Function at 0x140131430
Capabilities:
Manipulate boot configuration
Read .ini file
Set socket configuration

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
sub rsp, 0xb40
mov qword [rsp + 0xac0], 0xfffffffffffffffe
mov rax, qword [0x1402aa5c0]
xor rax, rsp
mov qword [rsp + 0xb30], rax
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x48], 1
mov edx, pe_nt_image_headers64
mov rcx, qword [rsp + 0xb50]
call fcn.1401242f0
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
jne 0x1401314d7
lea r9, [0x1402371f0]
mov r8d, 0x175b
lea rdx, [0x140237208]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
mov eax, 0xffffffff
jmp 0x140132f4a
mov edx, 0x58
mov rcx, qword [rsp + 0xb50]
call fcn.1401242f0
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x14013153b
lea r9, [0x140237228]
mov r8d, 0x175f
lea rdx, [0x140237240]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x140131531
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
lea rdx, str.AuthMethod
mov rcx, qword [rsp + 0xb68]
call fcn.1400ae010
test eax, eax
jne 0x1401317b2
mov rax, qword [rsp + 0xb68]
cmp dword [rax + 0x75c], 0
je 0x1401315c2
mov rcx, qword [rsp + 0xb68]
add rcx, 0x550
lea rdx, [0x14023726c]
call fcn.1400ae010
test eax, eax
jne 0x1401315c2
cmp qword [rsp + 0x40], 0
je 0x1401315a1
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x1401315bb
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
xor eax, eax
jmp 0x140132f4a
mov rax, qword [rsp + 0xb68]
cmp dword [rax + 0x754], 0
je 0x14013162d
mov rcx, qword [rsp + 0xb68]
add rcx, 0x250
lea rdx, [0x140237274]
call fcn.1400ae010
test eax, eax
jne 0x14013162d
cmp qword [rsp + 0x40], 0
je 0x14013160c
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131626
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
xor eax, eax
jmp 0x140132f4a
mov rax, qword [rsp + 0xb68]
cmp dword [rax + 0x754], 0
jne 0x1401317ad
lea r8, [0x14023727c]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.140123390
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x1401316a9
cmp qword [rsp + 0x40], 0
je 0x140131685
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x14013169f
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x750], 1
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x754], 0
mov r8, qword [rsp + 0x50]
add r8, 0x44
mov rdx, qword [rsp + 0x50]
add rdx, 0x350
mov r9d, pe_nt_image_headers64
mov rcx, qword [rsp + 0xb50]
call fcn.140122f30
mov r9, qword [rsp + 0x50]
add r9, 0x44
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0xb88]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.1401226b0
test eax, eax
je 0x1401317a2
lea r9, [0x140237288]
mov r8d, 0x177a
lea rdx, [0x1402372a8]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x14013177e
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131798
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov eax, dword [rsp + 0x48]
add eax, 1
mov dword [rsp + 0x48], eax
jmp 0x140132f12
lea rdx, str.CHAP_A
mov rcx, qword [rsp + 0xb68]
call fcn.1400ae010
test eax, eax
jne 0x140131bfa
mov rax, qword [rsp + 0xb68]
cmp dword [rax + 0x754], 0
je 0x140131bf5
mov r9, qword [rsp + 0xb68]
add r9, 0x250
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0xb88]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0xb68]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.1401226b0
test eax, eax
je 0x14013189f
lea r9, [0x1402372d0]
mov r8d, 0x1780
lea rdx, [0x1402372f0]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x14013187b
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131895
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
lea r8, [0x140237310]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.140123390
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x140131906
cmp qword [rsp + 0x40], 0
je 0x1401318e2
