
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
call fcn.140010e00
mov edx, 0xda
mov rcx, rax
call fcn.14000fff0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1648
mov rdx, rax
call fcn.140010300
mov rdx, qword [rsp + 0x3210]
add rdx, 0x1648
mov rcx, qword [rsp + 0x3210]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000fe00
mov edx, 0x6a
lea rcx, [rsp + 0x1420]
call fcn.1400efaa0
nop
mov dword [rsp + 0x17a0], 0
mov dword [rsp + 0x70], 0
cmp dword [rsp + 0x17a0], 0xffffffff
je 0x1401a22dc
lea r9, [rsp + 0x17a0]
lea r8, [0x14024195c]
lea rdx, [rsp + 0x1820]
lea rcx, [rsp + 0x1420]
call fcn.140006540
nop
lea rcx, [rsp + 0x1820]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a2276
lea rcx, [rsp + 0x1820]
call fcn.140001470
jmp 0x1401a22dc
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x2fd0], eax
lea rcx, [rsp + 0x1820]
call fcn.1400012c0
mov rcx, qword [rsp + 0x3210]
add rcx, 0xdc8
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x50
xor r9d, r9d
mov r8, rax
mov edx, dword [rsp + 0x2fd0]
call fcn.140082af8
mov eax, dword [rsp + 0x70]
add eax, 1
mov dword [rsp + 0x70], eax
lea rcx, [rsp + 0x1820]
call fcn.140001470
jmp 0x1401a2220
mov eax, dword [0x1404b5f70]
and eax, 2
test eax, eax
jne 0x1401a2311
mov eax, dword [0x1404b5f70]
or eax, 2
mov dword [0x1404b5f70], eax
lea rcx, [0x1404b5f50]
call fcn.140082c1c
lea rcx, [0x1401fcd90]
call fcn.1400a8c9c
nop
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, 0x20
mov edx, 0x20
lea rcx, [0x1404b5f50]
call fcn.1400831d0
call fcn.140010e00
mov edx, 0x8f
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f50]
call fcn.140010300
call fcn.140010e00
mov edx, 0xfd
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f50]
call fcn.140010300
call fcn.140010e00
mov edx, 0xc6
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f50]
call fcn.140010300
call fcn.140010e00
mov edx, 0xfb
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f50]
call fcn.140010300
call fcn.140010e00
mov edx, 0xc7
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f50]
call fcn.140010300
call fcn.140010e00
mov edx, 0xc8
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f50]
call fcn.140010300
call fcn.140010e00
mov edx, 0xfc
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f50]
call fcn.140010300
call fcn.140010e00
mov edx, 0x8c
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f50]
call fcn.140010300
call fcn.140010e00
mov edx, 0xa8
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f50]
call fcn.140010300
mov rcx, qword [rsp + 0x3210]
add rcx, 0xe70
mov r8d, 1
lea rdx, [0x1404b5f50]
call fcn.14000fe00
mov edx, 0xd1
lea rcx, [rsp + 0x2d28]
call fcn.1400efaa0
mov qword [rsp + 0x2fd8], rax
mov rax, qword [rsp + 0x2fd8]
mov qword [rsp + 0x2fe0], rax
mov rdx, qword [rsp + 0x2fe0]
lea rcx, [rsp + 0x1420]
call fcn.140002d20
nop
lea rcx, [rsp + 0x2d28]
call fcn.140001470
mov dword [rsp + 0x17a0], 0
mov dword [rsp + 0x70], 0
cmp dword [rsp + 0x17a0], 0xffffffff
je 0x1401a25a4
lea r9, [rsp + 0x17a0]
lea r8, [0x140241afc]
lea rdx, [rsp + 0x1828]
lea rcx, [rsp + 0x1420]
call fcn.140006540
nop
lea rcx, [rsp + 0x1828]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a253e
lea rcx, [rsp + 0x1828]
call fcn.140001470
jmp 0x1401a25a4
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x2fe8], eax
lea rcx, [rsp + 0x1828]
call fcn.1400012c0
mov rcx, qword [rsp + 0x3210]
add rcx, 0xe70
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x78
xor r9d, r9d
mov r8, rax
mov edx, dword [rsp + 0x2fe8]
call fcn.140082af8
mov eax, dword [rsp + 0x70]
add eax, 1
mov dword [rsp + 0x70], eax
lea rcx, [rsp + 0x1828]
call fcn.140001470
jmp 0x1401a24e8
mov eax, dword [0x1404b5f70]
and eax, 4
test eax, eax
jne 0x1401a25d9
mov eax, dword [0x1404b5f70]
or eax, 4
mov dword [0x1404b5f70], eax
lea rcx, [0x1404b5f40]
call fcn.140082c1c
lea rcx, [0x1401fcd70]
call fcn.1400a8c9c
nop
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, 0x20
mov edx, 0x20
lea rcx, [0x1404b5f40]
call fcn.1400831d0
call fcn.140010e00
mov edx, 0x3fc
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f40]
call fcn.140010300
call fcn.140010e00
mov edx, 0x80e6
mov rcx, rax
call fcn.14000fff0
mov rdx, rax
lea rcx, [0x1404b5f40]
call fcn.140010300
mov rcx, qword [rsp + 0x3210]
add rcx, 0xf18
mov r8d, 1
lea rdx, [0x1404b5f40]
call fcn.14000fe00
mov edx, 0xd0
lea rcx, [rsp + 0x2d30]
call fcn.1400efaa0
mov qword [rsp + 0x2ff0], rax
mov rax, qword [rsp + 0x2ff0]
mov qword [rsp + 0x2ff8], rax
mov rdx, qword [rsp + 0x2ff8]
lea rcx, [rsp + 0x1420]
call fcn.140002d20
nop
lea rcx, [rsp + 0x2d30]
call fcn.140001470
mov dword [rsp + 0x17a0], 0
mov dword [rsp + 0x70], 0
cmp dword [rsp + 0x17a0], 0xffffffff
je 0x1401a2785
lea r9, [rsp + 0x17a0]
lea r8, [0x140241b2c]
lea rdx, [rsp + 0x1830]
lea rcx, [rsp + 0x1420]
call fcn.140006540
nop
lea rcx, [rsp + 0x1830]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a271f
