Function at 0x140187e70
Capabilities:
Accept command line arguments
Check if file exists
Delete file

Disassembly:
push rbx
mov eax, 0x2810
call fcn.1401d4c90
sub rsp, rax
mov qword [rsp + 0x2700], 0xfffffffffffffffe
mov dword [rsp + 0x30], 0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x38], rax
cmp dword [rsp + 0x30], 1
jg 0x140187ec8
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, 1
jmp 0x140189a78
cmp dword [rsp + 0x30], 2
jle 0x140187f81
lea rdx, str._wol
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140187f81
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400db9a0
xor r8d, r8d
lea rdx, [0x14023fab4]
lea rcx, [rsp + 0x40]
call fcn.140006780
test eax, eax
jl 0x140187f77
lea rcx, [rsp + 0x40]
call fcn.140001a40
movsxd rbx, eax
lea rcx, str.00:00:00:00:00:00
call fcn.1400a8204
cmp rbx, rax
jne 0x140187f77
lea rcx, [rsp + 0x40]
call fcn.140023510
mov rcx, rax
call fcn.1400d6fa0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2564], 0
lea rcx, [rsp + 0x40]
call fcn.140001490
mov eax, dword [rsp + 0x2564]
jmp 0x140189a78
lea rcx, [rsp + 0x40]
call fcn.140001490
lea rdx, [0x140240c40]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140188046
lea rcx, [0x1403ace90]
call fcn.1400d4040
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d6450
mov dword [rsp + 0x48], 0
lea rcx, [0x1403acbe0]
call fcn.1400122c0
test eax, eax
jne 0x140187ff1
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0x48]
add eax, 1
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 5
jl 0x140187fef
jmp 0x140187ff1
jmp 0x140187fc0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x8037
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1403acbe0]
call fcn.1400d57b0
lea rcx, [0x1403ace90]
call fcn.1400d39c0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
jmp 0x140189a78
lea rdx, [0x14023fb24]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140188085
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Help:_nCCBoot.exe____n_n_t_t_t_t_t_t__Wake_On_LAN:_nCCBoot.exe__WOL_PC050_n_n_t_t_t_t_t_t__Reboot_client_PC:_nCCBoot.exe__Reboot_PC01_n_n_t_t_t_t_t_t__Shutdown_client_PC:_nCCBoot.exe__Shutdown_PC01_n_n_t_t_t_t_t_t__Logoff_client_PC:_nCCBoot.exe__Logoff_PC01_n_n_t_t_t_t_t_t__Magic_Shutdown_client_PC:_nCCBoot.exe__Sleep_PC01_n_n_t_t_t_t_t_t__Enable_super_client:_nCCBoot.exe__EnableSC_PC100_Disk1_Disk2_n_n_t_t_t_t_t_t__Disable_super_client:_nCCBoot.exe__DisableSC_PC100___Update___Recovery_Desc___n_n_t_t_t_t_t_t__Restart_CCBoot_service:_nCCBoot.exe__Restart_n_n_t_t_t_t_t_t__Start_CCBoot_service:_nCCBoot.exe__start_n_n_t_t_t_t_t_t__Stop_CCBoot_service:_nCCBoot.exe__stop_n_n_t_t_t_t_t_t__Pause_CCBoot_service:_nCCBoot.exe__pause_n_n
call fcn.1400ef1c0
xor eax, eax
jmp 0x140189a78
cmp dword [rsp + 0x30], 1
jle 0x140189a60
lea rdx, [0x140241148]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140188210
lea rax, [rsp + 0x2568]
mov qword [rsp + 0x2570], rax
lea rcx, [rsp + 0x2578]
call fcn.140001000
mov qword [rsp + 0x2708], rax
mov rax, qword [rsp + 0x2708]
mov qword [rsp + 0x2710], rax
lea r8, [0x140241158]
mov rdx, qword [rsp + 0x2710]
mov rcx, qword [rsp + 0x2570]
call fcn.1400010b0
mov qword [rsp + 0x2718], rax
mov rcx, qword [rsp + 0x2718]