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x1401318fc
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x750], 1
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x754], 0
mov rdx, qword [rsp + 0xb58]
add rdx, 0x60
mov r8d, 1
mov rcx, qword [rsp + 0xb50]
call fcn.140122ba0
mov r11, qword [rsp + 0xb58]
movzx r9d, byte [r11 + 0x60]
lea r8, [0x14022f194]
mov edx, pe_nt_image_headers64
mov rcx, qword [rsp + 0x40]
call fcn.1400adf20
mov rdx, qword [rsp + 0x50]
add rdx, 0x350
mov r9d, pe_nt_image_headers64
mov r8, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140122f30
mov r9, qword [rsp + 0x50]
add r9, 0x350
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0xb88]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.1401226b0
test eax, eax
je 0x140131a40
lea r9, [0x140237318]
mov r8d, 0x178b
lea rdx, [0x140237338]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x140131a1c
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131a36
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
lea r8, [0x140237358]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.140123390
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x140131aa7
cmp qword [rsp + 0x40], 0
je 0x140131a83
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131a9d
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x750], 1
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x754], 0
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rcx, qword [rsp + 0xb50]
call fcn.140122ba0
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9, qword [rsp + 0x40]
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rcx, qword [rsp + 0xb50]
call fcn.140122cb0
mov rdx, qword [rsp + 0x50]
add rdx, 0x350
mov r9d, pe_nt_image_headers64
mov r8, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140122f30
mov r9, qword [rsp + 0x50]
add r9, 0x350
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0xb88]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.1401226b0
test eax, eax
je 0x140131bea
lea r9, [0x140237360]
mov r8d, 0x1797
lea rdx, [0x140237380]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x140131bc6
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131be0
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov eax, dword [rsp + 0x48]
add eax, 1
mov dword [rsp + 0x48], eax
jmp 0x140132f12
lea rdx, [0x1402373a0]
mov rcx, qword [rsp + 0xb68]
call fcn.1400ae010
test eax, eax
jne 0x140131c85
mov rax, qword [rsp + 0xb68]
cmp dword [rax + 0x754], 0
je 0x140131c3b
mov rax, qword [rsp + 0xb68]
add rax, 0x250
mov qword [rsp + 0xac8], rax
jmp 0x140131c51
mov rax, qword [rsp + 0xb68]
add rax, 0x550
mov qword [rsp + 0xac8], rax
mov rdx, qword [rsp + 0xac8]
mov rcx, qword [rsp + 0xb50]
call fcn.140122640
mov r11d, eax
mov rax, qword [rsp + 0xb58]
mov byte [rax + 0x60], r11b
mov eax, dword [rsp + 0x48]
add eax, 1
mov dword [rsp + 0x48], eax
jmp 0x140132f12
lea rdx, [0x1402373a8]
mov rcx, qword [rsp + 0xb68]
call fcn.1400ae010
test eax, eax
jne 0x1401325be
mov rax, qword [rsp + 0xb68]
cmp dword [rax + 0x754], 0
je 0x140131cca
mov rax, qword [rsp + 0xb68]
add rax, 0x250
mov qword [rsp + 0xad0], rax
jmp 0x140131ce0
mov rax, qword [rsp + 0xb68]
add rax, 0x550
mov qword [rsp + 0xad0], rax
mov r9, qword [rsp + 0xb58]
add r9, 0x61
mov dword [rsp + 0x20], reloc.OLEAUT32.dll_SafeArrayGetDim
mov r8d, pe_nt_image_headers64
mov rdx, qword [rsp + 0xad0]
mov rcx, qword [rsp + 0xb50]
call fcn.140123af0
lea r8, [0x1402373b0]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.140123390
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x140131d76
cmp qword [rsp + 0x40], 0
je 0x140131d52
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131d6c
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x750], 1
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x754], 0