lea rcx, [rsp + 0x1830]
call fcn.140001470
jmp 0x1401a2785
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x3000], eax
lea rcx, [rsp + 0x1830]
call fcn.1400012c0
mov rcx, qword [rsp + 0x3210]
add rcx, 0xf18
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x78
xor r9d, r9d
mov r8, rax
mov edx, dword [rsp + 0x3000]
call fcn.140082af8
mov eax, dword [rsp + 0x70]
add eax, 1
mov dword [rsp + 0x70], eax
lea rcx, [rsp + 0x1830]
call fcn.140001470
jmp 0x1401a26c9
mov edx, 0x4ec
mov rcx, qword [rsp + 0x3210]
call fcn.14007820c
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140010540
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x3210]
call fcn.140086ad4
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1530
mov dword [rsp + 0x20], 0x4ec
mov r9, qword [rsp + 0x3210]
lea r8, [rsp + 0x50]
mov edx, 0x50000000
call fcn.1400d4bc0
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x3210]
call fcn.14000fdd0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1530
call fcn.14001c690
test rax, rax
je 0x1401a2893
lea rcx, [rsp + 0x1838]
call fcn.14001a0a0
lea rdx, [rsp + 0x1838]
mov rcx, qword [rsp + 0x3210]
call fcn.14000fdd0
mov eax, dword [rsp + 0x1838]
add eax, 0x64
mov dword [rsp + 0x184c], eax
mov eax, dword [rsp + 0x1840]
sub eax, 0x64
mov dword [rsp + 0x1848], eax
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1530
mov r8d, dword [rsp + 0x1848]
mov edx, dword [rsp + 0x184c]
call fcn.1400d4230
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1530
mov edx, 1
call fcn.14000fda0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1d0
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
mov edx, 0x4eb
call fcn.14000fd60
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1d0
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
mov edx, 0x4ab
call fcn.14000fd60
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1d0
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
mov edx, 0x4ac
call fcn.14000fd60
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1d0
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
mov edx, 0x9f
call fcn.14000fd60
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1d0
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
mov rdx, qword [rsp + 0x3210]
mov rdx, qword [rdx + 0x9c0]
call fcn.1400103d0
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1d0
mov r8d, reloc.WS2_32.dll_inet_addr
mov edx, 0x4f6
call fcn.14000fd60
mov rcx, qword [rsp + 0x3210]
add rcx, 0x1d0
mov r8d, reloc.WS2_32.dll_inet_addr
mov rdx, qword [rsp + 0x3210]
mov rdx, qword [rdx + 0x1570]
call fcn.1400103d0
xor edx, edx
mov rcx, qword [rsp + 0x3210]
call fcn.14018da00
mov rcx, qword [rsp + 0x3210]
call fcn.1401944f0
mov rax, qword [rsp + 0x3210]
mov rax, qword [rax]
lea rdx, str.1350_782
mov rcx, qword [rsp + 0x3210]
call qword [rax + 0x2d8]
lea rax, [rsp + 0x2d38]
mov qword [rsp + 0x2d40], rax
lea rcx, [rsp + 0x2d48]
call fcn.140001000
mov qword [rsp + 0x3008], rax
mov rax, qword [rsp + 0x3008]
mov qword [rsp + 0x3010], rax
lea r8, [0x140244918]
mov rdx, qword [rsp + 0x3010]
mov rcx, qword [rsp + 0x2d40]
call fcn.1400010b0
mov qword [rsp + 0x3018], rax
mov rcx, qword [rsp + 0x3018]
call fcn.1401b8070
nop
lea rcx, [rsp + 0x2d48]
call fcn.140001470
lea rcx, [rsp + 0x1460]
call fcn.14000fb00
nop
mov dword [rsp + 0x15f8], 1
lea rcx, [rsp + 0x1460]
call fcn.1401d0bc0
lea rcx, [rsp + 0x1628]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a36dd
lea rcx, [rsp + 0x1850]
call fcn.1400db3e0
nop
lea rcx, [rsp + 0x1850]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x2d50]
call fcn.140002d80
mov qword [rsp + 0x3020], rax
mov rax, qword [rsp + 0x3020]
mov qword [rsp + 0x3028], rax
mov rcx, qword [rsp + 0x3028]
call fcn.140002e30
mov rcx, rax
call qword [sym.imp.WS2_32.dll_inet_addr]
mov dword [rsp + 0x23c0], eax
lea rcx, [rsp + 0x2d50]
call fcn.140002e10
xor eax, eax
mov word [rsp + 0x1870], ax
lea rdi, [rsp + 0x1872]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x23c2]
movzx r9d, byte [rsp + 0x23c1]
movzx r8d, byte [rsp + 0x23c0]
mov dword [rsp + 0x20], eax
lea rdx, str._d._d._d.101
lea rcx, [rsp + 0x1870]
call fcn.1400a9054
lea rcx, [rsp + 0x1630]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a2b51
lea rcx, [rsp + 0x1630]
lea rdx, [rsp + 0x1870]
call fcn.140002060
movzx eax, byte [rsp + 0x23c2]
movzx r9d, byte [rsp + 0x23c1]
movzx r8d, byte [rsp + 0x23c0]
mov dword [rsp + 0x20], eax
lea rdx, str._d._d._d.254
lea rcx, [rsp + 0x1870]
call fcn.1400a9054
lea rcx, [rsp + 0x1638]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a2bac
lea rcx, [rsp + 0x1638]
lea rdx, [rsp + 0x1870]
call fcn.140002060
lea rcx, [rsp + 0x1628]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a2bd5
lea rcx, [rsp + 0x1628]
lea rdx, [rsp + 0x1850]
call fcn.140002d20
lea rdx, str.255.255.255.0
lea rcx, [rsp + 0x1858]
call fcn.140002090
nop
lea rcx, [rsp + 0x1860]