call fcn.1401b70d0
nop
lea rcx, [rsp + 0x2578]
call fcn.140001490
lea rcx, [rsp + 0x50]
call fcn.1401cc380
nop
cmp dword [rsp + 0x30], 2
jg 0x14018815f
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2580], 0
lea rcx, [rsp + 0x50]
call fcn.140005db0
mov eax, dword [rsp + 0x2580]
jmp 0x140189a78
lea rax, [rsp + 0x2588]
mov qword [rsp + 0x2590], rax
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
mov rcx, qword [rsp + 0x2590]
call fcn.1400db9a0
mov qword [rsp + 0x2720], rax
mov rdx, qword [rsp + 0x2720]
lea rcx, [rsp + 0x50]
call fcn.1401d1b20
test eax, eax
jne 0x1401881cf
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2598], 0
lea rcx, [rsp + 0x50]
call fcn.140005db0
mov eax, dword [rsp + 0x2598]
jmp 0x140189a78
lea rcx, [rsp + 0x218]
call fcn.140023510
mov rcx, rax
call fcn.1400d6fa0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x259c], 0
lea rcx, [rsp + 0x50]
call fcn.140005db0
mov eax, dword [rsp + 0x259c]
jmp 0x140189a78
lea rdx, [0x140241168]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
je 0x140188278
lea rdx, [0x140241178]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
je 0x140188278
lea rdx, [0x140241190]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
je 0x140188278
lea rdx, [0x1402411a0]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140188551
lea rax, [rsp + 0x25a0]
mov qword [rsp + 0x25a8], rax
lea rcx, [rsp + 0x25b0]
call fcn.140001000
mov qword [rsp + 0x2728], rax
mov rax, qword [rsp + 0x2728]
mov qword [rsp + 0x2730], rax
lea r8, [0x1402411b0]
mov rdx, qword [rsp + 0x2730]
mov rcx, qword [rsp + 0x25a8]
call fcn.1400010b0
mov qword [rsp + 0x2738], rax
mov rcx, qword [rsp + 0x2738]
call fcn.1401b70d0
nop
lea rcx, [rsp + 0x25b0]
call fcn.140001490
lea rcx, [rsp + 0x3a0]
call fcn.1401cc380
nop
cmp dword [rsp + 0x30], 2
jg 0x140188330
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x25b8], 0
lea rcx, [rsp + 0x3a0]
call fcn.140005db0
mov eax, dword [rsp + 0x25b8]
jmp 0x140189a78
lea rax, [rsp + 0x25c0]
mov qword [rsp + 0x25c8], rax
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
mov rcx, qword [rsp + 0x25c8]
call fcn.1400db9a0
mov qword [rsp + 0x2740], rax
mov rdx, qword [rsp + 0x2740]
lea rcx, [rsp + 0x3a0]
call fcn.1401d1b20
test eax, eax
jne 0x1401883a6
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x25d0], 0
lea rcx, [rsp + 0x3a0]
call fcn.140005db0
mov eax, dword [rsp + 0x25d0]
jmp 0x140189a78
lea rcx, [0x1403ace90]
call fcn.1400d4040
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d6450
mov dword [rsp + 0x390], 0
lea rcx, [0x1403acbe0]
call fcn.1400122c0
test eax, eax
jne 0x140188405
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0x390]
add eax, 1
mov dword [rsp + 0x390], eax
cmp dword [rsp + 0x390], 5
jl 0x140188403
jmp 0x140188405
jmp 0x1401883cb
lea rdx, str._Reboot
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140188444
mov eax, dword [rsp + 0x538]
mov qword [rsp + 0x20], rax
mov r9d, 2
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
lea rdx, str._Shutdown
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140188483
mov eax, dword [rsp + 0x538]
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
lea rdx, [0x1402411e8]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x1401884bf