mov rax, qword [rsp + 0xb70]
cmp qword [rax + 0x10], 0
jne 0x140131e44
lea r9, [0x1402373b8]
mov r8, qword [rsp + 0xb70]
mov r8, qword [r8]
mov rdx, qword [rsp + 0xb70]
mov rcx, qword [rsp + 0xb50]
call fcn.1401224e0
test eax, eax
jne 0x140131e44
mov rax, qword [rsp + 0xb68]
add rax, 0x250
mov qword [rsp + 0x20], rax
lea r9, [0x1402373c0]
mov r8d, 0x17ab
lea rdx, [0x1402373d8]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x140131e20
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131e3a
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rax, qword [rsp + 0xb70]
cmp qword [rax], 0
je 0x140131e7e
mov rdx, qword [rsp + 0x50]
add rdx, 0x350
mov r9d, pe_nt_image_headers64
mov r8, qword [rsp + 0xb70]
mov r8, qword [r8]
mov rcx, qword [rsp + 0xb50]
call fcn.140122f30
jmp 0x140131edd
lea r9, str.no_valid_user_credentials_n
mov r8d, 0x17b2
lea rdx, [0x140237418]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x140131eb9
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131ed3
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov r9, qword [rsp + 0x50]
add r9, 0x350
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0xb88]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.1401226b0
test eax, eax
je 0x140131f93
lea r9, [0x140237438]
mov r8d, 0x17b7
lea rdx, [0x140237458]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x140131f6f
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131f89
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
lea r8, [0x140237478]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.140123390
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x140131ffa
cmp qword [rsp + 0x40], 0
je 0x140131fd6
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140131ff0
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x750], 1
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x754], 0
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140122480
mov r8, qword [rsp + 0xb58]
add r8, 0x60
mov r9d, 1
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140122310
mov rax, qword [rsp + 0xb70]
cmp qword [rax + 0x10], 0
jne 0x1401320be
lea r9, str.null_shared_secret_n
mov r8d, 0x17c2
lea rdx, [0x140237498]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x140132098
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x1401320b2
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rcx, qword [rsp + 0xb70]
mov rcx, qword [rcx + 0x10]
call fcn.1400a98c0
mov r9d, eax
mov r8, qword [rsp + 0xb70]
mov r8, qword [r8 + 0x10]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140122310
mov r9, qword [rsp + 0x50]
add r9, 0x350
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rcx, qword [rsp + 0xb50]
call fcn.140122cb0
mov r8, qword [rsp + 0xb58]
add r8, 0x61
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140122310
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov r8, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.1401221d0
mov r9, qword [rsp + 0x50]
add r9, 0x350
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rcx, qword [rsp + 0xb50]
call fcn.140122cb0
mov r9, qword [rsp + 0x50]
add r9, 0x350
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0xb88]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.1401226b0
test eax, eax
je 0x14013224e
lea r9, [0x1402374b8]
mov r8d, 0x17d0
lea rdx, [0x1402374d8]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x14013222a
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140132244
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rax, qword [rsp + 0xb68]
cmp dword [rax + 0x754], 0
je 0x1401325ae
lea r8, str.CHAP_I
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.140123390
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x1401322ca
cmp qword [rsp + 0x40], 0
je 0x1401322a6