call fcn.140002d50
nop
movzx eax, byte [rsp + 0x23c2]
movzx r9d, byte [rsp + 0x23c1]
movzx r8d, byte [rsp + 0x23c0]
mov dword [rsp + 0x20], eax
lea rdx, [0x140244988]
lea rcx, [rsp + 0x1860]
call fcn.140002be0
lea rcx, [rsp + 0x2070]
call fcn.140002d50
nop
movzx eax, byte [rsp + 0x23c2]
movzx r9d, byte [rsp + 0x23c1]
movzx r8d, byte [rsp + 0x23c0]
mov dword [rsp + 0x20], eax
lea rdx, str._d._d._d.1
lea rcx, [rsp + 0x2070]
call fcn.140002be0
lea rcx, [rsp + 0x23f0]
call fcn.140002d50
nop
mov qword [rsp + 0x2410], 0
mov ecx, 0x2c0
call fcn.1400aa210
mov qword [rsp + 0x23f8], rax
cmp qword [rsp + 0x23f8], 0
jne 0x1401a2cb4
lea rdx, [0x1402449c0]
xor ecx, ecx
call fcn.1400dc5d0
jmp 0x1401a3197
mov dword [rsp + 0x2408], 0x2c0
lea rdx, [rsp + 0x2408]
mov rcx, qword [rsp + 0x23f8]
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, 0x6f
jne 0x1401a2d18
mov rcx, qword [rsp + 0x23f8]
call fcn.1400a8710
mov ecx, dword [rsp + 0x2408]
call fcn.1400aa210
mov qword [rsp + 0x23f8], rax
cmp qword [rsp + 0x23f8], 0
jne 0x1401a2d18
lea rdx, str.Error_allocating_memory_needed_to_call_GetAdaptersinfo
xor ecx, ecx
call fcn.1400dc5d0
jmp 0x1401a3197
lea rdx, [rsp + 0x2408]
mov rcx, qword [rsp + 0x23f8]
call sub.IPHLPAPI.DLL_GetAdaptersInfo
test eax, eax
jne 0x1401a2f67
mov rax, qword [rsp + 0x23f8]
mov qword [rsp + 0x2410], rax
cmp qword [rsp + 0x2410], 0
je 0x1401a2f67
mov rdx, qword [rsp + 0x2410]
add rdx, 0x1c0
lea rcx, [rsp + 0x2418]
call fcn.1400db950
nop
lea rcx, [rsp + 0x1628]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x2418]
call fcn.140006050
test eax, eax
je 0x1401a2db4
mov rax, qword [rsp + 0x2410]
mov rax, qword [rax]
mov qword [rsp + 0x2410], rax
lea rcx, [rsp + 0x2418]
call fcn.140001470
jmp 0x1401a2d45
mov rdx, qword [rsp + 0x2410]
add rdx, 0x1d0
lea rcx, [rsp + 0x2d60]
call fcn.140007b10
mov qword [rsp + 0x3030], rax
mov rcx, qword [rsp + 0x3030]
call fcn.140007b70
movzx eax, al
test eax, eax
jne 0x1401a2df9
mov dword [rsp + 0x3038], 1
jmp 0x1401a2e04
mov dword [rsp + 0x3038], 0
movzx eax, byte [rsp + 0x3038]
mov byte [rsp + 0x2d58], al
lea rcx, [rsp + 0x2d60]
call fcn.140001470
movzx edx, byte [rsp + 0x2d58]
test edx, edx
je 0x1401a2e83
mov rdx, qword [rsp + 0x2410]
add rdx, 0x1d0
lea rcx, [rsp + 0x2d68]
call fcn.1400db950
mov qword [rsp + 0x3040], rax
mov rax, qword [rsp + 0x3040]
mov qword [rsp + 0x3048], rax
mov rdx, qword [rsp + 0x3048]
lea rcx, [rsp + 0x1858]
call fcn.140002d20
nop
lea rcx, [rsp + 0x2d68]
call fcn.140001470
mov rdx, qword [rsp + 0x2410]
add rdx, 0x1f0
lea rcx, [rsp + 0x2d78]
call fcn.140007b10
mov qword [rsp + 0x3050], rax
mov rcx, qword [rsp + 0x3050]
call fcn.140007b70
movzx eax, al
test eax, eax
jne 0x1401a2ec8
mov dword [rsp + 0x3058], 1
jmp 0x1401a2ed3
mov dword [rsp + 0x3058], 0
movzx eax, byte [rsp + 0x3058]
mov byte [rsp + 0x2d70], al
lea rcx, [rsp + 0x2d78]
call fcn.140001470
movzx edx, byte [rsp + 0x2d70]
test edx, edx
je 0x1401a2f53
mov rdx, qword [rsp + 0x2410]
add rdx, 0x1f0
lea rcx, [rsp + 0x2d80]
call fcn.1400db950
mov qword [rsp + 0x3060], rax
mov rax, qword [rsp + 0x3060]
mov qword [rsp + 0x3068], rax
mov rdx, qword [rsp + 0x3068]
lea rcx, [rsp + 0x1860]
call fcn.140002d20
nop
lea rcx, [rsp + 0x2d80]
call fcn.140001470
nop
lea rcx, [rsp + 0x2418]
call fcn.140001470
jmp 0x1401a2f67
cmp qword [rsp + 0x23f8], 0
je 0x1401a2f7f
mov rcx, qword [rsp + 0x23f8]
call fcn.1400a8710
mov ecx, 0x258
call fcn.1400aa210
mov qword [rsp + 0x2400], rax
cmp qword [rsp + 0x2400], 0
jne 0x1401a2faf
lea rdx, [0x140244aa0]
xor ecx, ecx
call fcn.1400dc5d0
jmp 0x1401a3197
mov dword [rsp + 0x2408], 0x258
lea rdx, [rsp + 0x2408]
mov rcx, qword [rsp + 0x2400]
call sub.IPHLPAPI.DLL_GetNetworkParams
cmp eax, 0x6f
jne 0x1401a3013
mov rcx, qword [rsp + 0x2400]
call fcn.1400a8710
mov ecx, dword [rsp + 0x2408]
call fcn.1400aa210
mov qword [rsp + 0x2400], rax
cmp qword [rsp + 0x2400], 0
jne 0x1401a3013
lea rdx, str.Error_allocating_memory_needed_to_call_GetNetworkParams
xor ecx, ecx
call fcn.1400dc5d0
jmp 0x1401a3197
lea rdx, [rsp + 0x2408]
mov rcx, qword [rsp + 0x2400]
call sub.IPHLPAPI.DLL_GetNetworkParams
test eax, eax
jne 0x1401a3175
mov rdx, qword [rsp + 0x2400]
add rdx, 0x118
lea rcx, [rsp + 0x2d90]
call fcn.140007b10
mov qword [rsp + 0x3070], rax
mov rcx, qword [rsp + 0x3070]
call fcn.140007b70
movzx eax, al
test eax, eax
jne 0x1401a3075
mov dword [rsp + 0x3078], 1
jmp 0x1401a3080
mov dword [rsp + 0x3078], 0
movzx eax, byte [rsp + 0x3078]
mov byte [rsp + 0x2d88], al
lea rcx, [rsp + 0x2d90]
call fcn.140001470
movzx edx, byte [rsp + 0x2d88]
test edx, edx
je 0x1401a30ff
mov rdx, qword [rsp + 0x2400]
add rdx, 0x118
lea rcx, [rsp + 0x2d98]
call fcn.1400db950
mov qword [rsp + 0x3080], rax
mov rax, qword [rsp + 0x3080]
mov qword [rsp + 0x3088], rax
mov rdx, qword [rsp + 0x3088]
lea rcx, [rsp + 0x2070]
call fcn.140002d20
nop
lea rcx, [rsp + 0x2d98]
call fcn.140001470