mov eax, dword [rsp + 0x538]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
lea rdx, str._Sleep
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x1401884ff
mov eax, dword [rsp + 0x538]
mov qword [rsp + 0x20], rax
mov r9, 0xffffffffffffffff
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1403acbe0]
call fcn.1400d57b0
lea rcx, [0x1403ace90]
call fcn.1400d39c0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x25d4], 0
lea rcx, [rsp + 0x3a0]
call fcn.140005db0
mov eax, dword [rsp + 0x25d4]
jmp 0x140189a78
lea rdx, str._RefreshCache
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140188571
xor eax, eax
jmp 0x140189a78
lea rdx, [0x140241228]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140188bfd
lea rax, [rsp + 0x25d8]
mov qword [rsp + 0x25e0], rax
lea rcx, [rsp + 0x25e8]
call fcn.140001000
mov qword [rsp + 0x2748], rax
mov rax, qword [rsp + 0x2748]
mov qword [rsp + 0x2750], rax
lea r8, [0x140241240]
mov rdx, qword [rsp + 0x2750]
mov rcx, qword [rsp + 0x25e0]
call fcn.1400010b0
mov qword [rsp + 0x2758], rax
mov rcx, qword [rsp + 0x2758]
call fcn.1401b70d0
nop
lea rcx, [rsp + 0x25e8]
call fcn.140001490
cmp dword [rsp + 0x30], 4
jge 0x14018861b
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
jmp 0x140189a78
lea rcx, [rsp + 0xa30]
call fcn.1401cc380
nop
lea rax, [rsp + 0x25f0]
mov qword [rsp + 0x25f8], rax
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
mov rcx, qword [rsp + 0x25f8]
call fcn.1400020d0
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
lea rcx, [rsp + 0xa30]
call fcn.1401d1b20
test eax, eax
jne 0x14018869f
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2600], 0
lea rcx, [rsp + 0xa30]
call fcn.140005db0
mov eax, dword [rsp + 0x2600]
jmp 0x140189a78
lea rcx, [rsp + 0xd70]
call fcn.140006e60
nop
mov dword [rsp + 0xda0], 3
jmp 0x1401886cb
mov eax, dword [rsp + 0xda0]
add eax, 1
mov dword [rsp + 0xda0], eax
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0xda0], eax
jge 0x1401887b9
movsxd rax, dword [rsp + 0xda0]
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + rax*8]
lea rcx, [rsp + 0xda8]
call fcn.1400db9a0
nop
lea rax, [rsp + 0x2608]
mov qword [rsp + 0x2610], rax
lea rdx, [rsp + 0xda8]
mov rcx, qword [rsp + 0x2610]
call fcn.140001430
mov qword [rsp + 0x2768], rax
mov rcx, qword [rsp + 0x2768]
call fcn.1401d18a0
mov dword [rsp + 0xdb0], eax
cmp dword [rsp + 0xdb0], 0
jne 0x140188791
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2618], 0
lea rcx, [rsp + 0xda8]
call fcn.140001490
nop
lea rcx, [rsp + 0xd70]
call fcn.14001dd20
nop
lea rcx, [rsp + 0xa30]
call fcn.140005db0
mov eax, dword [rsp + 0x2618]
jmp 0x140189a78
lea rdx, [rsp + 0xdb0]
lea rcx, [rsp + 0xd70]
call fcn.140006eb0
nop
lea rcx, [rsp + 0xda8]
call fcn.140001490
jmp 0x1401886ba
lea rcx, [0x1403ace90]
call fcn.1400d4040
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d6450
mov dword [rsp + 0xa20], 0
lea rcx, [0x1403acbe0]
call fcn.1400122c0
test eax, eax
jne 0x140188818
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0xa20]
add eax, 1
mov dword [rsp + 0xa20], eax
cmp dword [rsp + 0xa20], 5
jl 0x140188816
jmp 0x140188818
jmp 0x1401887de
mov eax, dword [rsp + 0xbc8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
