Function at 0x1401ae680
Capabilities:
Create process on windows
Manipulate boot configuration

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x1bd8
call fcn.1401d4c90
sub rsp, rax
mov qword [rsp + 0x1a58], 0xfffffffffffffffe
mov rax, qword [0x1402a15c0]
xor rax, rsp
mov qword [rsp + 0x1bc0], rax
cmp dword [rsp + 0x1bf8], 0x46e
jne 0x1401ae8c7
cmp qword [rsp + 0x1c08], 0x201
jne 0x1401ae8c7
mov rax, qword [rsp + 0x1bf0]
cmp dword [rax + 0x8e8], 0
je 0x1401ae8c7
mov rcx, qword [rsp + 0x1bf0]
call fcn.14000ec60
test eax, eax
jne 0x1401ae8c0
mov rax, qword [rsp + 0x1bf0]
cmp qword [rax + 0x8e0], 0
jne 0x1401ae8c0
mov ecx, 0x220
call fcn.140002530
mov qword [rsp + 0x16f8], rax
cmp qword [rsp + 0x16f8], 0
je 0x1401ae759
xor edx, edx
mov rcx, qword [rsp + 0x16f8]
call fcn.140150f60
mov qword [rsp + 0x1a60], rax
jmp 0x1401ae765
mov qword [rsp + 0x1a60], 0
mov rax, qword [rsp + 0x1a60]
mov qword [rsp + 0x16f0], rax
mov rcx, qword [rsp + 0x1bf0]
mov rax, qword [rsp + 0x16f0]
mov qword [rcx + 0x8e0], rax
mov rax, qword [rsp + 0x1bf0]
mov rax, qword [rax + 0x8e0]
mov rcx, qword [rsp + 0x1bf0]
mov rcx, qword [rcx + 0x8e0]
mov rax, qword [rax]
call qword [rax + 0x298]
cmp rax, 2
jne 0x1401ae836
mov rax, qword [rsp + 0x1bf0]
mov rax, qword [rax + 0x8e0]
mov qword [rsp + 0x1708], rax
mov rax, qword [rsp + 0x1708]
mov qword [rsp + 0x1700], rax
cmp qword [rsp + 0x1700], 0
je 0x1401ae810
mov rax, qword [rsp + 0x1700]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x1700]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x1a68], rax
jmp 0x1401ae81c
mov qword [rsp + 0x1a68], 0
mov rax, qword [rsp + 0x1bf0]
mov qword [rax + 0x8e0], 0
xor eax, eax
jmp 0x1401b18bb
mov rax, qword [rsp + 0x1bf0]
mov rax, qword [rax + 0x8e0]
mov qword [rsp + 0x1718], rax
mov rax, qword [rsp + 0x1718]
mov qword [rsp + 0x1710], rax
cmp qword [rsp + 0x1710], 0
je 0x1401ae88d
mov rax, qword [rsp + 0x1710]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x1710]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x1a70], rax
jmp 0x1401ae899
mov qword [rsp + 0x1a70], 0
mov rax, qword [rsp + 0x1bf0]
mov qword [rax + 0x8e0], 0
mov rax, qword [rsp + 0x1bf0]
mov dword [rax + 0x8e8], 0
jmp 0x1401ae8c7
xor eax, eax
jmp 0x1401b18bb
cmp dword [rsp + 0x1bf8], 0x8040
jne 0x1401aea2b
lea rcx, [rsp + 0x1720]
call fcn.140001000
mov qword [rsp + 0x1a78], rax
mov rax, qword [rsp + 0x1a78]
mov qword [rsp + 0x1a80], rax
lea r8, str.TightVNC
mov rdx, qword [rsp + 0x1a80]
lea rcx, [rsp + 0x378]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x1720]
call fcn.140001490
lea rcx, [rsp + 0x370]
call fcn.140002db0
nop
lea rcx, [rsp + 0x30]
call fcn.1401cc380
nop
mov eax, dword [rsp + 0x1c08]
mov dword [rsp + 0x1c8], eax
lea rcx, [rsp + 0x30]
call fcn.1401d0fb0
cmp qword [rsp + 0x1c00], 0
jne 0x1401ae96f
mov qword [rsp + 0x1c00], 0x1af4
mov rax, qword [rsp + 0x1c00]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x1e8]
mov r8, qword [rsp + 0x378]
lea rdx, [0x1402443d8]
lea rcx, [rsp + 0x370]
call fcn.140002c40
lea rcx, [rsp + 0x378]
call fcn.140023510
mov rdi, rax
lea rcx, [rsp + 0x370]
call fcn.140023510
mov r9d, 1
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call fcn.140004900
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x8b8
mov edx, dword [rsp + 0x1c08]
call fcn.14000ec20
mov qword [rsp + 0x1728], 0
lea rcx, [rsp + 0x30]
call fcn.140005db0
nop
lea rcx, [rsp + 0x370]
call fcn.140001490
nop
lea rcx, [rsp + 0x378]
call fcn.140001490
mov rax, qword [rsp + 0x1728]
jmp 0x1401b18bb
cmp dword [rsp + 0x1bf8], 0x8045
jne 0x1401aff6a
cmp qword [rsp + 0x1c00], 0
je 0x1401aea52
cmp qword [rsp + 0x1c08], 0
jne 0x1401aea59
xor eax, eax
jmp 0x1401b18bb
mov dword [rsp + 0x3c8], 0
mov dword [rsp + 0x830], 0
xor r8d, r8d
lea rdx, [rsp + 0x1738]
mov rcx, qword [rsp + 0x1bf0]
call fcn.14018d770
mov qword [rsp + 0x1a88], rax
lea rdx, [0x140244408]
mov rcx, qword [rsp + 0x1a88]
call fcn.140006d50
mov byte [rsp + 0x1730], al
lea rcx, [rsp + 0x1738]
call fcn.140001490
movzx edx, byte [rsp + 0x1730]
test edx, edx
je 0x1401aeb37
mov dword [rsp + 0x3c8], 0
jmp 0x1401aeae1
mov eax, dword [rsp + 0x3c8]
add eax, 1
mov dword [rsp + 0x3c8], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000ebf0
cmp dword [rsp + 0x3c8], eax
jge 0x1401aeb37
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0x3c8]
call fcn.1400823f0
mov rdx, rax
mov eax, dword [rsp + 0x1c00]
cmp rdx, rax
jne 0x1401aeb35
mov dword [rsp + 0x830], 1
jmp 0x1401aeb37
jmp 0x1401aead0
xor r8d, r8d
lea rdx, [rsp + 0x1748]
mov rcx, qword [rsp + 0x1bf0]
call fcn.14018d770
mov qword [rsp + 0x1a90], rax
lea rdx, [0x140244428]
mov rcx, qword [rsp + 0x1a90]
call fcn.140006d50
mov byte [rsp + 0x1740], al
lea rcx, [rsp + 0x1748]
call fcn.140001490
movzx edx, byte [rsp + 0x1740]
test edx, edx
je 0x1401aec63
lea rcx, [rsp + 0x850]
call fcn.1401cc380
nop
mov eax, dword [rsp + 0x1c00]
mov dword [rsp + 0x9e8], eax
lea rcx, [rsp + 0x850]
call fcn.1401d0fb0
test eax, eax
jne 0x1401aebe2
mov qword [rsp + 0x1750], 0
lea rcx, [rsp + 0x850]
call fcn.140005db0
mov rax, qword [rsp + 0x1750]
jmp 0x1401b18bb
mov dword [rsp + 0x3c8], 0
jmp 0x1401aec00
mov eax, dword [rsp + 0x3c8]
add eax, 1
mov dword [rsp + 0x3c8], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000ebf0
cmp dword [rsp + 0x3c8], eax
jge 0x1401aec56
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0x3c8]
call fcn.1400823f0
mov rdx, rax
mov eax, dword [rsp + 0x1c00]
cmp rdx, rax
jne 0x1401aec54
mov dword [rsp + 0x830], 1
jmp 0x1401aec56
jmp 0x1401aebef
lea rcx, [rsp + 0x850]
call fcn.140005db0
cmp dword [rsp + 0x830], 0
jne 0x1401aec74
xor eax, eax
jmp 0x1401b18bb
lea rcx, [rsp + 0x750]
call fcn.140002db0
nop
mov r8, qword [rsp + 0x1c08]
lea rdx, [0x140244450]
lea rcx, [rsp + 0x750]
call fcn.140002c40
mov edx, 0xa
lea rcx, [rsp + 0x388]
call fcn.1400883cc
nop
lea rcx, [rsp + 0x750]
call fcn.140023510
lea rdx, [rsp + 0x388]
mov rcx, rax
call fcn.1400e07f0
lea rcx, [rsp + 0x3e0]
call fcn.1401cc380
nop
mov dword [rsp + 0x380], 0
mov eax, dword [rsp + 0x1c00]
mov dword [rsp + 0x578], eax
lea rcx, [rsp + 0x3e0]
