Function at 0x1401b42b0
Capabilities:
Check for time delay via gettickcount
Check if file exists
Copy file
Create directory
Create process on windows
Delete file
Get common file path
Get disk information
Get disk size
Manipulate boot configuration
Open clipboard
Read .ini file
Write clipboard data

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x10f00
call fcn.1401e9500
sub rsp, rax
mov qword [rsp + 0x104c8], 0xfffffffffffffffe
mov rax, qword [0x1402bd5c0]
xor rax, rsp
mov qword [rsp + 0x10ef8], rax
mov dword [rsp + 0x104c0], 0
mov rax, qword [rsp + 0x10f18]
mov qword [rsp + 0x104d0], rax
cmp qword [rsp + 0x104d0], 0x800e
ja 0x1401b4361
cmp qword [rsp + 0x104d0], 0x800e
je 0x1401b57c9
cmp qword [rsp + 0x104d0], 0x10b
je 0x1401bf637
cmp qword [rsp + 0x104d0], 0x10c
je 0x1401bf462
cmp qword [rsp + 0x104d0], 0x10d
je 0x1401bf28d
jmp case.0x1401b43ca.32802
cmp qword [rsp + 0x104d0], 0x8144
ja 0x1401b43cc
cmp qword [rsp + 0x104d0], 0x8144
je 0x1401bd9c5
mov rax, qword [rsp + 0x104d0]
sub rax, 0x800f
mov qword [rsp + 0x104d0], rax
cmp qword [rsp + 0x104d0], 0xe2
ja case.0x1401b43ca.32802
lea rcx, [0x140000000]
mov rax, qword [rsp + 0x104d0]
movzx eax, byte [rcx + rax + 0x1bfb58]
mov eax, dword [rcx + rax*4 + 0x1bfb08]
add rax, rcx
jmp rax
cmp qword [rsp + 0x104d0], 0x8146
je 0x1401bdc76
cmp qword [rsp + 0x104d0], 0x8154
je 0x1401bdbba
cmp qword [rsp + 0x104d0], 0x8166
je 0x1401bf80c
jmp case.0x1401b43ca.32802
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jl 0x1401b44ad
cmp dword [rsp + 0x40], 0
jl 0x1401b44ad
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r9d, 1
mov r8d, dword [rsp + 0x40]
lea rdx, [rsp + 0xfce0]
call fcn.140084928
mov qword [rsp + 0x104d8], rax
mov rcx, qword [rsp + 0x104d8]
call fcn.140050200
mov rcx, rax
call fcn.1400d9390
lea rcx, [rsp + 0xfce0]
call fcn.140007060
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x40]
call fcn.14000d6f0
mov dword [rsp + 0x40], eax
jmp 0x1401b4431
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
jl 0x1401b46d9
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x44]
lea rdx, [rsp + 0xfce8]
call fcn.140084928
mov qword [rsp + 0x104e0], rax
mov rax, qword [rsp + 0x104e0]
mov qword [rsp + 0x104e8], rax
lea rdx, [0x14025d2a0]
lea rcx, [rsp + 0xfcf0]
call fcn.1400f05c0
mov qword [rsp + 0x104f0], rax
mov rax, qword [rsp + 0x104f0]
mov qword [rsp + 0x104f8], rax
lea r8, [0x14025d244]
mov rdx, qword [rsp + 0x104f8]
lea rcx, [rsp + 0xfcf8]
call fcn.1400010b0
mov qword [rsp + 0x10500], rax
mov rax, qword [rsp + 0x10500]
mov qword [rsp + 0x10508], rax
mov r8, qword [rsp + 0x104e8]
mov rdx, qword [rsp + 0x10508]
lea rcx, [rsp + 0xfd00]
call fcn.140006c50
mov qword [rsp + 0x10510], rax
mov rax, qword [rsp + 0x10510]
mov qword [rsp + 0x10518], rax
lea r8, [0x14025c8ec]
mov rdx, qword [rsp + 0x10518]
lea rcx, [rsp + 0x48]
call fcn.1400010b0
nop
lea rcx, [rsp + 0xfd00]
call fcn.140007060
nop
lea rcx, [rsp + 0xfcf8]
call fcn.140007060
nop
lea rcx, [rsp + 0xfcf0]
call fcn.140007060
nop
lea rcx, [rsp + 0xfce8]
call fcn.140007060
lea rcx, [rsp + 0x48]
call fcn.140050200
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400f0bf0
cmp eax, 7
jne 0x1401b4632
lea rcx, [rsp + 0x48]
call fcn.140007060
jmp case.0x1401b43ca.32802
cmp dword [rsp + 0x44], 0
jl 0x1401b46cf
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x44]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8044
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x44]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x44]
call fcn.14000d6f0
mov dword [rsp + 0x44], eax
jmp 0x1401b4632
lea rcx, [rsp + 0x48]
call fcn.140007060
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0
jl 0x1401b48cb
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x50]
lea rdx, [rsp + 0xfd08]
call fcn.140084928
mov qword [rsp + 0x10520], rax
mov rax, qword [rsp + 0x10520]
mov qword [rsp + 0x10528], rax
lea rdx, str.Shutdown_it_
lea rcx, [rsp + 0xfd10]
call fcn.1400f05c0
mov qword [rsp + 0x10530], rax
mov rax, qword [rsp + 0x10530]
mov qword [rsp + 0x10538], rax
lea r8, [0x14025d2bc]
mov rdx, qword [rsp + 0x10538]
lea rcx, [rsp + 0xfd18]
call fcn.1400010b0
mov qword [rsp + 0x10540], rax
mov rax, qword [rsp + 0x10540]
mov qword [rsp + 0x10548], rax
mov r8, qword [rsp + 0x10528]
mov rdx, qword [rsp + 0x10548]
lea rcx, [rsp + 0xfd20]
call fcn.140006c50
mov qword [rsp + 0x10550], rax
mov rax, qword [rsp + 0x10550]
mov qword [rsp + 0x10558], rax
lea r8, [0x14025c93c]
mov rdx, qword [rsp + 0x10558]
lea rcx, [rsp + 0x58]
call fcn.1400010b0
nop
lea rcx, [rsp + 0xfd20]
call fcn.140007060
nop
lea rcx, [rsp + 0xfd18]
call fcn.140007060
nop
lea rcx, [rsp + 0xfd10]
call fcn.140007060
nop
lea rcx, [rsp + 0xfd08]
call fcn.140007060
lea rcx, [rsp + 0x58]
call fcn.140050200
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400f0bf0
cmp eax, 7
jne 0x1401b485e
lea rcx, [rsp + 0x58]
call fcn.140007060
jmp case.0x1401b43ca.32802
cmp dword [rsp + 0x50], 0
jl 0x1401b48c1
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x50]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
mov r9, 0xffffffffffffffff
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x50]
call fcn.14000d6f0
mov dword [rsp + 0x50], eax
jmp 0x1401b485e
lea rcx, [rsp + 0x58]
call fcn.140007060
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jl 0x1401b4af7
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x60]
lea rdx, [rsp + 0xfd28]
call fcn.140084928
mov qword [rsp + 0x10560], rax
mov rax, qword [rsp + 0x10560]
mov qword [rsp + 0x10568], rax
lea rdx, str.Reboot_it_
lea rcx, [rsp + 0xfd30]
call fcn.1400f05c0
mov qword [rsp + 0x10570], rax
mov rax, qword [rsp + 0x10570]
mov qword [rsp + 0x10578], rax
lea r8, [0x14025d2e4]
mov rdx, qword [rsp + 0x10578]
lea rcx, [rsp + 0xfd38]
call fcn.1400010b0
mov qword [rsp + 0x10580], rax
mov rax, qword [rsp + 0x10580]
mov qword [rsp + 0x10588], rax
mov r8, qword [rsp + 0x10568]
mov rdx, qword [rsp + 0x10588]
lea rcx, [rsp + 0xfd40]
call fcn.140006c50
mov qword [rsp + 0x10590], rax
mov rax, qword [rsp + 0x10590]
mov qword [rsp + 0x10598], rax
lea r8, [0x14025caec]
mov rdx, qword [rsp + 0x10598]
lea rcx, [rsp + 0x68]
call fcn.1400010b0
nop
lea rcx, [rsp + 0xfd40]
call fcn.140007060
nop
lea rcx, [rsp + 0xfd38]
call fcn.140007060
nop
lea rcx, [rsp + 0xfd30]
call fcn.140007060
nop
lea rcx, [rsp + 0xfd28]
call fcn.140007060
lea rcx, [rsp + 0x68]
call fcn.140050200
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400f0bf0
cmp eax, 7
jne 0x1401b4a50
lea rcx, [rsp + 0x68]
call fcn.140007060
jmp case.0x1401b43ca.32802
cmp dword [rsp + 0x60], 0
jl 0x1401b4aed
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x60]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8044
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x60]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
mov r9d, 2
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x60]
call fcn.14000d6f0
mov dword [rsp + 0x60], eax
jmp 0x1401b4a50
lea rcx, [rsp + 0x68]
call fcn.140007060
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 0
jl 0x1401b4ce5
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x70]
lea rdx, [rsp + 0xfd48]
call fcn.140084928
mov qword [rsp + 0x105a0], rax
mov rax, qword [rsp + 0x105a0]
mov qword [rsp + 0x105a8], rax
lea rdx, str.Logoff_it_
lea rcx, [rsp + 0xfd50]
call fcn.1400f05c0
mov qword [rsp + 0x105b0], rax
mov rax, qword [rsp + 0x105b0]
mov qword [rsp + 0x105b8], rax
lea r8, [0x14025d308]
mov rdx, qword [rsp + 0x105b8]
lea rcx, [rsp + 0xfd58]
call fcn.1400010b0
mov qword [rsp + 0x105c0], rax
mov rax, qword [rsp + 0x105c0]
mov qword [rsp + 0x105c8], rax
mov r8, qword [rsp + 0x105a8]
mov rdx, qword [rsp + 0x105c8]
lea rcx, [rsp + 0xfd60]
call fcn.140006c50
mov qword [rsp + 0x105d0], rax
mov rax, qword [rsp + 0x105d0]
mov qword [rsp + 0x105d8], rax
lea r8, [0x14025cb5c]
mov rdx, qword [rsp + 0x105d8]
lea rcx, [rsp + 0x78]
call fcn.1400010b0
nop
lea rcx, [rsp + 0xfd60]
call fcn.140007060
nop
lea rcx, [rsp + 0xfd58]
call fcn.140007060
nop
lea rcx, [rsp + 0xfd50]
call fcn.140007060
nop
lea rcx, [rsp + 0xfd48]
call fcn.140007060
lea rcx, [rsp + 0x78]
call fcn.140050200
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400f0bf0
cmp eax, 7
jne 0x1401b4c7c
lea rcx, [rsp + 0x78]
call fcn.140007060
jmp case.0x1401b43ca.32802
cmp dword [rsp + 0x70], 0
jl 0x1401b4cdb
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x70]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x70]
call fcn.14000d6f0
mov dword [rsp + 0x70], eax
jmp 0x1401b4c7c
lea rcx, [rsp + 0x78]
call fcn.140007060
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x80], eax
cmp dword [rsp + 0x80], 0
jl 0x1401b4d69
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x8b0], edx
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x80]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8042
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x84], eax
cmp dword [rsp + 0x84], 0
jl 0x1401b4e0b
cmp dword [rsp + 0x84], 0
jl 0x1401b4e0b
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x84]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8049
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x84]
call fcn.14000d6f0
mov dword [rsp + 0x84], eax
jmp 0x1401b4da0
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x88], eax
cmp dword [rsp + 0x88], 0
jl 0x1401b4e8f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x8b0], edx
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x88]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8043
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
xor eax, eax
jmp 0x1401bfaef
xor edx, edx
lea rcx, [rsp + 0x90]
call fcn.140178260
nop
lea rcx, [rsp + 0x90]
call fcn.1400830e4
nop
lea rcx, [rsp + 0x90]
call fcn.1401781b0
xor eax, eax
jmp 0x1401bfaef
xor r8d, r8d
lea rdx, [rsp + 0xfd70]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x105e0], rax
mov rax, qword [rsp + 0x105e0]
mov qword [rsp + 0x105e8], rax
mov eax, dword [rsp + 0x104c0]
or eax, 1
mov dword [rsp + 0x104c0], eax
lea rdx, [0x14025d328]
mov rcx, qword [rsp + 0x105e8]
call fcn.140006dd0
movzx eax, al
test eax, eax
jne 0x1401b4f7d
xor r8d, r8d
lea rdx, [rsp + 0xfd78]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x105f0], rax
mov eax, dword [rsp + 0x104c0]
or eax, 2
mov dword [rsp + 0x104c0], eax
lea rdx, [0x14025d348]
mov rcx, qword [rsp + 0x105f0]
call fcn.140006dd0
movzx eax, al
test eax, eax
jne 0x1401b4f7d
mov dword [rsp + 0x105f8], 0
jmp 0x1401b4f88
mov dword [rsp + 0x105f8], 1
movzx eax, byte [rsp + 0x105f8]
mov byte [rsp + 0xfd68], al
mov eax, dword [rsp + 0x104c0]
and eax, 2
test eax, eax
je 0x1401b4fbb
and dword [rsp + 0x104c0], 0xfffffffd
lea rcx, [rsp + 0xfd78]
call fcn.140007060
nop
mov eax, dword [rsp + 0x104c0]
and eax, 1
test eax, eax
je 0x1401b4fde
and dword [rsp + 0x104c0], 0xfffffffe
lea rcx, [rsp + 0xfd70]
call fcn.140007060
movzx eax, byte [rsp + 0xfd68]
test eax, eax
je 0x1401b50ed
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x4f0], eax
cmp dword [rsp + 0x4f0], 0
jge 0x1401b5023
jmp case.0x1401b43ca.32802
mov r8d, 0xffffffff
mov edx, 0x144
mov ecx, 0x76
call fcn.1400f2960
cmp eax, 6
jne 0x1401b50ed
cmp dword [rsp + 0x4f0], 0
jl 0x1401b50ed
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x4f0]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x4f0]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x4f0]
call fcn.14000d6f0
mov dword [rsp + 0x4f0], eax
jmp 0x1401b5041
xor eax, eax
jmp 0x1401bfaef
xor r8d, r8d
lea rdx, [rsp + 0xfd88]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x10600], rax
mov rax, qword [rsp + 0x10600]
mov qword [rsp + 0x10608], rax
mov eax, dword [rsp + 0x104c0]
or eax, 4
mov dword [rsp + 0x104c0], eax
lea rdx, [0x14025d370]
mov rcx, qword [rsp + 0x10608]
call fcn.140006dd0
movzx eax, al
test eax, eax
jne 0x1401b51a9
xor r8d, r8d
lea rdx, [rsp + 0xfd90]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x10610], rax
mov eax, dword [rsp + 0x104c0]
or eax, 8
mov dword [rsp + 0x104c0], eax
lea rdx, [0x14025d390]
mov rcx, qword [rsp + 0x10610]
call fcn.140006dd0
movzx eax, al
test eax, eax
jne 0x1401b51a9
mov dword [rsp + 0x10618], 0
jmp 0x1401b51b4
mov dword [rsp + 0x10618], 1
movzx eax, byte [rsp + 0x10618]
mov byte [rsp + 0xfd80], al
mov eax, dword [rsp + 0x104c0]
and eax, 8
test eax, eax
je 0x1401b51e7
and dword [rsp + 0x104c0], 0xfffffff7
lea rcx, [rsp + 0xfd90]
call fcn.140007060
nop
mov eax, dword [rsp + 0x104c0]
and eax, 4
test eax, eax
je 0x1401b520a
and dword [rsp + 0x104c0], 0xfffffffb
lea rcx, [rsp + 0xfd88]
call fcn.140007060
movzx eax, byte [rsp + 0xfd80]
test eax, eax
je 0x1401b52d7
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x4f4], eax
cmp dword [rsp + 0x4f4], 0
jge 0x1401b524f
jmp case.0x1401b43ca.32802
mov r8d, 0xffffffff
mov edx, 0x144
mov ecx, 0x77
call fcn.1400f2960
cmp eax, 6
jne 0x1401b52d7
cmp dword [rsp + 0x4f4], 0
jl 0x1401b52d7
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x4f4]
call fcn.140083bd4
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x4f4]
call fcn.14000d6f0
mov dword [rsp + 0x4f4], eax
jmp 0x1401b5269
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
call fcn.1401a4fe0
xor eax, eax
jmp 0x1401bfaef
xor r8d, r8d
lea rdx, [rsp + 0xfda0]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x10620], rax
mov rax, qword [rsp + 0x10620]
mov qword [rsp + 0x10628], rax
mov eax, dword [rsp + 0x104c0]
or eax, 0x10
mov dword [rsp + 0x104c0], eax
lea rdx, [0x14025d3b8]
mov rcx, qword [rsp + 0x10628]
call fcn.140006dd0
movzx eax, al
test eax, eax
jne 0x1401b53a7
xor r8d, r8d
lea rdx, [rsp + 0xfda8]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x10630], rax
mov eax, dword [rsp + 0x104c0]
or eax, 0x20
mov dword [rsp + 0x104c0], eax
lea rdx, [0x14025d3d8]
mov rcx, qword [rsp + 0x10630]
call fcn.140006dd0
movzx eax, al
test eax, eax
jne 0x1401b53a7
mov dword [rsp + 0x10638], 0
jmp 0x1401b53b2
mov dword [rsp + 0x10638], 1
movzx eax, byte [rsp + 0x10638]
mov byte [rsp + 0xfd98], al
mov eax, dword [rsp + 0x104c0]
and eax, 0x20
test eax, eax
je 0x1401b53e5
and dword [rsp + 0x104c0], 0xffffffdf
lea rcx, [rsp + 0xfda8]
call fcn.140007060
nop
mov eax, dword [rsp + 0x104c0]
and eax, 0x10
test eax, eax
je 0x1401b5408
and dword [rsp + 0x104c0], 0xffffffef
lea rcx, [rsp + 0xfda0]
call fcn.140007060
movzx eax, byte [rsp + 0xfd98]
test eax, eax
je 0x1401b57c2
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x528], eax
cmp dword [rsp + 0x528], 0
jge 0x1401b544f
xor eax, eax
jmp 0x1401bfaef
lea rcx, [rsp + 0x530]
call fcn.1401e0790
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x528]
call fcn.140083bd4
mov dword [rsp + 0x6c8], eax
lea rcx, [rsp + 0x530]
call fcn.1401e5810
mov edx, dword [rsp + 0x6c8]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov dword [rsp + 0x870], eax
cmp dword [rsp + 0x870], 0
jne 0x1401b54e4
mov dword [rsp + 0xfdb0], 0
lea rcx, [rsp + 0x530]
call fcn.140005e30
mov eax, dword [rsp + 0xfdb0]
jmp 0x1401bfaef
lea rcx, [rsp + 0x8b8]
call fcn.140002d10
nop
mov r8d, dword [rsp + 0x870]
lea rdx, [0x14025d400]
lea rcx, [rsp + 0x8b8]
call fcn.140002ba0
lea rcx, [rsp + 0x8b8]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x8b0], rax
lea rcx, [rsp + 0x4f8]
call fcn.1400777f0
nop
lea r8, [rsp + 0x6d0]
lea rdx, [rsp + 0x8b8]
lea rcx, [rsp + 0xfdb8]
call fcn.140006c50
mov qword [rsp + 0x10640], rax
mov rax, qword [rsp + 0x10640]
mov qword [rsp + 0x10648], rax
lea r8, [0x14025d410]
mov rdx, qword [rsp + 0x10648]
lea rcx, [rsp + 0xfdc0]
call fcn.1400010b0
mov qword [rsp + 0x10650], rax
mov rax, qword [rsp + 0x10650]
mov qword [rsp + 0x10658], rax
mov rcx, qword [rsp + 0x10658]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x4f8]
call fcn.1400778f4
mov dword [rsp + 0x8a8], eax
lea rcx, [rsp + 0xfdc0]
call fcn.140007060
nop
lea rcx, [rsp + 0xfdb8]
call fcn.140007060
lea rcx, [rsp + 0x878]
call fcn.140027ff0
nop
cmp dword [rsp + 0x8a8], 0
je 0x1401b5688
lea rcx, [rsp + 0x4f8]
call fcn.1400774fc
mov dword [rsp + 0x8a8], eax
lea rdx, [rsp + 0xfdd0]
lea rcx, [rsp + 0x4f8]
call fcn.140077d48
mov qword [rsp + 0x10660], rax
mov rax, qword [rsp + 0x10660]
mov qword [rsp + 0x10668], rax
mov rcx, qword [rsp + 0x10668]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xfdc8], rax
lea rdx, [rsp + 0xfdc8]
lea rcx, [rsp + 0x878]
call fcn.140020de0
nop
lea rcx, [rsp + 0xfdd0]
call fcn.140007060
jmp 0x1401b55f3
lea rcx, [rsp + 0x878]
call fcn.14001d480
test rax, rax
je 0x1401b56d1
xor edx, edx
lea rcx, [rsp + 0x878]
call fcn.140007280
mov rdi, rax
lea rcx, [rsp + 0x878]
call fcn.14001d480
xor r9d, r9d
mov r8, rdi
mov edx, eax
mov rcx, qword [rsp + 0x8b0]
call qword [sym.imp.SHELL32.dll_SHOpenFolderAndSelectItems]
jmp 0x1401b56ff
lea rcx, [rsp + 0x8b8]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp qword [rsp + 0x8b0], 0
je 0x1401b5718
mov rcx, qword [rsp + 0x8b0]
call qword [sym.imp.SHELL32.dll_ILFree]
mov dword [rsp + 0x8c0], 0
jmp 0x1401b5736
mov eax, dword [rsp + 0x8c0]
add eax, 1
mov dword [rsp + 0x8c0], eax
movsxd rdi, dword [rsp + 0x8c0]
lea rcx, [rsp + 0x878]
call fcn.14001d480
cmp rdi, rax
jae 0x1401b578b
movsxd rdx, dword [rsp + 0x8c0]
lea rcx, [rsp + 0x878]
call fcn.140007280
cmp qword [rax], 0
je 0x1401b5789
movsxd rdx, dword [rsp + 0x8c0]
lea rcx, [rsp + 0x878]
call fcn.140007280
mov rcx, qword [rax]
call qword [sym.imp.SHELL32.dll_ILFree]
jmp 0x1401b5725
lea rcx, [rsp + 0x878]
call fcn.14001d450
nop
lea rcx, [rsp + 0x4f8]
call fcn.14007784c
nop
lea rcx, [rsp + 0x8b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x530]
call fcn.140005e30
xor eax, eax
jmp 0x1401bfaef
mov rdx, qword [rsp + 0x10f10]
lea rcx, [rsp + 0x8d0]
call fcn.14016f490
nop
mov dword [rsp + 0xf60], 0
xor r8d, r8d
lea rdx, [rsp + 0xfde0]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x10670], rax
lea rdx, [0x14025d420]
mov rcx, qword [rsp + 0x10670]
call fcn.140006dd0
mov byte [rsp + 0xfdd8], al
lea rcx, [rsp + 0xfde0]
call fcn.140007060
movzx edx, byte [rsp + 0xfdd8]
test edx, edx
je 0x1401b5854
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
call fcn.140197ad0
mov dword [rsp + 0xfe8], eax
lea rcx, [rsp + 0x8d0]
call fcn.1400830e4
cmp rax, 1
jne 0x1401b59d6
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000dba0
mov dword [rsp + 0x1030], eax
xor r8d, r8d
lea rdx, [rsp + 0xfdf0]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x10678], rax
lea rdx, [0x14025d448]
mov rcx, qword [rsp + 0x10678]
call fcn.140006dd0
mov byte [rsp + 0xfde8], al
lea rcx, [rsp + 0xfdf0]
call fcn.140007060
movzx edx, byte [rsp + 0xfde8]
test edx, edx
je 0x1401b59a9
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
call fcn.140197ad0
mov edx, eax
lea rcx, [rsp + 0x1040]
call fcn.1401e0b90
nop
mov eax, dword [rsp + 0xf64]
mov dword [rsp + 0x11d8], eax
lea rcx, [rsp + 0x1040]
call fcn.1401e2560
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000dba0
mov rdx, qword [rsp + 0x10f10]
add rdx, 0xdc8
mov r9d, dword [rsp + 0xf64]
mov r8d, eax
mov rcx, qword [rsp + 0x10f10]
call fcn.1401b2f90
mov edi, dword [rsp + 0x11d8]
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000dba0
mov edx, eax
sub edx, 1
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8, rdi
call fcn.14000d530
mov edx, 1
mov ecx, 1
call fcn.1401cc440
nop
lea rcx, [rsp + 0x1040]
call fcn.1400141a0
jmp 0x1401b59d6
mov rdx, qword [rsp + 0x10f10]
add rdx, 0xdc8
mov r9d, dword [rsp + 0xf64]
mov r8d, dword [rsp + 0x1030]
mov rcx, qword [rsp + 0x10f10]
call fcn.1401b2f90
nop
lea rcx, [rsp + 0x8d0]
call fcn.14016f130
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x1380], eax
cmp dword [rsp + 0x1380], 0
jge 0x1401b5a1f
jmp case.0x1401b43ca.32802
lea rcx, [rsp + 0x1388]
call fcn.140002d10
nop
cmp dword [rsp + 0x1380], 0
jl 0x1401b5b28
mov dword [rsp + 0x1390], 0
jmp 0x1401b5a59
mov eax, dword [rsp + 0x1390]
add eax, 1
mov dword [rsp + 0x1390], eax
cmp dword [rsp + 0x1390], 0x1c
jge 0x1401b5ae7
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r9d, dword [rsp + 0x1390]
mov r8d, dword [rsp + 0x1380]
lea rdx, [rsp + 0xfdf8]
call fcn.140084928
mov qword [rsp + 0x10680], rax
mov rax, qword [rsp + 0x10680]
mov qword [rsp + 0x10688], rax
mov rdx, qword [rsp + 0x10688]
lea rcx, [rsp + 0x1388]
call fcn.140006050
nop
lea rcx, [rsp + 0xfdf8]
call fcn.140007060
lea rdx, [0x14025cbfc]
lea rcx, [rsp + 0x1388]
call fcn.140006080
jmp 0x1401b5a48
lea rdx, [0x14025d470]
lea rcx, [rsp + 0x1388]
call fcn.140006080
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x1380]
call fcn.14000d6f0
mov dword [rsp + 0x1380], eax
jmp 0x1401b5a2d
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x1401b5bd6
call qword [sym.imp.USER32.dll_EmptyClipboard]
lea rcx, [rsp + 0x1388]
call fcn.1400019a0
add eax, 1
movsxd rdx, eax
shl rdx, 1
mov ecx, 0x2000
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [rsp + 0x1398], rax
mov rcx, qword [rsp + 0x1398]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov qword [rsp + 0x13a0], rax
lea rcx, [rsp + 0x1388]
call fcn.140050200
mov rdx, rax
mov rcx, qword [rsp + 0x13a0]
call fcn.1400aac40
mov rcx, qword [rsp + 0x1398]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rdx, qword [rsp + 0x1398]
mov ecx, reloc.WS2_32.dll_listen
call qword [sym.imp.USER32.dll_SetClipboardData]
call qword [sym.imp.USER32.dll_CloseClipboard]
xor r8d, r8d
mov edx, 0x40
lea rcx, str.The_client_information_is_already_copied_to_the_clipboard.