test rax, rax
je 0x14018888e
xor r8d, r8d
xor edx, edx
lea rcx, [0x140241250]
call fcn.1400ef1c0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x261c], 0
lea rcx, [rsp + 0xd70]
call fcn.14001dd20
nop
lea rcx, [rsp + 0xa30]
call fcn.140005db0
mov eax, dword [rsp + 0x261c]
jmp 0x140189a78
mov dword [rsp + 0xdb4], 0
jmp 0x1401888ac
mov eax, dword [rsp + 0xdb4]
add eax, 1
mov dword [rsp + 0xdb4], eax
movsxd rbx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140007d60
cmp rbx, rax
jae 0x140188aa1
movsxd rdx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140007d80
mov edx, dword [rax]
lea rcx, [rsp + 0xdc0]
call fcn.1401cd550
nop
movsxd rdx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140007d80
mov rbx, rax
lea rcx, [rsp + 0xc20]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
cmp dword [rbx], eax
jne 0x1401889d0
movsxd rdx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140007d80
cmp dword [rax], 0
je 0x1401889d0
movsxd rdx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140007d80
mov edx, dword [rax]
lea rcx, [rsp + 0xdd0]
call fcn.14000e5e0
nop
lea rax, [rsp + 0x2620]
mov qword [rsp + 0x2628], rax
lea rdx, [rsp + 0xcd8]
mov rcx, qword [rsp + 0x2628]
call fcn.140001430
mov qword [rsp + 0x2770], rax
mov rdx, qword [rsp + 0x2770]
lea rcx, [rsp + 0xdd0]
call fcn.1401cda50
test eax, eax
je 0x1401889c3
lea rdx, [rsp + 0xf78]
lea rcx, [rsp + 0xdc0]
call fcn.140002d80
nop
lea rcx, [rsp + 0xdd0]
call fcn.140005db0
lea rcx, [rsp + 0xdc0]
call fcn.140023510
mov rcx, rax
call fcn.1400f9010
mov dword [rsp + 0xdb8], eax
cmp dword [rsp + 0xdb8], 3
je 0x140188a8f
cmp dword [rsp + 0xdb8], 4
je 0x140188a8f
cmp dword [rsp + 0xdb8], 5
je 0x140188a8f
lea rcx, [rsp + 0x1110]
call fcn.140002db0
nop
mov r8, qword [rsp + 0xdc0]
lea rdx, str._s.Super.vhd
lea rcx, [rsp + 0x1110]
call fcn.140002c40
lea rcx, [rsp + 0x1110]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x1110]
call fcn.140023510
mov rbx, rax
lea rcx, [rsp + 0xdc0]
call fcn.140023510
mov r8d, 1
mov rdx, rbx
mov rcx, rax
call fcn.140105400
nop
lea rcx, [rsp + 0x1110]
call fcn.140001490
nop
lea rcx, [rsp + 0xdc0]
call fcn.140001490
jmp 0x14018889b
mov eax, dword [rsp + 0xbc8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov r11d, dword [rsp + 0xbc8]
mov qword [rsp + 0x20], r11
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov edx, dword [rsp + 0xbc8]
lea rcx, [rsp + 0x6e0]
call fcn.14000e4e0
nop
lea rcx, [rsp + 0x6e0]
call fcn.1401b7590
mov dword [rsp + 0x1118], 0
jmp 0x140188b2b
mov eax, dword [rsp + 0x1118]
add eax, 1
mov dword [rsp + 0x1118], eax
movsxd rbx, dword [rsp + 0x1118]
lea rcx, [rsp + 0xd70]
call fcn.140007d60
cmp rbx, rax
jae 0x140188b80
movsxd rdx, dword [rsp + 0x1118]
lea rcx, [rsp + 0xd70]
call fcn.140007d80
lea rcx, [rsp + 0x880]
mov r8d, dword [rax]
lea rdx, [0x14023fb74]
call fcn.140002c40
lea rcx, [rsp + 0x6e0]
call fcn.14000e360
jmp 0x140188b1a
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1403acbe0]
call fcn.1400d57b0
lea rcx, [0x1403ace90]
call fcn.1400d39c0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2630], 0
lea rcx, [rsp + 0x6e0]
call fcn.140005db0
nop
lea rcx, [rsp + 0xd70]
call fcn.14001dd20
nop