mov rax, qword [rsp + 0x2400]
mov rax, qword [rax + 0x110]
mov qword [rsp + 0x2420], rax
cmp qword [rsp + 0x2420], 0
je 0x1401a3175
mov rdx, qword [rsp + 0x2420]
add rdx, 8
lea rcx, [rsp + 0x2da0]
call fcn.1400db950
mov qword [rsp + 0x3090], rax
mov rax, qword [rsp + 0x3090]
mov qword [rsp + 0x3098], rax
mov rdx, qword [rsp + 0x3098]
lea rcx, [rsp + 0x23f0]
call fcn.140002d20
nop
lea rcx, [rsp + 0x2da0]
call fcn.140001470
cmp qword [rsp + 0x2400], 0
je 0x1401a318d
mov rcx, qword [rsp + 0x2400]
call fcn.1400a8710
xor eax, eax
test eax, eax
jne 0x1401a2c78
lea rcx, [rsp + 0x1640]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a31c0
lea rcx, [rsp + 0x1640]
lea rdx, [rsp + 0x1858]
call fcn.140002d20
lea rcx, [rsp + 0x1620]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a31e9
lea rcx, [rsp + 0x1620]
lea rdx, [rsp + 0x1860]
call fcn.140002d20
lea rcx, [rsp + 0x1648]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a3212
lea rcx, [rsp + 0x1648]
lea rdx, [rsp + 0x2070]
call fcn.140002d20
lea rcx, [rsp + 0x1650]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a323b
lea rcx, [rsp + 0x1650]
lea rdx, [rsp + 0x23f0]
call fcn.140002d20
lea rcx, [rsp + 0x2080]
call fcn.14000f930
nop
lea rcx, [rsp + 0x23c8]
call fcn.140081e00
nop
lea rax, [rsp + 0x2da8]
mov qword [rsp + 0x2db0], rax
lea rdx, [0x140244b80]
mov rcx, qword [rsp + 0x2db0]
call fcn.140002090
mov qword [rsp + 0x30a0], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x23c8]
mov rdx, qword [rsp + 0x30a0]
lea rcx, [rsp + 0x2080]
call fcn.1401d0720
lea rdx, [0x140241b5c]
lea rcx, [rsp + 0x2078]
call fcn.140002090
nop
mov dword [rsp + 0x2428], 0
jmp 0x1401a32d9
mov eax, dword [rsp + 0x2428]
add eax, 1
mov dword [rsp + 0x2428], eax
movsxd rdi, dword [rsp + 0x2428]
lea rcx, [rsp + 0x23c8]
call fcn.14000f920
cmp rdi, rax
jge 0x1401a3321
movsxd rdx, dword [rsp + 0x2428]
lea rcx, [rsp + 0x23c8]
call fcn.14000f810
mov r8d, dword [rax]
lea rdx, [0x140244b90]
lea rcx, [rsp + 0x2078]
call fcn.14000f8d0
jmp 0x1401a32c8
lea rcx, [rsp + 0x2078]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a3346
lea rax, [0x140244ba0]
mov qword [rsp + 0x30a8], rax
jmp 0x1401a335b
lea rcx, [rsp + 0x2078]
call fcn.1400012c0
mov qword [rsp + 0x30a8], rax
lea rcx, [rsp + 0x1608]
mov rdx, qword [rsp + 0x30a8]
call fcn.140002060
lea rax, [rsp + 0x2db8]
mov qword [rsp + 0x2dc0], rax
lea rdx, [0x140244ba8]
mov rcx, qword [rsp + 0x2dc0]
call fcn.140002090
mov qword [rsp + 0x30b0], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x23c8]
mov rdx, qword [rsp + 0x30b0]
lea rcx, [rsp + 0x2080]
call fcn.1401d0720
lea rcx, [rsp + 0x2078]
call fcn.140001960
mov dword [rsp + 0x242c], 0
jmp 0x1401a33ea
mov eax, dword [rsp + 0x242c]
add eax, 1
mov dword [rsp + 0x242c], eax
movsxd rdi, dword [rsp + 0x242c]
lea rcx, [rsp + 0x23c8]
call fcn.14000f920
cmp rdi, rax
jge 0x1401a3432
movsxd rdx, dword [rsp + 0x242c]
lea rcx, [rsp + 0x23c8]
call fcn.14000f810
mov r8d, dword [rax]
lea rdx, [0x140244bb8]
lea rcx, [rsp + 0x2078]
call fcn.14000f8d0
jmp 0x1401a33d9
lea rcx, [rsp + 0x2078]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401a3457
lea rax, [0x140244bc8]
mov qword [rsp + 0x30b8], rax
jmp 0x1401a346c
lea rcx, [rsp + 0x2078]
call fcn.1400012c0
mov qword [rsp + 0x30b8], rax
lea rcx, [rsp + 0x1610]
mov rdx, qword [rsp + 0x30b8]
call fcn.140002060
lea rax, [rsp + 0x2dc8]
mov qword [rsp + 0x2dd0], rax
lea rdx, [0x140244bd0]
mov rcx, qword [rsp + 0x2dd0]
call fcn.140002090
mov qword [rsp + 0x30c0], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x23c8]
mov rdx, qword [rsp + 0x30c0]
lea rcx, [rsp + 0x2080]
call fcn.1401d0720
lea rcx, [rsp + 0x2078]
call fcn.140001960
mov dword [rsp + 0x2430], 0
jmp 0x1401a34fb
mov eax, dword [rsp + 0x2430]
add eax, 1
mov dword [rsp + 0x2430], eax
movsxd rdi, dword [rsp + 0x2430]
lea rcx, [rsp + 0x23c8]
call fcn.14000f920
cmp rdi, rax
jge 0x1401a3543
movsxd rdx, dword [rsp + 0x2430]
lea rcx, [rsp + 0x23c8]
call fcn.14000f810
mov r8d, dword [rax]
lea rdx, [0x140244bd8]
lea rcx, [rsp + 0x2078]
call fcn.14000f8d0
jmp 0x1401a34ea
lea rcx, [rsp + 0x1688]
lea rdx, [rsp + 0x2078]
call fcn.140002d20
lea rcx, [rsp + 0x1460]
call fcn.1401b8720
test eax, eax
jne 0x1401a3576
lea rcx, [rsp + 0x1460]
call fcn.1401b8b50
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x8004
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
lea rcx, [rsp + 0x2dd8]
call fcn.1400eeba0
mov qword [rsp + 0x30c8], rax
mov rax, qword [rsp + 0x30c8]
mov qword [rsp + 0x30d0], rax
mov rcx, qword [rsp + 0x30d0]
call fcn.1400012c0
mov rdi, rax
call fcn.140010a00
mov rdx, rdi
mov rcx, rax
call fcn.1400f0f90
nop
lea rcx, [rsp + 0x2dd8]
call fcn.140001470
lea rdx, [0x140244bf8]
lea rcx, [rsp + 0x2de8]
call fcn.1400eeb20
mov qword [rsp + 0x30d8], rax
lea rdx, [0x140244be8]
mov rcx, qword [rsp + 0x30d8]
call fcn.140006cf0
mov byte [rsp + 0x2de0], al
lea rcx, [rsp + 0x2de8]
call fcn.140001470