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0x1388]
call fcn.140007060
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x13a8], eax
cmp dword [rsp + 0x13a8], 0
jge 0x1401b5c21
xor eax, eax
jmp 0x1401bfaef
lea rcx, [rsp + 0x13b0]
call fcn.1400834ec
nop
xor r8d, r8d
lea rdx, [rsp + 0xfe08]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x10690], rax
lea rdx, [0x14025d4f8]
mov rcx, qword [rsp + 0x10690]
call fcn.140006dd0
mov byte [rsp + 0xfe00], al
lea rcx, [rsp + 0xfe08]
call fcn.140007060
movzx edx, byte [rsp + 0xfe00]
test edx, edx
je 0x1401b5e3c
mov rdx, qword [rsp + 0x10f10]
lea rcx, [rsp + 0x13e0]
call fcn.14016f490
nop
mov dword [rsp + 0x1a70], 1
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x13a8]
call fcn.140083bd4
mov dword [rsp + 0x1a74], eax
cmp dword [rsp + 0x13a8], 0
jl 0x1401b5d3c
mov edx, dword [rsp + 0x13a8]
lea rcx, [rsp + 0x13b0]
call fcn.14000dbd0
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x13a8]
call fcn.140083bd4
mov edx, eax
lea rcx, [rsp + 0x1ac8]
call fcn.14000dbd0
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x13a8]
call fcn.14000d6f0
mov dword [rsp + 0x13a8], eax
jmp 0x1401b5cca
lea rcx, [rsp + 0x13e0]
call fcn.1400830e4
cmp rax, 1
jne 0x1401b5e2f
mov qword [rsp + 0x1b40], 0
jmp 0x1401b5d75
mov rax, qword [rsp + 0x1b40]
add rax, 1
mov qword [rsp + 0x1b40], rax
lea rcx, [rsp + 0x13b0]
call fcn.1400202c0
cmp qword [rsp + 0x1b40], rax
jge 0x1401b5e2f
cmp dword [rsp + 0x1af8], 0xffffffff
jne 0x1401b5ddb
lea rcx, [rsp + 0x13b0]
call fcn.1400202c0
mov rdx, rax
sub rdx, 1
sub rdx, qword [rsp + 0x1b40]
lea rcx, [rsp + 0x13b0]
call fcn.14000de90
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.14000d620
jmp 0x1401b5d61
mov rdx, qword [rsp + 0x1b40]
lea rcx, [rsp + 0x1ac8]
call fcn.14000de90
mov rdi, rax
mov rdx, qword [rsp + 0x1b40]
lea rcx, [rsp + 0x13b0]
call fcn.14000de90
mov rdx, qword [rsp + 0x10f10]
add rdx, 0xdc8
mov r9d, dword [rdi]
mov r8d, dword [rax]
mov rcx, qword [rsp + 0x10f10]
call fcn.1401b2f90
jmp 0x1401b5d61
lea rcx, [rsp + 0x13e0]
call fcn.14016f130
xor r8d, r8d
lea rdx, [rsp + 0xfe18]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x10698], rax
lea rdx, [0x14025d518]
mov rcx, qword [rsp + 0x10698]
call fcn.140006dd0
mov byte [rsp + 0xfe10], al
lea rcx, [rsp + 0xfe18]
call fcn.140007060
movzx edx, byte [rsp + 0xfe10]
test edx, edx
je 0x1401b6166
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
call fcn.140197ad0
mov edx, eax
lea rcx, [rsp + 0x1b50]
call fcn.1401e0b90
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x13a8]
call fcn.140083bd4
mov dword [rsp + 0x1ce8], eax
lea rcx, [rsp + 0x1b50]
call fcn.1401e5810
mov rdx, qword [rsp + 0x10f10]
lea rcx, [rsp + 0x1e90]
call fcn.14016f490
nop
mov dword [rsp + 0x2520], 1
mov eax, dword [rsp + 0x1ce8]
mov dword [rsp + 0x2524], eax
cmp dword [rsp + 0x13a8], 0
jl 0x1401b5fa3
mov edx, dword [rsp + 0x13a8]
lea rcx, [rsp + 0x13b0]
call fcn.14000dbd0
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x13a8]
call fcn.140083bd4
mov dword [rsp + 0x1ce8], eax
lea rcx, [rsp + 0x1b50]
call fcn.1401e5810
mov edx, dword [rsp + 0x1ce8]
lea rcx, [rsp + 0x2578]
call fcn.14000dbd0
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x13a8]
call fcn.14000d6f0
mov dword [rsp + 0x13a8], eax
jmp 0x1401b5f11
lea rcx, [rsp + 0x1e90]
call fcn.1400830e4
cmp rax, 1
jne 0x1401b614a
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
call fcn.140197ad0
cmp dword [rsp + 0x25a8], eax
jne 0x1401b60d0
mov qword [rsp + 0x25f0], 0
jmp 0x1401b5ff8
mov rax, qword [rsp + 0x25f0]
add rax, 1
mov qword [rsp + 0x25f0], rax
lea rcx, [rsp + 0x13b0]
call fcn.1400202c0
cmp qword [rsp + 0x25f0], rax
jge 0x1401b60ce
mov rdx, qword [rsp + 0x25f0]
lea rcx, [rsp + 0x13b0]
call fcn.14000de90
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.140083bd4
mov dword [rsp + 0x25f8], eax
mov rdx, qword [rsp + 0x25f0]
lea rcx, [rsp + 0x2578]
call fcn.14000de90
mov rdi, rax
mov rdx, qword [rsp + 0x25f0]
lea rcx, [rsp + 0x13b0]
call fcn.14000de90
mov rdx, qword [rsp + 0x10f10]
add rdx, 0xdc8
mov r9d, dword [rdi]
mov r8d, dword [rax]
mov rcx, qword [rsp + 0x10f10]
call fcn.1401b2f90
mov edi, dword [rsp + 0x25f8]
mov rdx, qword [rsp + 0x25f0]
lea rcx, [rsp + 0x13b0]
call fcn.14000de90
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8, rdi
mov edx, dword [rax]
call fcn.14000d530
jmp 0x1401b5fe4
jmp 0x1401b614a
mov qword [rsp + 0x2600], 0
jmp 0x1401b60f2
mov rax, qword [rsp + 0x2600]
add rax, 1
mov qword [rsp + 0x2600], rax
lea rcx, [rsp + 0x13b0]
call fcn.1400202c0
cmp qword [rsp + 0x2600], rax
jge 0x1401b614a
lea rcx, [rsp + 0x13b0]
call fcn.1400202c0
mov rdx, rax
sub rdx, 1
sub rdx, qword [rsp + 0x2600]
lea rcx, [rsp + 0x13b0]
call fcn.14000de90
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.14000d620
jmp 0x1401b60de
lea rcx, [rsp + 0x1e90]
call fcn.14016f130
nop
lea rcx, [rsp + 0x1b50]
call fcn.1400141a0
nop
lea rcx, [rsp + 0x13b0]
call fcn.14008350c
xor eax, eax
jmp 0x1401bfaef
xor r8d, r8d
lea rdx, [rsp + 0xfe28]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x106a0], rax
mov rax, qword [rsp + 0x106a0]
mov qword [rsp + 0x106a8], rax
mov eax, dword [rsp + 0x104c0]
or eax, 0x40
mov dword [rsp + 0x104c0], eax
lea rdx, [0x14025d540]
mov rcx, qword [rsp + 0x106a8]
call fcn.140006e10
movzx eax, al
test eax, eax
je 0x1401b6231
xor r8d, r8d
lea rdx, [rsp + 0xfe30]
mov rcx, qword [rsp + 0x10f10]
call fcn.140199b60
mov qword [rsp + 0x106b0], rax
mov eax, dword [rsp + 0x104c0]
or eax, 0x80
mov dword [rsp + 0x104c0], eax
lea rdx, [0x14025d560]
mov rcx, qword [rsp + 0x106b0]
call fcn.140006e10
movzx eax, al
test eax, eax
je 0x1401b6231
mov dword [rsp + 0x106b8], 1
jmp 0x1401b623c
mov dword [rsp + 0x106b8], 0
movzx eax, byte [rsp + 0x106b8]
mov byte [rsp + 0xfe20], al
mov eax, dword [rsp + 0x104c0]
and eax, 0x80
test eax, eax
je 0x1401b6274
and dword [rsp + 0x104c0], 0xffffff7f
lea rcx, [rsp + 0xfe30]
call fcn.140007060
nop
mov eax, dword [rsp + 0x104c0]
and eax, 0x40
test eax, eax
je 0x1401b6297
and dword [rsp + 0x104c0], 0xffffffbf
lea rcx, [rsp + 0xfe28]
call fcn.140007060
movzx eax, byte [rsp + 0xfe20]
test eax, eax
je 0x1401b62a8
jmp case.0x1401b43ca.32802
lea rcx, [rsp + 0x2610]
call fcn.1400834ec
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x2608], eax
cmp dword [rsp + 0x2608], 0
jl 0x1401b63ba
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f2960
cmp eax, 6
jne 0x1401b63ba
cmp dword [rsp + 0x2608], 0
jl 0x1401b63ba
lea rcx, [rsp + 0x2640]
call fcn.1401e0790
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x2608]
call fcn.140083bd4
mov dword [rsp + 0x27d8], eax
mov edx, dword [rsp + 0x27d8]
lea rcx, [rsp + 0x2610]
call fcn.14000dbd0
lea rcx, [rsp + 0x2640]
call fcn.1401cbb70
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x2608]
call fcn.14000d620
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x2608], eax
lea rcx, [rsp + 0x2640]
call fcn.140005e30
jmp 0x1401b6308
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov dword [rsp + 0x2980], 0
jmp 0x1401b63e7
mov eax, dword [rsp + 0x2980]
add eax, 1
mov dword [rsp + 0x2980], eax
movsxd rdi, dword [rsp + 0x2980]
lea rcx, [rsp + 0x2610]
call fcn.1400202c0
cmp rdi, rax
jge 0x1401b6436
movsxd rdx, dword [rsp + 0x2980]
lea rcx, [rsp + 0x2610]
call fcn.14000de90
mov eax, dword [rax]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x803c
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
jmp 0x1401b63d6
lea rcx, [rsp + 0x2610]
call fcn.14008350c
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000d500
mov dword [rsp + 0x29b0], eax
cmp dword [rsp + 0x29b0], 1
je 0x1401b6476
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x2d00], eax
lea rcx, [rsp + 0x2d10]
call fcn.1401e0790
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x2d00]
call fcn.140083bd4
mov dword [rsp + 0x2ea8], eax
lea rcx, [rsp + 0x2d10]
call fcn.1401e5810
lea rcx, [rsp + 0x2988]
call fcn.1400834ec
nop
mov edx, dword [rsp + 0x2ea8]
lea rcx, [rsp + 0x29c0]
call fcn.14000d490
nop
lea rcx, [rsp + 0x3340]
call fcn.140007080
nop
lea rdx, [rsp + 0x3340]
lea rcx, [rsp + 0x29c0]
call fcn.1401cb640
mov dword [rsp + 0x3370], 0
jmp 0x1401b653d
mov eax, dword [rsp + 0x3370]
add eax, 1
mov dword [rsp + 0x3370], eax
movsxd rdi, dword [rsp + 0x3370]
lea rcx, [rsp + 0x3340]
call fcn.140007100
cmp rdi, rax
jae 0x1401b6594
movsxd rdx, dword [rsp + 0x3370]
lea rcx, [rsp + 0x3340]
call fcn.140007130
mov rcx, rax
add rcx, 0x1a0
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edx, eax
lea rcx, [rsp + 0x2988]
call fcn.14000dbd0
jmp 0x1401b652c
xor edx, edx
lea rcx, [rsp + 0x3050]
call fcn.1401647b0
nop
lea rdx, [rsp + 0x2988]
lea rcx, [rsp + 0x3308]
call fcn.1400836c4
mov edx, dword [rsp + 0x2ea8]
mov dword [rsp + 0x3330], edx
lea rcx, [rsp + 0x3050]
call fcn.1400830e4
cmp rax, 1
jne 0x1401b7379
mov dword [rsp + 0x3374], 0
jmp 0x1401b65fc
mov eax, dword [rsp + 0x3374]
add eax, 1
mov dword [rsp + 0x3374], eax
movsxd rdi, dword [rsp + 0x3374]
lea rcx, [rsp + 0x3308]
call fcn.1400202c0
cmp rdi, rax
jge 0x1401b7222
movsxd rdx, dword [rsp + 0x3374]
lea rcx, [rsp + 0x3308]
call fcn.14000de90
mov edx, dword [rax]
lea rcx, [rsp + 0x3380]
call fcn.1401e1bb0
nop
movsxd rdx, dword [rsp + 0x3374]
lea rcx, [rsp + 0x3308]
call fcn.14000de90
mov rdi, rax
lea rcx, [rsp + 0x2f00]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
cmp dword [rdi], eax
jne 0x1401b6720
movsxd rdx, dword [rsp + 0x3374]
lea rcx, [rsp + 0x3308]
call fcn.14000de90
cmp dword [rax], 0
je 0x1401b6720
movsxd rdx, dword [rsp + 0x3374]
lea rcx, [rsp + 0x3308]
call fcn.14000de90
mov edx, dword [rax]
lea rcx, [rsp + 0x3390]
call fcn.14000d590
nop
lea rax, [rsp + 0xfe38]
mov qword [rsp + 0xfe40], rax
lea rdx, [rsp + 0x2fb8]
mov rcx, qword [rsp + 0xfe40]
call fcn.140001430
mov qword [rsp + 0x106c0], rax
mov rdx, qword [rsp + 0x106c0]
lea rcx, [rsp + 0x3390]
call fcn.1401e20b0
test eax, eax
je 0x1401b6713
lea rdx, [rsp + 0x3538]
lea rcx, [rsp + 0x3380]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x3390]
call fcn.140005e30
lea rcx, [rsp + 0x3380]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401b6746
lea rcx, [rsp + 0x3380]
call fcn.140007060
jmp 0x1401b65eb
lea rcx, [rsp + 0x3380]
call fcn.140050200
mov rcx, rax
call fcn.1400fabb0
mov dword [rsp + 0x3378], eax
cmp dword [rsp + 0x3378], 3
je 0x1401b7210
cmp dword [rsp + 0x3378], 4
je 0x1401b7210
cmp dword [rsp + 0x3378], 5
je 0x1401b7210
lea rcx, [rsp + 0x2f10]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
cmp eax, 1
je 0x1401b67ab
jmp 0x1401b7193
mov eax, dword [rsp + 0x2ea8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov dword [rsp + 0x3958], eax
cmp dword [rsp + 0x3958], 0
jne 0x1401b67e4
jmp 0x1401b7193
lea rcx, [rsp + 0x3708]
call fcn.140002d10
nop
lea rcx, [rsp + 0x3380]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xfe48]
call fcn.140109710
mov qword [rsp + 0x106c8], rax
mov rax, qword [rsp + 0x106c8]
mov qword [rsp + 0x106d0], rax
lea rcx, [rsp + 0x3380]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xfe50]
call fcn.1400fb640
mov qword [rsp + 0x106d8], rax
mov rax, qword [rsp + 0x106d8]
mov qword [rsp + 0x106e0], rax
mov rax, qword [rsp + 0x106d0]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x106e0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x2eb0]
mov r8d, dword [rsp + 0x3958]
lea rdx, str._c:_s__s_s
lea rcx, [rsp + 0x3708]
call fcn.140002ba0
nop
lea rcx, [rsp + 0xfe50]
call fcn.140007060
nop
lea rcx, [rsp + 0xfe48]
call fcn.140007060
lea rcx, [rsp + 0x3708]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401b68e8
lea rcx, [rsp + 0x3708]
call fcn.140007060
jmp 0x1401b7193
xor edx, edx
lea rcx, [rsp + 0x3720]
call fcn.140165700
nop
lea rdx, [rsp + 0x3380]
lea rcx, [rsp + 0x3930]
call fcn.140002ce0
lea rcx, [rsp + 0x3970]
call fcn.14000d650
nop
lea rax, [rsp + 0xfe58]
mov qword [rsp + 0xfe60], rax
lea rdx, [rsp + 0x3380]
mov rcx, qword [rsp + 0xfe60]
call fcn.140001430
mov qword [rsp + 0x106e8], rax
mov rdx, qword [rsp + 0x106e8]
lea rcx, [rsp + 0x3970]
call fcn.1401e3e80
test eax, eax
jne 0x1401b698f
lea rcx, [rsp + 0x3970]
call fcn.140005e30
nop
lea rcx, [rsp + 0x3720]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x3708]
call fcn.140007060
jmp 0x1401b7193
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f2960
cmp eax, 7
jne 0x1401b69d7
lea rcx, [rsp + 0x3970]
call fcn.140005e30
nop
lea rcx, [rsp + 0x3720]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x3708]
call fcn.140007060
jmp 0x1401b7193
lea rcx, [rsp + 0x36d8]
call fcn.1400777f0
nop
lea rcx, [rsp + 0x3708]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x36d8]
call fcn.1400778f4
lea rcx, [rsp + 0x36d8]
call fcn.1400774fc
mov qword [rsp + 0x3960], 0
mov qword [rsp + 0x3950], 0
mov qword [rsp + 0x3710], 0
mov r9d, 3
xor r8d, r8d
lea rdx, [rsp + 0xfe70]
lea rcx, [rsp + 0x3380]
call fcn.1400021f0
mov qword [rsp + 0x106f0], rax
mov rcx, qword [rsp + 0x106f0]
call fcn.140050200
lea r9, [rsp + 0x3710]
lea r8, [rsp + 0x3950]
lea rdx, [rsp + 0x3960]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401b6a9b
mov dword [rsp + 0x106f8], 1
jmp 0x1401b6aa6
mov dword [rsp + 0x106f8], 0
movzx eax, byte [rsp + 0x106f8]
mov byte [rsp + 0xfe68], al
lea rcx, [rsp + 0xfe70]
call fcn.140007060
movzx edx, byte [rsp + 0xfe68]
test edx, edx
je 0x1401b6b1f
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025d5a0]
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0x36d8]
call fcn.14007784c
nop
lea rcx, [rsp + 0x3970]
call fcn.140005e30
nop
lea rcx, [rsp + 0x3720]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x3708]
call fcn.140007060
jmp 0x1401b7193
lea rcx, [rsp + 0x36d8]
call fcn.140077548
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401b6b42
addsd xmm1, qword [0x140272fc0]
mov rax, qword [rsp + 0x3710]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401b6b60
addsd xmm0, qword [0x140272fc0]
mulsd xmm0, qword [0x140275290]
comisd xmm1, xmm0
jbe 0x1401b6bbf
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025d610]
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0x36d8]
call fcn.14007784c
nop
lea rcx, [rsp + 0x3970]
call fcn.140005e30
nop
lea rcx, [rsp + 0x3720]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x3708]
call fcn.140007060
jmp 0x1401b7193
xor r8d, r8d
mov edx, 0x24
lea rcx, [0x14025d680]
call fcn.1400f0bf0
cmp eax, 6
jne 0x1401b6f8e
lea rcx, [rsp + 0xfe78]
call fcn.14000dd70
lea r8, [0x14025d6d0]
lea rdx, [rsp + 0xfe80]
mov rcx, rax
call fcn.14000d730
mov qword [rsp + 0x10700], rax
mov rax, qword [rsp + 0x10700]
mov qword [rsp + 0x10708], rax
mov rdx, qword [rsp + 0x10708]
lea rcx, [rsp + 0x3938]
call fcn.140002ce0
nop
lea rcx, [rsp + 0xfe80]
call fcn.140007060
lea rcx, [rsp + 0x3720]
call fcn.1400830e4
cmp rax, 1
je 0x1401b6c8a
lea rcx, [rsp + 0x36d8]
call fcn.14007784c
nop
lea rcx, [rsp + 0x3970]
call fcn.140005e30
nop
lea rcx, [rsp + 0x3720]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x3708]
call fcn.140007060
jmp 0x1401b7193
mov edx, dword [rsp + 0x3b08]
lea rcx, [rsp + 0x3cb0]
call fcn.1401e0680
nop
lea rcx, [rsp + 0x3930]
call fcn.140050200
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x3ff8]
call fcn.1400fc150
nop
mov dx, 0x2e
lea rcx, [rsp + 0x3ff8]
call fcn.140006920
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0xfe88]
lea rcx, [rsp + 0x3ff8]
call fcn.140006a80
mov qword [rsp + 0x10710], rax
mov rcx, qword [rsp + 0x10710]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0x3ff0], eax
lea rcx, [rsp + 0xfe88]
call fcn.140007060
lea rcx, [rsp + 0x3e50]
mov r8d, dword [rsp + 0x3ff0]
lea rdx, [0x14025d6f4]
call fcn.140002ba0
lea rcx, [rsp + 0x3e58]
lea rdx, [rsp + 0x3940]
call fcn.140002ce0
lea rcx, [rsp + 0x3e60]
lea rdx, [rsp + 0x3938]
call fcn.140002ce0
lea rcx, [rsp + 0x3cb0]
call fcn.1401cc080
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r8, qword [rsp + 0x3b18]
lea rdx, [0x14025d700]
xor ecx, ecx
call fcn.1400de020
mov edx, dword [rsp + 0x2ea8]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 1
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x968], 0
je 0x1401b6e00
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b6e4a
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call fcn.14007e140
xor edx, edx
mov rcx, rax
call fcn.14007d820
mov edx, 5
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x3ff8]
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0x3708]
call fcn.140050200
mov r8, qword [rsp + 0x10f10]
mov r8, qword [r8 + 0x968]
mov rdx, rdi
mov rcx, rax
call fcn.140108390
test eax, eax
jne 0x1401b6f33
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b6eb2
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0x3b18]
lea rdx, [0x14025d740]
xor ecx, ecx
call fcn.1400de020
nop
lea rcx, [rsp + 0x3ff8]
call fcn.140007060
nop
lea rcx, [rsp + 0x3cb0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x36d8]
call fcn.14007784c
nop
lea rcx, [rsp + 0x3970]
call fcn.140005e30
nop
lea rcx, [rsp + 0x3720]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x3708]
call fcn.140007060
jmp 0x1401b7193
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b6f5c
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x3ff8]
call fcn.140007060
nop
lea rcx, [rsp + 0x3cb0]
call fcn.140005e30
jmp 0x1401b7152
mov r8, qword [rsp + 0x3b18]
lea rdx, [0x14025d790]
xor ecx, ecx
call fcn.1400de020
mov edx, dword [rsp + 0x2ea8]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 1
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x968], 0
je 0x1401b700b
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b7055
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call fcn.14007e140
xor edx, edx
mov rcx, rax
call fcn.14007d820
mov edx, 5
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x3708]
call fcn.140050200
mov r9, qword [rsp + 0x10f10]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.140106940
test eax, eax
jne 0x1401b7117
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b70b5
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0x3b18]
lea rdx, [0x14025d7d0]
xor ecx, ecx
call fcn.1400de020
nop
lea rcx, [rsp + 0x36d8]
call fcn.14007784c
nop
lea rcx, [rsp + 0x3970]
call fcn.140005e30
nop
lea rcx, [rsp + 0x3720]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x3708]
call fcn.140007060
jmp 0x1401b7193
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b7140
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x36d8]
call fcn.14007784c
nop
lea rcx, [rsp + 0x3970]
call fcn.140005e30
nop
lea rcx, [rsp + 0x3720]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x3708]
call fcn.140007060
xor eax, eax
test eax, eax
jne 0x1401b678c
lea rcx, [rsp + 0x36d0]
call fcn.140002d10
nop
mov r8, qword [rsp + 0x3380]
lea rdx, str._s.Super.vhd
lea rcx, [rsp + 0x36d0]
call fcn.140002ba0
lea rcx, [rsp + 0x36d0]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x36d0]
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0x3380]
call fcn.140050200
mov r8d, 1
mov rdx, rdi
mov rcx, rax
call fcn.140108cb0
nop
lea rcx, [rsp + 0x36d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x3380]
call fcn.140007060
jmp 0x1401b65eb
lea rdx, [rsp + 0x3308]
lea rcx, [rsp + 0x2988]
call fcn.1400836c4
lea rcx, [rsp + 0x2988]
call fcn.1400202c0
test rax, rax
je 0x1401b7365
mov edx, dword [rsp + 0x2ea8]
lea rcx, [rsp + 0x4000]
call fcn.14000d490
nop