call fcn.1401d0fb0
lea rcx, [rsp + 0x760]
call fcn.1400e7d10
nop
lea rcx, [rsp + 0x1758]
call fcn.140001000
mov qword [rsp + 0x1a98], rax
mov rax, qword [rsp + 0x1a98]
mov qword [rsp + 0x1aa0], rax
lea r8, [0x140244458]
mov rdx, qword [rsp + 0x1aa0]
lea rcx, [rsp + 0x1760]
call fcn.1400010b0
mov qword [rsp + 0x1aa8], rax
mov rax, qword [rsp + 0x1aa8]
mov qword [rsp + 0x1ab0], rax
mov rcx, qword [rsp + 0x1ab0]
call fcn.140023510
mov dword [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_WSACleanup
mov r8, rax
lea rdx, [rsp + 0x1768]
lea rcx, [rsp + 0x760]
call fcn.1400eb0e0
nop
lea rcx, [rsp + 0x1760]
call fcn.140001490
nop
lea rcx, [rsp + 0x1758]
call fcn.140001490
lea rcx, [rsp + 0x3d0]
call fcn.140002db0
nop
mov r8, qword [rsp + 0x5a8]
lea rdx, [0x140244470]
lea rcx, [rsp + 0x3d0]
call fcn.140002c40
lea rdx, [0x1402444e0]
lea rcx, [rsp + 0x720]
call fcn.1400020d0
nop
lea rcx, [rsp + 0x720]
call fcn.140023510
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x728]
lea rcx, [rsp + 0x760]
call fcn.1400eba40
nop
lea rcx, [rsp + 0x728]
call fcn.1400e4170
test rax, rax
jne 0x1401aef2a
xor r9d, r9d
lea r8, [0x14024235c]
lea rdx, [rsp + 0xb90]
lea rcx, [rsp + 0x760]
call fcn.1400eba40
nop
xor edx, edx
lea rcx, [rsp + 0xb90]
call fcn.1400e4140
lea rdx, [rsp + 0x1780]
mov rcx, rax
call fcn.1400e73e0
lea r8, str.server
lea rdx, [rsp + 0x1788]
mov rcx, rax
call fcn.1400ea4c0
xor r9d, r9d
lea r8, str.__server
lea rdx, [rsp + 0x1790]
lea rcx, [rsp + 0x760]
call fcn.1400eba40
mov qword [rsp + 0x1ab8], rax
mov rax, qword [rsp + 0x1ab8]
mov qword [rsp + 0x1ac0], rax
mov rdx, qword [rsp + 0x1ac0]
lea rcx, [rsp + 0xb90]
call fcn.1400e5d90
nop
lea rcx, [rsp + 0x1790]
call fcn.1400e41c0
xor edx, edx
lea rcx, [rsp + 0xb90]
call fcn.1400e4140
lea rdx, [rsp + 0x17b8]
mov rcx, rax
call fcn.1400e73e0
lea r8, str.initiatorinfo
lea rdx, [rsp + 0x17c0]
mov rcx, rax
call fcn.1400ea4c0
nop
lea rcx, [rsp + 0xb90]
call fcn.1400e41c0
mov dx, 0x2f
lea rcx, [rsp + 0x720]
call fcn.1400068a0
mov r9d, eax
xor r8d, r8d
lea rdx, [rsp + 0x17c8]
lea rcx, [rsp + 0x720]
call fcn.140002270
mov qword [rsp + 0x1ac8], rax
mov rax, qword [rsp + 0x1ac8]
mov qword [rsp + 0x1ad0], rax
mov rdx, qword [rsp + 0x1ad0]
lea rcx, [rsp + 0x720]
call fcn.140002d80
nop
lea rcx, [rsp + 0x17c8]
call fcn.140001490
lea rcx, [rsp + 0x3d0]
call fcn.140023510
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x838]
lea rcx, [rsp + 0x760]
call fcn.1400eb970
lea rcx, [rsp + 0x17d0]
call fcn.1400e5f10
mov rdx, rax
lea rcx, [rsp + 0x838]
call fcn.1400e5e60
movzx eax, al
test eax, eax
je 0x1401af11c
xor r9d, r9d
lea r8, [0x140244580]
lea rdx, [rsp + 0xbc0]
lea rcx, [rsp + 0x760]
call fcn.1400eb970
lea rcx, [rsp + 0xbb8]
call fcn.1400e5130
lea rcx, [rsp + 0xbd0]
call fcn.1400e5130
lea rdx, [rsp + 0x17e8]
lea rcx, [rsp + 0xbc0]
call fcn.1400e73e0
mov rcx, rax
call fcn.1400e4f60
mov rdi, rax
lea rdx, [rsp + 0x17e0]
lea rcx, [rsp + 0xbc0]
call fcn.1400e73e0
mov r8, rdi
lea rdx, [rsp + 0x17f0]
mov rcx, rax
call fcn.1400ea4c0
mov rax, qword [rax]
mov qword [rsp + 0xbb8], rax
lea r8, [0x1402445b0]
lea rdx, [rsp + 0x17f8]
lea rcx, [rsp + 0xbb8]
call fcn.1400ea4c0
mov rax, qword [rax]
mov qword [rsp + 0xbd0], rax
lea rcx, [rsp + 0x5a8]
call fcn.140023510
mov rdi, rax
lea r8, [0x1402445b8]
lea rdx, [rsp + 0x1800]
lea rcx, [rsp + 0xbd0]
call fcn.1400e9b10
mov rdx, rdi
mov rcx, rax
call fcn.1400e9910
lea rcx, [rsp + 0x3d0]
call fcn.140023510
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x1808]
lea rcx, [rsp + 0x760]
call fcn.1400eb970
lea rdi, [rsp + 0x1a48]
mov rsi, rax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x838]
lea rsi, [rsp + 0x1a48]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x388]
call fcn.140088344
mov qword [rsp + 0x3c0], rax
cmp qword [rsp + 0x3c0], 0
je 0x1401afe3b
lea rdx, [0x1402445c8]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401af18d
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, 9
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
lea rdx, [0x1402445e0]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401af21c
mov rdx, qword [rsp + 0x3c0]
add rdx, 8
lea r8, [0x140242394]
lea rcx, [rsp + 0x1818]
call fcn.1400010b0
mov qword [rsp + 0x1ad8], rax
mov rax, qword [rsp + 0x1ad8]
mov qword [rsp + 0x1ae0], rax
mov rcx, qword [rsp + 0x1ae0]
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
nop
lea rcx, [rsp + 0x1818]
call fcn.140001490
lea rdx, [0x1402445f8]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401af2ab
mov rdx, qword [rsp + 0x3c0]
add rdx, 8
lea r8, [0x1402423cc]
lea rcx, [rsp + 0x1820]
call fcn.1400010b0
mov qword [rsp + 0x1ae8], rax
mov rax, qword [rsp + 0x1ae8]
mov qword [rsp + 0x1af0], rax
mov rcx, qword [rsp + 0x1af0]
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.WS2_32.dll_setsockopt
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
nop
lea rcx, [rsp + 0x1820]
call fcn.140001490
lea rdx, [0x140244610]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401af397
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
lea rdx, [0x140244624]
call fcn.1400060b0
test eax, eax
je 0x1401af310
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
lea rdx, [0x140244630]
call fcn.1400060b0
test eax, eax
je 0x1401af310
lea rax, [0x140244680]
mov qword [rsp + 0x1af8], rax
jmp 0x1401af31f
lea rax, [0x1402423fc]
mov qword [rsp + 0x1af8], rax
mov rdx, qword [rsp + 0x3c0]
add rdx, 8
mov r8, qword [rsp + 0x1af8]
lea rcx, [rsp + 0x1828]
call fcn.1400010b0
mov qword [rsp + 0x1b00], rax
mov rax, qword [rsp + 0x1b00]
mov qword [rsp + 0x1b08], rax
mov rcx, qword [rsp + 0x1b08]
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.WS2_32.dll_shutdown
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
nop
lea rcx, [rsp + 0x1828]
call fcn.140001490
lea rdx, str.gpu_temp
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401af483
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
lea rdx, [0x14024469c]
call fcn.1400060b0
test eax, eax
je 0x1401af3fc
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
lea rdx, str.You_need_install_.net_framework_3.5.