movzx edx, byte [rsp + 0x2de0]
test edx, edx
je 0x1401a366e
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.http:__www.ccboot.com_specs.htm
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x2078]
call fcn.140001470
nop
lea rcx, [rsp + 0x23c8]
call fcn.140081e20
nop
lea rcx, [rsp + 0x2080]
call fcn.140005d50
nop
lea rcx, [rsp + 0x23f0]
call fcn.140001470
nop
lea rcx, [rsp + 0x2070]
call fcn.140001470
nop
lea rcx, [rsp + 0x1860]
call fcn.140001470
nop
lea rcx, [rsp + 0x1858]
call fcn.140001470
nop
lea rcx, [rsp + 0x1850]
call fcn.140001470
call fcn.140010e00
lea rdx, str._mini
mov rcx, qword [rax + 0x90]
call fcn.1400aa17c
test eax, eax
je 0x1401a373b
mov rcx, qword [rsp + 0x3210]
call fcn.14000f7a0
mov rcx, qword [rsp + 0x3210]
call fcn.14000f780
test eax, eax
je 0x1401a3729
mov edx, 9
mov rcx, qword [rsp + 0x3210]
call fcn.1400784a0
mov edx, 5
mov rcx, qword [rsp + 0x3210]
call fcn.1400784a0
mov dword [rsp + 0xb8], 0
mov dword [rsp + 0xa8], 0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x17a0], 0
xor eax, eax
mov word [rsp + 0xc20], ax
lea rdi, [rsp + 0xc22]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
lea rcx, [rsp + 0x2df0]
call fcn.140001000
mov qword [rsp + 0x30e0], rax
mov rax, qword [rsp + 0x30e0]
mov qword [rsp + 0x30e8], rax
lea r8, [0x140244c60]
mov rdx, qword [rsp + 0x30e8]
lea rcx, [rsp + 0x2df8]
call fcn.1400010b0
mov qword [rsp + 0x30f0], rax
mov rcx, qword [rsp + 0x30f0]
call fcn.1400012c0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
lea r9, [rsp + 0xc20]
lea r8, [0x140244c78]
lea rdx, [0x140244c88]
lea rcx, [0x140244ca0]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x2df8]
call fcn.140001470
nop
lea rcx, [rsp + 0x2df0]
call fcn.140001470
lea rdx, [rsp + 0xc20]
lea rcx, [rsp + 0x68]
call fcn.140002090
nop
lea r9, [rsp + 0x17a0]
lea r8, [0x140241c3c]
lea rdx, [rsp + 0x2e00]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x30f8], rax
mov rcx, qword [rsp + 0x30f8]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0xb8], eax
lea rcx, [rsp + 0x2e00]
call fcn.140001470
lea r9, [rsp + 0x17a0]
lea r8, [0x140242144]
lea rdx, [rsp + 0x2e08]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3100], rax
mov rcx, qword [rsp + 0x3100]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0xa8], eax
lea rcx, [rsp + 0x2e08]
call fcn.140001470
lea r9, [rsp + 0x17a0]
lea r8, [0x14024218c]
lea rdx, [rsp + 0x2e10]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3108], rax
mov rcx, qword [rsp + 0x3108]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x48], eax
lea rcx, [rsp + 0x2e10]
call fcn.140001470
movzx r8d, byte [rsp + 0xb8]
movzx eax, byte [rsp + 0xa8]
shl eax, 8
or r8d, eax
movzx eax, byte [rsp + 0x48]
shl eax, 0x10
or r8d, eax
mov rcx, qword [rsp + 0x3210]
add rcx, 0x980
mov dword [rsp + 0x20], 0
mov r9d, 0x64
xor edx, edx
call fcn.1401186f0
mov dword [rsp + 0x17a0], 0
lea rcx, [rsp + 0x2e18]
call fcn.140001000
mov qword [rsp + 0x3110], rax
mov rax, qword [rsp + 0x3110]
mov qword [rsp + 0x3118], rax
lea r8, [0x140244cc0]
mov rdx, qword [rsp + 0x3118]
lea rcx, [rsp + 0x2e20]
call fcn.1400010b0
mov qword [rsp + 0x3120], rax
mov rcx, qword [rsp + 0x3120]
call fcn.1400012c0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
lea r9, [rsp + 0xc20]
lea r8, [0x140244cd8]
lea rdx, [0x140244ce8]
lea rcx, [0x140244d00]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x2e20]
call fcn.140001470
nop
lea rcx, [rsp + 0x2e18]
call fcn.140001470
lea rdx, [rsp + 0xc20]
lea rcx, [rsp + 0x68]
call fcn.140002060
lea r9, [rsp + 0x17a0]
lea r8, [0x1402421e4]
lea rdx, [rsp + 0x2e28]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3128], rax
mov rcx, qword [rsp + 0x3128]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0xb8], eax
lea rcx, [rsp + 0x2e28]
call fcn.140001470
lea r9, [rsp + 0x17a0]
lea r8, [0x140242224]
lea rdx, [rsp + 0x2e30]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3130], rax
mov rcx, qword [rsp + 0x3130]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0xa8], eax
lea rcx, [rsp + 0x2e30]
call fcn.140001470
lea r9, [rsp + 0x17a0]
lea r8, [0x14024223c]
lea rdx, [rsp + 0x2e38]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3138], rax
mov rcx, qword [rsp + 0x3138]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x48], eax
lea rcx, [rsp + 0x2e38]
call fcn.140001470
movzx r8d, byte [rsp + 0xb8]
movzx eax, byte [rsp + 0xa8]
shl eax, 8
or r8d, eax
movzx eax, byte [rsp + 0x48]
shl eax, 0x10
or r8d, eax
mov rcx, qword [rsp + 0x3210]
add rcx, 0x980
mov dword [rsp + 0x20], 0
mov r9d, 0x64
mov edx, 1
call fcn.1401186f0
mov dword [rsp + 0x17a0], 0
lea rcx, [rsp + 0x2e40]
call fcn.140001000
mov qword [rsp + 0x3140], rax
mov rax, qword [rsp + 0x3140]
mov qword [rsp + 0x3148], rax
lea r8, [0x140244d20]
mov rdx, qword [rsp + 0x3148]
lea rcx, [rsp + 0x2e48]
call fcn.1400010b0
mov qword [rsp + 0x3150], rax
mov rcx, qword [rsp + 0x3150]