lea rcx, [rsp + 0x4000]
call fcn.1401cba60
mov dword [rsp + 0x4340], 0
jmp 0x1401b728d
mov eax, dword [rsp + 0x4340]
add eax, 1
mov dword [rsp + 0x4340], eax
movsxd rdi, dword [rsp + 0x4340]
lea rcx, [rsp + 0x2988]
call fcn.1400202c0
cmp rdi, rax
jge 0x1401b72e2
movsxd rdx, dword [rsp + 0x4340]
lea rcx, [rsp + 0x2988]
call fcn.14000de90
lea rcx, [rsp + 0x41a0]
mov r8d, dword [rax]
lea rdx, [0x14025d83c]
call fcn.140002ba0
lea rcx, [rsp + 0x4000]
call fcn.14000d310
jmp 0x1401b727c
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r9d, dword [rsp + 0x2ea8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10f10]
call fcn.14000e4c0
mov edx, dword [rsp + 0x2ea8]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov edx, dword [rsp + 0x2ea8]
mov qword [rsp + 0x20], rdx
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
nop
lea rcx, [rsp + 0x4000]
call fcn.140005e30
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025d848]
call fcn.1400f0bf0
mov dword [rsp + 0xfe90], 0
lea rcx, [rsp + 0x3050]
call fcn.140164750
nop
lea rcx, [rsp + 0x3340]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x29c0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x2988]
call fcn.14008350c
nop
lea rcx, [rsp + 0x2d10]
call fcn.140005e30
mov eax, dword [rsp + 0xfe90]
jmp 0x1401bfaef
mov rax, qword [rsp + 0x10f10]
cmp dword [rax + 0x978], 0
je 0x1401b73f4
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000d500
mov dword [rsp + 0x4370], eax
cmp dword [rsp + 0x4370], 1
je 0x1401b7420
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x46c0], eax
lea rcx, [rsp + 0x46d0]
call fcn.1401e0790
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x46c0]
call fcn.140083bd4
mov dword [rsp + 0x4868], eax
lea rcx, [rsp + 0x46d0]
call fcn.1401e5810
lea rcx, [rsp + 0x4878]
lea rdx, [0x14025ce5c]
call fcn.140002020
lea rcx, [rsp + 0x46d0]
call fcn.1401e31e0
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r9d, dword [rsp + 0x4868]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10f10]
call fcn.14000e4c0
lea rcx, [rsp + 0x4348]
call fcn.1400834ec
nop
mov edx, dword [rsp + 0x4868]
lea rcx, [rsp + 0x4380]
call fcn.14000d490
nop
lea rcx, [rsp + 0x4d50]
call fcn.140007080
nop
lea rdx, [rsp + 0x4d50]
lea rcx, [rsp + 0x4380]
call fcn.1401cb640
mov dword [rsp + 0x4d80], 0
jmp 0x1401b7534
mov eax, dword [rsp + 0x4d80]
add eax, 1
mov dword [rsp + 0x4d80], eax
movsxd rdi, dword [rsp + 0x4d80]
lea rcx, [rsp + 0x4d50]
call fcn.140007100
cmp rdi, rax
jae 0x1401b758b
movsxd rdx, dword [rsp + 0x4d80]
lea rcx, [rsp + 0x4d50]
call fcn.140007130
mov rcx, rax
add rcx, 0x1a0
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edx, eax
lea rcx, [rsp + 0x4348]
call fcn.14000dbd0
jmp 0x1401b7523
lea rcx, [rsp + 0x4d50]
call fcn.140007100
test rax, rax
jne 0x1401b75d9
lea rcx, [rsp + 0x4958]
lea rdx, [0x14025ceac]
call fcn.140006dd0
movzx eax, al
test eax, eax
je 0x1401b75d9
lea rcx, [rsp + 0x4958]
lea rdx, [0x14025d14c]
call fcn.140002020
lea rcx, [rsp + 0x46d0]
call fcn.1401e31e0
mov eax, dword [rsp + 0x4868]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 1
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Do_you_want_to_update_the_image_
call fcn.1400f0bf0
cmp eax, 7
jne 0x1401b7969
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
mov dword [rsp + 0x50d0], 0
jmp 0x1401b765b
mov eax, dword [rsp + 0x50d0]
add eax, 1
mov dword [rsp + 0x50d0], eax
movsxd rdi, dword [rsp + 0x50d0]
lea rcx, [rsp + 0x4348]
call fcn.1400202c0
cmp rdi, rax
jge 0x1401b7869
movsxd rdx, dword [rsp + 0x50d0]
lea rcx, [rsp + 0x4348]
call fcn.14000de90
mov edx, dword [rax]
lea rcx, [rsp + 0x50d8]
call fcn.1401e1bb0
nop
movsxd rdx, dword [rsp + 0x50d0]
lea rcx, [rsp + 0x4348]
call fcn.14000de90
mov rdi, rax
lea rcx, [rsp + 0x48c0]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
cmp dword [rdi], eax
jne 0x1401b777f
movsxd rdx, dword [rsp + 0x50d0]
lea rcx, [rsp + 0x4348]
call fcn.14000de90
cmp dword [rax], 0
je 0x1401b777f
movsxd rdx, dword [rsp + 0x50d0]
lea rcx, [rsp + 0x4348]
call fcn.14000de90
mov edx, dword [rax]
lea rcx, [rsp + 0x50e0]
call fcn.14000d590
nop
lea rax, [rsp + 0xfe98]
mov qword [rsp + 0xfea0], rax
lea rdx, [rsp + 0x4978]
mov rcx, qword [rsp + 0xfea0]
call fcn.140001430
mov qword [rsp + 0x10718], rax
mov rdx, qword [rsp + 0x10718]
lea rcx, [rsp + 0x50e0]
call fcn.1401e20b0
test eax, eax
je 0x1401b7772
lea rdx, [rsp + 0x5288]
lea rcx, [rsp + 0x50d8]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x50e0]
call fcn.140005e30
lea r8, [0x14025d898]
lea rdx, [rsp + 0x50d8]
lea rcx, [rsp + 0xfeb0]
call fcn.1400010b0
mov qword [rsp + 0x10720], rax
mov rcx, qword [rsp + 0x10720]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401b77ca
mov dword [rsp + 0x10728], 1
jmp 0x1401b77d5
mov dword [rsp + 0x10728], 0
movzx eax, byte [rsp + 0x10728]
mov byte [rsp + 0xfea8], al
lea rcx, [rsp + 0xfeb0]
call fcn.140007060
movzx edx, byte [rsp + 0xfea8]
test edx, edx
je 0x1401b780f
lea rcx, [rsp + 0x50d8]
call fcn.140007060
jmp 0x1401b764a
lea r8, [0x14025d8b0]
lea rdx, [rsp + 0x50d8]
lea rcx, [rsp + 0xfeb8]
call fcn.1400010b0
mov qword [rsp + 0x10730], rax
mov rcx, qword [rsp + 0x10730]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xfeb8]
call fcn.140007060
nop
lea rcx, [rsp + 0x50d8]
call fcn.140007060
jmp 0x1401b764a
lea rcx, [rsp + 0x4348]
call fcn.14000d2e0
mov edx, dword [rsp + 0x4868]
lea rcx, [rsp + 0x4d90]
call fcn.14000d490
nop
lea rcx, [rsp + 0x4d90]
call fcn.1401cba60
lea rcx, [rsp + 0x4878]
lea rdx, [0x14025d29c]
call fcn.140002020
lea rcx, [rsp + 0x4958]
lea rdx, [0x14025d344]
call fcn.140002020
lea rcx, [rsp + 0x46d0]
call fcn.1401e31e0
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r9d, dword [rsp + 0x4868]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10f10]
call fcn.14000e4c0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025d8c8]
call fcn.1400f0bf0
mov dword [rsp + 0xfec0], 0
lea rcx, [rsp + 0x4d90]
call fcn.140005e30
nop
lea rcx, [rsp + 0x4d50]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x4380]
call fcn.140005e30
nop
lea rcx, [rsp + 0x4348]
call fcn.14008350c
nop
lea rcx, [rsp + 0x46d0]
call fcn.140005e30
mov eax, dword [rsp + 0xfec0]
jmp 0x1401bfaef
lea rcx, [rsp + 0x4348]
call fcn.1400202c0
mov dword [rsp + 0x4370], eax
mov dword [rsp + 0x5420], 0
jmp 0x1401b799b
mov eax, dword [rsp + 0x5420]
add eax, 1
mov dword [rsp + 0x5420], eax
mov eax, dword [rsp + 0x4370]
cmp dword [rsp + 0x5420], eax
jge 0x1401b8c43
lea rcx, [rsp + 0x5460]
call fcn.140002d10
nop
mov dword [rsp + 0x56c0], 0
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.14000de90
mov edx, dword [rax]
lea rcx, [rsp + 0x56d0]
call fcn.1401e1bb0
nop
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.14000de90
mov rdi, rax
lea rcx, [rsp + 0x48c0]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
cmp dword [rdi], eax
jne 0x1401b7ac3
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.14000de90
cmp dword [rax], 0
je 0x1401b7ac3
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.14000de90
mov edx, dword [rax]
lea rcx, [rsp + 0x5a30]
call fcn.14000d590
nop
lea rax, [rsp + 0xfec8]
mov qword [rsp + 0xfed0], rax
lea rdx, [rsp + 0x4978]
mov rcx, qword [rsp + 0xfed0]
call fcn.140001430
mov qword [rsp + 0x10738], rax
mov rdx, qword [rsp + 0x10738]
lea rcx, [rsp + 0x5a30]
call fcn.1401e20b0
test eax, eax
je 0x1401b7ab6
lea rdx, [rsp + 0x5bd8]
lea rcx, [rsp + 0x56d0]
call fcn.140002ce0
mov edx, dword [rsp + 0x5bc8]
mov dword [rsp + 0x56c0], edx
lea rcx, [rsp + 0x5a30]
call fcn.140005e30
lea rcx, [rsp + 0x56d0]
call fcn.140050200
mov rcx, rax
call fcn.1400fabb0
mov dword [rsp + 0x5424], eax
lea rdx, [0x14025d38c]
lea rcx, [rsp + 0x5468]
call fcn.140002050
nop
lea rcx, [rsp + 0x56e0]
call fcn.14000e170
nop
mov dword [rsp + 0x5878], 1
lea rcx, [rsp + 0x56e0]
call fcn.1401e4480
lea rdx, [rsp + 0x5888]
lea rcx, [rsp + 0x5458]
call fcn.140001430
nop
mov dword [rsp + 0x5a20], 0
cmp dword [rsp + 0x5a20], 0
jl 0x1401b7e1a
lea r9, [rsp + 0x5a20]
lea r8, [0x14025d3d4]
lea rdx, [rsp + 0x5d78]
lea rcx, [rsp + 0x5458]
call fcn.140006620
nop
lea rcx, [rsp + 0x5d78]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401b7b94
lea rcx, [rsp + 0x5d78]
call fcn.140007060
jmp 0x1401b7e1a
xor edx, edx
lea rcx, [rsp + 0x5d78]
call fcn.140006e50
movzx r8d, ax
lea rdx, [0x14025d8d0]
lea rcx, [rsp + 0x5d78]
call fcn.140002ba0
lea rcx, [rsp + 0x5d70]
call fcn.140002d10
nop
lea rcx, [rsp + 0x56d0]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xfed8]
call fcn.140109710
mov qword [rsp + 0x10740], rax
mov rax, qword [rsp + 0x10740]
mov qword [rsp + 0x10748], rax
lea rcx, [rsp + 0x56d0]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xfee0]
call fcn.1400fb640
mov qword [rsp + 0x10750], rax
mov rax, qword [rsp + 0x10750]
mov qword [rsp + 0x10758], rax
mov rax, qword [rsp + 0x10748]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10758]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x4870]
mov r8, qword [rsp + 0x5d78]
lea rdx, [0x14025d8e0]
lea rcx, [rsp + 0x5d70]
call fcn.140002ba0
nop
lea rcx, [rsp + 0xfee0]
call fcn.140007060
nop
lea rcx, [rsp + 0xfed8]
call fcn.140007060
lea rcx, [rsp + 0x5d70]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401b7ce3
lea rdx, [rsp + 0x5d70]
lea rcx, [rsp + 0x5468]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x5d70]
call fcn.140007060
nop
lea rcx, [rsp + 0x5d78]
call fcn.140007060
jmp 0x1401b7e1a
lea rcx, [rsp + 0x56d0]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xfee8]
call fcn.140109710
mov qword [rsp + 0x10760], rax
mov rax, qword [rsp + 0x10760]
mov qword [rsp + 0x10768], rax
lea rcx, [rsp + 0x56d0]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0xfef0]
call fcn.1400fb640
mov qword [rsp + 0x10770], rax
mov rax, qword [rsp + 0x10770]
mov qword [rsp + 0x10778], rax
mov rax, qword [rsp + 0x10768]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10778]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x4888]
mov r8, qword [rsp + 0x5d78]
lea rdx, [0x14025d900]
lea rcx, [rsp + 0x5d70]
call fcn.140002ba0
nop
lea rcx, [rsp + 0xfef0]
call fcn.140007060
nop
lea rcx, [rsp + 0xfee8]
call fcn.140007060
lea rcx, [rsp + 0x5d70]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401b7dfa
lea rdx, [rsp + 0x5d70]
lea rcx, [rsp + 0x5468]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x5d70]
call fcn.140007060
nop
lea rcx, [rsp + 0x5d78]
call fcn.140007060
jmp 0x1401b7e1a
lea rcx, [rsp + 0x5d70]
call fcn.140007060
nop
lea rcx, [rsp + 0x5d78]
call fcn.140007060
jmp 0x1401b7b3b
lea r8, [0x14025d920]
lea rdx, [rsp + 0x56d0]
lea rcx, [rsp + 0xfef8]
call fcn.1400010b0
mov qword [rsp + 0x10780], rax
mov rax, qword [rsp + 0x10780]
mov qword [rsp + 0x10788], rax
mov rdx, qword [rsp + 0x10788]
lea rcx, [rsp + 0x5460]
call fcn.140002ce0
nop
lea rcx, [rsp + 0xfef8]
call fcn.140007060
lea rcx, [rsp + 0x5460]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401b7eeb
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.140083780
nop
lea rcx, [rsp + 0x5458]
call fcn.140007060
nop
lea rcx, [rsp + 0x56e0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x5468]
call fcn.140007060
nop
lea rcx, [rsp + 0x56d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x5460]
call fcn.140007060
jmp 0x1401b798a
lea rcx, [rsp + 0x5428]
call fcn.1400777f0
nop
lea rcx, [rsp + 0x5460]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x5428]
call fcn.1400778f4
lea rcx, [rsp + 0x5428]
call fcn.1400774fc
mov qword [rsp + 0x56c8], 0
mov qword [rsp + 0x56b0], 0
mov qword [rsp + 0x5470], 0
lea rdx, [rsp + 0xff08]
lea rcx, [rsp + 0x5428]
call fcn.140077898
mov qword [rsp + 0x10790], rax
mov rcx, qword [rsp + 0x10790]
call fcn.140050200
lea r9, [rsp + 0x5470]
lea r8, [rsp + 0x56b0]
lea rdx, [rsp + 0x56c8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401b7fa6
mov dword [rsp + 0x10798], 1
jmp 0x1401b7fb1
mov dword [rsp + 0x10798], 0
movzx eax, byte [rsp + 0x10798]
mov byte [rsp + 0xff00], al
lea rcx, [rsp + 0xff08]
call fcn.140007060
movzx edx, byte [rsp + 0xff00]
test edx, edx
je 0x1401b80f2
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4878]
lea rdx, [0x14025d514]
call fcn.140002020
lea rcx, [rsp + 0x46d0]
call fcn.1401e31e0
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r9d, dword [rsp + 0x4868]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10f10]
call fcn.14000e4c0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025d940]
call fcn.1400f0bf0
mov dword [rsp + 0xff10], 0
lea rcx, [rsp + 0x5428]
call fcn.14007784c
nop
lea rcx, [rsp + 0x5458]
call fcn.140007060
nop
lea rcx, [rsp + 0x56e0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x5468]
call fcn.140007060
nop
lea rcx, [rsp + 0x56d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x5460]
call fcn.140007060
nop
lea rcx, [rsp + 0x4d50]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x4380]
call fcn.140005e30
nop
lea rcx, [rsp + 0x4348]
call fcn.14008350c
nop
lea rcx, [rsp + 0x46d0]
call fcn.140005e30
mov eax, dword [rsp + 0xff10]
jmp 0x1401bfaef
lea rcx, [rsp + 0x5428]
call fcn.140077548
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401b8115
addsd xmm1, qword [0x140272fc0]
mov rax, qword [rsp + 0x5470]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401b8133
addsd xmm0, qword [0x140272fc0]
mulsd xmm0, qword [0x140275290]
comisd xmm1, xmm0
jbe 0x1401b825a
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4878]
lea rdx, [0x14025d55c]
call fcn.140002020
lea rcx, [rsp + 0x46d0]
call fcn.1401e31e0
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r9d, dword [rsp + 0x4868]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10f10]
call fcn.14000e4c0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025d9b0]
call fcn.1400f0bf0
mov dword [rsp + 0xff14], 0
lea rcx, [rsp + 0x5428]
call fcn.14007784c
nop
lea rcx, [rsp + 0x5458]
call fcn.140007060
nop
lea rcx, [rsp + 0x56e0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x5468]
call fcn.140007060
nop
lea rcx, [rsp + 0x56d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x5460]
call fcn.140007060
nop
lea rcx, [rsp + 0x4d50]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x4380]
call fcn.140005e30
nop
lea rcx, [rsp + 0x4348]
call fcn.14008350c
nop
lea rcx, [rsp + 0x46d0]
call fcn.140005e30
mov eax, dword [rsp + 0xff14]
jmp 0x1401bfaef
lea rcx, [rsp + 0x56b8]
call fcn.140002d10
nop
mov edx, 0xc2
lea rcx, [rsp + 0xff18]
call fcn.1400f1540
mov qword [rsp + 0x107a0], rax
mov rax, qword [rsp + 0x107a0]
mov qword [rsp + 0x107a8], rax
mov rcx, qword [rsp + 0x107a8]
call fcn.140050200
mov r8, qword [rsp + 0x56d0]
mov rdx, rax
lea rcx, [rsp + 0x56b8]
call fcn.140002ba0
nop
lea rcx, [rsp + 0xff18]
call fcn.140007060
cmp dword [rsp + 0x5424], 3
je 0x1401b82e3
cmp dword [rsp + 0x5424], 4
je 0x1401b82e3
cmp dword [rsp + 0x5424], 5
jne 0x1401b835f
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.140083780
nop
lea rcx, [rsp + 0x56b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x5428]
call fcn.14007784c
nop
lea rcx, [rsp + 0x5458]
call fcn.140007060
nop
lea rcx, [rsp + 0x56e0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x5468]
call fcn.140007060
nop
lea rcx, [rsp + 0x56d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x5460]
call fcn.140007060
jmp 0x1401b798a
lea rcx, [rsp + 0x56b8]
call fcn.140050200
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400f0bf0
cmp eax, 7
jne 0x1401b86b6
lea rcx, [rsp + 0x56d0]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x5d80]
call fcn.1400fb0a0
nop
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x968], 0
je 0x1401b83d5
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b841f
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call fcn.14007e140
xor edx, edx
mov rcx, rax
call fcn.14007d820
mov edx, 5
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x5460]
call fcn.140050200
mov r9, qword [rsp + 0x10f10]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.140106940
test eax, eax
jne 0x1401b85c3
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b847f
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4878]
lea rdx, [0x14025da18]
call fcn.140002020
lea rcx, [rsp + 0x46d0]
call fcn.1401e31e0
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r9d, dword [rsp + 0x4868]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10f10]
call fcn.14000e4c0
mov r8, qword [rsp + 0x56d0]
lea rdx, [0x14025da20]
xor ecx, ecx
call fcn.1400de020
xor r8d, r8d
xor edx, edx
lea rcx, [0x14025da70]
call fcn.1400f0bf0
mov dword [rsp + 0xff20], 0
lea rcx, [rsp + 0x5d80]
call fcn.140007060
nop
lea rcx, [rsp + 0x56b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x5428]
call fcn.14007784c
nop
lea rcx, [rsp + 0x5458]
call fcn.140007060
nop
lea rcx, [rsp + 0x56e0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x5468]
call fcn.140007060
nop
lea rcx, [rsp + 0x56d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x5460]
call fcn.140007060
nop
lea rcx, [rsp + 0x4d50]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x4380]
call fcn.140005e30
nop
lea rcx, [rsp + 0x4348]
call fcn.14008350c
nop
lea rcx, [rsp + 0x46d0]
call fcn.140005e30
mov eax, dword [rsp + 0xff20]
jmp 0x1401bfaef
lea rcx, [rsp + 0x5460]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x5468]
call fcn.140006ea0
movzx eax, al
test eax, eax
jne 0x1401b8603
lea rcx, [rsp + 0x5468]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.140083780
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b8642
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rsp + 0x5d80]
call fcn.140007060
nop
lea rcx, [rsp + 0x56b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x5428]
call fcn.14007784c
nop
lea rcx, [rsp + 0x5458]
call fcn.140007060
nop
lea rcx, [rsp + 0x56e0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x5468]
call fcn.140007060
nop
lea rcx, [rsp + 0x56d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x5460]
call fcn.140007060
jmp 0x1401b798a
xor edx, edx
lea rcx, [rsp + 0x5480]
call fcn.140165700
nop
lea rdx, [rsp + 0x56d0]
lea rcx, [rsp + 0x5690]
call fcn.140002ce0
lea rcx, [rsp + 0xff28]
call fcn.14000dd70
lea r8, [0x14025da80]
lea rdx, [rsp + 0xff30]
mov rcx, rax
call fcn.14000d730
mov qword [rsp + 0x107b0], rax
mov rax, qword [rsp + 0x107b0]
mov qword [rsp + 0x107b8], rax
mov rdx, qword [rsp + 0x107b8]
lea rcx, [rsp + 0x5698]
call fcn.140002ce0
nop
lea rcx, [rsp + 0xff30]
call fcn.140007060
lea rcx, [rsp + 0x5480]
call fcn.1400830e4
cmp rax, 1
je 0x1401b886e
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4878]
lea rdx, [0x14025da1c]
call fcn.140002020
lea rcx, [rsp + 0x46d0]
call fcn.1401e31e0
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r9d, dword [rsp + 0x4868]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10f10]
call fcn.14000e4c0
mov dword [rsp + 0xff38], 0
lea rcx, [rsp + 0x5480]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x56b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x5428]
call fcn.14007784c
nop
lea rcx, [rsp + 0x5458]
call fcn.140007060
nop
lea rcx, [rsp + 0x56e0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x5468]
call fcn.140007060
nop
lea rcx, [rsp + 0x56d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x5460]
call fcn.140007060
nop
lea rcx, [rsp + 0x4d50]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x4380]
call fcn.140005e30
nop
lea rcx, [rsp + 0x4348]
call fcn.14008350c