call fcn.1400060b0
test eax, eax
je 0x1401af3fc
lea rax, [0x140244700]
mov qword [rsp + 0x1b10], rax
jmp 0x1401af40b
lea rax, [0x1402424fc]
mov qword [rsp + 0x1b10], rax
mov rdx, qword [rsp + 0x3c0]
add rdx, 8
mov r8, qword [rsp + 0x1b10]
lea rcx, [rsp + 0x1830]
call fcn.1400010b0
mov qword [rsp + 0x1b18], rax
mov rax, qword [rsp + 0x1b18]
mov qword [rsp + 0x1b20], rax
mov rcx, qword [rsp + 0x1b20]
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayUnaccessData
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
nop
lea rcx, [rsp + 0x1830]
call fcn.140001490
lea rdx, str.activeprocess
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401af4d0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
lea rdx, [0x140244728]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401af700
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
lea rcx, [rsp + 0xbd8]
call fcn.140002db0
nop
lea rdx, [rsp + 0x1838]
lea rcx, [rsp + 0x838]
call fcn.1400e73e0
lea r8, [0x140244730]
lea rdx, [rsp + 0xbe0]
mov rcx, rax
call fcn.1400e68f0
lea rcx, [rsp + 0x1840]
call fcn.1400e5130
mov rdx, rax
lea rcx, [rsp + 0xbe0]
call fcn.1400e5030
movzx eax, al
test eax, eax
je 0x1401af5b3
lea r8, [0x140244738]
lea rdx, [rsp + 0x1848]
lea rcx, [rsp + 0xbe0]
call fcn.1400e6840
mov rcx, rax
call fcn.1400e5170
mov rdx, rax
lea rcx, [rsp + 0xbd8]
call fcn.1400020a0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0xbd8]
call fcn.1400060b0
test eax, eax
je 0x1401af6f3
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140006e20
movzx eax, al
test eax, eax
jne 0x1401af6f3
lea rcx, [rsp + 0x1850]
call fcn.1400e5130
mov rdx, rax
lea rcx, [rsp + 0xbe0]
call fcn.1400e5070
movzx eax, al
test eax, eax
je 0x1401af653
lea rdx, [rsp + 0x1858]
lea rcx, [rsp + 0x838]
call fcn.1400e73e0
lea r8, [0x140244748]
lea rdx, [rsp + 0x1860]
mov rcx, rax
call fcn.1400ea4c0
mov rax, qword [rax]
mov qword [rsp + 0xbe0], rax
lea rcx, [rsp + 0x1870]
call fcn.1400e5350
mov rdi, rax
lea r8, [0x140244750]
lea rdx, [rsp + 0x1868]
lea rcx, [rsp + 0xbe0]
call fcn.1400e6840
mov rdx, rdi
mov rcx, rax
call fcn.1400e5290
movzx eax, al
test eax, eax
je 0x1401af6ad
lea r8, [0x140244760]
lea rdx, [rsp + 0x1878]
lea rcx, [rsp + 0xbe0]
call fcn.1400e9b10
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rdi, rax
lea r8, [0x140244770]
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xbe0]
call fcn.1400e6840
mov rdx, rdi
mov rcx, rax
call fcn.1400e9910
mov dword [rsp + 0x380], 1
lea rcx, [rsp + 0xbd8]
call fcn.140001490
lea rdx, [0x14024477c]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401af930
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.WS2_32.dll_select
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
lea rcx, [rsp + 0xbe8]
call fcn.140002db0
nop
lea rdx, [rsp + 0x1888]
lea rcx, [rsp + 0x838]
call fcn.1400e73e0
lea r8, [0x140244784]
lea rdx, [rsp + 0xbf0]
mov rcx, rax
call fcn.1400e68f0
lea rcx, [rsp + 0x1890]
call fcn.1400e5130
mov rdx, rax
lea rcx, [rsp + 0xbf0]
call fcn.1400e5030
movzx eax, al
test eax, eax
je 0x1401af7e3
lea r8, [0x140244790]
lea rdx, [rsp + 0x1898]
lea rcx, [rsp + 0xbf0]
call fcn.1400e6840
mov rcx, rax
call fcn.1400e5170
mov rdx, rax
lea rcx, [rsp + 0xbe8]
call fcn.1400020a0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0xbe8]
call fcn.1400060b0
test eax, eax
je 0x1401af923
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140006e20
movzx eax, al
test eax, eax
jne 0x1401af923
lea rcx, [rsp + 0x18a0]
call fcn.1400e5130
mov rdx, rax
lea rcx, [rsp + 0xbf0]
call fcn.1400e5070
movzx eax, al
test eax, eax
je 0x1401af883
lea rdx, [rsp + 0x18a8]
lea rcx, [rsp + 0x838]
call fcn.1400e73e0
lea r8, [0x14024479c]
lea rdx, [rsp + 0x18b0]
mov rcx, rax
call fcn.1400ea4c0
mov rax, qword [rax]
mov qword [rsp + 0xbf0], rax
lea rcx, [rsp + 0x18c0]
call fcn.1400e5350
mov rdi, rax
lea r8, [0x1402447a8]
lea rdx, [rsp + 0x18b8]
lea rcx, [rsp + 0xbf0]
call fcn.1400e6840
mov rdx, rdi
mov rcx, rax
call fcn.1400e5290
movzx eax, al
test eax, eax
je 0x1401af8dd
lea r8, [0x1402447b8]
lea rdx, [rsp + 0x18c8]
lea rcx, [rsp + 0xbf0]
call fcn.1400e9b10
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rdi, rax
lea r8, [0x1402447c8]
lea rdx, [rsp + 0x18d0]
lea rcx, [rsp + 0xbf0]
call fcn.1400e6840
mov rdx, rdi
mov rcx, rax
call fcn.1400e9910
mov dword [rsp + 0x380], 1
lea rcx, [rsp + 0xbe8]
call fcn.140001490
lea rdx, [0x1402447d8]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401afb60
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.WS2_32.dll_recvfrom
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
lea rcx, [rsp + 0xbf8]
call fcn.140002db0
nop
lea rdx, [rsp + 0x18d8]
lea rcx, [rsp + 0x838]
call fcn.1400e73e0
lea r8, [0x1402447e0]
lea rdx, [rsp + 0xc00]
mov rcx, rax
call fcn.1400e68f0
lea rcx, [rsp + 0x18e0]
call fcn.1400e5130
mov rdx, rax
lea rcx, [rsp + 0xc00]
call fcn.1400e5030
movzx eax, al
test eax, eax
je 0x1401afa13
lea r8, [0x1402447e8]
lea rdx, [rsp + 0x18e8]
lea rcx, [rsp + 0xc00]
call fcn.1400e6840
mov rcx, rax
call fcn.1400e5170
mov rdx, rax
lea rcx, [rsp + 0xbf8]
call fcn.1400020a0
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0xbf8]
call fcn.1400060b0
test eax, eax
je 0x1401afb53
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140006e20
movzx eax, al
test eax, eax
jne 0x1401afb53
lea rcx, [rsp + 0x18f0]
call fcn.1400e5130
mov rdx, rax
lea rcx, [rsp + 0xc00]
call fcn.1400e5070
movzx eax, al
test eax, eax
je 0x1401afab3
lea rdx, [rsp + 0x18f8]
lea rcx, [rsp + 0x838]
call fcn.1400e73e0
lea r8, [0x1402447f8]
lea rdx, [rsp + 0x1900]