call fcn.1400012c0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
lea r9, [rsp + 0xc20]
lea r8, [0x140244d38]
lea rdx, [0x140244d50]
lea rcx, [0x140244d68]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x2e48]
call fcn.140001470
nop
lea rcx, [rsp + 0x2e40]
call fcn.140001470
lea rdx, [rsp + 0xc20]
lea rcx, [rsp + 0x68]
call fcn.140002060
lea r9, [rsp + 0x17a0]
lea r8, [0x1402423cc]
lea rdx, [rsp + 0x2e50]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3158], rax
mov rcx, qword [rsp + 0x3158]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0xb8], eax
lea rcx, [rsp + 0x2e50]
call fcn.140001470
lea r9, [rsp + 0x17a0]
lea r8, [0x140242484]
lea rdx, [rsp + 0x2e58]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3160], rax
mov rcx, qword [rsp + 0x3160]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0xa8], eax
lea rcx, [rsp + 0x2e58]
call fcn.140001470
lea r9, [rsp + 0x17a0]
lea r8, [0x1402424ac]
lea rdx, [rsp + 0x2e60]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3168], rax
mov rcx, qword [rsp + 0x3168]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x48], eax
lea rcx, [rsp + 0x2e60]
call fcn.140001470
movzx r8d, byte [rsp + 0xb8]
movzx eax, byte [rsp + 0xa8]
shl eax, 8
or r8d, eax
movzx eax, byte [rsp + 0x48]
shl eax, 0x10
or r8d, eax
mov rcx, qword [rsp + 0x3210]
add rcx, 0x980
mov dword [rsp + 0x20], 0
mov r9d, 0x64
mov edx, 2
call fcn.1401186f0
mov dword [rsp + 0x17a0], 0
lea rcx, [rsp + 0x2e68]
call fcn.140001000
mov qword [rsp + 0x3170], rax
mov rax, qword [rsp + 0x3170]
mov qword [rsp + 0x3178], rax
lea r8, [0x140244d88]
mov rdx, qword [rsp + 0x3178]
lea rcx, [rsp + 0x2e70]
call fcn.1400010b0
mov qword [rsp + 0x3180], rax
mov rcx, qword [rsp + 0x3180]
call fcn.1400012c0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
lea r9, [rsp + 0xc20]
lea r8, [0x140244da0]
lea rdx, [0x140244db8]
lea rcx, [0x140244dd0]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x2e70]
call fcn.140001470
nop
lea rcx, [rsp + 0x2e68]
call fcn.140001470
lea rdx, [rsp + 0xc20]
lea rcx, [rsp + 0x68]
call fcn.140002060
lea r9, [rsp + 0x17a0]
lea r8, [0x14024259c]
lea rdx, [rsp + 0x2e78]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3188], rax
mov rcx, qword [rsp + 0x3188]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0xb8], eax
lea rcx, [rsp + 0x2e78]
call fcn.140001470
lea r9, [rsp + 0x17a0]
lea r8, [0x140242b5c]
lea rdx, [rsp + 0x2e80]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3190], rax
mov rcx, qword [rsp + 0x3190]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0xa8], eax
lea rcx, [rsp + 0x2e80]
call fcn.140001470
lea r9, [rsp + 0x17a0]
lea r8, [0x140242c44]
lea rdx, [rsp + 0x2e88]
lea rcx, [rsp + 0x68]
call fcn.140006540
mov qword [rsp + 0x3198], rax
mov rcx, qword [rsp + 0x3198]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x48], eax
lea rcx, [rsp + 0x2e88]
call fcn.140001470
movzx r8d, byte [rsp + 0xb8]
movzx eax, byte [rsp + 0xa8]
shl eax, 8
or r8d, eax
movzx eax, byte [rsp + 0x48]
shl eax, 0x10
or r8d, eax
mov rcx, qword [rsp + 0x3210]
add rcx, 0x980
mov dword [rsp + 0x20], 0
mov r9d, 0x64
mov edx, 3
call fcn.1401186f0
mov r8, qword [rsp + 0x3210]
add r8, 0x161c
mov rdx, qword [rsp + 0x3210]
add rdx, 0x1614
mov rcx, qword [rsp + 0x3210]
add rcx, 0x160c
call sub.KERNEL32.dll_GetSystemTimes
mov r8, qword [rsp + 0x3210]
add r8, 0x1630
xor edx, edx
xor ecx, ecx
call sub.pdh.dll_PdhOpenQueryW
mov dword [rsp + 0xc10], eax
cmp dword [rsp + 0xc10], 0
jne 0x1401a4005
mov r9, qword [rsp + 0x3210]
add r9, 0x1638
xor r8d, r8d
lea rdx, str.Processor_Information__Total___Processor_Time
mov rcx, qword [rsp + 0x3210]
mov rcx, qword [rcx + 0x1630]
call sub.pdh.dll_PdhAddCounterW
mov dword [rsp + 0xc10], eax
cmp dword [rsp + 0xc10], 0
jne 0x1401a4005
mov rax, qword [rsp + 0x3210]
mov dword [rax + 0x1640], 1
xor r9d, r9d
mov r8d, 0x3e8
mov edx, 1
mov rcx, qword [rsp + 0x3210]
call fcn.14000f740
xor r9d, r9d
mov r8d, 0x36ee80
mov edx, 2
mov rcx, qword [rsp + 0x3210]
call fcn.14000f740
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x3210]
lea r8, [0x1401936f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdx, rax
mov rax, qword [rsp + 0x3210]
mov qword [rax + 0x950], rdx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x3210]
lea r8, [0x1401a0dd0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdx, rax
mov rax, qword [rsp + 0x3210]
mov qword [rax + 0x958], rdx
mov dword [rsp + 0x1440], 0x9a
mov dword [rsp + 0x1444], 0x9c
mov dword [rsp + 0x1448], 0x9d
mov dword [rsp + 0x144c], 0xd3
mov rcx, qword [rsp + 0x3210]
add rcx, 0x3d8
mov r8d, 4
lea rdx, [rsp + 0x1440]
call fcn.1400885b4
mov rcx, qword [rsp + 0x3210]
add rcx, 0x3d8
mov dword [rsp + 0x20], 0x258
mov r9d, 0x8000000
mov r8d, ILFree
xor edx, edx
call fcn.140088454
mov rcx, qword [rsp + 0x3210]
add rcx, 0x3d8
mov dword [rsp + 0x20], 0
mov r9d, 0x8000000
mov r8d, 0x9c
mov edx, 1