nop
lea rcx, [rsp + 0x46d0]
call fcn.140005e30
mov eax, dword [rsp + 0xff38]
jmp 0x1401bfaef
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.14000de90
mov rdi, rax
lea rcx, [rsp + 0x5690]
call fcn.140050200
mov r9d, dword [rsp + 0x56c0]
mov r8d, dword [rdi]
mov rdx, rax
lea rcx, [rsp + 0x56d8]
call fcn.1400fc150
nop
cmp dword [rsp + 0x56c0], 0
je 0x1401b89a2
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.14000de90
mov r8d, dword [rsp + 0x56c0]
mov edx, dword [rax]
lea rcx, [rsp + 0x5d90]
call fcn.1401e05d0
nop
mov dx, 0x2e
lea rcx, [rsp + 0x56d8]
call fcn.140006920
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0xff40]
lea rcx, [rsp + 0x56d8]
call fcn.140006a80
mov qword [rsp + 0x107c0], rax
mov rcx, qword [rsp + 0x107c0]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0x60d0], eax
lea rcx, [rsp + 0xff40]
call fcn.140007060
lea rcx, [rsp + 0x5f30]
mov r8d, dword [rsp + 0x60d0]
lea rdx, [0x14025daa4]
call fcn.140002ba0
lea rcx, [rsp + 0x5f38]
lea rdx, [rsp + 0x56a0]
call fcn.140002ce0
lea rcx, [rsp + 0x5f40]
lea rdx, [rsp + 0x5698]
call fcn.140002ce0
lea rcx, [rsp + 0x5d90]
call fcn.1401cc080
nop
lea rcx, [rsp + 0x5d90]
call fcn.140005e30
jmp 0x1401b8a80
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.14000de90
mov edx, dword [rax]
lea rcx, [rsp + 0x60e0]
call fcn.1401e0680
nop
mov dx, 0x2e
lea rcx, [rsp + 0x56d8]
call fcn.140006920
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0xff48]
lea rcx, [rsp + 0x56d8]
call fcn.140006a80
mov qword [rsp + 0x107c8], rax
mov rcx, qword [rsp + 0x107c8]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0x6420], eax
lea rcx, [rsp + 0xff48]
call fcn.140007060
lea rcx, [rsp + 0x6280]
mov r8d, dword [rsp + 0x6420]
lea rdx, [0x14025daac]
call fcn.140002ba0
lea rcx, [rsp + 0x6288]
lea rdx, [rsp + 0x56a0]
call fcn.140002ce0
lea rcx, [rsp + 0x6290]
lea rdx, [rsp + 0x5698]
call fcn.140002ce0
lea rcx, [rsp + 0x60e0]
call fcn.1401cc080
nop
lea rcx, [rsp + 0x60e0]
call fcn.140005e30
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x968], 0
je 0x1401b8ac1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b8b0b
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call fcn.14007e140
xor edx, edx
mov rcx, rax
call fcn.14007d820
mov edx, 5
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x56d8]
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0x5460]
call fcn.140050200
mov r8, qword [rsp + 0x10f10]
mov r8, qword [r8 + 0x968]
mov rdx, rdi
mov rcx, rax
call fcn.140108390
lea rcx, [rsp + 0x5460]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x5468]
call fcn.140006ea0
movzx eax, al
test eax, eax
jne 0x1401b8b82
lea rcx, [rsp + 0x5468]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4348]
call fcn.140083780
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401b8bc1
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rsp + 0x56d8]
call fcn.140007060
nop
lea rcx, [rsp + 0x5480]
call fcn.1401656a0
nop
lea rcx, [rsp + 0x56b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x5428]
call fcn.14007784c
nop
lea rcx, [rsp + 0x5458]
call fcn.140007060
nop
lea rcx, [rsp + 0x56e0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x5468]
call fcn.140007060
nop
lea rcx, [rsp + 0x56d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x5460]
call fcn.140007060
jmp 0x1401b798a
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4348]
call fcn.14000d2e0
mov edx, dword [rsp + 0x4868]
lea rcx, [rsp + 0x4a10]
call fcn.14000d490
nop
lea rcx, [rsp + 0x4a10]
call fcn.1401cba60
lea rcx, [rsp + 0x4878]
lea rdx, [0x14025dab4]
call fcn.140002020
lea rcx, [rsp + 0x4958]
lea rdx, [0x14025dab8]
call fcn.140002020
lea rcx, [rsp + 0x46d0]
call fcn.1401e31e0
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r9d, dword [rsp + 0x4868]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10f10]
call fcn.14000e4c0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025dac0]
call fcn.1400f0bf0
mov dword [rsp + 0xff50], 0
lea rcx, [rsp + 0x4a10]
call fcn.140005e30
nop
lea rcx, [rsp + 0x4d50]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x4380]
call fcn.140005e30
nop
lea rcx, [rsp + 0x4348]
call fcn.14008350c
nop
lea rcx, [rsp + 0x46d0]
call fcn.140005e30
mov eax, dword [rsp + 0xff50]
jmp 0x1401bfaef
mov rax, qword [rsp + 0x10f10]
cmp dword [rax + 0x978], 0
je 0x1401b8d74
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000dc10
test eax, eax
jne 0x1401b8d93
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000d500
mov dword [rsp + 0x67b0], eax
cmp dword [rsp + 0x67b0], 1
je 0x1401b8dbf
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0x67b8], eax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x8028
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov dword [rsp + 0x6b10], eax
cmp dword [rsp + 0x6b10], 0
jne 0x1401b8e1d
xor eax, eax
jmp 0x1401bfaef
lea rcx, [rsp + 0x67d0]
call fcn.1401e0790
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0x67b8]
call fcn.140083bd4
mov dword [rsp + 0x6968], eax
lea rcx, [rsp + 0x67d0]
call fcn.1401e5810
test eax, eax
jne 0x1401b8e82
mov dword [rsp + 0xff54], 0
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xff54]
jmp 0x1401bfaef
lea rcx, [rsp + 0x6a58]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
test eax, eax
je 0x1401b8ebf
mov dword [rsp + 0xff58], 0
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xff58]
jmp 0x1401bfaef
lea rcx, [rsp + 0x6430]
call fcn.140002d10
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e82c0
nop
lea rcx, [rsp + 0xff60]
call fcn.140001000
mov qword [rsp + 0x107d0], rax
mov rax, qword [rsp + 0x107d0]
mov qword [rsp + 0x107d8], rax
lea r8, [0x14025dac8]
mov rdx, qword [rsp + 0x107d8]
lea rcx, [rsp + 0xff68]
call fcn.1400010b0
mov qword [rsp + 0x107e0], rax
mov rax, qword [rsp + 0x107e0]
mov qword [rsp + 0x107e8], rax
mov rcx, qword [rsp + 0x107e8]
call fcn.140050200
mov dword [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_WSACleanup
mov r8, rax
lea rdx, [rsp + 0xff70]
lea rcx, [rsp + 0x7330]
call fcn.1400eb690
nop
lea rcx, [rsp + 0xff68]
call fcn.140007060
nop
lea rcx, [rsp + 0xff60]
call fcn.140007060
lea rcx, [rsp + 0x67c0]
call fcn.140002d10
nop
mov r8, qword [rsp + 0x6998]
lea rdx, [0x14025dae0]
lea rcx, [rsp + 0x67c0]
call fcn.140002ba0
lea rcx, [rsp + 0x67c0]
call fcn.140050200
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x7410]
lea rcx, [rsp + 0x7330]
call fcn.1400ebf20
lea rcx, [rsp + 0xff88]
call fcn.1400e64c0
mov rdx, rax
lea rcx, [rsp + 0x7410]
call fcn.1400e63a0
movzx eax, al
test eax, eax
je 0x1401b9081
lea rdx, [rsp + 0xff98]
lea rcx, [rsp + 0x7410]
call fcn.1400e7990
lea r8, [0x14025db50]
lea rdx, [rsp + 0x7420]
mov rcx, rax
call fcn.1400e6ea0
lea rcx, [rsp + 0xffa0]
call fcn.1400e56e0
mov rdx, rax
lea rcx, [rsp + 0x7420]
call fcn.1400e55e0
movzx eax, al
test eax, eax
je 0x1401b9081
lea r8, [0x14025db58]
lea rdx, [rsp + 0xffa8]
lea rcx, [rsp + 0x7420]
call fcn.1400e6df0
mov rcx, rax
call fcn.1400e5720
mov rdx, rax
lea rcx, [rsp + 0x6430]
call fcn.140002020
lea rcx, [rsp + 0x6430]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401b90f7
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Getting_NIC_vendor_information_failed_
call fcn.1400f0bf0
mov dword [rsp + 0xffb0], 0
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xffb0]
jmp 0x1401bfaef
lea rcx, [rsp + 0x6470]
call fcn.14000d650
nop
lea rcx, [rsp + 0x69c0]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0x6608], eax
lea rcx, [rsp + 0x6470]
call fcn.1401cb860
test eax, eax
jne 0x1401b91a2
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Please_make_sure_that_Image1_has_been_set_
call fcn.1400f0bf0
mov dword [rsp + 0xffb4], 0
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xffb4]
jmp 0x1401bfaef
lea rcx, [rsp + 0x6618]
call fcn.140050200
mov rcx, rax
call fcn.1400fabb0
mov dword [rsp + 0x6428], eax
cmp dword [rsp + 0x6428], 2
je 0x1401b9238
xor r8d, r8d
mov edx, 0x40
lea rcx, str.This_function_only_supports_VHD_files__other_formats_are_not_supported.
call fcn.1400f0bf0
mov dword [rsp + 0xffb8], 0
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xffb8]
jmp 0x1401bfaef
lea rdx, [rsp + 0x6618]
lea r8, [0x14025dcb0]
lea rcx, [rsp + 0x7320]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0x6618]
call fcn.140050200
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call fcn.140108cb0
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 1
lea rcx, [0x14025dcc8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x67c8], rax
cmp qword [rsp + 0x67c8], 0
jne 0x1401b935c
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025dcf0]
call fcn.1400f0bf0
mov dword [rsp + 0xffbc], 0
lea rcx, [rsp + 0x7320]
call fcn.140007060
nop
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xffbc]
jmp 0x1401bfaef
lea rdx, [0x14025dd48]
mov rcx, qword [rsp + 0x67c8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x7328], rax
lea rdx, [0x14025dd60]
mov rcx, qword [rsp + 0x67c8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x7400], rax
lea rdx, [0x14025dd70]
mov rcx, qword [rsp + 0x67c8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x6468], rax
lea rdx, [0x14025dd88]
mov rcx, qword [rsp + 0x67c8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x7408], rax
mov qword [rsp + 0x6460], 0xffffffffffffffff
mov dword [rsp + 0x6448], 2
mov dword [rsp + 0x644c], 0xec984aec
mov eax, 0xa0f9
mov word [rsp + 0x6450], ax
mov eax, 0x47e9
mov word [rsp + 0x6452], ax
mov byte [rsp + 0x6454], 0x90
mov byte [rsp + 0x6455], 0x1f
mov byte [rsp + 0x6456], 0x71
mov byte [rsp + 0x6457], 0x41
mov byte [rsp + 0x6458], 0x5a
mov byte [rsp + 0x6459], 0x66
mov byte [rsp + 0x645a], 0x34
mov byte [rsp + 0x645b], 0x5b
mov dword [rsp + 0x6b18], 1
lea rdi, [rsp + 0x6b1c]
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x6b1c], 1
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rdx, rax
lea rax, [rsp + 0x6460]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x6b18]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x3f0000
lea rcx, [rsp + 0x6448]
call qword [rsp + 0x7400]
test eax, eax
je 0x1401b9563
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14025dda8]
call fcn.1400f0bf0
mov dword [rsp + 0xffc0], 0
lea rcx, [rsp + 0x7320]
call fcn.140007060
nop
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xffc0]
jmp 0x1401bfaef
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6460]
call qword [rsp + 0x6468]
test eax, eax
je 0x1401b9648
mov rcx, qword [rsp + 0x6460]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14025ddd0]
call fcn.1400f0bf0
mov dword [rsp + 0xffc4], 0
lea rcx, [rsp + 0x7320]
call fcn.140007060
nop
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xffc4]
jmp 0x1401bfaef
xor eax, eax
mov word [rsp + 0x6b20], ax
lea rdi, [rsp + 0x6b22]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov dword [rsp + 0x6438], 0x800
lea r8, [rsp + 0x6b20]
lea rdx, [rsp + 0x6438]
mov rcx, qword [rsp + 0x6460]
call qword [rsp + 0x7408]
lea rcx, [0x14025ddf8]
call fcn.1400a99d4
lea rcx, [rsp + rax*2 + 0x6b20]
call fcn.1400aac5c
mov dword [rsp + 0x6424], eax
mov eax, 0x43
mov word [rsp + 0x67b4], ax
mov dword [rsp + 0x7428], 0
jmp 0x1401b96d8
mov eax, dword [rsp + 0x7428]
add eax, 1
mov dword [rsp + 0x7428], eax
cmp dword [rsp + 0x7428], 0x14
jge 0x1401b999f
movzx eax, word [rsp + 0x67b4]
cmp eax, 0x43
jne 0x1401b999f
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x742c], eax
mov byte [rsp + 0x7430], 0x43
jmp 0x1401b972a
movzx eax, byte [rsp + 0x7430]
add al, 1
mov byte [rsp + 0x7430], al
movsx eax, byte [rsp + 0x7430]
cmp eax, 0x5a
jg 0x1401b999a
movzx eax, word [rsp + 0x67b4]
cmp eax, 0x43
jne 0x1401b999a
movsx ecx, byte [rsp + 0x7430]
sub ecx, 0x41
mov eax, 1
shl eax, cl
mov ecx, eax
mov eax, dword [rsp + 0x742c]
and eax, ecx
test eax, eax
jne 0x1401b976f
jmp 0x1401b9719
lea rcx, [rsp + 0xb448]
call fcn.140002d10
nop
movsx r8d, byte [rsp + 0x7430]
lea rdx, [0x14025de20]
lea rcx, [rsp + 0xb448]
call fcn.140002ba0
lea rcx, [rsp + 0xb448]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
je 0x1401b97c7
lea rcx, [rsp + 0xb448]
call fcn.140007060
jmp 0x1401b9719
movsx r8d, byte [rsp + 0x7430]
lea rdx, [0x14025de28]
lea rcx, [rsp + 0xb448]
call fcn.140002ba0
lea rcx, [rsp + 0xb448]
call fcn.140050200
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 3
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x7438], rax
cmp qword [rsp + 0x7438], 0xffffffffffffffff
jne 0x1401b9846
lea rcx, [rsp + 0xb448]
call fcn.140007060
jmp 0x1401b9719
mov dword [rsp + 0xb440], 0
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0xb440]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x4000
lea rax, [rsp + 0x7440]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x560000
mov rcx, qword [rsp + 0x7438]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1401b9979
mov dword [rsp + 0xb450], 0
mov dword [rsp + 0xb450], 0
jmp 0x1401b98c6
mov eax, dword [rsp + 0xb450]
add eax, 1
mov dword [rsp + 0xb450], eax
mov eax, dword [rsp + 0x7440]
cmp dword [rsp + 0xb450], eax
jge 0x1401b9979
cmp dword [rsp + 0x6424], 0xffffffff
je 0x1401b9902
movsxd rax, dword [rsp + 0xb450]
imul rax, rax, 0x18
mov eax, dword [rsp + rax + 0x7448]
cmp dword [rsp + 0x6424], eax
je 0x1401b9902
jmp 0x1401b98b5
lea rcx, [rsp + 0xb458]
call fcn.140002d10
nop
movsx r8d, byte [rsp + 0x7430]
lea rdx, [0x14025de38]
lea rcx, [rsp + 0xb458]
call fcn.140002ba0
lea rcx, [rsp + 0xb458]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401b9967
movsx ax, byte [rsp + 0x7430]
mov word [rsp + 0x67b4], ax
lea rcx, [rsp + 0xb458]
call fcn.140007060
jmp 0x1401b9979
lea rcx, [rsp + 0xb458]
call fcn.140007060
jmp 0x1401b98b5
mov rcx, qword [rsp + 0x7438]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0xb448]
call fcn.140007060
jmp 0x1401b9719
jmp 0x1401b96c7
movzx eax, word [rsp + 0x67b4]
cmp eax, 0x43
jne 0x1401b9a8f
cmp qword [rsp + 0x6460], 0xffffffffffffffff
je 0x1401b99e9
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6460]
call qword [rsp + 0x7328]
mov rcx, qword [rsp + 0x6460]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x6460], 0xffffffffffffffff
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14025de50]
call fcn.1400f0bf0
mov dword [rsp + 0xffc8], 0
lea rcx, [rsp + 0x7320]
call fcn.140007060
nop
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xffc8]
jmp 0x1401bfaef
call fcn.1400d8f80
test eax, eax
jne 0x1401b9b7b
cmp qword [rsp + 0x6460], 0xffffffffffffffff
je 0x1401b9ad5
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6460]
call qword [rsp + 0x7328]
mov rcx, qword [rsp + 0x6460]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x6460], 0xffffffffffffffff
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14025de78]
call fcn.1400f0bf0
mov dword [rsp + 0xffcc], 0
lea rcx, [rsp + 0x7320]
call fcn.140007060
nop
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0xffcc]
jmp 0x1401bfaef
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0xffd0]
call fcn.140005e70
mov qword [rsp + 0x107f0], rax
mov rax, qword [rsp + 0x107f0]
mov qword [rsp + 0x107f8], rax
lea r8, [0x14025deb0]
mov rdx, qword [rsp + 0x107f8]
lea rcx, [rsp + 0xffd8]
call fcn.1400010b0
mov qword [rsp + 0x10800], rax
mov rcx, qword [rsp + 0x10800]
call fcn.140050200
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0xffd8]
call fcn.140007060
nop
lea rcx, [rsp + 0xffd0]
call fcn.140007060
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0xffe0]
call fcn.140005e70
mov qword [rsp + 0x10808], rax
mov rax, qword [rsp + 0x10808]
mov qword [rsp + 0x10810], rax
lea r8, [0x14025dec0]
mov rdx, qword [rsp + 0x10810]
lea rcx, [rsp + 0xffe8]
call fcn.1400010b0
mov qword [rsp + 0x10818], rax
mov rcx, qword [rsp + 0x10818]
call fcn.140050200
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0xffe8]
call fcn.140007060
nop
lea rcx, [rsp + 0xffe0]
call fcn.140007060
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0xfff8]
call fcn.140005e70
mov qword [rsp + 0x10820], rax
mov rax, qword [rsp + 0x10820]
mov qword [rsp + 0x10828], rax
lea r8, [0x14025dee0]
mov rdx, qword [rsp + 0x10828]
lea rcx, [rsp + 0x10000]
call fcn.1400010b0
mov qword [rsp + 0x10830], rax
mov rax, qword [rsp + 0x10830]
mov qword [rsp + 0x10838], rax
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10008]
call fcn.140005e70
mov qword [rsp + 0x10840], rax
mov rax, qword [rsp + 0x10840]
mov qword [rsp + 0x10848], rax
lea r8, [0x14025df28]
mov rdx, qword [rsp + 0x10848]
lea rcx, [rsp + 0x10010]
call fcn.1400010b0
mov qword [rsp + 0x10850], rax
mov rcx, qword [rsp + 0x10838]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x10850]
call fcn.140050200
mov r8, rdi
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [rsp + 0xfff0], eax
lea rcx, [rsp + 0x10010]
call fcn.140007060
nop
lea rcx, [rsp + 0x10008]
call fcn.140007060
nop
lea rcx, [rsp + 0x10000]
call fcn.140007060
nop
lea rcx, [rsp + 0xfff8]
call fcn.140007060
cmp dword [rsp + 0xfff0], 0
je 0x1401b9eb2
cmp qword [rsp + 0x6460], 0xffffffffffffffff
je 0x1401b9e0c
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6460]
call qword [rsp + 0x7328]
mov rcx, qword [rsp + 0x6460]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x6460], 0xffffffffffffffff
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14025df38]
call fcn.1400f0bf0
mov dword [rsp + 0x10018], 0
lea rcx, [rsp + 0x7320]
call fcn.140007060
nop
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0x10018]
jmp 0x1401bfaef
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10020]
call fcn.140005e70
mov qword [rsp + 0x10858], rax
mov rax, qword [rsp + 0x10858]
mov qword [rsp + 0x10860], rax
lea r8, [0x14025df70]
mov rdx, qword [rsp + 0x10860]
lea rcx, [rsp + 0x10028]
call fcn.1400010b0
mov qword [rsp + 0x10868], rax
mov rax, qword [rsp + 0x10868]
mov qword [rsp + 0x10870], rax
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10030]
call fcn.140005e70
mov qword [rsp + 0x10878], rax
mov rax, qword [rsp + 0x10878]
mov qword [rsp + 0x10880], rax
lea r8, [0x14025dfb8]
mov rdx, qword [rsp + 0x10880]
lea rcx, [rsp + 0x10038]
call fcn.1400010b0
mov qword [rsp + 0x10888], rax
mov rcx, qword [rsp + 0x10870]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x10888]
call fcn.140050200
mov r8, rdi
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [rsp + 0x1001c], eax
lea rcx, [rsp + 0x10038]
call fcn.140007060
nop
lea rcx, [rsp + 0x10030]
call fcn.140007060
nop
lea rcx, [rsp + 0x10028]
call fcn.140007060
nop
lea rcx, [rsp + 0x10020]
call fcn.140007060
cmp dword [rsp + 0x1001c], 0
je 0x1401ba15a
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10040]
call fcn.140005e70
mov qword [rsp + 0x10890], rax
mov rax, qword [rsp + 0x10890]
mov qword [rsp + 0x10898], rax
lea r8, [0x14025dfd0]
mov rdx, qword [rsp + 0x10898]
lea rcx, [rsp + 0x10048]
call fcn.1400010b0
mov qword [rsp + 0x108a0], rax
mov rcx, qword [rsp + 0x108a0]
call fcn.140050200
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10048]
call fcn.140007060
nop
lea rcx, [rsp + 0x10040]
call fcn.140007060
cmp qword [rsp + 0x6460], 0xffffffffffffffff
je 0x1401ba0b4
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6460]
call qword [rsp + 0x7328]
mov rcx, qword [rsp + 0x6460]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x6460], 0xffffffffffffffff
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14025dfe0]
call fcn.1400f0bf0