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x1401322c0
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x750], 1
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x754], 0
mov rdx, qword [rsp + 0xb58]
add rdx, 0x60
mov r8d, 1
mov rcx, qword [rsp + 0xb50]
call fcn.140122ba0
mov r11, qword [rsp + 0xb58]
movzx r9d, byte [r11 + 0x60]
lea r8, [0x14022f1e4]
mov edx, pe_nt_image_headers64
mov rcx, qword [rsp + 0x40]
call fcn.1400adf20
mov rdx, qword [rsp + 0x50]
add rdx, 0x350
mov r9d, pe_nt_image_headers64
mov r8, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140122f30
mov r9, qword [rsp + 0x50]
add r9, 0x350
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0xb88]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.1401226b0
test eax, eax
je 0x140132404
lea r9, [0x140237500]
mov r8d, 0x17dd
lea rdx, [0x140237520]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x1401323e0
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x1401323fa
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
lea r8, str.CHAP_C
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.140123390
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x14013246b
cmp qword [rsp + 0x40], 0
je 0x140132447
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140132461
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x750], 1
mov rax, qword [rsp + 0x50]
mov dword [rax + 0x754], 0
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rcx, qword [rsp + 0xb50]
call fcn.140122ba0
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9, qword [rsp + 0x40]
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rcx, qword [rsp + 0xb50]
call fcn.140122cb0
mov rdx, qword [rsp + 0x50]
add rdx, 0x350
mov r9d, pe_nt_image_headers64
mov r8, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140122f30
mov r9, qword [rsp + 0x50]
add r9, 0x350
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0xb88]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xb60]
mov rcx, qword [rsp + 0xb50]
call fcn.1401226b0
test eax, eax
je 0x1401325ae
lea r9, [0x140237548]
mov r8d, 0x17e9
lea rdx, [0x140237568]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x14013258a
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x1401325a4
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov eax, dword [rsp + 0x48]
add eax, 1
mov dword [rsp + 0x48], eax
jmp 0x140132f12
lea rdx, str.CHAP_N
mov rcx, qword [rsp + 0xb68]
call fcn.1400ae010
test eax, eax
jne 0x140132b55
mov rax, qword [rsp + 0xb68]
cmp dword [rax + 0x754], 0
je 0x140132603
mov rax, qword [rsp + 0xb68]
add rax, 0x250
mov qword [rsp + 0xad8], rax
jmp 0x140132619
mov rax, qword [rsp + 0xb68]
add rax, 0x550
mov qword [rsp + 0xad8], rax
mov rax, qword [rsp + 0xad8]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0xb70]
cmp qword [rax + 0x10], 0
jne 0x1401326c7
lea r9, str.chap
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0xb70]
mov rcx, qword [rsp + 0xb50]
call fcn.1401224e0
test eax, eax
jne 0x1401326c7
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, str.Unknown_user___s_n
mov r8d, 0x17f3
lea rdx, [0x1402375b0]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x1401326a3
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x1401326bd
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
lea rdx, [0x14022f234]
mov rcx, qword [rsp + 0x68]
call fcn.14001eb10
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x140132b45
mov rcx, qword [rsp + 0x60]
add rcx, 1
call qword [sym.imp.WSOCK32.dll_inet_addr]
cmp eax, 0xffffffff
je 0x140132b45
mov rdx, qword [rsp + 0xb50]
add rdx, 0x228
lea r8, [0x1402375d0]
lea rcx, [rsp + 0xa88]
call fcn.1400010b0
mov qword [rsp + 0xae0], rax
mov rcx, qword [rsp + 0xae0]
call fcn.14000f8f0
mov r9, rax
mov r8d, 1
lea rdx, [0x1402375e8]