call fcn.140088454
mov rcx, qword [rsp + 0x3210]
add rcx, 0x3d8
mov dword [rsp + 0x20], 0xfa
xor r9d, r9d
mov r8d, 0x9d
mov edx, 2
call fcn.140088454
mov rcx, qword [rsp + 0x3210]
add rcx, 0x3d8
mov dword [rsp + 0x20], reloc.OLEAUT32.dll_DllRegisterServer
xor r9d, r9d
mov r8d, 0xd3
mov edx, 3
call fcn.140088454
mov rcx, qword [rsp + 0x3210]
add rcx, 0x3d8
mov r9d, 1
lea r8, [0x140242d14]
xor edx, edx
call fcn.140088058
mov rcx, qword [rsp + 0x3210]
add rcx, 0x3d8
mov r9d, 1
lea r8, [0x140242e4c]
mov edx, 1
call fcn.140088058
mov rcx, qword [rsp + 0x3210]
add rcx, 0x3d8
mov r9d, 1
lea r8, [0x140242e5c]
mov edx, 2
call fcn.140088058
mov rcx, qword [rsp + 0x3210]
add rcx, 0x3d8
mov r9d, 1
lea r8, [0x140242ebc]
mov edx, 3
call fcn.140088058
call fcn.14018faa0
test eax, eax
jmp 0x1401a425b
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x60], 0
mov qword [rsp + 0xc18], 0
mov qword [rsp + 0x1428], 0
mov edx, 0x400
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
je 0x1401a461a
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov dword [rax], 0x80c008c8
mov rax, qword [rsp + 0x60]
mov dword [rax + 4], 8
mov ecx, 1
mov rax, qword [rsp + 0x60]
mov word [rax + 8], cx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
mov word [rax + 0xa], cx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
mov word [rax + 0xc], cx
mov ecx, 0xf0
mov rax, qword [rsp + 0x60]
mov word [rax + 0xe], cx
mov ecx, 0x2e
mov rax, qword [rsp + 0x60]
mov word [rax + 0x10], cx
mov rax, qword [rsp + 0x60]
add rax, 0x12
mov qword [rsp + 0x1428], rax
xor ecx, ecx
mov rax, qword [rsp + 0x1428]
mov word [rax], cx
mov rax, qword [rsp + 0x1428]
add rax, 2
mov qword [rsp + 0x1428], rax
xor ecx, ecx
mov rax, qword [rsp + 0x1428]
mov word [rax], cx
mov rax, qword [rsp + 0x1428]
add rax, 2
mov qword [rsp + 0x1428], rax
call fcn.140010a50
mov rdx, rax
lea rcx, [rsp + 0x2e90]
call fcn.1400eeb20
mov qword [rsp + 0x31a0], rax
mov rax, qword [rsp + 0x31a0]
mov qword [rsp + 0x31a8], rax
mov rcx, qword [rsp + 0x31a8]
call fcn.1400012c0
mov rdx, rax
lea rcx, [rsp + 0x2e98]
call fcn.1400db9d0
mov qword [rsp + 0x31b0], rax
mov rcx, qword [rsp + 0x31b0]
call fcn.1400012c0
mov rdx, rax
mov rcx, qword [rsp + 0x1428]
call fcn.1400a9460
lea rcx, [rsp + 0x2e98]
call fcn.140001470
nop
lea rcx, [rsp + 0x2e90]
call fcn.140001470
mov rcx, qword [rsp + 0x1428]
call fcn.1400a81f4
mov rdx, rax
mov rax, qword [rsp + 0x1428]
lea rax, [rax + rdx*2 + 2]
mov qword [rsp + 0x1428], rax
mov ecx, 8
mov rax, qword [rsp + 0x1428]
mov word [rax], cx
mov rax, qword [rsp + 0x1428]
add rax, 2
mov qword [rsp + 0x1428], rax
lea rdx, [0x140244ec8]
mov rcx, qword [rsp + 0x1428]
call fcn.1400a9460
mov rcx, qword [rsp + 0x1428]
call fcn.1400a81f4
mov rdx, rax
mov rax, qword [rsp + 0x1428]
lea rax, [rax + rdx*2 + 2]
mov qword [rsp + 0x1428], rax
mov rax, qword [rsp + 0x1428]
add rax, 3
xor edx, edx
mov ecx, 4
div rcx
shl rax, 2
mov qword [rsp + 0x1428], rax
mov rax, qword [rsp + 0x1428]
mov qword [rsp + 0xc18], rax
mov ecx, 0x1d
mov rax, qword [rsp + 0xc18]
mov word [rax + 8], cx
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rax, qword [rsp + 0xc18]
mov word [rax + 0xa], cx
mov ecx, UnRegisterTypeLib
mov rax, qword [rsp + 0xc18]
mov word [rax + 0xc], cx
mov ecx, reloc.WS2_32.dll_listen
mov rax, qword [rsp + 0xc18]
mov word [rax + 0xe], cx
mov ecx, 0x64
mov rax, qword [rsp + 0xc18]
mov word [rax + 0x10], cx
mov rax, qword [rsp + 0xc18]
mov dword [rax], 0x50800000
mov rax, qword [rsp + 0xc18]
mov dword [rax + 4], 0
mov rax, qword [rsp + 0xc18]
add rax, 0x12
mov qword [rsp + 0x1428], rax
lea rdx, [0x140244ee8]
mov rcx, qword [rsp + 0x1428]
call fcn.1400a9460
lea rcx, [0x140244f10]
call fcn.1400a81f4
mov rdx, rax
mov rax, qword [rsp + 0x1428]
lea rax, [rax + rdx*2 + 2]
mov qword [rsp + 0x1428], rax
xor ecx, ecx
mov rax, qword [rsp + 0x1428]
mov word [rax], cx
mov rax, qword [rsp + 0x1428]
add rax, 2
mov qword [rsp + 0x1428], rax
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
call fcn.14000f720
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
mov rdx, rax
mov rax, qword [rsp + 0x3210]
mov qword [rax + 0x970], rdx
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rax, qword [rsp + 0x3210]
cmp qword [rax + 0x970], 0
je 0x1401a461a
mov rcx, qword [rsp + 0x3210]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, 0x64
mov rcx, qword [rsp + 0x3210]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdx, rax
mov rax, qword [rsp + 0x3210]
mov qword [rax + 0x968], rdx
lea rcx, [rsp + 0x78]
call fcn.140007bb0
nop
lea rcx, [rsp + 0xc0]
call fcn.14000f930
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xc0]
call fcn.1401b8110
mov dword [rsp + 0x2434], 0
jmp 0x1401a4663
mov eax, dword [rsp + 0x2434]
add eax, 1
mov dword [rsp + 0x2434], eax
movsxd rdi, dword [rsp + 0x2434]
lea rcx, [rsp + 0x78]
call fcn.140007c30
cmp rdi, rax
jae 0x1401a4ae7
movsxd rdx, dword [rsp + 0x2434]