mov dword [rsp + 0x10050], 0
lea rcx, [rsp + 0x7320]
call fcn.140007060
nop
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0x10050]
jmp 0x1401bfaef
mov dword [rsp + 0x642c], 0
lea rcx, [rsp + 0xb838]
call fcn.140002d10
nop
lea rcx, [rsp + 0xb818]
call fcn.140002d10
nop
lea rcx, [rsp + 0xb820]
call fcn.1400054b0
nop
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10058]
call fcn.140005e70
mov qword [rsp + 0x108a8], rax
mov rax, qword [rsp + 0x108a8]
mov qword [rsp + 0x108b0], rax
lea r8, str._SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rdx, qword [rsp + 0x108b0]
lea rcx, [rsp + 0x10060]
call fcn.1400010b0
mov qword [rsp + 0x108b8], rax
mov rcx, qword [rsp + 0x108b8]
call fcn.140050200
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xb820]
call fcn.140005670
test eax, eax
jne 0x1401ba221
mov dword [rsp + 0x108c0], 1
jmp 0x1401ba22c
mov dword [rsp + 0x108c0], 0
movzx eax, byte [rsp + 0x108c0]
mov byte [rsp + 0x10054], al
lea rcx, [rsp + 0x10060]
call fcn.140007060
nop
lea rcx, [rsp + 0x10058]
call fcn.140007060
movzx edx, byte [rsp + 0x10054]
test edx, edx
je 0x1401ba523
xor eax, eax
mov word [rsp + 0xc8b0], ax
lea rdi, [rsp + 0xc8b2]
xor eax, eax
mov ecx, 0x1fe
rep stosb byte [rdi], al
mov dword [rsp + 0xc8a4], 0x100
lea r9, [rsp + 0xc8a4]
lea r8, [rsp + 0xc8b0]
lea rdx, [0x14025e080]
lea rcx, [rsp + 0xb820]
call fcn.140005780
mov dword [rsp + 0xc89c], 0
mov dword [rsp + 0xc8a0], 0
lea r8, [rsp + 0xc89c]
lea rdx, str.CurrentMajorVersionNumber
lea rcx, [rsp + 0xb820]
call fcn.140005700
lea r8, [rsp + 0xc8a0]
lea rdx, [0x14025e0d8]
lea rcx, [rsp + 0xb820]
call fcn.140005700
lea rcx, [rsp + 0xb820]
call fcn.140005540
lea rdx, [rsp + 0xc8b0]
lea rcx, [rsp + 0xcab0]
call fcn.140002050
nop
lea rcx, [rsp + 0xcab0]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0xcab8], eax
xor r8d, r8d
lea rdx, [0x14025dabc]
lea rcx, [rsp + 0xcab0]
call fcn.140006800
mov r8d, eax
add r8d, 1
lea rdx, [rsp + 0x10068]
lea rcx, [rsp + 0xcab0]
call fcn.140006a80
mov qword [rsp + 0x108c8], rax
mov rcx, qword [rsp + 0x108c8]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0xcabc], eax
lea rcx, [rsp + 0x10068]
call fcn.140007060
cmp dword [rsp + 0xcab8], 6
jne 0x1401ba3ca
cmp dword [rsp + 0xcabc], 3
jne 0x1401ba3ca
cmp dword [rsp + 0xc89c], 0xa
je 0x1401ba3ca
mov dword [rsp + 0xcabc], 2
movsxd rax, dword [rsp + 0xcab8]
and rax, 0xff
movzx edx, al
movsxd rax, dword [rsp + 0xcabc]
and rax, 0xff
movzx ecx, al
shl ecx, 8
mov eax, edx
or eax, ecx
movzx eax, ax
and rax, 0xffff
movzx eax, ax
mov dword [rsp + 0xc898], eax
mov eax, dword [rsp + 0xc898]
and rax, 0xffff
movzx eax, ax
and rax, 0xff
movzx eax, al
cmp eax, 6
jb 0x1401ba501
mov eax, dword [rsp + 0xc898]
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
test eax, eax
jne 0x1401ba45d
lea rdx, [0x14025e110]
lea rcx, [rsp + 0xb838]
call fcn.140002020
mov eax, dword [rsp + 0xc898]
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 1
jne 0x1401ba493
lea rdx, [0x14025e120]
lea rcx, [rsp + 0xb838]
call fcn.140002020
mov eax, dword [rsp + 0xc898]
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 2
jne 0x1401ba4c9
lea rdx, str.Win8
lea rcx, [rsp + 0xb838]
call fcn.140002020
mov eax, dword [rsp + 0xc898]
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 3
jne 0x1401ba4ff
lea rdx, str.Win10
lea rcx, [rsp + 0xb838]
call fcn.140002020
jmp 0x1401ba516
lea rdx, [0x14025db64]
lea rcx, [rsp + 0xb838]
call fcn.140002020
nop
lea rcx, [rsp + 0xcab0]
call fcn.140007060
lea rcx, [rsp + 0xb838]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401ba57a
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14025e150]
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0xb820]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xb818]
call fcn.140007060
nop
lea rcx, [rsp + 0xb838]
call fcn.140007060
jmp 0x1401bd7e0
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10070]
call fcn.140005e70
mov qword [rsp + 0x108d0], rax
mov rax, qword [rsp + 0x108d0]
mov qword [rsp + 0x108d8], rax
lea r8, str.:WindowsSysWOW64
mov rdx, qword [rsp + 0x108d8]
lea rcx, [rsp + 0x10078]
call fcn.1400010b0
mov qword [rsp + 0x108e0], rax
mov rax, qword [rsp + 0x108e0]
mov qword [rsp + 0x108e8], rax
mov rcx, qword [rsp + 0x108e8]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401ba60c
lea rax, [0x14025ded4]
mov qword [rsp + 0x108f0], rax
jmp 0x1401ba61b
lea rax, [0x14025e1b8]
mov qword [rsp + 0x108f0], rax
mov rdx, qword [rsp + 0x108f0]
lea rcx, [rsp + 0xb818]
call fcn.140002020
nop
lea rcx, [rsp + 0x10078]
call fcn.140007060
nop
lea rcx, [rsp + 0x10070]
call fcn.140007060
xor edx, edx
mov word [rsp + 0xb850], dx
lea rdi, [rsp + 0xb852]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10080]
call fcn.140001000
mov qword [rsp + 0x108f8], rax
mov rax, qword [rsp + 0x108f8]
mov qword [rsp + 0x10900], rax
lea r8, [0x14025e1c0]
mov rdx, qword [rsp + 0x10900]
lea rcx, [rsp + 0x10088]
call fcn.1400010b0
mov qword [rsp + 0x10908], rax
mov rcx, qword [rsp + 0x10908]
call fcn.140050200
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
lea r9, [rsp + 0xb850]
lea r8, [0x14025dadc]
lea rdx, str.Email
lea rcx, [0x14025e1e8]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x10088]
call fcn.140007060
nop
lea rcx, [rsp + 0x10080]
call fcn.140007060
lea rdx, [rsp + 0xb850]
lea rcx, [rsp + 0xb7d8]
call fcn.140002050
nop
lea rcx, [rsp + 0x10090]
call fcn.140001000
mov qword [rsp + 0x10910], rax
mov rax, qword [rsp + 0x10910]
mov qword [rsp + 0x10918], rax
lea r8, [0x14025e1f8]
mov rdx, qword [rsp + 0x10918]
lea rcx, [rsp + 0x10098]
call fcn.1400010b0
mov qword [rsp + 0x10920], rax
mov rcx, qword [rsp + 0x10920]
call fcn.140050200
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
lea r9, [rsp + 0xb850]
lea r8, [0x14025db4c]
lea rdx, str.EmailPWD
lea rcx, [0x14025e228]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x10098]
call fcn.140007060
nop
lea rcx, [rsp + 0x10090]
call fcn.140007060
lea rdx, [rsp + 0xb850]
lea rcx, [rsp + 0xc888]
call fcn.140004d80
nop
lea rcx, [rsp + 0xc050]
call fcn.140002d10
nop
lea rdx, [0x14025ddcc]
lea rcx, [rsp + 0xc050]
call fcn.140002020
lea rdx, [0x14025de1c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025dfcc]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e07c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e0d4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e10c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e11c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e14c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e1e4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, str..youngzsoft.com_updatenic.php_typeupdatenicfromidcemailpasswordlicenseproductmachineidreleasetimenicvendoros_
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e23c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e240]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e244]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e248]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e24c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e250]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e254]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e258]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e25c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e260]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e264]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e268]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e26c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e270]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e274]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e278]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e27c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e280]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e284]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e288]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e28c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e290]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e294]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e298]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e29c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2a0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2a4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2a8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2ac]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2b0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2b4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2b8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2bc]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2c0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2c4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2c8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2cc]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2d0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2d4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2d8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2dc]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2e0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2e4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2e8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2ec]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2f0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2f4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2f8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e2fc]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e300]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e304]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e308]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e30c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e310]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e314]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e318]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e31c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rcx, [rsp + 0xb7d8]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x100a0]
call fcn.1400db040
mov qword [rsp + 0x10928], rax
mov rax, qword [rsp + 0x10928]
mov qword [rsp + 0x10930], rax
mov rdx, qword [rsp + 0x10930]
lea rcx, [rsp + 0xc050]
call fcn.140006050
nop
lea rcx, [rsp + 0x100a0]
call fcn.140007060
lea rdx, [0x14025e320]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e324]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e328]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e32c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e330]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e334]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e338]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e33c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e340]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e344]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rcx, [rsp + 0xc888]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x100a8]
call fcn.140004700
mov qword [rsp + 0x10938], rax
mov rax, qword [rsp + 0x10938]
mov qword [rsp + 0x10940], rax
mov rcx, qword [rsp + 0x10940]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x100b0]
call fcn.1400db040
mov qword [rsp + 0x10948], rax
mov rax, qword [rsp + 0x10948]
mov qword [rsp + 0x10950], rax
mov rdx, qword [rsp + 0x10950]
lea rcx, [rsp + 0xc050]
call fcn.140006050
nop
lea rcx, [rsp + 0x100b0]
call fcn.140007060
nop
lea rcx, [rsp + 0x100a8]
call fcn.140007060
lea rdx, [0x14025e348]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e34c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e350]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e354]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e358]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e35c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e360]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e364]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e368]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rcx, [rsp + 0x100b8]
call fcn.14018ffa0
mov qword [rsp + 0x10958], rax
mov rax, qword [rsp + 0x10958]
mov qword [rsp + 0x10960], rax
mov rcx, qword [rsp + 0x10960]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x100c0]
call fcn.1400db040
mov qword [rsp + 0x10968], rax
mov rax, qword [rsp + 0x10968]
mov qword [rsp + 0x10970], rax
mov rdx, qword [rsp + 0x10970]
lea rcx, [rsp + 0xc050]
call fcn.140006050
nop
lea rcx, [rsp + 0x100c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x100b8]
call fcn.140007060
lea rdx, [0x14025e36c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e370]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e374]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e378]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e37c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e380]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e384]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e388]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e38c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
call fcn.14000f0b0
mov rdx, rax
lea rcx, [rsp + 0x100c8]
call fcn.140002050
mov qword [rsp + 0x10978], rax
mov rax, qword [rsp + 0x10978]
mov qword [rsp + 0x10980], rax
mov rcx, qword [rsp + 0x10980]
call fcn.1400069f0
mov rcx, rax
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x100d0]
call fcn.1400db040
mov qword [rsp + 0x10988], rax
mov rax, qword [rsp + 0x10988]
mov qword [rsp + 0x10990], rax
mov rdx, qword [rsp + 0x10990]
lea rcx, [rsp + 0xc050]
call fcn.140006050
nop
lea rcx, [rsp + 0x100d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x100c8]
call fcn.140007060
lea rdx, [0x14025e390]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e394]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e398]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e39c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3a0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3a4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3a8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3ac]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3b0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3b4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3b8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
mov edx, 3
lea rcx, [rsp + 0x100d8]
call fcn.1400def40
mov qword [rsp + 0x10998], rax
mov rax, qword [rsp + 0x10998]
mov qword [rsp + 0x109a0], rax
mov rcx, qword [rsp + 0x109a0]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x100e0]
call fcn.1400db040
mov qword [rsp + 0x109a8], rax
mov rax, qword [rsp + 0x109a8]
mov qword [rsp + 0x109b0], rax
mov rdx, qword [rsp + 0x109b0]
lea rcx, [rsp + 0xc050]
call fcn.140006050
nop
lea rcx, [rsp + 0x100e0]
call fcn.140007060
nop
lea rcx, [rsp + 0x100d8]
call fcn.140007060
lea rdx, [0x14025e3bc]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3c0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3c4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3c8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3cc]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3d0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3d4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3d8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3dc]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3e0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3e4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3e8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3ec]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rcx, [rsp + 0x100e8]
call fcn.140005090
mov qword [rsp + 0x109b8], rax
mov rax, qword [rsp + 0x109b8]
mov qword [rsp + 0x109c0], rax
mov rcx, qword [rsp + 0x109c0]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x100f0]
call fcn.1400db040
mov qword [rsp + 0x109c8], rax
mov rax, qword [rsp + 0x109c8]
mov qword [rsp + 0x109d0], rax
mov rdx, qword [rsp + 0x109d0]
lea rcx, [rsp + 0xc050]
call fcn.140006050
nop
lea rcx, [rsp + 0x100f0]
call fcn.140007060
nop
lea rcx, [rsp + 0x100e8]
call fcn.140007060
lea rdx, [0x14025e3f0]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3f4]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3f8]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e3fc]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e400]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e404]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e408]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e40c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e410]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e414]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e418]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rcx, [rsp + 0x6430]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x100f8]
call fcn.1400db040
mov qword [rsp + 0x109d8], rax
mov rax, qword [rsp + 0x109d8]
mov qword [rsp + 0x109e0], rax
mov rdx, qword [rsp + 0x109e0]
lea rcx, [rsp + 0xc050]
call fcn.140006050
nop
lea rcx, [rsp + 0x100f8]
call fcn.140007060
lea rdx, [0x14025e41c]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e420]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e424]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea rdx, [0x14025e428]
lea rcx, [rsp + 0xc050]
call fcn.140006080
lea r8, [0x14025e42c]
lea rdx, [rsp + 0xb838]
lea rcx, [rsp + 0x10100]
call fcn.1400010b0
mov qword [rsp + 0x109e8], rax
mov rax, qword [rsp + 0x109e8]
mov qword [rsp + 0x109f0], rax
lea r8, [rsp + 0xb818]
mov rdx, qword [rsp + 0x109f0]
lea rcx, [rsp + 0x10108]
call fcn.140006c50
mov qword [rsp + 0x109f8], rax
mov rax, qword [rsp + 0x109f8]
mov qword [rsp + 0x10a00], rax
mov rcx, qword [rsp + 0x10a00]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x10110]
call fcn.1400db040
mov qword [rsp + 0x10a08], rax
mov rax, qword [rsp + 0x10a08]
mov qword [rsp + 0x10a10], rax
mov rdx, qword [rsp + 0x10a10]
lea rcx, [rsp + 0xc050]
call fcn.140006050
nop
lea rcx, [rsp + 0x10110]
call fcn.140007060
nop
lea rcx, [rsp + 0x10108]
call fcn.140007060
nop
lea rcx, [rsp + 0x10100]
call fcn.140007060
lea rcx, [rsp + 0xc050]
call fcn.140050200
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc890]
call fcn.1400eef50
nop
lea rcx, [rsp + 0xc890]
call fcn.140050200
mov r9d, reloc.WS2_32.dll_WSACleanup
mov r8, rax
lea rdx, [rsp + 0x10118]
lea rcx, [rsp + 0x7330]
call fcn.1400eb700
mov rcx, rax
call fcn.1400e53c0
movzx eax, al
test eax, eax
jne 0x1401bb7af
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14025e430]
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0xc890]
call fcn.140007060
nop
lea rcx, [rsp + 0xc050]
call fcn.140007060
nop
lea rcx, [rsp + 0xc888]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d8]
call fcn.140007060
nop
lea rcx, [rsp + 0xb820]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xb818]
call fcn.140007060
nop
lea rcx, [rsp + 0xb838]
call fcn.140007060
jmp 0x1401bd7e0
lea r8, str.UpdateInfo
lea rdx, [rsp + 0xc068]
lea rcx, [rsp + 0x7330]
call fcn.1400e6ea0
lea rcx, [rsp + 0xc068]
call fcn.1400e5560
movzx eax, al
test eax, eax
je 0x1401bb85a
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Checking_for_update_failed._Please_make_sure_that_the_server_is_connected_to_the_Internet.