lea rcx, [0x140237608]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0xa80], eax
lea rcx, [rsp + 0xa88]
call fcn.140001490
cmp dword [rsp + 0xa80], 0
je 0x140132b45
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0xa90]
call fcn.14000e700
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0xae8]
mov qword [rsp + 0xaf0], rax
mov rcx, qword [rsp + 0xaf0]
call fcn.1400118c0
mov rdx, rax
lea rcx, [rsp + 0x708]
call fcn.140002100
nop
lea rcx, [rsp + 0xa90]
call fcn.140002ea0
mov dword [rsp + 0x710], 0
lea r9, [rsp + 0x710]
lea r8, [0x14022f664]
lea rdx, [rsp + 0x718]
lea rcx, [rsp + 0x708]
call fcn.1400065a0
nop
lea r9, [rsp + 0x710]
lea r8, [0x14022f6b4]
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x708]
call fcn.1400065a0
nop
mov rcx, qword [rsp + 0xb58]
add rcx, 0xb0
call qword [sym.imp.WSOCK32.dll_inet_addr]
mov dword [rsp + 0x704], eax
lea rcx, [rsp + 0x70]
call fcn.1401d19d0
nop
lea rcx, [rsp + 0x3b0]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0xa98]
call fcn.140002e10
mov qword [rsp + 0xaf8], rax
mov rax, qword [rsp + 0xaf8]
mov qword [rsp + 0xb00], rax
mov rcx, qword [rsp + 0xb00]
call fcn.140002ec0
mov rcx, rax
call qword [sym.imp.WSOCK32.dll_inet_addr]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1401d7890
nop
lea rcx, [rsp + 0xa98]
call fcn.140002ea0
lea rcx, [rsp + 0x3c0]
call fcn.1401d19d0
nop
mov edx, dword [rsp + 0x704]
lea rcx, [rsp + 0x3c0]
call fcn.1401d7890
mov dword [rsp + 0x700], 0
cmp dword [rsp + 0x208], 0
jbe 0x140132a63
mov eax, dword [rsp + 0x558]
cmp dword [rsp + 0x208], eax
je 0x140132a63
lea rcx, [rsp + 0x210]
call fcn.14000f8f0
mov rbx, rax
lea rcx, [rsp + 0x718]
call fcn.14000f8f0
mov rdx, rbx
mov rcx, rax
call fcn.1400aa794
test eax, eax
jne 0x140132a63
mov rdx, qword [rsp + 0xb50]
add rdx, 0x228
lea r8, [0x140237618]
lea rcx, [rsp + 0xaa0]
call fcn.1400010b0
mov qword [rsp + 0xb08], rax
mov rcx, qword [rsp + 0xb08]
call fcn.14000f8f0
mov r9, rax
xor r8d, r8d
lea rdx, str.AllowReplaceOffline
lea rcx, [0x140237658]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x700], eax
lea rcx, [rsp + 0xaa0]
call fcn.140001490
cmp dword [rsp + 0x700], 0
je 0x140132a63
lea rcx, [rsp + 0x3b0]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0xab0]
call fcn.140002e10
mov qword [rsp + 0xb10], rax
mov rax, qword [rsp + 0xb10]
mov qword [rsp + 0xb18], rax
mov rcx, qword [rsp + 0xb18]
call fcn.140002ec0
mov rcx, rax
call qword [sym.imp.WSOCK32.dll_inet_addr]
xor r9d, r9d
mov r8d, eax
mov rdx, qword [rsp + 0xb50]
lea rcx, [0x1403b5ec0]
call fcn.14001b3a0
test eax, eax
jne 0x140132a17
mov dword [rsp + 0xb20], 1
jmp 0x140132a22
mov dword [rsp + 0xb20], 0
movzx eax, byte [rsp + 0xb20]
mov byte [rsp + 0xaa8], al
lea rcx, [rsp + 0xab0]
call fcn.140002ea0
movzx r11d, byte [rsp + 0xaa8]
test r11d, r11d
je 0x140132a58
lea rcx, [rsp + 0x70]
call fcn.1401bf390
jmp 0x140132a63
mov dword [rsp + 0x700], 0
cmp dword [rsp + 0x208], 0
jbe 0x140132a87
mov eax, dword [rsp + 0x558]
cmp dword [rsp + 0x208], eax
je 0x140132a87
cmp dword [rsp + 0x700], 0
je 0x140132b03
lea rcx, [rsp + 0x578]
lea rdx, [rsp + 0x3b0]
call fcn.140002db0
lea rcx, [rsp + 0x560]
lea rdx, [rsp + 0x718]
call fcn.140002db0
lea rcx, [rsp + 0x640]
lea rdx, [0x14022f704]
call fcn.1400020d0
lea rcx, [rsp + 0x3c0]
call fcn.1401d4410
mov edx, 1
xor ecx, ecx
call fcn.1401bfc60
mov r11d, dword [rsp + 0x558]
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0x8039
xor edx, edx
lea rcx, [0x1403b58d0]
call fcn.1401c2a00
nop
lea rcx, [rsp + 0x3c0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x70]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x3b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x718]
call fcn.140001490
nop
lea rcx, [rsp + 0x708]
call fcn.140001490
mov eax, dword [rsp + 0x48]
add eax, 1
mov dword [rsp + 0x48], eax