mov rcx, rax
call fcn.1400ea4c0
mov rax, qword [rax]
mov qword [rsp + 0xc00], rax
lea rcx, [rsp + 0x1910]
call fcn.1400e5350
mov rdi, rax
lea r8, [0x140244800]
lea rdx, [rsp + 0x1908]
lea rcx, [rsp + 0xc00]
call fcn.1400e6840
mov rdx, rdi
mov rcx, rax
call fcn.1400e5290
movzx eax, al
test eax, eax
je 0x1401afb0d
lea r8, [0x140244810]
lea rdx, [rsp + 0x1918]
lea rcx, [rsp + 0xc00]
call fcn.1400e9b10
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rdi, rax
lea r8, [0x140244820]
lea rdx, [rsp + 0x1920]
lea rcx, [rsp + 0xc00]
call fcn.1400e6840
mov rdx, rdi
mov rcx, rax
call fcn.1400e9910
mov dword [rsp + 0x380], 1
lea rcx, [rsp + 0xbf8]
call fcn.140001490
lea rdx, [0x140244830]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401afbad
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetLBound
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
lea rdx, [0x140244838]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401afdcc
mov rcx, qword [rsp + 0x3c0]
add rcx, 8
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0xc10]
call fcn.1400df440
nop
lea rcx, [rsp + 0xc08]
call fcn.140002db0
nop
lea rdx, [rsp + 0x1928]
lea rcx, [rsp + 0x838]
call fcn.1400e73e0
lea r8, [0x140244840]
lea rdx, [rsp + 0xc18]
mov rcx, rax
call fcn.1400e68f0
lea rcx, [rsp + 0x1930]
call fcn.1400e5130
mov rdx, rax
lea rcx, [rsp + 0xc18]
call fcn.1400e5030
movzx eax, al
test eax, eax
je 0x1401afc7d
lea r8, [0x140244848]
lea rdx, [rsp + 0x1938]
lea rcx, [rsp + 0xc18]
call fcn.1400e6840
mov rcx, rax
call fcn.1400e5170
mov rdx, rax
lea rcx, [rsp + 0xc08]
call fcn.1400020a0
lea rcx, [rsp + 0xc10]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0xc08]
call fcn.1400060b0
test eax, eax
je 0x1401afdb1
lea rcx, [rsp + 0xc10]
call fcn.140006e20
movzx eax, al
test eax, eax
jne 0x1401afdb1
lea rcx, [rsp + 0x1940]
call fcn.1400e5130
mov rdx, rax
lea rcx, [rsp + 0xc18]
call fcn.1400e5070
movzx eax, al
test eax, eax
je 0x1401afd15
lea rdx, [rsp + 0x1948]
lea rcx, [rsp + 0x838]
call fcn.1400e73e0
lea r8, [0x140244858]
lea rdx, [rsp + 0x1950]
mov rcx, rax
call fcn.1400ea4c0
mov rax, qword [rax]
mov qword [rsp + 0xc18], rax
lea rcx, [rsp + 0x1960]
call fcn.1400e5350
mov rdi, rax
lea r8, [0x140244860]
lea rdx, [rsp + 0x1958]
lea rcx, [rsp + 0xc18]
call fcn.1400e6840
mov rdx, rdi
mov rcx, rax
call fcn.1400e5290
movzx eax, al
test eax, eax
je 0x1401afd6f
lea r8, [0x140244870]
lea rdx, [rsp + 0x1968]
lea rcx, [rsp + 0xc18]
call fcn.1400e9b10
lea rcx, [rsp + 0xc10]
call fcn.140023510
mov rdi, rax
lea r8, [0x140244880]
lea rdx, [rsp + 0x1970]
lea rcx, [rsp + 0xc18]
call fcn.1400e6840
mov rdx, rdi
mov rcx, rax
call fcn.1400e9910
mov dword [rsp + 0x380], 1
lea rcx, [rsp + 0xc08]
call fcn.140001490
nop
lea rcx, [rsp + 0xc10]
call fcn.140001490
lea rdx, [0x140244890]
mov rcx, qword [rsp + 0x3c0]
call fcn.1400060b0
test eax, eax
jne 0x1401afe19
mov rcx, qword [rsp + 0x1bf0]
call fcn.140197490
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
lea r9, [0x1402448b0]
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
mov edx, dword [rsp + 0x3c8]
call fcn.1400823c0
mov rdx, qword [rsp + 0x3c0]
lea rcx, [rsp + 0x388]
call fcn.140088374
mov qword [rsp + 0x3c0], rax
jmp 0x1401af131
cmp dword [rsp + 0x380], 0
je 0x1401afef0
lea rcx, [rsp + 0x1978]
call fcn.140001000
mov qword [rsp + 0x1b28], rax
mov rax, qword [rsp + 0x1b28]
mov qword [rsp + 0x1b30], rax
lea r8, [0x1402448b8]
mov rdx, qword [rsp + 0x1b30]
lea rcx, [rsp + 0x1980]
call fcn.1400010b0
mov qword [rsp + 0x1b38], rax
mov rax, qword [rsp + 0x1b38]
mov qword [rsp + 0x1b40], rax
mov rcx, qword [rsp + 0x1b40]
call fcn.140023510
mov dword [rsp + 0x20], 0
mov r9d, 1
lea r8, [0x14024255c]
mov rdx, rax
lea rcx, [rsp + 0x760]
call fcn.1400ebac0
nop
lea rcx, [rsp + 0x1980]
call fcn.140001490
nop
lea rcx, [rsp + 0x1978]
call fcn.140001490
mov qword [rsp + 0x1988], 0
lea rcx, [rsp + 0x728]
call fcn.1400e41c0
nop
lea rcx, [rsp + 0x720]
call fcn.140001490
nop
lea rcx, [rsp + 0x3d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x760]
call fcn.1400e65e0
nop
lea rcx, [rsp + 0x3e0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x388]
call fcn.1400885a8
nop
lea rcx, [rsp + 0x750]
call fcn.140001490
mov rax, qword [rsp + 0x1988]
jmp 0x1401b18bb
cmp dword [rsp + 0x1bf8], 0x8058
jne 0x1401b040a
cmp qword [rsp + 0x1c00], 0
je 0x1401aff91
cmp qword [rsp + 0x1c08], 0
jne 0x1401aff98
xor eax, eax
jmp 0x1401b18bb
mov dword [rsp + 0xc20], 0
mov dword [rsp + 0xc30], 0
xor r8d, r8d
lea rdx, [rsp + 0x1998]
mov rcx, qword [rsp + 0x1bf0]
call fcn.14018d770
mov qword [rsp + 0x1b48], rax
lea rdx, [0x1402448d0]
mov rcx, qword [rsp + 0x1b48]
call fcn.140006d50
mov byte [rsp + 0x1990], al
lea rcx, [rsp + 0x1998]
call fcn.140001490
movzx edx, byte [rsp + 0x1990]
test edx, edx
je 0x1401b0076
mov dword [rsp + 0xc20], 0
jmp 0x1401b0020
mov eax, dword [rsp + 0xc20]
add eax, 1
mov dword [rsp + 0xc20], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000ebf0
cmp dword [rsp + 0xc20], eax
jge 0x1401b0076
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0xc20]
call fcn.1400823f0
mov rdx, rax
mov eax, dword [rsp + 0x1c00]
cmp rdx, rax
jne 0x1401b0074
mov dword [rsp + 0xc30], 1
jmp 0x1401b0076
jmp 0x1401b000f
xor r8d, r8d
lea rdx, [rsp + 0x19a8]
mov rcx, qword [rsp + 0x1bf0]
call fcn.14018d770
mov qword [rsp + 0x1b50], rax
lea rdx, [0x1402448f0]
mov rcx, qword [rsp + 0x1b50]
call fcn.140006d50
mov byte [rsp + 0x19a0], al
lea rcx, [rsp + 0x19a8]
call fcn.140001490
movzx edx, byte [rsp + 0x19a0]
test edx, edx
je 0x1401b01a2
lea rcx, [rsp + 0xc50]