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0xc890]
call fcn.140007060
nop
lea rcx, [rsp + 0xc050]
call fcn.140007060
nop
lea rcx, [rsp + 0xc888]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d8]
call fcn.140007060
nop
lea rcx, [rsp + 0xb820]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xb818]
call fcn.140007060
nop
lea rcx, [rsp + 0xb838]
call fcn.140007060
jmp 0x1401bd7e0
lea rcx, [rsp + 0xc880]
call fcn.140002d10
nop
lea rcx, [rsp + 0xb810]
call fcn.140002d10
nop
lea rcx, [rsp + 0xb7d0]
call fcn.140002d10
nop
lea rcx, [rsp + 0xb800]
call fcn.140002d10
nop
lea r8, str.notification
lea rdx, [rsp + 0xb7e8]
lea rcx, [rsp + 0xc068]
call fcn.1400e6ea0
lea rcx, [rsp + 0xb7e8]
call fcn.1400e5560
movzx eax, al
test eax, eax
jne 0x1401bb8f6
lea r8, [0x14025e5d8]
lea rdx, [rsp + 0x10130]
lea rcx, [rsp + 0xb7e8]
call fcn.1400e6df0
mov rcx, rax
call fcn.1400e5720
mov rdx, rax
lea rcx, [rsp + 0xc880]
call fcn.140002020
lea r8, [0x14025e5e8]
lea rdx, [rsp + 0x10138]
lea rcx, [rsp + 0xc068]
call fcn.1400e6ea0
mov rax, qword [rax]
mov qword [rsp + 0xb7e8], rax
lea rcx, [rsp + 0xb7e8]
call fcn.1400e5560
movzx eax, al
test eax, eax
jne 0x1401bb965
lea r8, [0x14025e600]
lea rdx, [rsp + 0x10140]
lea rcx, [rsp + 0xb7e8]
call fcn.1400e6df0
mov rcx, rax
call fcn.1400e5720
mov rdx, rax
lea rcx, [rsp + 0xb810]
call fcn.140002020
lea r8, [0x14025e610]
lea rdx, [rsp + 0x10148]
lea rcx, [rsp + 0xc068]
call fcn.1400e6ea0
mov rax, qword [rax]
mov qword [rsp + 0xb7e8], rax
lea rcx, [rsp + 0xb7e8]
call fcn.1400e5560
movzx eax, al
test eax, eax
jne 0x1401bb9d4
lea r8, [0x14025e620]
lea rdx, [rsp + 0x10150]
lea rcx, [rsp + 0xb7e8]
call fcn.1400e6df0
mov rcx, rax
call fcn.1400e5720
mov rdx, rax
lea rcx, [rsp + 0xb800]
call fcn.140002020
lea r8, [0x14025e630]
lea rdx, [rsp + 0x10158]
lea rcx, [rsp + 0xc068]
call fcn.1400e6ea0
mov rax, qword [rax]
mov qword [rsp + 0xb7e8], rax
lea rcx, [rsp + 0xb7e8]
call fcn.1400e5560
movzx eax, al
test eax, eax
jne 0x1401bba43
lea r8, [0x14025e640]
lea rdx, [rsp + 0x10160]
lea rcx, [rsp + 0xb7e8]
call fcn.1400e6df0
mov rcx, rax
call fcn.1400e5720
mov rdx, rax
lea rcx, [rsp + 0xb7d0]
call fcn.140002020
lea rdx, [0x14025e64c]
lea rcx, [rsp + 0xb7d0]
call fcn.140006130
test eax, eax
je 0x1401bbb1b
lea rcx, [rsp + 0xc880]
call fcn.140050200
xor r8d, r8d
mov edx, 0x40
mov rcx, rax
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0xb800]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d0]
call fcn.140007060
nop
lea rcx, [rsp + 0xb810]
call fcn.140007060
nop
lea rcx, [rsp + 0xc880]
call fcn.140007060
nop
lea rcx, [rsp + 0xc890]
call fcn.140007060
nop
lea rcx, [rsp + 0xc050]
call fcn.140007060
nop
lea rcx, [rsp + 0xc888]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d8]
call fcn.140007060
nop
lea rcx, [rsp + 0xb820]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xb818]
call fcn.140007060
nop
lea rcx, [rsp + 0xb838]
call fcn.140007060
jmp 0x1401bd7e0
xor r8d, r8d
mov edx, 0x24
lea rcx, str.A_valid_update_has_been_found__do_you_want_to_update_it_now_
call fcn.1400f0bf0
cmp eax, 7
jne 0x1401bbbd6
lea rcx, [rsp + 0xb800]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d0]
call fcn.140007060
nop
lea rcx, [rsp + 0xb810]
call fcn.140007060
nop
lea rcx, [rsp + 0xc880]
call fcn.140007060
nop
lea rcx, [rsp + 0xc890]
call fcn.140007060
nop
lea rcx, [rsp + 0xc050]
call fcn.140007060
nop
lea rcx, [rsp + 0xc888]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d8]
call fcn.140007060
nop
lea rcx, [rsp + 0xb820]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xb818]
call fcn.140007060
nop
lea rcx, [rsp + 0xb838]
call fcn.140007060
jmp 0x1401bd7e0
xor eax, eax
mov word [rsp + 0xc080], ax
lea rdi, [rsp + 0xc082]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10168]
call fcn.140001000
mov qword [rsp + 0x10a18], rax
mov r8, qword [rsp + 0x10a18]
mov r8, qword [r8]
lea rdx, str._szip
lea rcx, [rsp + 0xc080]
call fcn.1400aa834
lea rcx, [rsp + 0x10168]
call fcn.140007060
lea rcx, [rsp + 0xc080]
call fcn.140004f40
lea rcx, [rsp + 0xc080]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401bbc5e
lea rcx, [rsp + 0xc080]
call fcn.140004b40
lea rdx, [rsp + 0xb810]
lea rcx, [rsp + 0xc078]
call fcn.140001430
nop
mov dx, 0x2f
lea rcx, [rsp + 0xc078]
call fcn.140006920
mov r8d, eax
add r8d, 1
lea rdx, [rsp + 0x10170]
lea rcx, [rsp + 0xc078]
call fcn.140006a80
mov qword [rsp + 0x10a20], rax
mov rax, qword [rsp + 0x10a20]
mov qword [rsp + 0x10a28], rax
mov rdx, qword [rsp + 0x10a28]
lea rcx, [rsp + 0xc078]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x10170]
call fcn.140007060
lea r8, [0x14025e5e4]
mov edx, 0x400
lea rcx, [rsp + 0xc080]
call fcn.1400ab3f4
lea rcx, [rsp + 0xc078]
call fcn.140050200
mov r8, rax
mov edx, 0x400
lea rcx, [rsp + 0xc080]
call fcn.1400ab3f4
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x968], 0
je 0x1401bbd49
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401bbd93
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call fcn.14007e140
xor edx, edx
mov rcx, rax
call fcn.14007d820
mov edx, 5
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xb810]
call fcn.140050200
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0x10f10]
mov r8, qword [r8 + 0x968]
lea rdx, [rsp + 0xc080]
mov rcx, rax
call fcn.1400ece90
mov qword [rsp + 0xb7e0], rax
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401bbe05
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xb800]
call fcn.140050200
mov rcx, rax
call fcn.1400aac68
cmp qword [rsp + 0xb7e0], rax
je 0x1401bbee9
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Updating_NIC_failed._Download_failed.
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0xc078]
call fcn.140007060
nop
lea rcx, [rsp + 0xb800]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d0]
call fcn.140007060
nop
lea rcx, [rsp + 0xb810]
call fcn.140007060
nop
lea rcx, [rsp + 0xc880]
call fcn.140007060
nop
lea rcx, [rsp + 0xc890]
call fcn.140007060
nop
lea rcx, [rsp + 0xc050]
call fcn.140007060
nop
lea rcx, [rsp + 0xc888]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d8]
call fcn.140007060
nop
lea rcx, [rsp + 0xb820]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xb818]
call fcn.140007060
nop
lea rcx, [rsp + 0xb838]
call fcn.140007060
jmp 0x1401bd7e0
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10178]
call fcn.140005e70
mov qword [rsp + 0x10a30], rax
mov rax, qword [rsp + 0x10a30]
mov qword [rsp + 0x10a38], rax
lea r8, [0x14025e740]
mov rdx, qword [rsp + 0x10a38]
lea rcx, [rsp + 0xc070]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x10178]
call fcn.140007060
lea r8, str.Drivers
lea rdx, [rsp + 0xc070]
lea rcx, [rsp + 0x10188]
call fcn.1400010b0
mov qword [rsp + 0x10a40], rax
mov rax, qword [rsp + 0x10a40]
mov qword [rsp + 0x10a48], rax
mov rcx, qword [rsp + 0x10a48]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc080]
call fcn.14018e540
movzx eax, al
test eax, eax
jne 0x1401bbfae
mov dword [rsp + 0x10a50], 1
jmp 0x1401bbfb9
mov dword [rsp + 0x10a50], 0
movzx eax, byte [rsp + 0x10a50]
mov byte [rsp + 0x10180], al
lea rcx, [rsp + 0x10188]
call fcn.140007060
movzx edx, byte [rsp + 0x10180]
test edx, edx
je 0x1401bc0b4
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Updating_NIC_failed._Decompressing_failed.
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0xc070]
call fcn.140007060
nop
lea rcx, [rsp + 0xc078]
call fcn.140007060
nop
lea rcx, [rsp + 0xb800]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d0]
call fcn.140007060
nop
lea rcx, [rsp + 0xb810]
call fcn.140007060
nop
lea rcx, [rsp + 0xc880]
call fcn.140007060
nop
lea rcx, [rsp + 0xc890]
call fcn.140007060
nop
lea rcx, [rsp + 0xc050]
call fcn.140007060
nop
lea rcx, [rsp + 0xc888]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d8]
call fcn.140007060
nop
lea rcx, [rsp + 0xb820]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xb818]
call fcn.140007060
nop
lea rcx, [rsp + 0xb838]
call fcn.140007060
jmp 0x1401bd7e0
lea rdx, str.ControlSet001
lea rcx, [rsp + 0xb808]
call fcn.140002050
nop
lea rcx, [rsp + 0xb7f0]
call fcn.1400054b0
nop
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10198]
call fcn.14011ea80
mov qword [rsp + 0x10a58], rax
mov rax, qword [rsp + 0x10a58]
mov qword [rsp + 0x10a60], rax
lea r8, [0x14025e7f8]
mov rdx, qword [rsp + 0x10a60]
lea rcx, [rsp + 0x101a0]
call fcn.1400010b0
mov qword [rsp + 0x10a68], rax
mov rcx, qword [rsp + 0x10a68]
call fcn.140050200
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xb7f0]
call fcn.140005670
test eax, eax
jne 0x1401bc163
mov dword [rsp + 0x10a70], 1
jmp 0x1401bc16e
mov dword [rsp + 0x10a70], 0
movzx eax, byte [rsp + 0x10a70]
mov byte [rsp + 0x10190], al
lea rcx, [rsp + 0x101a0]
call fcn.140007060
nop
lea rcx, [rsp + 0x10198]
call fcn.140007060
movzx edx, byte [rsp + 0x10190]
test edx, edx
je 0x1401bc1f4
mov dword [rsp + 0xcac0], 1
lea r8, [rsp + 0xcac0]
lea rdx, [0x14025e818]
lea rcx, [rsp + 0xb7f0]
call fcn.140005700
mov r8d, dword [rsp + 0xcac0]
lea rdx, str.ControlSet_03d
lea rcx, [rsp + 0xb808]
call fcn.140002ba0
lea rcx, [rsp + 0xb7f0]
call fcn.140005540
lea rax, [rsp + 0x101a8]
mov qword [rsp + 0x101b0], rax
lea rdx, [rsp + 0xc070]
mov rcx, qword [rsp + 0x101b0]
call fcn.140001430
mov qword [rsp + 0x10a78], rax
movzx edx, word [rsp + 0x67b4]
mov rcx, qword [rsp + 0x10a78]
call fcn.14011f230
lea rcx, [rsp + 0xb7a0]
call fcn.1400777f0
nop
lea r8, str.Drivers_Converted.
lea rdx, [rsp + 0xc070]
lea rcx, [rsp + 0x101b8]
call fcn.1400010b0
mov qword [rsp + 0x10a80], rax
mov rax, qword [rsp + 0x10a80]
mov qword [rsp + 0x10a88], rax
mov rcx, qword [rsp + 0x10a88]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xb7a0]
call fcn.1400778f4
mov dword [rsp + 0xb830], eax
lea rcx, [rsp + 0x101b8]
call fcn.140007060
cmp dword [rsp + 0xb830], 0
je 0x1401bcb2d
lea rcx, [rsp + 0xb7a0]
call fcn.1400774fc
mov dword [rsp + 0xb830], eax
lea rcx, [rsp + 0xb7a0]
call fcn.14000d2b0
test eax, eax
je 0x1401bc2e1
jmp 0x1401bc2ac
lea rdx, [rsp + 0x101c8]
lea rcx, [rsp + 0xb7a0]
call fcn.140077b70
mov qword [rsp + 0x10a90], rax
mov rax, qword [rsp + 0x10a90]
mov qword [rsp + 0x10a98], rax
lea rdx, [rsp + 0x101c0]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10aa0], rax
mov rax, qword [rsp + 0x10aa0]
mov qword [rsp + 0x10aa8], rax
mov rcx, qword [rsp + 0x10a98]
call fcn.1400019a0
mov r8d, eax
lea rdx, [rsp + 0xd2d0]
mov rcx, qword [rsp + 0x10aa8]
call fcn.140006a80
nop
lea rcx, [rsp + 0x101c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x101c8]
call fcn.140007060
lea rdx, str..reg
lea rcx, [rsp + 0xd2d0]
call fcn.140006130
test eax, eax
jne 0x1401bc76d
lea rdx, [rsp + 0x101d0]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10ab0], rax
mov rax, qword [rsp + 0x10ab0]
mov qword [rsp + 0x10ab8], rax
lea r8, [rsp + 0xc070]
lea rdx, str.regedit__s__
lea rcx, [rsp + 0x101d8]
call fcn.140006d10
mov qword [rsp + 0x10ac0], rax
mov rax, qword [rsp + 0x10ac0]
mov qword [rsp + 0x10ac8], rax
lea r8, str.Drivers_Converted_
mov rdx, qword [rsp + 0x10ac8]
lea rcx, [rsp + 0x101e0]
call fcn.1400010b0
mov qword [rsp + 0x10ad0], rax
mov rax, qword [rsp + 0x10ad0]
mov qword [rsp + 0x10ad8], rax
mov r8, qword [rsp + 0x10ab8]
mov rdx, qword [rsp + 0x10ad8]
lea rcx, [rsp + 0x101e8]
call fcn.140006c50
mov qword [rsp + 0x10ae0], rax
mov rax, qword [rsp + 0x10ae0]
mov qword [rsp + 0x10ae8], rax
lea r8, [0x14025e5fc]
mov rdx, qword [rsp + 0x10ae8]
lea rcx, [rsp + 0x101f0]
call fcn.1400010b0
mov qword [rsp + 0x10af0], rax
mov rax, qword [rsp + 0x10af0]
mov qword [rsp + 0x10af8], rax
mov rcx, qword [rsp + 0x10af8]
call fcn.140050200
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov rcx, rax
call fcn.140004880
nop
lea rcx, [rsp + 0x101f0]
call fcn.140007060
nop
lea rcx, [rsp + 0x101e8]
call fcn.140007060
nop
lea rcx, [rsp + 0x101e0]
call fcn.140007060
nop
lea rcx, [rsp + 0x101d8]
call fcn.140007060
nop
lea rcx, [rsp + 0x101d0]
call fcn.140007060
lea rdx, [rsp + 0x10200]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10b00], rax
xor r8d, r8d
lea rdx, [0x14025e8d0]
mov rcx, qword [rsp + 0x10b00]
call fcn.140006800
test eax, eax
jl 0x1401bc541
mov dword [rsp + 0x10b08], 1
jmp 0x1401bc54c
mov dword [rsp + 0x10b08], 0
movzx eax, byte [rsp + 0x10b08]
mov byte [rsp + 0x101f8], al
lea rcx, [rsp + 0x10200]
call fcn.140007060
movzx edx, byte [rsp + 0x101f8]
test edx, edx
je 0x1401bc75b
lea rcx, [rsp + 0xd2d8]
call fcn.140002d10
nop
lea rdx, [rsp + 0x10208]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10b10], rax
mov rax, qword [rsp + 0x10b10]
mov qword [rsp + 0x10b18], rax
lea rcx, str.VEN_8086DEV_10D3REV_00
call fcn.1400aa950
mov r9d, eax
xor r8d, r8d
lea rdx, [rsp + 0x10210]
mov rcx, qword [rsp + 0x10b18]
call fcn.1400021f0
mov qword [rsp + 0x10b20], rax
mov rax, qword [rsp + 0x10b20]
mov qword [rsp + 0x10b28], rax
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10218]
call fcn.14011ea80
mov qword [rsp + 0x10b30], rax
mov rax, qword [rsp + 0x10b30]
mov qword [rsp + 0x10b38], rax
mov r9, qword [rsp + 0x10b28]
mov r9, qword [r9]
mov r8, qword [rsp + 0x10b38]
mov r8, qword [r8]
lea rdx, str._sSYSTEMCCBootPnP_sService
lea rcx, [rsp + 0xd2d8]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x10218]
call fcn.140007060
nop
lea rcx, [rsp + 0x10210]
call fcn.140007060
nop
lea rcx, [rsp + 0x10208]
call fcn.140007060
lea rcx, [rsp + 0xd2e0]
call fcn.1400054b0
lea rcx, [rsp + 0xd2d8]
call fcn.140050200
mov r9d, 0x2001f
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xd2e0]
call fcn.140005670
test eax, eax
jne 0x1401bc73f
xor eax, eax
mov word [rsp + 0xd300], ax
lea rdi, [rsp + 0xd302]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov dword [rsp + 0xd2f0], 0x400
lea r9, [rsp + 0xd2f0]
lea r8, [rsp + 0xd300]
lea rdx, [0x14025e950]
lea rcx, [rsp + 0xd2e0]
call fcn.140005780
lea rdx, [0x14025e968]
lea rcx, [rsp + 0xd2e0]
call fcn.140005500
mov r9d, 2
lea r8, [rsp + 0xd300]
lea rdx, [0x14025e980]
lea rcx, [rsp + 0xd2e0]
call fcn.140005a50
lea rcx, [rsp + 0xd2e0]
call fcn.140005540
lea rcx, [rsp + 0xd2e0]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xd2d8]
call fcn.140007060
nop
lea rcx, [rsp + 0xd2d0]
call fcn.140007060
jmp 0x1401bc2ac
lea rdx, [rsp + 0x10220]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10b40], rax
mov rax, qword [rsp + 0x10b40]
mov qword [rsp + 0x10b48], rax
lea r8, str.CCBootPnP_
lea rdx, [rsp + 0xc070]
lea rcx, [rsp + 0x10228]
call fcn.1400010b0
mov qword [rsp + 0x10b50], rax
mov rax, qword [rsp + 0x10b50]
mov qword [rsp + 0x10b58], rax
lea r8, [rsp + 0xb838]
mov rdx, qword [rsp + 0x10b58]
lea rcx, [rsp + 0x10230]
call fcn.140006c50
mov qword [rsp + 0x10b60], rax
mov rax, qword [rsp + 0x10b60]
mov qword [rsp + 0x10b68], rax
lea r8, [0x14025e998]
mov rdx, qword [rsp + 0x10b68]
lea rcx, [rsp + 0x10238]
call fcn.1400010b0
mov qword [rsp + 0x10b70], rax
mov rax, qword [rsp + 0x10b70]
mov qword [rsp + 0x10b78], rax
mov r8, qword [rsp + 0x10b48]
mov rdx, qword [rsp + 0x10b78]
lea rcx, [rsp + 0x10240]
call fcn.140006c50
mov qword [rsp + 0x10b80], rax
mov rax, qword [rsp + 0x10b80]
mov qword [rsp + 0x10b88], rax
lea rdx, [rsp + 0x10248]
lea rcx, [rsp + 0xb7a0]
call fcn.140077d48
mov qword [rsp + 0x10b90], rax
mov rcx, qword [rsp + 0x10b88]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x10b90]
call fcn.140050200
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x10248]
call fcn.140007060
nop
lea rcx, [rsp + 0x10240]
call fcn.140007060
nop
lea rcx, [rsp + 0x10238]
call fcn.140007060
nop
lea rcx, [rsp + 0x10230]
call fcn.140007060
nop
lea rcx, [rsp + 0x10228]
call fcn.140007060
nop
lea rcx, [rsp + 0x10220]
call fcn.140007060
mov edx, 0x400
lea rcx, [rsp + 0xcad0]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
movzx eax, word [rsp + 0x67b4]
cmp eax, 0x43
je 0x1401bc945
movzx r8d, word [rsp + 0x67b4]
lea rdx, [0x14025e9c8]
lea rcx, [rsp + 0xcad0]
call fcn.1400aa834
lea rdx, [rsp + 0xcad0]
lea rcx, [rsp + 0x10250]
call fcn.140002050
mov qword [rsp + 0x10b98], rax
mov rax, qword [rsp + 0x10b98]
mov qword [rsp + 0x10ba0], rax
lea r8, str._system32CCBootPnP
mov rdx, qword [rsp + 0x10ba0]
lea rcx, [rsp + 0x10258]
call fcn.1400010b0
mov qword [rsp + 0x10ba8], rax
mov rcx, qword [rsp + 0x10ba8]
call fcn.140050200
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rsp + 0x10258]
call fcn.140007060
nop
lea rcx, [rsp + 0x10250]
call fcn.140007060
lea rdx, [rsp + 0x10260]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10bb0], rax
mov rax, qword [rsp + 0x10bb0]
mov qword [rsp + 0x10bb8], rax
lea rdx, [rsp + 0xcad0]
lea rcx, [rsp + 0x10268]
call fcn.140002050
mov qword [rsp + 0x10bc0], rax
mov rax, qword [rsp + 0x10bc0]
mov qword [rsp + 0x10bc8], rax
lea r8, str._system32CCBootPnP_
mov rdx, qword [rsp + 0x10bc8]
lea rcx, [rsp + 0x10270]
call fcn.1400010b0
mov qword [rsp + 0x10bd0], rax
mov rax, qword [rsp + 0x10bd0]
mov qword [rsp + 0x10bd8], rax
mov r8, qword [rsp + 0x10bb8]
mov rdx, qword [rsp + 0x10bd8]
lea rcx, [rsp + 0x10278]
call fcn.140006c50
mov qword [rsp + 0x10be0], rax
mov rax, qword [rsp + 0x10be0]
mov qword [rsp + 0x10be8], rax
lea rdx, [rsp + 0x10280]
lea rcx, [rsp + 0xb7a0]
call fcn.140077d48
mov qword [rsp + 0x10bf0], rax
mov rcx, qword [rsp + 0x10be8]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x10bf0]
call fcn.140050200
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x10280]
call fcn.140007060
nop
lea rcx, [rsp + 0x10278]
call fcn.140007060
nop
lea rcx, [rsp + 0x10270]
call fcn.140007060
nop
lea rcx, [rsp + 0x10268]
call fcn.140007060
nop
lea rcx, [rsp + 0x10260]
call fcn.140007060
nop
lea rcx, [rsp + 0xd2d0]
call fcn.140007060
jmp 0x1401bc2ac
lea rcx, [rsp + 0xb7a0]
call fcn.140077428
lea r8, str.Drivers_Converted_service.reg
lea rdx, [rsp + 0xc070]
lea rcx, [rsp + 0x10288]
call fcn.1400010b0
mov qword [rsp + 0x10bf8], rax
mov rax, qword [rsp + 0x10bf8]
mov qword [rsp + 0x10c00], rax
mov rcx, qword [rsp + 0x10c00]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xb7a0]
call fcn.1400778f4
mov dword [rsp + 0xb830], eax
lea rcx, [rsp + 0x10288]
call fcn.140007060
cmp dword [rsp + 0xb830], 0
je 0x1401bd245
lea rcx, [rsp + 0xb7a0]
call fcn.1400774fc
mov dword [rsp + 0xb830], eax
lea rcx, [rsp + 0xb7a0]
call fcn.14000d2b0
test eax, eax
je 0x1401bcbd7
jmp 0x1401bcba2
lea rdx, [rsp + 0x10298]
lea rcx, [rsp + 0xb7a0]
call fcn.140077b70
mov qword [rsp + 0x10c08], rax
mov rax, qword [rsp + 0x10c08]
mov qword [rsp + 0x10c10], rax
lea rdx, [rsp + 0x10290]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10c18], rax
mov rax, qword [rsp + 0x10c18]
mov qword [rsp + 0x10c20], rax
mov rcx, qword [rsp + 0x10c10]
call fcn.1400019a0
mov r8d, eax
lea rdx, [rsp + 0xdb08]
mov rcx, qword [rsp + 0x10c20]
call fcn.140006a80
nop
lea rcx, [rsp + 0x10290]
call fcn.140007060
nop
lea rcx, [rsp + 0x10298]
call fcn.140007060
lea rdx, [rsp + 0x102a8]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10c28], rax
mov rcx, qword [rsp + 0x10c28]
call fcn.1400019a0
mov edi, eax
lea rcx, str.VEN_10DEDEV_03EEREV_A2_service.reg
call fcn.1400a99d4
cmp edi, eax
jle 0x1401bccbb
mov dword [rsp + 0x10c30], 1
jmp 0x1401bccc6
mov dword [rsp + 0x10c30], 0
movzx eax, byte [rsp + 0x10c30]
mov byte [rsp + 0x102a0], al
lea rcx, [rsp + 0x102a8]
call fcn.140007060
movzx edx, byte [rsp + 0x102a0]
test edx, edx
je 0x1401bcd00
lea rcx, [rsp + 0xdb08]
call fcn.140007060
jmp 0x1401bcba2
lea rdx, [rsp + 0x102b0]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10c38], rax
xor r8d, r8d
lea rdx, str._service.reg
mov rcx, qword [rsp + 0x10c38]
call fcn.140006800
mov dword [rsp + 0xdb00], eax
lea rcx, [rsp + 0x102b0]
call fcn.140007060
cmp dword [rsp + 0xdb00], 0
jl 0x1401bd233
lea rdx, [rsp + 0x102b8]
lea rcx, [rsp + 0xb7a0]
call fcn.140077e14
mov qword [rsp + 0x10c40], rax
mov rax, qword [rsp + 0x10c40]
mov qword [rsp + 0x10c48], rax