jmp 0x140132f12
lea rdx, str.CHAP_R
mov rcx, qword [rsp + 0xb68]
call fcn.1400ae010
test eax, eax
jne 0x140132f12
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140122480
mov r8, qword [rsp + 0xb58]
add r8, 0x60
mov r9d, 1
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140122310
mov r9, qword [rsp + 0xb68]
add r9, 0x350
mov rdx, qword [rsp + 0xb58]
add rdx, 0x60
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r8d, 1
mov rcx, qword [rsp + 0xb50]
call fcn.140122cb0
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9, qword [rsp + 0x40]
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rcx, qword [rsp + 0xb50]
call fcn.140122cb0
mov rax, qword [rsp + 0xb70]
cmp qword [rax + 0x10], 0
jne 0x140132c79
lea r9, str.Null_shared_secret_in_initiator_n
mov r8d, 0x1838
lea rdx, [0x140237698]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x140132c53
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140132c6d
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, 0xffffffff
jmp 0x140132f4a
mov rcx, qword [rsp + 0xb70]
mov rcx, qword [rcx + 0x10]
call fcn.1400a98c0
mov r9d, eax
mov r8, qword [rsp + 0xb70]
mov r8, qword [r8 + 0x10]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140122310
mov r8, qword [rsp + 0xb58]
add r8, 0x61
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140122310
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov r8, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.1401221d0
mov r11, qword [rsp + 0xb68]
cmp dword [r11 + 0x754], 0
je 0x140132d17
mov rax, qword [rsp + 0xb68]
add rax, 0x250
mov qword [rsp + 0xb28], rax
jmp 0x140132d2d
mov rax, qword [rsp + 0xb68]
add rax, 0x550
mov qword [rsp + 0xb28], rax
mov dword [rsp + 0x20], reloc.OLEAUT32.dll_SafeArrayGetDim
lea r9, [rsp + 0x728]
mov r8d, pe_nt_image_headers64
mov rdx, qword [rsp + 0xb28]
mov rcx, qword [rsp + 0xb50]
call fcn.140123af0
mov r9, qword [rsp + 0xb68]
add r9, 0x250
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rcx, qword [rsp + 0xb50]
call fcn.140122cb0
mov rdx, qword [rsp + 0xb58]
add rdx, 0x61
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0x728]
call fcn.1400ad3e0
test eax, eax
je 0x140132eda
lea rcx, [rsp + 0x740]
call fcn.1401d19d0
nop
mov rcx, qword [rsp + 0xb58]
add rcx, 0xb0
call qword [sym.imp.WSOCK32.dll_inet_addr]
mov edx, eax
lea rcx, [rsp + 0x740]
call fcn.1401d7890
lea rcx, [rsp + 0x9c0]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
test eax, eax
jne 0x140132e39
cmp qword [rsp + 0x40], 0
je 0x140132e1a
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140132e34
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
jmp 0x140132ecb
movzx ecx, byte [rsp + 0x728]
mov rax, qword [rsp + 0xb58]
movzx eax, byte [rax + 0x61]
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], eax
lea r9, str.Initiator_authentication_failed__x__x_n
mov r8d, 0x185a
lea rdx, [0x1402376e0]
mov rcx, qword [rsp + 0xb50]
call fcn.1401230d0
cmp qword [rsp + 0x40], 0
je 0x140132e90
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140132eaa
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov dword [rsp + 0xab8], 0xffffffff
lea rcx, [rsp + 0x740]
call fcn.140014ec0
mov eax, dword [rsp + 0xab8]
jmp 0x140132f4a
lea rcx, [rsp + 0x740]
call fcn.140014ec0
jmp 0x140132f0e
cmp qword [rsp + 0x40], 0
je 0x140132ef4
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140132f0e
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
xor eax, eax
jmp 0x140132f4a
cmp qword [rsp + 0x40], 0
je 0x140132f2c
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
cmp qword [rsp + 0x58], 0
je 0x140132f46
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xb50]
call fcn.140124210
mov eax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0xb30]
xor rcx, rsp
call fcn.1400a8790
add rsp, 0xb40
pop rbx
ret