lea rcx, [rsp + 0x78]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x140244f38]
call fcn.140006050
test eax, eax
je 0x1401a46ac
jmp 0x1401a4652
lea rdx, [0x140242ff4]
lea rcx, [rsp + 0x2438]
call fcn.140002090
nop
lea rdx, [0x14024302c]
lea rcx, [rsp + 0x2448]
call fcn.140002090
nop
xor eax, eax
mov word [rsp + 0x2460], ax
lea rdi, [rsp + 0x2462]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
movsxd rdx, dword [rsp + 0x2434]
lea rcx, [rsp + 0x78]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a0
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x2ea8]
call fcn.140002230
mov qword [rsp + 0x31b8], rax
mov rax, qword [rsp + 0x31b8]
mov qword [rsp + 0x31c0], rax
lea r8, [0x14024307c]
mov rdx, qword [rsp + 0x31c0]
lea rcx, [rsp + 0x2eb0]
call fcn.1400010b0
mov qword [rsp + 0x31c8], rax
mov rcx, qword [rsp + 0x31c8]
call fcn.1400012c0
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x400
lea rdx, [rsp + 0x2460]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x1401a47ba
mov dword [rsp + 0x31d0], 1
jmp 0x1401a47c5
mov dword [rsp + 0x31d0], 0
movzx eax, byte [rsp + 0x31d0]
mov byte [rsp + 0x2ea0], al
lea rcx, [rsp + 0x2eb0]
call fcn.140001470
nop
lea rcx, [rsp + 0x2ea8]
call fcn.140001470
movzx edx, byte [rsp + 0x2ea0]
test edx, edx
je 0x1401a494e
movsxd rdx, dword [rsp + 0x2434]
lea rcx, [rsp + 0x78]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a0
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x2eb8]
call fcn.140002230
mov qword [rsp + 0x31d8], rax
mov rax, qword [rsp + 0x31d8]
mov qword [rsp + 0x31e0], rax
lea r8, [0x1402430a4]
mov rdx, qword [rsp + 0x31e0]
lea rcx, [rsp + 0x2ec0]
call fcn.1400010b0
mov qword [rsp + 0x31e8], rax
mov rcx, qword [rsp + 0x31e8]
call fcn.1400012c0
lea r9, [rsp + 0x2c78]
lea r8, [rsp + 0x2c70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x2ec0]
call fcn.140001470
nop
lea rcx, [rsp + 0x2eb8]
call fcn.140001470
mov rax, qword [rsp + 0x2c70]
pxor xmm2, xmm2
cvtsi2sd xmm2, rax
test rax, rax
jge 0x1401a48ce
addsd xmm2, qword [0x14025b050]
divsd xmm2, qword [0x14025d268]
divsd xmm2, qword [0x14025d268]
divsd xmm2, qword [0x14025d268]
movq r8, xmm2
lea rdx, [0x140244f48]
lea rcx, [rsp + 0x2438]
call fcn.140002be0
mov rdx, qword [rsp + 0x2c78]
pxor xmm2, xmm2
cvtsi2sd xmm2, rdx
test rdx, rdx
jge 0x1401a491d
addsd xmm2, qword [0x14025b050]
divsd xmm2, qword [0x14025d268]
divsd xmm2, qword [0x14025d268]
divsd xmm2, qword [0x14025d268]
movq r8, xmm2
lea rdx, [0x140244f58]
lea rcx, [rsp + 0x2448]
call fcn.140002be0
lea rcx, [rsp + 0x2448]
call fcn.1400012c0
mov rcx, rax
call fcn.1400aa37c
cvtsd2ss xmm0, xmm0
movss dword [rsp + 0x2450], xmm0
lea rcx, [rsp + 0x2438]
call fcn.1400012c0
mov rcx, rax
call fcn.1400aa37c
cvtsd2ss xmm0, xmm0
movss dword [rsp + 0x2440], xmm0
movd xmm1, dword [rsp + 0x2450]
cvtps2pd xmm1, xmm1
movd xmm0, dword [rsp + 0x2440]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x14025d0c0]
subsd xmm1, xmm0
xorpd xmm0, xmm0
comisd xmm0, xmm1
ja 0x1401a49de
movd xmm1, dword [rsp + 0x2450]
cvtps2pd xmm1, xmm1
movsd xmm0, qword [0x14025d0b8]
comisd xmm0, xmm1
jbe 0x1401a4ac7
lea rdx, [0x140244f78]
lea rcx, [rsp + 0x2ed0]
call fcn.1400eeb20
mov qword [rsp + 0x31f0], rax
lea rdx, [0x140244f68]
mov rcx, qword [rsp + 0x31f0]
call fcn.140006d30
mov byte [rsp + 0x2ec8], al
lea rcx, [rsp + 0x2ed0]
call fcn.140001470
movzx edx, byte [rsp + 0x2ec8]
test edx, edx
je 0x1401a4a4e
lea rcx, [rsp + 0x2448]
call fcn.140001470
nop
lea rcx, [rsp + 0x2438]
call fcn.140001470
jmp 0x1401a4ae7
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Your_image_disk_is_almost_full._Please_merge_your_images_to_free_disk_space._Do_you_want_to_see_how_to_merge_images_
call fcn.1400ef150
cmp eax, 6
jne 0x1401a4aaa
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.http:__www.ccboot.com_wiki_merge_image.htm
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x2448]
call fcn.140001470
nop
lea rcx, [rsp + 0x2438]
call fcn.140001470
jmp 0x1401a4ae7
lea rcx, [rsp + 0x2448]
call fcn.140001470
nop
lea rcx, [rsp + 0x2438]
call fcn.140001470
jmp 0x1401a4ae7
lea rcx, [rsp + 0x2448]
call fcn.140001470
nop
lea rcx, [rsp + 0x2438]
call fcn.140001470
jmp 0x1401a4652
mov rcx, qword [rsp + 0x3210]
call fcn.140197400
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x3210]
lea r8, [0x140195500]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x2ed8], 1
lea rcx, [rsp + 0xc0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x78]
call fcn.140007c00
nop
lea rcx, [rsp + 0x68]
call fcn.140001470
nop
lea rcx, [rsp + 0x1460]
call fcn.140005d50
nop
lea rcx, [rsp + 0x1420]
call fcn.140001470
nop
lea rcx, [rsp + 0x1450]
call fcn.140001470
nop
lea rcx, [rsp + 0x1438]
call fcn.140001470
nop
lea rcx, [rsp + 0xb0]
call fcn.140001470
mov eax, dword [rsp + 0x2ed8]
mov rcx, qword [rsp + 0x31f8]
xor rcx, rsp
call fcn.1400a8040
add rsp, 0x3200
pop rdi
ret