call fcn.1401cc380
nop
mov eax, dword [rsp + 0x1c00]
mov dword [rsp + 0xde8], eax
lea rcx, [rsp + 0xc50]
call fcn.1401d0fb0
test eax, eax
jne 0x1401b0121
mov qword [rsp + 0x19b0], 0
lea rcx, [rsp + 0xc50]
call fcn.140005db0
mov rax, qword [rsp + 0x19b0]
jmp 0x1401b18bb
mov dword [rsp + 0xc20], 0
jmp 0x1401b013f
mov eax, dword [rsp + 0xc20]
add eax, 1
mov dword [rsp + 0xc20], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000ebf0
cmp dword [rsp + 0xc20], eax
jge 0x1401b0195
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0xc20]
call fcn.1400823f0
mov rdx, rax
mov eax, dword [rsp + 0x1c00]
cmp rdx, rax
jne 0x1401b0193
mov dword [rsp + 0xc30], 1
jmp 0x1401b0195
jmp 0x1401b012e
lea rcx, [rsp + 0xc50]
call fcn.140005db0
cmp dword [rsp + 0xc30], 0
jne 0x1401b01b3
xor eax, eax
jmp 0x1401b18bb
lea rcx, [rsp + 0xc28]
call fcn.140002db0
nop
mov r8, qword [rsp + 0x1c08]
lea rdx, [0x140244918]
lea rcx, [rsp + 0xc28]
call fcn.140002c40
mov dword [rsp + 0xc40], 0
lea r9, [rsp + 0xc40]
lea r8, [0x1402425bc]
lea rdx, [rsp + 0x19b8]
lea rcx, [rsp + 0xc28]
call fcn.1400065a0
lea rcx, [rsp + 0x19b8]
call fcn.140001490
cmp dword [rsp + 0xc40], 0xffffffff
je 0x1401b0254
lea r9, [rsp + 0xc40]
lea r8, [0x1402425cc]
lea rdx, [rsp + 0x19c0]
lea rcx, [rsp + 0xc28]
call fcn.1400065a0
lea rcx, [rsp + 0x19c0]
call fcn.140001490
lea rcx, [rsp + 0xc38]
call fcn.140002db0
nop
cmp dword [rsp + 0xc40], 0xffffffff
je 0x1401b03a5
lea r9, [rsp + 0xc40]
lea r8, [0x14024262c]
lea rdx, [rsp + 0xf90]
lea rcx, [rsp + 0xc28]
call fcn.1400065a0
nop
lea rcx, [rsp + 0xf90]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x1401b02bb
lea rcx, [rsp + 0xf90]
call fcn.140001490
jmp 0x1401b03a5
lea rcx, [0x140244920]
call fcn.1400a8204
mov rdi, rax
lea rcx, [rsp + 0xf90]
call fcn.140023510
mov r8, rdi
lea rdx, [0x140244938]
mov rcx, rax
call fcn.1400a939c
test eax, eax
jne 0x1401b0393
lea rcx, str.Vendor:
call fcn.1400a8204
mov r8d, eax
lea rdx, [rsp + 0x19c8]
lea rcx, [rsp + 0xf90]
call fcn.140006a00
mov qword [rsp + 0x1b58], rax
mov rax, qword [rsp + 0x1b58]
mov qword [rsp + 0x1b60], rax
lea r8, [0x1402426ec]
mov rdx, qword [rsp + 0x1b60]
lea rcx, [rsp + 0x19d0]
call fcn.1400010b0
mov qword [rsp + 0x1b68], rax
mov rax, qword [rsp + 0x1b68]
mov qword [rsp + 0x1b70], rax
mov rdx, qword [rsp + 0x1b70]
lea rcx, [rsp + 0xc38]
call fcn.140005fd0
nop
lea rcx, [rsp + 0x19d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x19c8]
call fcn.140001490
nop
lea rcx, [rsp + 0xf90]
call fcn.140001490
jmp 0x1401b0262
lea rcx, [rsp + 0xc38]
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov r9, rax
mov r8d, 0x1b
mov edx, dword [rsp + 0xc20]
call fcn.1400823c0
mov qword [rsp + 0x19d8], 0
lea rcx, [rsp + 0xc38]
call fcn.140001490
nop
lea rcx, [rsp + 0xc28]
call fcn.140001490
mov rax, qword [rsp + 0x19d8]
jmp 0x1401b18bb
cmp dword [rsp + 0x1bf8], 0x8059
jne 0x1401b04ae
mov qword [rsp + 0xf98], 0
lea rdx, [0x140244968]
lea rcx, [rsp + 0x19e0]
call fcn.1400eeb90
mov qword [rsp + 0x1b78], rax
mov rcx, qword [rsp + 0x1b78]
call fcn.140023510
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [rsp + 0xf98], rax
lea rcx, [rsp + 0x19e0]
call fcn.140001490
cmp qword [rsp + 0xf98], 0
jne 0x1401b0482
xor eax, eax
jmp 0x1401b18bb
mov r9, qword [rsp + 0x1c08]
mov r8, qword [rsp + 0x1c00]
mov edx, dword [rsp + 0x1bf8]
mov rcx, qword [rsp + 0xf98]
call qword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
jmp 0x1401b18bb
cmp dword [rsp + 0x1bf8], 0x804c
jne 0x1401b05d3
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
call fcn.14000ebc0
mov qword [rsp + 0xfa0], rax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
xor edx, edx
call fcn.14000eb80
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa0]
call fcn.14000eb40
mov qword [rsp + 0xfa0], rax
cmp qword [rsp + 0xfa0], 0
je 0x1401b056c
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa0]
call fcn.14008257c
cmp rax, 0x3fc
jne 0x1401b0546
jmp 0x1401b056c
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa0]
call fcn.14000eb00
mov qword [rsp + 0xfa0], rax
jmp 0x1401b0515
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa0]
call fcn.14000eb80
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov r8d, 1
mov rdx, qword [rsp + 0xfa0]
call fcn.14000eac0
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov r8d, 2
mov rdx, qword [rsp + 0xfa0]
call fcn.14000eac0
xor eax, eax
jmp 0x1401b18bb
cmp dword [rsp + 0x1bf8], 0x8056
jne 0x1401b06f8
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
call fcn.14000ebc0
mov qword [rsp + 0xfa8], rax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
xor edx, edx
call fcn.14000eb80
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa8]
call fcn.14000eb40
mov qword [rsp + 0xfa8], rax
cmp qword [rsp + 0xfa8], 0
je 0x1401b0691
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa8]
call fcn.14008257c
cmp rax, 0xa1
jne 0x1401b066b
jmp 0x1401b0691
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa8]
call fcn.14000eb00
mov qword [rsp + 0xfa8], rax
jmp 0x1401b063a
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov rdx, qword [rsp + 0xfa8]
call fcn.14000eb80
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov r8d, 1
mov rdx, qword [rsp + 0xfa8]
call fcn.14000eac0
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x1278
mov r8d, 2
mov rdx, qword [rsp + 0xfa8]
call fcn.14000eac0
xor eax, eax
jmp 0x1401b18bb
cmp dword [rsp + 0x1bf8], 0x8017
je 0x1401b0716
cmp dword [rsp + 0x1bf8], 0x8039
jne 0x1401b09b3
mov dword [rsp + 0xfb0], 0
xor r8d, r8d
lea rdx, [rsp + 0x19f0]