lea rcx, [rsp + 0xa30]
call fcn.140005db0
mov eax, dword [rsp + 0x2630]
jmp 0x140189a78
lea rdx, str._DisableSC
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa18c
test eax, eax
jne 0x140189a60
lea rax, [rsp + 0x2638]
mov qword [rsp + 0x2640], rax
lea rcx, [rsp + 0x2648]
call fcn.140001000
mov qword [rsp + 0x2778], rax
mov rax, qword [rsp + 0x2778]
mov qword [rsp + 0x2780], rax
lea r8, [0x1402412f8]
mov rdx, qword [rsp + 0x2780]
mov rcx, qword [rsp + 0x2640]
call fcn.1400010b0
mov qword [rsp + 0x2788], rax
mov rcx, qword [rsp + 0x2788]
call fcn.1401b70d0
nop
lea rcx, [rsp + 0x2648]
call fcn.140001490
cmp dword [rsp + 0x30], 3
jge 0x140188ca7
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
jmp 0x140189a78
lea rcx, [rsp + 0x1470]
call fcn.1401cc380
nop
lea rax, [rsp + 0x2650]
mov qword [rsp + 0x2658], rax
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
mov rcx, qword [rsp + 0x2658]
call fcn.1400020d0
mov qword [rsp + 0x2790], rax
mov rdx, qword [rsp + 0x2790]
lea rcx, [rsp + 0x1470]
call fcn.1401d1b20
test eax, eax
jne 0x140188d2b
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2660], 0
lea rcx, [rsp + 0x1470]
call fcn.140005db0
mov eax, dword [rsp + 0x2660]
jmp 0x140189a78
lea rcx, [0x1403ace90]
call fcn.1400d4040
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d6450
mov dword [rsp + 0x1460], 0
lea rcx, [0x1403acbe0]
call fcn.1400122c0
test eax, eax
jne 0x140188d8a
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0x1460]
add eax, 1
mov dword [rsp + 0x1460], eax
cmp dword [rsp + 0x1460], 5
jl 0x140188d88
jmp 0x140188d8a
jmp 0x140188d50
mov eax, dword [rsp + 0x1608]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
test rax, rax
je 0x140188df2
xor r8d, r8d
xor edx, edx
lea rcx, str.The_client_is_online_and_cannot_be_set_as_super_client.
call fcn.1400ef1c0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2664], 0
lea rcx, [rsp + 0x1470]
call fcn.140005db0
mov eax, dword [rsp + 0x2664]
jmp 0x140189a78
lea rcx, [rsp + 0x17b0]
call fcn.140081d08
nop
mov edx, dword [rsp + 0x1608]
lea rcx, [rsp + 0x1120]
call fcn.14000e4e0
nop
lea rcx, [rsp + 0x17e0]
call fcn.140007ac0
nop
lea rdx, [rsp + 0x17e0]
lea rcx, [rsp + 0x1120]
call fcn.1401b7170
mov dword [rsp + 0x1810], 0
jmp 0x140188e56
mov eax, dword [rsp + 0x1810]
add eax, 1
mov dword [rsp + 0x1810], eax
movsxd rbx, dword [rsp + 0x1810]
lea rcx, [rsp + 0x17e0]
call fcn.140007b40
cmp rbx, rax
jae 0x140188ead
movsxd rdx, dword [rsp + 0x1810]
lea rcx, [rsp + 0x17e0]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1a0
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edx, eax
lea rcx, [rsp + 0x17b0]
call fcn.14000ec20
jmp 0x140188e45
cmp dword [rsp + 0x30], 3
jne 0x14018917e
mov eax, dword [rsp + 0x1608]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov dword [rsp + 0x1814], 0
jmp 0x140188ef9
mov eax, dword [rsp + 0x1814]
add eax, 1
mov dword [rsp + 0x1814], eax
movsxd rbx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.140014cc0
cmp rbx, rax
jge 0x140189109
movsxd rdx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x1818]
call fcn.1401cd550
nop
movsxd rdx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
mov rbx, rax
lea rcx, [rsp + 0x1660]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