mov r9d, dword [rsp + 0xdb00]
xor r8d, r8d
lea rdx, [rsp + 0xdb10]
mov rcx, qword [rsp + 0x10c48]
call fcn.1400021f0
nop
lea rcx, [rsp + 0x102b8]
call fcn.140007060
lea rcx, [rsp + 0xdb18]
call fcn.1400054b0
nop
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x102c8]
call fcn.14011ea80
mov qword [rsp + 0x10c50], rax
mov rax, qword [rsp + 0x10c50]
mov qword [rsp + 0x10c58], rax
lea r8, [0x14025eb18]
mov rdx, qword [rsp + 0x10c58]
lea rcx, [rsp + 0x102d0]
call fcn.1400010b0
mov qword [rsp + 0x10c60], rax
mov rax, qword [rsp + 0x10c60]
mov qword [rsp + 0x10c68], rax
lea r8, [rsp + 0xdb10]
mov rdx, qword [rsp + 0x10c68]
lea rcx, [rsp + 0x102d8]
call fcn.140006c50
mov qword [rsp + 0x10c70], rax
mov rax, qword [rsp + 0x10c70]
mov qword [rsp + 0x10c78], rax
lea r8, str.PciInfo
mov rdx, qword [rsp + 0x10c78]
lea rcx, [rsp + 0x102e0]
call fcn.1400010b0
mov qword [rsp + 0x10c80], rax
mov rcx, qword [rsp + 0x10c80]
call fcn.140050200
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xdb18]
call fcn.140005670
test eax, eax
jne 0x1401bceb4
mov dword [rsp + 0x10c88], 1
jmp 0x1401bcebf
mov dword [rsp + 0x10c88], 0
movzx eax, byte [rsp + 0x10c88]
mov byte [rsp + 0x102c0], al
lea rcx, [rsp + 0x102e0]
call fcn.140007060
nop
lea rcx, [rsp + 0x102d8]
call fcn.140007060
nop
lea rcx, [rsp + 0x102d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x102c8]
call fcn.140007060
movzx edx, byte [rsp + 0x102c0]
test edx, edx
je 0x1401bd217
xor eax, eax
mov word [rsp + 0xdb30], ax
lea rdi, [rsp + 0xdb32]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov dword [rsp + 0xdb28], 0x400
lea r9, [rsp + 0xdb28]
lea r8, [rsp + 0xdb30]
lea rdx, [0x14025eb40]
lea rcx, [rsp + 0xdb18]
call fcn.140005780
lea rcx, [rsp + 0xdb18]
call fcn.140005540
lea rdx, [rsp + 0xdb30]
lea rcx, [rsp + 0x102e8]
call fcn.140002050
mov qword [rsp + 0x10c90], rax
mov rax, qword [rsp + 0x10c90]
mov qword [rsp + 0x10c98], rax
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x102f0]
call fcn.14011ea80
mov qword [rsp + 0x10ca0], rax
mov rax, qword [rsp + 0x10ca0]
mov qword [rsp + 0x10ca8], rax
lea r8, str.SYSTEM_
mov rdx, qword [rsp + 0x10ca8]
lea rcx, [rsp + 0x102f8]
call fcn.1400010b0
mov qword [rsp + 0x10cb0], rax
mov rax, qword [rsp + 0x10cb0]
mov qword [rsp + 0x10cb8], rax
lea r8, [rsp + 0xb808]
mov rdx, qword [rsp + 0x10cb8]
lea rcx, [rsp + 0x10300]
call fcn.140006c50
mov qword [rsp + 0x10cc0], rax
mov rax, qword [rsp + 0x10cc0]
mov qword [rsp + 0x10cc8], rax
lea r8, str.Services_
mov rdx, qword [rsp + 0x10cc8]
lea rcx, [rsp + 0x10308]
call fcn.1400010b0
mov qword [rsp + 0x10cd0], rax
mov rax, qword [rsp + 0x10cd0]
mov qword [rsp + 0x10cd8], rax
mov r8, qword [rsp + 0x10c98]
mov rdx, qword [rsp + 0x10cd8]
lea rcx, [rsp + 0x10310]
call fcn.140006c50
mov qword [rsp + 0x10ce0], rax
mov rax, qword [rsp + 0x10ce0]
mov qword [rsp + 0x10ce8], rax
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10318]
call fcn.14011ea80
mov qword [rsp + 0x10cf0], rax
mov rax, qword [rsp + 0x10cf0]
mov qword [rsp + 0x10cf8], rax
lea r8, str.SYSTEMCCBootPnP_
mov rdx, qword [rsp + 0x10cf8]
lea rcx, [rsp + 0x10320]
call fcn.1400010b0
mov qword [rsp + 0x10d00], rax
mov rax, qword [rsp + 0x10d00]
mov qword [rsp + 0x10d08], rax
lea r8, [rsp + 0xdb10]
mov rdx, qword [rsp + 0x10d08]
lea rcx, [rsp + 0x10328]
call fcn.140006c50
mov qword [rsp + 0x10d10], rax
mov rax, qword [rsp + 0x10d10]
mov qword [rsp + 0x10d18], rax
lea r8, str.Service
mov rdx, qword [rsp + 0x10d18]
lea rcx, [rsp + 0x10330]
call fcn.1400010b0
mov qword [rsp + 0x10d20], rax
mov rax, qword [rsp + 0x10d20]
mov qword [rsp + 0x10d28], rax
mov rcx, qword [rsp + 0x10ce8]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x10d28]
call fcn.140050200
mov rdx, rdi
mov rcx, rax
call fcn.14011e3c0
nop
lea rcx, [rsp + 0x10330]
call fcn.140007060
nop
lea rcx, [rsp + 0x10328]
call fcn.140007060
nop
lea rcx, [rsp + 0x10320]
call fcn.140007060
nop
lea rcx, [rsp + 0x10318]
call fcn.140007060
nop
lea rcx, [rsp + 0x10310]
call fcn.140007060
nop
lea rcx, [rsp + 0x10308]
call fcn.140007060
nop
lea rcx, [rsp + 0x10300]
call fcn.140007060
nop
lea rcx, [rsp + 0x102f8]
call fcn.140007060
nop
lea rcx, [rsp + 0x102f0]
call fcn.140007060
nop
lea rcx, [rsp + 0x102e8]
call fcn.140007060
nop
lea rcx, [rsp + 0xdb18]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xdb10]
call fcn.140007060
nop
lea rcx, [rsp + 0xdb08]
call fcn.140007060
jmp 0x1401bcba2
lea rcx, [rsp + 0xb7a0]
call fcn.140077428
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10338]
call fcn.140005e70
mov qword [rsp + 0x10d30], rax
mov rax, qword [rsp + 0x10d30]
mov qword [rsp + 0x10d38], rax
lea r8, [0x14025ebb8]
mov rdx, qword [rsp + 0x10d38]
lea rcx, [rsp + 0x10340]
call fcn.1400010b0
mov qword [rsp + 0x10d40], rax
mov rcx, qword [rsp + 0x10d40]
call fcn.140050200
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10340]
call fcn.140007060
nop
lea rcx, [rsp + 0x10338]
call fcn.140007060
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10348]
call fcn.140005e70
mov qword [rsp + 0x10d48], rax
mov rax, qword [rsp + 0x10d48]
mov qword [rsp + 0x10d50], rax
lea r8, [0x14025ebc8]
mov rdx, qword [rsp + 0x10d50]
lea rcx, [rsp + 0x10350]
call fcn.1400010b0
mov qword [rsp + 0x10d58], rax
mov rcx, qword [rsp + 0x10d58]
call fcn.140050200
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10350]
call fcn.140007060
nop
lea rcx, [rsp + 0x10348]
call fcn.140007060
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6460]
call qword [rsp + 0x7328]
mov rcx, qword [rsp + 0x6460]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [rsp + 0x6608]
lea rcx, [rsp + 0xb460]
call fcn.1401e0680
nop
lea rcx, [rsp + 0x6618]
call fcn.140050200
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc060]
call fcn.1400fc150
nop
mov dx, 0x2e
lea rcx, [rsp + 0xc060]
call fcn.140006920
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x10358]
lea rcx, [rsp + 0xc060]
call fcn.140006a80
mov qword [rsp + 0x10d60], rax
mov rcx, qword [rsp + 0x10d60]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0xb840], eax
lea rcx, [rsp + 0x10358]
call fcn.140007060
lea rcx, [rsp + 0xb600]
mov r8d, dword [rsp + 0xb840]
lea rdx, [0x14025ebdc]
call fcn.140002ba0
lea rcx, [rsp + 0xb608]
lea rdx, str.Update_NIC_Driver_to_Image
call fcn.140002020
lea rcx, [rsp + 0x10360]
call fcn.14000dd70
lea r8, [0x14025ec20]
lea rdx, [rsp + 0x10368]
mov rcx, rax
call fcn.14000d730
mov qword [rsp + 0x10d68], rax
mov rax, qword [rsp + 0x10d68]
mov qword [rsp + 0x10d70], rax
lea rcx, [rsp + 0xb610]
mov rdx, qword [rsp + 0x10d70]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x10368]
call fcn.140007060
lea rcx, [rsp + 0xb460]
call fcn.1401cc080
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x968], 0
je 0x1401bd506
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401bd550
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call fcn.14007e140
xor edx, edx
mov rcx, rax
call fcn.14007d820
mov edx, 5
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xc060]
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov r8, qword [rsp + 0x10f10]
mov r8, qword [r8 + 0x968]
mov rdx, rdi
mov rcx, rax
call fcn.140108390
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401bd5c6
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0xc058]
call fcn.140002d10
nop
lea rdx, str.Update_NIC_to___s__success_
lea rcx, [rsp + 0x10370]
call fcn.1400f05c0
mov qword [rsp + 0x10d78], rax
mov rax, qword [rsp + 0x10d78]
mov qword [rsp + 0x10d80], rax
mov rcx, qword [rsp + 0x10d80]
call fcn.140050200
mov r8, qword [rsp + 0x6610]
mov rdx, rax
lea rcx, [rsp + 0xc058]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x10370]
call fcn.140007060
lea rcx, [rsp + 0xc058]
call fcn.140050200
xor r8d, r8d
mov edx, 0x40
mov rcx, rax
call fcn.1400f0bf0
mov dword [rsp + 0x10378], 0
lea rcx, [rsp + 0xc058]
call fcn.140007060
nop
lea rcx, [rsp + 0xc060]
call fcn.140007060
nop
lea rcx, [rsp + 0xb460]
call fcn.140005e30
nop
lea rcx, [rsp + 0xb7a0]
call fcn.14007784c
nop
lea rcx, [rsp + 0xb7f0]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xb808]
call fcn.140007060
nop
lea rcx, [rsp + 0xc070]
call fcn.140007060
nop
lea rcx, [rsp + 0xc078]
call fcn.140007060
nop
lea rcx, [rsp + 0xb800]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d0]
call fcn.140007060
nop
lea rcx, [rsp + 0xb810]
call fcn.140007060
nop
lea rcx, [rsp + 0xc880]
call fcn.140007060
nop
lea rcx, [rsp + 0xc890]
call fcn.140007060
nop
lea rcx, [rsp + 0xc050]
call fcn.140007060
nop
lea rcx, [rsp + 0xc888]
call fcn.140007060
nop
lea rcx, [rsp + 0xb7d8]
call fcn.140007060
nop
lea rcx, [rsp + 0xb820]
call fcn.1400054e0
nop
lea rcx, [rsp + 0xb818]
call fcn.140007060
nop
lea rcx, [rsp + 0xb838]
call fcn.140007060
nop
lea rcx, [rsp + 0x7320]
call fcn.140007060
nop
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0x10378]
jmp 0x1401bfaef
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10380]
call fcn.140005e70
mov qword [rsp + 0x10d88], rax
mov rax, qword [rsp + 0x10d88]
mov qword [rsp + 0x10d90], rax
lea r8, [0x14025ec80]
mov rdx, qword [rsp + 0x10d90]
lea rcx, [rsp + 0x10388]
call fcn.1400010b0
mov qword [rsp + 0x10d98], rax
mov rcx, qword [rsp + 0x10d98]
call fcn.140050200
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10388]
call fcn.140007060
nop
lea rcx, [rsp + 0x10380]
call fcn.140007060
mov r8d, 1
movzx edx, word [rsp + 0x67b4]
lea rcx, [rsp + 0x10390]
call fcn.140005e70
mov qword [rsp + 0x10da0], rax
mov rax, qword [rsp + 0x10da0]
mov qword [rsp + 0x10da8], rax
lea r8, [0x14025ec90]
mov rdx, qword [rsp + 0x10da8]
lea rcx, [rsp + 0x10398]
call fcn.1400010b0
mov qword [rsp + 0x10db0], rax
mov rcx, qword [rsp + 0x10db0]
call fcn.140050200
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10398]
call fcn.140007060
nop
lea rcx, [rsp + 0x10390]
call fcn.140007060
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6460]
call qword [rsp + 0x7328]
mov rcx, qword [rsp + 0x6460]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x7320]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 0
mov qword [rsp + 0x6460], 0xffffffffffffffff
mov dword [rsp + 0x103a0], 0
lea rcx, [rsp + 0x7320]
call fcn.140007060
nop
lea rcx, [rsp + 0x6470]
call fcn.140005e30
nop
lea rcx, [rsp + 0x67c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x7330]
call fcn.1400e6b90
nop
lea rcx, [rsp + 0x6430]
call fcn.140007060
nop
lea rcx, [rsp + 0x67d0]
call fcn.140005e30
mov eax, dword [rsp + 0x103a0]
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000d500
mov dword [rsp + 0xe330], eax
cmp dword [rsp + 0xe330], 1
je 0x1401bd9f1
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0xe334], eax
lea rcx, [rsp + 0xe340]
call fcn.1401e0790
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0xe334]
call fcn.140083bd4
mov dword [rsp + 0xe4d8], eax
lea rcx, [rsp + 0xe340]
call fcn.1401e5810
test eax, eax
jne 0x1401bda7c
mov dword [rsp + 0x103a4], 0
lea rcx, [rsp + 0xe340]
call fcn.140005e30
mov eax, dword [rsp + 0x103a4]
jmp 0x1401bfaef
lea rcx, [rsp + 0xe540]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0xe338], eax
cmp dword [rsp + 0xe338], 0
jne 0x1401bdaaf
mov dword [rsp + 0x10db8], 1
jmp 0x1401bdaba
mov dword [rsp + 0x10db8], 0
lea rcx, [rsp + 0xe540]
mov r8d, dword [rsp + 0x10db8]
lea rdx, [0x14025eca4]
call fcn.140002ba0
lea rcx, [rsp + 0xe340]
call fcn.1401e31e0
mov edx, 1
mov ecx, 1
call fcn.1401cc440
cmp dword [rsp + 0xe338], 0
jne 0x1401bdb72
mov eax, dword [rsp + 0xe4d8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov qword [rsp + 0xe680], rax
cmp qword [rsp + 0xe680], 0
jne 0x1401bdb72
mov r8d, 0xffffffff
mov edx, 0x44
mov ecx, 0x77
call fcn.1400f2960
cmp eax, 6
jne 0x1401bdb72
mov eax, dword [rsp + 0xe4d8]
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov r9d, dword [rsp + 0xe4d8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10f10]
call fcn.14000e4c0
mov dword [rsp + 0x103a8], 0
lea rcx, [rsp + 0xe340]
call fcn.140005e30
mov eax, dword [rsp + 0x103a8]
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000d500
mov dword [rsp + 0xe688], eax
cmp dword [rsp + 0xe688], 1
je 0x1401bdbe6
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0xe68c], eax
xor edx, edx
lea rcx, [rsp + 0xe690]
call fcn.14016d510
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0xe68c]
call fcn.140083bd4
mov dword [rsp + 0xe8a0], eax
lea rcx, [rsp + 0xe690]
call fcn.1400830e4
mov dword [rsp + 0x103ac], 0
lea rcx, [rsp + 0xe690]
call fcn.14016d4c0
mov eax, dword [rsp + 0x103ac]
jmp 0x1401bfaef
mov rax, qword [rsp + 0x10f10]
cmp dword [rax + 0x978], 0
je 0x1401bdc8e
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000d500
mov dword [rsp + 0xe968], eax
cmp dword [rsp + 0xe968], 1
je 0x1401bdcba
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0xe96c], eax
lea rcx, [rsp + 0xe970]
call fcn.1401e0790
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0xe96c]
call fcn.140083bd4
mov dword [rsp + 0xeb08], eax
lea rcx, [rsp + 0xe970]
call fcn.1401e5810
test eax, eax
jne 0x1401bdd45
mov dword [rsp + 0x103b0], 0
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x103b0]
jmp 0x1401bfaef
lea rcx, [rsp + 0xebb8]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
test eax, eax
je 0x1401bddc9
lea rcx, [rsp + 0xeb70]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
test eax, eax
jne 0x1401bddc9
lea rcx, [rsp + 0xebc8]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
test eax, eax
jne 0x1401bddc9
mov r8d, 0xffffffff
mov edx, 0x40
mov ecx, 0xc1
call fcn.1400f2960
mov dword [rsp + 0x103b4], 0
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x103b4]
jmp 0x1401bfaef
mov eax, dword [rsp + 0xeb08]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov qword [rsp + 0xeee8], rax
cmp qword [rsp + 0xeee8], 0
je 0x1401bde38
mov r8d, 0xffffffff
mov edx, 0x40
mov ecx, 0xab
call fcn.1400f2960
mov dword [rsp + 0x103b8], 0
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x103b8]
jmp 0x1401bfaef
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f2960
cmp eax, 6
je 0x1401bde76
mov dword [rsp + 0x103bc], 0
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x103bc]
jmp 0x1401bfaef
xor edx, edx
lea rcx, [rsp + 0xecb0]
call fcn.140165700
nop
lea rdx, [rsp + 0xe960]
lea rcx, [rsp + 0xe970]
call fcn.1401e2e30
nop
mov dword [rsp + 0xeee0], 0
cmp dword [rsp + 0xeee0], 0xffffffff
je 0x1401bf246
lea r9, [rsp + 0xeee0]
lea r8, [0x14025e60c]
lea rdx, [rsp + 0x103c0]
lea rcx, [rsp + 0xe960]
call fcn.140006620
mov qword [rsp + 0x10dc0], rax
mov rax, qword [rsp + 0x10dc0]
mov qword [rsp + 0x10dc8], rax
mov rdx, qword [rsp + 0x10dc8]
lea rcx, [rsp + 0xeec0]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x103c0]
call fcn.140007060
lea rcx, [rsp + 0xeec0]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401bdf2d
jmp 0x1401bf246
lea rcx, [rsp + 0xef60]
call fcn.14000d650
nop
lea rax, [rsp + 0x103c8]
mov qword [rsp + 0x103d0], rax
lea rdx, [rsp + 0xeec0]
mov rcx, qword [rsp + 0x103d0]
call fcn.140001430
mov qword [rsp + 0x10dd0], rax
mov rdx, qword [rsp + 0x10dd0]
lea rcx, [rsp + 0xef60]
call fcn.1401e3e80
test eax, eax
jne 0x1401bdf93
lea rcx, [rsp + 0xef60]
call fcn.140005e30
jmp 0x1401bdea7
lea rcx, [rsp + 0xef28]
call fcn.140002d10
nop
mov eax, dword [rsp + 0xeb08]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov dword [rsp + 0xef48], eax
cmp dword [rsp + 0xef48], 0
jne 0x1401be031
mov dword [rsp + 0x103d8], 0
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
nop
lea rcx, [rsp + 0xe960]
call fcn.140007060
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401656a0
nop
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x103d8]
jmp 0x1401bfaef
lea rcx, [rsp + 0xef58]
call fcn.140002d10
nop
mov r8d, dword [rsp + 0xef48]
lea rdx, [0x14025ecb0]
lea rcx, [rsp + 0xef58]
call fcn.140002ba0
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x103e0]
call fcn.140109710
mov qword [rsp + 0x10dd8], rax
mov rax, qword [rsp + 0x10dd8]
mov qword [rsp + 0x10de0], rax
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x103e8]
call fcn.1400fb640
mov qword [rsp + 0x10de8], rax
mov rax, qword [rsp + 0x10de8]
mov qword [rsp + 0x10df0], rax
mov rax, qword [rsp + 0x10de0]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10df0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb10]
mov r8, qword [rsp + 0xef58]
lea rdx, str._s_s__s_s
lea rcx, [rsp + 0xef28]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x103e8]
call fcn.140007060
nop
lea rcx, [rsp + 0x103e0]
call fcn.140007060
lea rcx, [rsp + 0xef28]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401be16d
lea rcx, [rsp + 0xef58]
call fcn.140007060
nop
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
jmp 0x1401bdea7
lea rcx, [rsp + 0xef40]
call fcn.140002d10
nop
mov edx, 0xc3
lea rcx, [rsp + 0x103f0]
call fcn.1400f1540
mov qword [rsp + 0x10df8], rax
mov rax, qword [rsp + 0x10df8]
mov qword [rsp + 0x10e00], rax
mov rcx, qword [rsp + 0x10e00]
call fcn.140050200
mov r8, qword [rsp + 0xeec0]
mov rdx, rax
lea rcx, [rsp + 0xef40]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x103f0]
call fcn.140007060
lea rcx, [rsp + 0xef40]
call fcn.140050200
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400f0bf0
cmp eax, 7
jne 0x1401be236
lea rcx, [rsp + 0xef40]
call fcn.140007060
nop
lea rcx, [rsp + 0xef58]
call fcn.140007060
nop
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
jmp 0x1401bdea7
lea rcx, [rsp + 0xeec0]
call fcn.140050200
mov rcx, rax
call fcn.1400fabb0
mov dword [rsp + 0xeef0], eax
cmp dword [rsp + 0xeef0], 3
je 0x1401be274
cmp dword [rsp + 0xeef0], 4
je 0x1401be274
cmp dword [rsp + 0xeef0], 5
jne 0x1401be2fe
mov r8d, 0xffffffff
xor edx, edx
mov ecx, ILCreateFromPathW
call fcn.1400f2960
mov dword [rsp + 0x103f8], 0
lea rcx, [rsp + 0xef40]
call fcn.140007060
nop
lea rcx, [rsp + 0xef58]
call fcn.140007060
nop
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
nop
lea rcx, [rsp + 0xe960]
call fcn.140007060
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401656a0
nop
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x103f8]
jmp 0x1401bfaef
lea rcx, [rsp + 0xeef8]
call fcn.1400777f0
nop
lea rcx, [rsp + 0xef28]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xeef8]
call fcn.1400778f4
lea rcx, [rsp + 0xeef8]
call fcn.1400774fc
mov qword [rsp + 0xef50], 0
mov qword [rsp + 0xef38], 0
mov qword [rsp + 0xef30], 0
mov r9d, 3
xor r8d, r8d
lea rdx, [rsp + 0x10400]
lea rcx, [rsp + 0xeec0]
call fcn.1400021f0
mov qword [rsp + 0x10e08], rax
mov rcx, qword [rsp + 0x10e08]
call fcn.140050200
lea r9, [rsp + 0xef30]
lea r8, [rsp + 0xef38]
lea rdx, [rsp + 0xef50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401be3c2
mov dword [rsp + 0x10e10], 1
jmp 0x1401be3cd
mov dword [rsp + 0x10e10], 0
movzx eax, byte [rsp + 0x10e10]
mov byte [rsp + 0x103fc], al
lea rcx, [rsp + 0x10400]
call fcn.140007060
movzx edx, byte [rsp + 0x103fc]
test edx, edx
je 0x1401be493
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025ece0]
call fcn.1400f0bf0
mov dword [rsp + 0x10408], 0
lea rcx, [rsp + 0xeef8]
call fcn.14007784c
nop
lea rcx, [rsp + 0xef40]
call fcn.140007060
nop
lea rcx, [rsp + 0xef58]
call fcn.140007060
nop
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
nop
lea rcx, [rsp + 0xe960]
call fcn.140007060
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401656a0
nop
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x10408]
jmp 0x1401bfaef
lea rcx, [rsp + 0xeef8]
call fcn.140077548
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401be4b6
addsd xmm1, qword [0x140272fc0]
mov rax, qword [rsp + 0xef30]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401be4d4
addsd xmm0, qword [0x140272fc0]
mulsd xmm0, qword [0x140275290]
comisd xmm1, xmm0
jbe 0x1401be580
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Disk_space_is_not_enough._Please_try_to_merge_all.