mov rcx, qword [rsp + 0x1bf0]
call fcn.14018d770
mov qword [rsp + 0x1b80], rax
lea rdx, [0x140244990]
mov rcx, qword [rsp + 0x1b80]
call fcn.140006d50
mov byte [rsp + 0x19e8], al
lea rcx, [rsp + 0x19f0]
call fcn.140001490
movzx edx, byte [rsp + 0x19e8]
test edx, edx
je 0x1401b080e
mov dword [rsp + 0xfb0], 0
jmp 0x1401b0797
mov eax, dword [rsp + 0xfb0]
add eax, 1
mov dword [rsp + 0xfb0], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000ebf0
cmp dword [rsp + 0xfb0], eax
jge 0x1401b07e2
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0xfb0]
call fcn.1400823f0
mov rdx, rax
mov eax, dword [rsp + 0x1c08]
cmp rdx, rax
jne 0x1401b07e0
jmp 0x1401b07e2
jmp 0x1401b0786
mov rdx, qword [rsp + 0x1bf0]
add rdx, 0xdc8
mov r9d, dword [rsp + 0x1c08]
mov r8d, dword [rsp + 0xfb0]
mov rcx, qword [rsp + 0x1bf0]
call fcn.1401a53d0
xor r8d, r8d
lea rdx, [rsp + 0x1a00]
mov rcx, qword [rsp + 0x1bf0]
call fcn.14018d770
mov qword [rsp + 0x1b88], rax
lea rdx, [0x1402449b0]
mov rcx, qword [rsp + 0x1b88]
call fcn.140006d50
mov byte [rsp + 0x19f8], al
lea rcx, [rsp + 0x1a00]
call fcn.140001490
movzx edx, byte [rsp + 0x19f8]
test edx, edx
je 0x1401b09ac
lea rcx, [rsp + 0xfc0]
call fcn.1401cc380
nop
mov eax, dword [rsp + 0x1c08]
mov dword [rsp + 0x1158], eax
lea rcx, [rsp + 0xfc0]
call fcn.1401d0fb0
test eax, eax
jne 0x1401b08b9
mov qword [rsp + 0x1a08], 0
lea rcx, [rsp + 0xfc0]
call fcn.140005db0
mov rax, qword [rsp + 0x1a08]
jmp 0x1401b18bb
lea rcx, [rsp + 0x11a8]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edi, eax
xor edx, edx
mov rcx, qword [rsp + 0x1bf0]
call fcn.14018b5b0
cmp edi, eax
je 0x1401b0909
mov qword [rsp + 0x1a10], 0
lea rcx, [rsp + 0xfc0]
call fcn.140005db0
mov rax, qword [rsp + 0x1a10]
jmp 0x1401b18bb
mov dword [rsp + 0xfb0], 0
jmp 0x1401b0927
mov eax, dword [rsp + 0xfb0]
add eax, 1
mov dword [rsp + 0xfb0], eax
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
call fcn.14000ebf0
cmp dword [rsp + 0xfb0], eax
jge 0x1401b0972
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0xdc8
mov edx, dword [rsp + 0xfb0]
call fcn.1400823f0
mov rdx, rax
mov eax, dword [rsp + 0x1c08]
cmp rdx, rax
jne 0x1401b0970
jmp 0x1401b0972
jmp 0x1401b0916
mov rdx, qword [rsp + 0x1bf0]
add rdx, 0xdc8
mov r9d, dword [rsp + 0x1c08]
mov r8d, dword [rsp + 0xfb0]
mov rcx, qword [rsp + 0x1bf0]
call fcn.1401a53d0
nop
lea rcx, [rsp + 0xfc0]
call fcn.140005db0
xor eax, eax
jmp 0x1401b18bb
cmp dword [rsp + 0x1bf8], 0x804f
jne 0x1401b09fa
mov rdx, qword [rsp + 0x1bf0]
add rdx, 0x4e8
mov ecx, 2
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov rax, qword [rsp + 0x1bf0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1bf0]
call qword [rax + 0x2b0]
xor eax, eax
jmp 0x1401b18bb
cmp dword [rsp + 0x1bf8], 0x8024
jne 0x1401b17fc
lea rcx, [rsp + 0x1310]
call fcn.140185ba0
nop
lea rcx, [rsp + 0x1308]
call fcn.140002db0
nop
mov dword [rsp + 0x1300], 0
lea rcx, [rsp + 0x1310]
call fcn.140023510
mov rcx, rax
call fcn.1400050a0
test eax, eax
je 0x1401b0ad9
xor eax, eax
mov word [rsp + 0x1320], ax
lea rdi, [rsp + 0x1322]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rcx, [rsp + 0x1310]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x1320]
call fcn.1400a9470
lea rdx, [rsp + 0x1320]
mov qword [rsp + 0x20], rdx
mov r9d, 0x104
mov r8d, 0x804a
mov edx, 0xfffffffd
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov dword [rsp + 0x1300], eax
cmp dword [rsp + 0x1300], 0xffffffff
jne 0x1401b0ad7
lea rdx, [rsp + 0x1320]
lea rcx, [rsp + 0x1308]
call fcn.1400020a0
jmp 0x1401b0b31
mov edx, 0x69
lea rcx, [rsp + 0x1a18]
call fcn.1400efb10
mov qword [rsp + 0x1b90], rax
mov rax, qword [rsp + 0x1b90]
mov qword [rsp + 0x1b98], rax
mov rdx, qword [rsp + 0x1b98]
lea rcx, [rsp + 0x1308]
call fcn.140002d80
nop
lea rcx, [rsp + 0x1a18]
call fcn.140001490
mov dword [rsp + 0x1300], 0xffffffff
lea rcx, [rsp + 0x1a20]
call fcn.140001000
mov qword [rsp + 0x1ba0], rax
mov rax, qword [rsp + 0x1ba0]
mov qword [rsp + 0x1ba8], rax
lea r8, [0x1402449d8]
mov rdx, qword [rsp + 0x1ba8]
lea rcx, [rsp + 0x1a28]
call fcn.1400010b0
mov qword [rsp + 0x1bb0], rax
mov rcx, qword [rsp + 0x1bb0]
call fcn.140023510
mov r9, rax
xor r8d, r8d
lea rdx, str.RegCode
lea rcx, [0x140244a00]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x1a28]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a20]
call fcn.140001490
cmp dword [rsp + 0x1300], 0xffffffff
jne 0x1401b17e1
mov eax, 0x4c
mov word [rsp + 0x1530], ax
mov eax, 0x69
mov word [rsp + 0x1532], ax
mov eax, 0x63
mov word [rsp + 0x1534], ax
mov eax, 0x65
mov word [rsp + 0x1536], ax
mov eax, WSASetLastError
mov word [rsp + 0x1538], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x153a], ax
mov eax, 0x65
mov word [rsp + 0x153c], ax
mov eax, 0x20
mov word [rsp + 0x153e], ax
mov eax, 0x69
mov word [rsp + 0x1540], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1542], ax
mov eax, 0x20
mov word [rsp + 0x1544], ax
mov eax, WSASetLastError
mov word [rsp + 0x1546], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1548], ax
mov eax, 0x63
mov word [rsp + 0x154a], ax
mov eax, WSAGetLastError
mov word [rsp + 0x154c], ax
mov eax, 0x65
mov word [rsp + 0x154e], ax
mov eax, 0x64
mov word [rsp + 0x1550], ax
mov eax, 0x2c
mov word [rsp + 0x1552], ax
mov eax, 0x20
mov word [rsp + 0x1554], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1556], ax
mov eax, WSASetLastError
mov word [rsp + 0x1558], ax
mov eax, 0x65
mov word [rsp + 0x155a], ax
mov eax, 0x61
mov word [rsp + 0x155c], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x155e], ax
mov eax, 0x65