cmp dword [rbx], eax
jne 0x14018901d
movsxd rdx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
cmp dword [rax], 0
je 0x14018901d
movsxd rdx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x1820]
call fcn.14000e5e0
nop
lea rax, [rsp + 0x2668]
mov qword [rsp + 0x2670], rax
lea rdx, [rsp + 0x1718]
mov rcx, qword [rsp + 0x2670]
call fcn.140001430
mov qword [rsp + 0x2798], rax
mov rdx, qword [rsp + 0x2798]
lea rcx, [rsp + 0x1820]
call fcn.1401cda50
test eax, eax
je 0x140189010
lea rdx, [rsp + 0x19c8]
lea rcx, [rsp + 0x1818]
call fcn.140002d80
nop
lea rcx, [rsp + 0x1820]
call fcn.140005db0
lea r8, [0x140241308]
lea rdx, [rsp + 0x1818]
lea rcx, [rsp + 0x2680]
call fcn.1400010b0
mov qword [rsp + 0x27a0], rax
mov rcx, qword [rsp + 0x27a0]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x140189068
mov dword [rsp + 0x27a8], 1
jmp 0x140189073
mov dword [rsp + 0x27a8], 0
movzx eax, byte [rsp + 0x27a8]
mov byte [rsp + 0x2678], al
lea rcx, [rsp + 0x2680]
call fcn.140001490
movzx r11d, byte [rsp + 0x2678]
test r11d, r11d
je 0x1401890af
lea rcx, [rsp + 0x1818]
call fcn.140001490
jmp 0x140188ee8
lea r8, [0x140241390]
lea rdx, [rsp + 0x1818]
lea rcx, [rsp + 0x2688]
call fcn.1400010b0
mov qword [rsp + 0x27b0], rax
mov rcx, qword [rsp + 0x27b0]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x2688]
call fcn.140001490
nop
lea rcx, [rsp + 0x1818]
call fcn.140001490
jmp 0x140188ee8
lea rcx, [rsp + 0x1120]
call fcn.1401b7590
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2690], 0
lea rcx, [rsp + 0x17e0]
call fcn.140007b10
nop
lea rcx, [rsp + 0x1120]
call fcn.140005db0
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081d28
nop
lea rcx, [rsp + 0x1470]
call fcn.140005db0
mov eax, dword [rsp + 0x2690]
jmp 0x140189a78
lea rdx, str._Update
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x18]
call fcn.1400aa18c
test eax, eax
je 0x1401891f0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2694], 0
lea rcx, [rsp + 0x17e0]
call fcn.140007b10
nop
lea rcx, [rsp + 0x1120]
call fcn.140005db0
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081d28
nop
lea rcx, [rsp + 0x1470]
call fcn.140005db0
mov eax, dword [rsp + 0x2694]
jmp 0x140189a78
lea rcx, [rsp + 0x17d8]
call fcn.140002db0
nop
cmp dword [rsp + 0x30], 5
jl 0x14018931d
lea rdx, str._Recovery
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x20]
call fcn.1400aa18c
test eax, eax
je 0x140189289
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2698], 0
lea rcx, [rsp + 0x17d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x17e0]
call fcn.140007b10
nop
lea rcx, [rsp + 0x1120]
call fcn.140005db0
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081d28
nop
lea rcx, [rsp + 0x1470]
call fcn.140005db0
mov eax, dword [rsp + 0x2698]
jmp 0x140189a78
lea rdx, [0x1402413d0]
lea rcx, [rsp + 0x17d8]
call fcn.1400020a0
cmp dword [rsp + 0x30], 6
jl 0x1401892f5
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x28]
lea rcx, [rsp + 0x26a0]
call fcn.1400db9a0
mov qword [rsp + 0x27b8], rax
mov rax, qword [rsp + 0x27b8]
mov qword [rsp + 0x27c0], rax
mov rdx, qword [rsp + 0x27c0]
lea rcx, [rsp + 0x17d8]
call fcn.140002d80
nop
lea rcx, [rsp + 0x26a0]
call fcn.140001490