call fcn.1400f0bf0
mov dword [rsp + 0x1040c], 0
lea rcx, [rsp + 0xeef8]
call fcn.14007784c
nop
lea rcx, [rsp + 0xef40]
call fcn.140007060
nop
lea rcx, [rsp + 0xef58]
call fcn.140007060
nop
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
nop
lea rcx, [rsp + 0xe960]
call fcn.140007060
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401656a0
nop
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x1040c]
jmp 0x1401bfaef
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Do_you_want_to_create_restore_point_
call fcn.1400f0bf0
cmp eax, 6
jne 0x1401becdf
lea rcx, [rsp + 0x10410]
call fcn.14000dd70
lea r8, [0x14025ee10]
lea rdx, [rsp + 0x10418]
mov rcx, rax
call fcn.14000d730
mov qword [rsp + 0x10e18], rax
mov rax, qword [rsp + 0x10e18]
mov qword [rsp + 0x10e20], rax
mov rdx, qword [rsp + 0x10e20]
lea rcx, [rsp + 0xeec8]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x10418]
call fcn.140007060
lea rcx, [rsp + 0xecb0]
call fcn.1400830e4
cmp rax, 1
je 0x1401be699
mov dword [rsp + 0x10420], 0
lea rcx, [rsp + 0xeef8]
call fcn.14007784c
nop
lea rcx, [rsp + 0xef40]
call fcn.140007060
nop
lea rcx, [rsp + 0xef58]
call fcn.140007060
nop
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
nop
lea rcx, [rsp + 0xe960]
call fcn.140007060
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401656a0
nop
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x10420]
jmp 0x1401bfaef
mov edx, dword [rsp + 0xf0f8]
lea rcx, [rsp + 0xf2a0]
call fcn.1401e0680
nop
lea rcx, [rsp + 0xeec0]
call fcn.140050200
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xf930]
call fcn.1400fc150
nop
mov dx, 0x2e
lea rcx, [rsp + 0xf930]
call fcn.140006920
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x10428]
lea rcx, [rsp + 0xf930]
call fcn.140006a80
mov qword [rsp + 0x10e28], rax
mov rcx, qword [rsp + 0x10e28]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0xf5e8], eax
lea rcx, [rsp + 0x10428]
call fcn.140007060
lea rcx, [rsp + 0xf440]
mov r8d, dword [rsp + 0xf5e8]
lea rdx, [0x14025ecd4]
call fcn.140002ba0
lea rcx, [rsp + 0xf448]
lea rdx, [rsp + 0xeed0]
call fcn.140002ce0
lea rcx, [rsp + 0xf450]
lea rdx, [rsp + 0xeec8]
call fcn.140002ce0
lea rcx, [rsp + 0xf2a0]
call fcn.1401cc080
mov edx, 1
mov ecx, 1
call fcn.1401cc440
mov r8, qword [rsp + 0xf108]
lea rdx, [0x14025ee38]
xor ecx, ecx
call fcn.1400de020
mov edx, dword [rsp + 0xeb08]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 1
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x968], 0
je 0x1401be80f
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401be859
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call fcn.14007e140
xor edx, edx
mov rcx, rax
call fcn.14007d820
mov edx, 5
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xf930]
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0xef28]
call fcn.140050200
mov r8, qword [rsp + 0x10f10]
mov r8, qword [r8 + 0x968]
mov rdx, rdi
mov rcx, rax
call fcn.140108390
test eax, eax
jne 0x1401be99c
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401be8c1
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0xf108]
lea rdx, [0x14025ee80]
xor ecx, ecx
call fcn.1400de020
xor r8d, r8d
xor edx, edx
lea rcx, [0x14025eed0]
call fcn.1400f0bf0
mov dword [rsp + 0x10430], 0
lea rcx, [rsp + 0xf930]
call fcn.140007060
nop
lea rcx, [rsp + 0xf2a0]
call fcn.140005e30
nop
lea rcx, [rsp + 0xeef8]
call fcn.14007784c
nop
lea rcx, [rsp + 0xef40]
call fcn.140007060
nop
lea rcx, [rsp + 0xef58]
call fcn.140007060
nop
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
nop
lea rcx, [rsp + 0xe960]
call fcn.140007060
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401656a0
nop
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x10430]
jmp 0x1401bfaef
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401be9c5
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0xef28]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xf5f0]
call fcn.14000e170
nop
mov dword [rsp + 0xf788], 1
lea rcx, [rsp + 0xf5f0]
call fcn.1401e4480
lea rdx, [rsp + 0xf798]
lea rcx, [rsp + 0xf5e0]
call fcn.140001430
nop
mov dword [rsp + 0xf938], 0
cmp dword [rsp + 0xf938], 0
jl 0x1401beca3
lea r9, [rsp + 0xf938]
lea r8, [0x14025e62c]
lea rdx, [rsp + 0xf948]
lea rcx, [rsp + 0xf5e0]
call fcn.140006620
nop
lea rcx, [rsp + 0xf948]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401bea8d
lea rcx, [rsp + 0xf948]
call fcn.140007060
jmp 0x1401beca3
xor edx, edx
lea rcx, [rsp + 0xf948]
call fcn.140006e50
movzx r8d, ax
lea rdx, [0x14025eee0]
lea rcx, [rsp + 0xf948]
call fcn.140002ba0
lea rcx, [rsp + 0xf940]
call fcn.140002d10
nop
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x10438]
call fcn.140109710
mov qword [rsp + 0x10e30], rax
mov rax, qword [rsp + 0x10e30]
mov qword [rsp + 0x10e38], rax
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x10440]
call fcn.1400fb640
mov qword [rsp + 0x10e40], rax
mov rax, qword [rsp + 0x10e40]
mov qword [rsp + 0x10e48], rax
mov rax, qword [rsp + 0x10e38]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10e48]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb10]
mov r8, qword [rsp + 0xf948]
lea rdx, [0x14025eef0]
lea rcx, [rsp + 0xf940]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x10440]
call fcn.140007060
nop
lea rcx, [rsp + 0x10438]
call fcn.140007060
lea rcx, [rsp + 0xf940]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x10448]
call fcn.140109710
mov qword [rsp + 0x10e50], rax
mov rax, qword [rsp + 0x10e50]
mov qword [rsp + 0x10e58], rax
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x10450]
call fcn.1400fb640
mov qword [rsp + 0x10e60], rax
mov rax, qword [rsp + 0x10e60]
mov qword [rsp + 0x10e68], rax
mov rax, qword [rsp + 0x10e58]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10e68]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb28]
mov r8, qword [rsp + 0xf948]
lea rdx, [0x14025ef10]
lea rcx, [rsp + 0xf940]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x10450]
call fcn.140007060
nop
lea rcx, [rsp + 0x10448]
call fcn.140007060
lea rcx, [rsp + 0xf940]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0xf940]
call fcn.140007060
nop
lea rcx, [rsp + 0xf948]
call fcn.140007060
jmp 0x1401bea34
lea rcx, [rsp + 0xf5e0]
call fcn.140007060
nop
lea rcx, [rsp + 0xf5f0]
call fcn.140005e30
nop
lea rcx, [rsp + 0xf930]
call fcn.140007060
nop
lea rcx, [rsp + 0xf2a0]
call fcn.140005e30
jmp 0x1401bf1e7
mov r8, qword [rsp + 0xf108]
lea rdx, str.Receive_CMD_SAVE_TO_IMAGE__s
xor ecx, ecx
call fcn.1400de020
mov edx, dword [rsp + 0xeb08]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rdx, qword [rsp + 0x10f10]
mov dword [rdx + 0x978], 1
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x968], 0
je 0x1401bed5c
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401beda6
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call fcn.14007e140
xor edx, edx
mov rcx, rax
call fcn.14007d820
mov edx, 5
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xef28]
call fcn.140050200
mov r9, qword [rsp + 0x10f10]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.140106940
test eax, eax
jne 0x1401beec5
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401bee06
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0xf108]
lea rdx, str._ERROR__Save_to_image__s_false
xor ecx, ecx
call fcn.1400de020
xor r8d, r8d
xor edx, edx
lea rcx, str.False_
call fcn.1400f0bf0
mov dword [rsp + 0x10458], 0
lea rcx, [rsp + 0xeef8]
call fcn.14007784c
nop
lea rcx, [rsp + 0xef40]
call fcn.140007060
nop
lea rcx, [rsp + 0xef58]
call fcn.140007060
nop
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
nop
lea rcx, [rsp + 0xe960]
call fcn.140007060
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401656a0
nop
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x10458]
jmp 0x1401bfaef
mov rax, qword [rsp + 0x10f10]
cmp qword [rax + 0x970], 0
je 0x1401beeee
xor edx, edx
mov rcx, qword [rsp + 0x10f10]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10f10]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0xef28]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xf960]
call fcn.14000e170
nop
mov dword [rsp + 0xfaf8], 1
lea rcx, [rsp + 0xf960]
call fcn.1401e4480
lea rdx, [rsp + 0xfb08]
lea rcx, [rsp + 0xf950]
call fcn.140001430
nop
mov dword [rsp + 0xfca0], 0
cmp dword [rsp + 0xfca0], 0
jl 0x1401bf1cc
lea r9, [rsp + 0xfca0]
lea r8, [0x14025e73c]
lea rdx, [rsp + 0xfcb0]
lea rcx, [rsp + 0xf950]
call fcn.140006620
nop
lea rcx, [rsp + 0xfcb0]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401befb6
lea rcx, [rsp + 0xfcb0]
call fcn.140007060
jmp 0x1401bf1cc
xor edx, edx
lea rcx, [rsp + 0xfcb0]
call fcn.140006e50
movzx r8d, ax
lea rdx, [0x14025efd0]
lea rcx, [rsp + 0xfcb0]
call fcn.140002ba0
lea rcx, [rsp + 0xfca8]
call fcn.140002d10
nop
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x10460]
call fcn.140109710
mov qword [rsp + 0x10e70], rax
mov rax, qword [rsp + 0x10e70]
mov qword [rsp + 0x10e78], rax
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x10468]
call fcn.1400fb640
mov qword [rsp + 0x10e80], rax
mov rax, qword [rsp + 0x10e80]
mov qword [rsp + 0x10e88], rax
mov rax, qword [rsp + 0x10e78]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10e88]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb10]
mov r8, qword [rsp + 0xfcb0]
lea rdx, [0x14025efe0]
lea rcx, [rsp + 0xfca8]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x10468]
call fcn.140007060
nop
lea rcx, [rsp + 0x10460]
call fcn.140007060
lea rcx, [rsp + 0xfca8]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x10470]
call fcn.140109710
mov qword [rsp + 0x10e90], rax
mov rax, qword [rsp + 0x10e90]
mov qword [rsp + 0x10e98], rax
lea rcx, [rsp + 0xf108]
call fcn.140050200
mov rdx, rax
lea rcx, [rsp + 0x10478]
call fcn.1400fb640
mov qword [rsp + 0x10ea0], rax
mov rax, qword [rsp + 0x10ea0]
mov qword [rsp + 0x10ea8], rax
mov rax, qword [rsp + 0x10e98]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10ea8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb28]
mov r8, qword [rsp + 0xfcb0]
lea rdx, str._s_s_p___s_s
lea rcx, [rsp + 0xfca8]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x10478]
call fcn.140007060
nop
lea rcx, [rsp + 0x10470]
call fcn.140007060
lea rcx, [rsp + 0xfca8]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0xfca8]
call fcn.140007060
nop
lea rcx, [rsp + 0xfcb0]
call fcn.140007060
jmp 0x1401bef5d
lea rcx, [rsp + 0xf950]
call fcn.140007060
nop
lea rcx, [rsp + 0xf960]
call fcn.140005e30
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14025f020]
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0xeef8]
call fcn.14007784c
nop
lea rcx, [rsp + 0xef40]
call fcn.140007060
nop
lea rcx, [rsp + 0xef58]
call fcn.140007060
nop
lea rcx, [rsp + 0xef28]
call fcn.140007060
nop
lea rcx, [rsp + 0xef60]
call fcn.140005e30
jmp 0x1401bdea7
mov dword [rsp + 0x10480], 0
lea rcx, [rsp + 0xe960]
call fcn.140007060
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401656a0
nop
lea rcx, [rsp + 0xe970]
call fcn.140005e30
mov eax, dword [rsp + 0x10480]
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
call fcn.1400846d8
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, 0x20
mov edx, 0x20
call fcn.1400848bc
call fcn.14000f460
mov edx, 0xdb
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0x496
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0xdc
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0x80d2
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0xda
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
mov rdx, qword [rsp + 0x10f10]
add rdx, 0x1610
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000e470
lea rcx, [rsp + 0x10488]
call fcn.140001000
mov qword [rsp + 0x10eb0], rax
mov rax, qword [rsp + 0x10eb0]
mov qword [rsp + 0x10eb8], rax
lea r8, [0x14025f028]
mov rdx, qword [rsp + 0x10eb8]
lea rcx, [rsp + 0x10490]
call fcn.1400010b0
mov qword [rsp + 0x10ec0], rax
mov rcx, qword [rsp + 0x10ec0]
call fcn.140050200
mov r9, rax
lea r8, [0x14025f040]
lea rdx, [0x14025f048]
lea rcx, [0x14025f068]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x10490]
call fcn.140007060
nop
lea rcx, [rsp + 0x10488]
call fcn.140007060
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
call fcn.1400846d8
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400848bc
call fcn.14000f460
mov edx, 0xdb
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0x496
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0xdc
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0x80d2
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0xda
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
mov rdx, qword [rsp + 0x10f10]
add rdx, 0x1610
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000e470
lea rcx, [rsp + 0x10498]
call fcn.140001000
mov qword [rsp + 0x10ec8], rax
mov rax, qword [rsp + 0x10ec8]
mov qword [rsp + 0x10ed0], rax
lea r8, [0x14025f078]
mov rdx, qword [rsp + 0x10ed0]
lea rcx, [rsp + 0x104a0]
call fcn.1400010b0
mov qword [rsp + 0x10ed8], rax
mov rcx, qword [rsp + 0x10ed8]
call fcn.140050200
mov r9, rax
lea r8, [0x14025f090]
lea rdx, [0x14025f098]
lea rcx, [0x14025f0b8]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x104a0]
call fcn.140007060
nop
lea rcx, [rsp + 0x10498]
call fcn.140007060
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
call fcn.1400846d8
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
mov edx, reloc.OLEAUT32.dll_SafeArrayLock
call fcn.1400848bc
call fcn.14000f460
mov edx, 0xdb
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0x496
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0xdc
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0x80d2
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
call fcn.14000f460
mov edx, 0xda
mov rcx, rax
call fcn.14000e660
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1610
mov rdx, rax
call fcn.14000e970
mov rdx, qword [rsp + 0x10f10]
add rdx, 0x1610
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000e470
lea rcx, [rsp + 0x104a8]
call fcn.140001000
mov qword [rsp + 0x10ee0], rax
mov rax, qword [rsp + 0x10ee0]
mov qword [rsp + 0x10ee8], rax
lea r8, [0x14025f0c8]
mov rdx, qword [rsp + 0x10ee8]
lea rcx, [rsp + 0x104b0]
call fcn.1400010b0
mov qword [rsp + 0x10ef0], rax
mov rcx, qword [rsp + 0x10ef0]
call fcn.140050200
mov r9, rax
lea r8, [0x14025f0e0]
lea rdx, [0x14025f0e8]
lea rcx, [0x14025f108]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x104b0]
call fcn.140007060
nop
lea rcx, [rsp + 0x104a8]
call fcn.140007060
xor eax, eax
jmp 0x1401bfaef
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.140079cf0
lea rcx, [rsp + 0xfcb8]
call fcn.140002d10
nop
mov rcx, qword [rsp + 0x10f10]
add rcx, 0x1620
lea rdx, [rsp + 0xfcb8]
call fcn.14007fa08
lea rcx, [rsp + 0xfcb8]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x1401bf882
mov dword [rsp + 0x104b8], 0
lea rcx, [rsp + 0xfcb8]
call fcn.140007060
mov eax, dword [rsp + 0x104b8]
jmp 0x1401bfaef
mov dword [rsp + 0xfcc0], 0xffffffff
mov dword [rsp + 0xfcc4], 0
jmp 0x1401bf8ab
mov eax, dword [rsp + 0xfcc4]
add eax, 1
mov dword [rsp + 0xfcc4], eax
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000dba0
cmp dword [rsp + 0xfcc4], eax
jge 0x1401bf9a2
mov dword [rsp + 0xfcc8], 0
jmp 0x1401bf8ea
mov eax, dword [rsp + 0xfcc8]
add eax, 1
mov dword [rsp + 0xfcc8], eax
cmp dword [rsp + 0xfcc8], 0x1c
jge 0x1401bf991
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r9d, dword [rsp + 0xfcc8]
mov r8d, dword [rsp + 0xfcc4]
lea rdx, [rsp + 0xfcd0]
call fcn.140084928
nop
lea rcx, [rsp + 0xfcb8]
call fcn.1400069f0
mov rcx, rax
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0xfcd0]
call fcn.1400069f0
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call fcn.140006800
cmp eax, 0xffffffff
jne 0x1401bf96f
lea rcx, [rsp + 0xfcd0]
call fcn.140007060
jmp 0x1401bf8d9
mov eax, dword [rsp + 0xfcc4]
mov dword [rsp + 0xfcc0], eax
lea rcx, [rsp + 0xfcd0]
call fcn.140007060
jmp 0x1401bf991
cmp dword [rsp + 0xfcc0], 0xffffffff
je 0x1401bf99d
jmp 0x1401bf9a2
jmp 0x1401bf89a
cmp dword [rsp + 0xfcc0], 0xffffffff
je 0x1401bfac5
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000d6f0
mov dword [rsp + 0xfcd8], eax
cmp dword [rsp + 0xfcd8], 0
jl 0x1401bfa2e
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r9d, 2
xor r8d, r8d
mov edx, dword [rsp + 0xfcd8]
call fcn.140083b74
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0xfcd8]
call fcn.14000d6f0
mov dword [rsp + 0xfcd8], eax
jmp 0x1401bf9d6
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
xor r8d, r8d
mov edx, dword [rsp + 0xfcc0]
call fcn.14000d270
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov edx, dword [rsp + 0xfcc0]
call fcn.14000d240
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r9d, 2
mov r8d, 3
mov edx, dword [rsp + 0xfcc0]
call fcn.140083b74
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
mov r8d, dword [rsp + 0xfcc0]
mov edx, dword [rsp + 0xfcc0]
call fcn.14000d200
mov rcx, qword [rsp + 0x10f10]
add rcx, 0xdc8
call fcn.14000d1e0
mov dword [rsp + 0x104bc], 0
lea rcx, [rsp + 0xfcb8]
call fcn.140007060
mov eax, dword [rsp + 0x104bc]
jmp 0x1401bfaef
mov eax, 1
mov rcx, qword [rsp + 0x10ef8]
xor rcx, rsp
call fcn.1400a9820
add rsp, 0x10f00
pop rdi
ret