mov word [rsp + 0x1560], ax
mov eax, 0x20
mov word [rsp + 0x1562], ax
mov eax, 0x67
mov word [rsp + 0x1564], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1566], ax
mov eax, 0x20
mov word [rsp + 0x1568], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x156a], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x156c], ax
mov eax, 0x20
mov word [rsp + 0x156e], ax
mov eax, 0x68
mov word [rsp + 0x1570], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1572], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1574], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1576], ax
mov eax, 0x3a
mov word [rsp + 0x1578], ax
mov eax, 0x2f
mov word [rsp + 0x157a], ax
mov eax, 0x2f
mov word [rsp + 0x157c], ax
mov eax, 0x63
mov word [rsp + 0x157e], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1580], ax
mov eax, 0x2e
mov word [rsp + 0x1582], ax
mov eax, 0x79
mov word [rsp + 0x1584], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1586], ax
mov eax, 0x75
mov word [rsp + 0x1588], ax
mov eax, WSASetLastError
mov word [rsp + 0x158a], ax
mov eax, 0x67
mov word [rsp + 0x158c], ax
mov eax, 0x7a
mov word [rsp + 0x158e], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1590], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1592], ax
mov eax, 0x66
mov word [rsp + 0x1594], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1596], ax
mov eax, 0x2e
mov word [rsp + 0x1598], ax
mov eax, 0x63
mov word [rsp + 0x159a], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x159c], ax
mov eax, WSASetLastError
mov word [rsp + 0x159e], ax
mov eax, 0x2f
mov word [rsp + 0x15a0], ax
mov eax, 0x20
mov word [rsp + 0x15a2], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15a4], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x15a6], ax
mov eax, 0x20
mov word [rsp + 0x15a8], ax
mov eax, 0x61
mov word [rsp + 0x15aa], ax
mov eax, 0x63
mov word [rsp + 0x15ac], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15ae], ax
mov eax, 0x69
mov word [rsp + 0x15b0], ax
mov eax, 0x76
mov word [rsp + 0x15b2], ax
mov eax, 0x65
mov word [rsp + 0x15b4], ax
mov eax, 0x20
mov word [rsp + 0x15b6], ax
mov eax, 0x69
mov word [rsp + 0x15b8], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15ba], ax
mov eax, 0x2e
mov word [rsp + 0x15bc], ax
xor eax, eax
mov word [rsp + 0x15be], ax
lea rdx, [rsp + 0x1530]
lea rcx, [rsp + 0x1308]
call fcn.140006030
test eax, eax
jne 0x1401b17ba
lea rdx, [0x140244a20]
lea rcx, [rsp + 0x1a38]
call fcn.1400eeb90
mov qword [rsp + 0x1bb8], rax
lea rdx, [0x140244a10]
mov rcx, qword [rsp + 0x1bb8]
call fcn.140006d90
mov byte [rsp + 0x1a30], al
lea rcx, [rsp + 0x1a38]
call fcn.140001490
movzx edx, byte [rsp + 0x1a30]
test edx, edx
je 0x1401b0fe1
jmp 0x1401b17e1
mov eax, 0x4c
mov word [rsp + 0x1640], ax
mov eax, 0x69
mov word [rsp + 0x1642], ax
mov eax, 0x63
mov word [rsp + 0x1644], ax
mov eax, 0x65
mov word [rsp + 0x1646], ax
mov eax, WSASetLastError
mov word [rsp + 0x1648], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x164a], ax
mov eax, 0x65
mov word [rsp + 0x164c], ax
mov eax, 0x20
mov word [rsp + 0x164e], ax
mov eax, 0x69
mov word [rsp + 0x1650], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1652], ax
mov eax, 0x20
mov word [rsp + 0x1654], ax
mov eax, WSASetLastError
mov word [rsp + 0x1656], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1658], ax
mov eax, 0x63
mov word [rsp + 0x165a], ax
mov eax, WSAGetLastError
mov word [rsp + 0x165c], ax
mov eax, 0x65
mov word [rsp + 0x165e], ax
mov eax, 0x64
mov word [rsp + 0x1660], ax
mov eax, 0x2c
mov word [rsp + 0x1662], ax
mov eax, 0x20
mov word [rsp + 0x1664], ax
mov eax, 0x44
mov word [rsp + 0x1666], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1668], ax
mov eax, 0x20
mov word [rsp + 0x166a], ax
mov eax, 0x79
mov word [rsp + 0x166c], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x166e], ax
mov eax, 0x75
mov word [rsp + 0x1670], ax
mov eax, 0x20
mov word [rsp + 0x1672], ax
mov eax, 0x77
mov word [rsp + 0x1674], ax
mov eax, 0x61
mov word [rsp + 0x1676], ax
mov eax, WSASetLastError
mov word [rsp + 0x1678], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x167a], ax
mov eax, 0x20
mov word [rsp + 0x167c], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x167e], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1680], ax
mov eax, 0x20
mov word [rsp + 0x1682], ax
mov eax, 0x67
mov word [rsp + 0x1684], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1686], ax
mov eax, 0x20
mov word [rsp + 0x1688], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x168a], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x168c], ax
mov eax, 0x20
mov word [rsp + 0x168e], ax
mov eax, 0x68
mov word [rsp + 0x1690], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1692], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1694], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1696], ax
mov eax, 0x3a
mov word [rsp + 0x1698], ax
mov eax, 0x2f
mov word [rsp + 0x169a], ax
mov eax, 0x2f
mov word [rsp + 0x169c], ax
mov eax, 0x63
mov word [rsp + 0x169e], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x16a0], ax
mov eax, 0x2e
mov word [rsp + 0x16a2], ax
mov eax, 0x79
mov word [rsp + 0x16a4], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x16a6], ax
mov eax, 0x75
mov word [rsp + 0x16a8], ax
mov eax, WSASetLastError
mov word [rsp + 0x16aa], ax
mov eax, 0x67
mov word [rsp + 0x16ac], ax
mov eax, 0x7a
mov word [rsp + 0x16ae], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x16b0], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x16b2], ax
mov eax, 0x66