lea rcx, [rsp + 0x17d8]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x14018931d
lea rdx, [0x1402413d8]
lea rcx, [rsp + 0x17d8]
call fcn.1400020a0
mov dword [rsp + 0x1b60], 0
jmp 0x14018933b
mov eax, dword [rsp + 0x1b60]
add eax, 1
mov dword [rsp + 0x1b60], eax
movsxd rbx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.140014cc0
cmp rbx, rax
jge 0x140189973
mov dword [rsp + 0x1b70], 0
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x1b78]
call fcn.1401cd550
nop
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
mov rbx, rax
lea rcx, [rsp + 0x1660]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
cmp dword [rbx], eax
jne 0x140189479
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
cmp dword [rax], 0
je 0x140189479
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x1b90]
call fcn.14000e5e0
nop
lea rax, [rsp + 0x26a8]
mov qword [rsp + 0x26b0], rax
lea rdx, [rsp + 0x1718]
mov rcx, qword [rsp + 0x26b0]
call fcn.140001430
mov qword [rsp + 0x27c8], rax
mov rdx, qword [rsp + 0x27c8]
lea rcx, [rsp + 0x1b90]
call fcn.1401cda50
test eax, eax
je 0x14018946c
lea rdx, [rsp + 0x1d38]
lea rcx, [rsp + 0x1b78]
call fcn.140002d80
mov r11d, dword [rsp + 0x1d28]
mov dword [rsp + 0x1b70], r11d
lea rcx, [rsp + 0x1b90]
call fcn.140005db0
lea rcx, [rsp + 0x1b68]
call fcn.140002db0
nop
lea r8, [0x1402413e0]
lea rdx, [rsp + 0x1b78]
lea rcx, [rsp + 0x26b8]
call fcn.1400010b0
mov qword [rsp + 0x27d0], rax
mov rax, qword [rsp + 0x27d0]
mov qword [rsp + 0x27d8], rax
mov rdx, qword [rsp + 0x27d8]
lea rcx, [rsp + 0x1b68]
call fcn.140002d80
nop
lea rcx, [rsp + 0x26b8]
call fcn.140001490
lea rcx, [rsp + 0x1b68]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x140189518
lea rcx, [rsp + 0x1b68]
call fcn.140001490
nop
lea rcx, [rsp + 0x1b78]
call fcn.140001490
jmp 0x14018932a
lea rcx, [rsp + 0x17d8]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x14018963c
lea rcx, [rsp + 0x1b68]
call fcn.140023510
xor r9d, r9d
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.1401032d0
test eax, eax
jne 0x140189605
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r8, qword [rsp + 0x1b78]
lea rdx, [0x140241400]
xor ecx, ecx
call fcn.1400dc610
xor r8d, r8d
xor edx, edx
lea rcx, [0x140241450]
call fcn.1400ef1c0
mov dword [rsp + 0x26c0], 0
lea rcx, [rsp + 0x1b68]
call fcn.140001490
nop
lea rcx, [rsp + 0x1b78]
call fcn.140001490
nop
lea rcx, [rsp + 0x17d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x17e0]
call fcn.140007b10
nop
lea rcx, [rsp + 0x1120]
call fcn.140005db0
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081d28
nop
lea rcx, [rsp + 0x1470]
call fcn.140005db0
mov eax, dword [rsp + 0x26c0]
jmp 0x140189a78
lea rcx, [rsp + 0x1b68]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x1b68]
call fcn.140001490
nop
lea rcx, [rsp + 0x1b78]
call fcn.140001490
jmp 0x14018932a
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
mov rbx, rax
lea rcx, [rsp + 0x1b78]
call fcn.140023510
mov r9d, dword [rsp + 0x1b70]
mov r8d, dword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x1b80]
call fcn.1400fffd0
nop
cmp dword [rsp + 0x1b70], 0
je 0x1401897c6
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
mov r8d, dword [rsp + 0x1b70]
mov edx, dword [rax]
lea rcx, [rsp + 0x1ed0]
call fcn.1401cc1c0
nop
mov dx, 0x2e
lea rcx, [rsp + 0x1b80]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x26c8]
lea rcx, [rsp + 0x1b80]
call fcn.140006a00
mov qword [rsp + 0x27e0], rax
mov rcx, qword [rsp + 0x27e0]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov dword [rsp + 0x2210], eax
lea rcx, [rsp + 0x26c8]
call fcn.140001490
lea rcx, [rsp + 0x2070]
mov r8d, dword [rsp + 0x2210]
lea rdx, [0x14023fc34]
call fcn.140002c40
lea rcx, [rsp + 0x2078]
lea rdx, [rsp + 0x17d8]
call fcn.140002d80
lea rcx, [rsp + 0x26d0]
call fcn.14000edc0
lea r8, [0x140241460]
lea rdx, [rsp + 0x26d8]
mov rcx, rax
call fcn.14000e780
mov qword [rsp + 0x27e8], rax
mov rax, qword [rsp + 0x27e8]
mov qword [rsp + 0x27f0], rax
lea rcx, [rsp + 0x2080]
mov rdx, qword [rsp + 0x27f0]
call fcn.140002d80
nop
lea rcx, [rsp + 0x26d8]
call fcn.140001490
lea rcx, [rsp + 0x1ed0]
call fcn.1401b7bb0
nop
lea rcx, [rsp + 0x1ed0]
call fcn.140005db0
jmp 0x1401898f4
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x2220]
call fcn.1401cc270
nop
mov dx, 0x2e
lea rcx, [rsp + 0x1b80]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x26e0]
lea rcx, [rsp + 0x1b80]
call fcn.140006a00
mov qword [rsp + 0x27f8], rax
mov rcx, qword [rsp + 0x27f8]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov dword [rsp + 0x2560], eax
lea rcx, [rsp + 0x26e0]
call fcn.140001490
lea rcx, [rsp + 0x23c0]
mov r8d, dword [rsp + 0x2560]
lea rdx, [0x14023fc84]
call fcn.140002c40
lea rcx, [rsp + 0x23c8]
lea rdx, [rsp + 0x17d8]
call fcn.140002d80
lea rcx, [rsp + 0x26e8]
call fcn.14000edc0
lea r8, [0x140241488]
lea rdx, [rsp + 0x26f0]
mov rcx, rax
call fcn.14000e780
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2800]
mov qword [rsp + 0x2808], rax
lea rcx, [rsp + 0x23d0]
mov rdx, qword [rsp + 0x2808]
call fcn.140002d80
nop
lea rcx, [rsp + 0x26f0]
call fcn.140001490
lea rcx, [rsp + 0x2220]
call fcn.1401b7bb0
nop
lea rcx, [rsp + 0x2220]
call fcn.140005db0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
lea rcx, [rsp + 0x1b80]
call fcn.140023510
mov rbx, rax
lea rcx, [rsp + 0x1b68]
call fcn.140023510
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140104bd0
lea rcx, [rsp + 0x1b68]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x1b80]
call fcn.140001490
nop
lea rcx, [rsp + 0x1b68]
call fcn.140001490
nop
lea rcx, [rsp + 0x1b78]
call fcn.140001490
jmp 0x14018932a
mov eax, dword [rsp + 0x1608]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov r11d, dword [rsp + 0x1608]
mov qword [rsp + 0x20], r11
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
lea rcx, [rsp + 0x1120]
call fcn.1401b7590
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1403acbe0]
call fcn.1400d57b0
lea rcx, [0x1403ace90]
call fcn.1400d39c0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x26f8], 0
lea rcx, [rsp + 0x17d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x17e0]
call fcn.140007b10
nop
lea rcx, [rsp + 0x1120]
call fcn.140005db0
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081d28
nop
lea rcx, [rsp + 0x1470]
call fcn.140005db0
mov eax, dword [rsp + 0x26f8]
jmp 0x140189a78
cmp qword [rsp + 0x38], 0
je 0x140189a73
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, 1
add rsp, 0x2810
pop rbx
ret