mov word [rsp + 0x16b4], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x16b6], ax
mov eax, 0x2e
mov word [rsp + 0x16b8], ax
mov eax, 0x63
mov word [rsp + 0x16ba], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x16bc], ax
mov eax, WSASetLastError
mov word [rsp + 0x16be], ax
mov eax, 0x2f
mov word [rsp + 0x16c0], ax
mov eax, 0x20
mov word [rsp + 0x16c2], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x16c4], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x16c6], ax
mov eax, 0x20
mov word [rsp + 0x16c8], ax
mov eax, 0x61
mov word [rsp + 0x16ca], ax
mov eax, 0x63
mov word [rsp + 0x16cc], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x16ce], ax
mov eax, 0x69
mov word [rsp + 0x16d0], ax
mov eax, 0x76
mov word [rsp + 0x16d2], ax
mov eax, 0x65
mov word [rsp + 0x16d4], ax
mov eax, 0x20
mov word [rsp + 0x16d6], ax
mov eax, 0x69
mov word [rsp + 0x16d8], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x16da], ax
mov eax, 0x3f
mov word [rsp + 0x16dc], ax
xor eax, eax
mov word [rsp + 0x16de], ax
xor r8d, r8d
mov edx, reloc.WS2_32.dll_gethostbyname
lea rcx, [rsp + 0x1640]
call fcn.1400ef1c0
cmp eax, 7
jne 0x1401b140d
jmp 0x1401b17e1
lea rcx, [rsp + 0x16e0]
call fcn.140002db0
nop
mov eax, 0x68
mov word [rsp + 0x15c0], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15c2], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15c4], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x15c6], ax
mov eax, 0x3a
mov word [rsp + 0x15c8], ax
mov eax, 0x2f
mov word [rsp + 0x15ca], ax
mov eax, 0x2f
mov word [rsp + 0x15cc], ax
mov eax, 0x75
mov word [rsp + 0x15ce], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x15d0], ax
mov eax, 0x65
mov word [rsp + 0x15d2], ax
mov eax, WSACleanup
mov word [rsp + 0x15d4], ax
mov eax, 0x2e
mov word [rsp + 0x15d6], ax
mov eax, 0x79
mov word [rsp + 0x15d8], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x15da], ax
mov eax, 0x75
mov word [rsp + 0x15dc], ax
mov eax, WSASetLastError
mov word [rsp + 0x15de], ax
mov eax, 0x67
mov word [rsp + 0x15e0], ax
mov eax, 0x7a
mov word [rsp + 0x15e2], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x15e4], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x15e6], ax
mov eax, 0x66
mov word [rsp + 0x15e8], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15ea], ax
mov eax, 0x2e
mov word [rsp + 0x15ec], ax
mov eax, 0x63
mov word [rsp + 0x15ee], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x15f0], ax
mov eax, WSASetLastError
mov word [rsp + 0x15f2], ax
mov eax, 0x2f
mov word [rsp + 0x15f4], ax
mov eax, 0x61
mov word [rsp + 0x15f6], ax
mov eax, 0x63
mov word [rsp + 0x15f8], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x15fa], ax
mov eax, 0x69
mov word [rsp + 0x15fc], ax
mov eax, 0x76
mov word [rsp + 0x15fe], ax
mov eax, 0x65
mov word [rsp + 0x1600], ax
mov eax, 0x2e
mov word [rsp + 0x1602], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1604], ax
mov eax, 0x68
mov word [rsp + 0x1606], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0x1608], ax
mov eax, 0x3f
mov word [rsp + 0x160a], ax
mov eax, WSACleanup
mov word [rsp + 0x160c], ax
mov eax, 0x65
mov word [rsp + 0x160e], ax
mov eax, 0x67
mov word [rsp + 0x1610], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1612], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x1614], ax
mov eax, 0x66
mov word [rsp + 0x1616], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x1618], ax
mov eax, 0x77
mov word [rsp + 0x161a], ax
mov eax, 0x61
mov word [rsp + 0x161c], ax
mov eax, WSACleanup
mov word [rsp + 0x161e], ax
mov eax, 0x65
mov word [rsp + 0x1620], ax
mov eax, 0x3d
mov word [rsp + 0x1622], ax
mov eax, 0x63
mov word [rsp + 0x1624], ax
mov eax, 0x63
mov word [rsp + 0x1626], ax
mov eax, 0x62
mov word [rsp + 0x1628], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x162a], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x162c], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x162e], ax
mov eax, 0x26
mov word [rsp + 0x1630], ax
mov eax, WSACleanup
mov word [rsp + 0x1632], ax
mov eax, 0x65
mov word [rsp + 0x1634], ax
mov eax, 0x67
mov word [rsp + 0x1636], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x1638], ax
mov eax, WSASetLastError
mov word [rsp + 0x163a], ax
mov eax, 0x3d
mov word [rsp + 0x163c], ax
xor eax, eax
mov word [rsp + 0x163e], ax
mov r9, qword [rsp + 0x1310]
lea r8, [rsp + 0x15c0]
lea rdx, [0x140244a30]
lea rcx, [rsp + 0x16e0]
call fcn.140002c40
lea rcx, [rsp + 0x16e0]
call fcn.140023510
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x16e0]
call fcn.140001490
jmp 0x1401b17e1
lea rcx, [rsp + 0x1308]
call fcn.140023510
xor r8d, r8d
mov edx, gethostbyname
mov rcx, rax
call fcn.1400ef1c0
xor eax, eax
test eax, eax
jne 0x1401b0bca
lea rcx, [rsp + 0x1308]
call fcn.140001490
nop
lea rcx, [rsp + 0x1310]
call fcn.140001490
cmp dword [rsp + 0x1bf8], 0x805a
jne 0x1401b1897
mov rdx, qword [rsp + 0x1c08]
lea rcx, [rsp + 0x16e8]
call fcn.1400020d0
nop
lea rcx, [rsp + 0x16e8]
call fcn.140023510
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x3d8
mov r9d, 1
mov r8, rax
mov edx, 2
call fcn.140087c48
mov rcx, qword [rsp + 0x1bf0]
add rcx, 0x3d8
xor r9d, r9d
mov r8d, 0x1002
mov edx, 0x40b
call fcn.14000ea80
mov qword [rsp + 0x1a40], 0
lea rcx, [rsp + 0x16e8]
call fcn.140001490
mov rax, qword [rsp + 0x1a40]
jmp 0x1401b18bb
mov r9, qword [rsp + 0x1c08]
mov r8, qword [rsp + 0x1c00]
mov edx, dword [rsp + 0x1bf8]
mov rcx, qword [rsp + 0x1bf0]
call fcn.1400f2550
mov rcx, qword [rsp + 0x1bc0]
xor rcx, rsp
call fcn.1400a8050
add rsp, 0x1bd8
pop rdi
pop rsi
ret