Function at 0x1400f43d0
Capabilities:
Check if file exists
Copy file
Create process on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x13e0
call fcn.1401e9500
sub rsp, rax
mov qword [rsp + 0x11e0], 0xfffffffffffffffe
mov rax, qword [0x1402bd5c0]
xor rax, rsp
mov qword [rsp + 0x13d0], rax
cmp qword [rsp + 0x13f8], 1
je 0x1400f4421
cmp qword [rsp + 0x13f8], 2
jne 0x1400f4456
mov rax, qword [rsp + 0x13f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x13f0]
call qword [rax + 0x2d0]
mov edx, 2
mov rcx, qword [rsp + 0x13f0]
call fcn.140079c60
mov eax, 1
jmp 0x1400f5589
mov rax, qword [rsp + 0x13f8]
and rax, 0xffff
movzx eax, ax
mov dword [rsp + 0x11e8], eax
cmp dword [rsp + 0x11e8], 0x8043
jg 0x1400f450d
cmp dword [rsp + 0x11e8], 0x8043
je 0x1400f47b8
cmp dword [rsp + 0x11e8], 0x800d
jg 0x1400f44e6
cmp dword [rsp + 0x11e8], 0x800d
je 0x1400f4627
cmp dword [rsp + 0x11e8], 0x50d
je 0x1400f4f51
cmp dword [rsp + 0x11e8], 0x8003
je 0x1400f477b
cmp dword [rsp + 0x11e8], 0x800c
je 0x1400f458a
jmp 0x1400f556c
cmp dword [rsp + 0x11e8], 0x8011
je 0x1400f4ad7
cmp dword [rsp + 0x11e8], 0x803f
je 0x1400f48ce
jmp 0x1400f556c
cmp dword [rsp + 0x11e8], 0x815d
jg 0x1400f4563
cmp dword [rsp + 0x11e8], 0x815d
je 0x1400f5098
cmp dword [rsp + 0x11e8], 0x809c
je 0x1400f4dff
cmp dword [rsp + 0x11e8], 0x80a1
je 0x1400f46df
cmp dword [rsp + 0x11e8], 0x815c
je 0x1400f4ffa
jmp 0x1400f556c
cmp dword [rsp + 0x11e8], 0x8160
je 0x1400f54ab
cmp dword [rsp + 0x11e8], 0xe146
je 0x1400f4c6b
jmp 0x1400f556c
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x8002
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x13f0]
add rcx, 0x220
call fcn.14001b240
test rax, rax
je 0x1400f461d
mov rcx, qword [rsp + 0x13f0]
add rcx, 0x220
xor r8d, r8d
mov edx, 0x800c
call fcn.14000d9f0
mov rcx, qword [rsp + 0x13f0]
add rcx, 0x220
mov r8d, 1
mov edx, 0x800d
call fcn.14000d9f0
mov rcx, qword [rsp + 0x13f0]
add rcx, 0x220
mov r8d, 1
mov edx, 0x8030
call fcn.14000d9f0
mov eax, 1
jmp 0x1400f5589
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, 0x75
call fcn.1400f2960
cmp eax, 6
jne 0x1400f46d5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x8003
xor edx, edx
lea rcx, [0x1403c8c50]
call fcn.1400d8250
mov rcx, qword [rsp + 0x13f0]
add rcx, 0x220
call fcn.14001b240
test rax, rax
je 0x1400f46d5
mov rcx, qword [rsp + 0x13f0]
add rcx, 0x220
mov r8d, 1
mov edx, 0x800c
call fcn.14000d9f0
mov rcx, qword [rsp + 0x13f0]
add rcx, 0x220
xor r8d, r8d
mov edx, 0x800d
call fcn.14000d9f0
mov rcx, qword [rsp + 0x13f0]
add rcx, 0x220
xor r8d, r8d
mov edx, 0x8030
call fcn.14000d9f0
mov eax, 1
jmp 0x1400f5589
lea rcx, [rsp + 0x1068]
call fcn.140001000
mov qword [rsp + 0x11f0], rax
mov rax, qword [rsp + 0x11f0]
mov qword [rsp + 0x11f8], rax
lea r8, [0x14022d684]
mov rdx, qword [rsp + 0x11f8]
lea rcx, [rsp + 0x1070]
call fcn.1400010b0
mov qword [rsp + 0x1200], rax
mov rcx, qword [rsp + 0x1200]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1070]
call fcn.140007060
nop
lea rcx, [rsp + 0x1068]
call fcn.140007060
mov eax, 1
jmp 0x1400f5589
mov rdx, qword [rsp + 0x13f0]
add rdx, 0x4e8
mov ecx, 2
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov rax, qword [rsp + 0x13f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x13f0]
call qword [rax + 0x2b0]
mov eax, 1
jmp 0x1400f5589
lea rcx, [rsp + 0x840]
call fcn.140002d10
nop
xor eax, eax
mov word [rsp + 0x40], ax
lea rdi, [rsp + 0x42]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov r8d, 0x400
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dx, VarDateFromDisp
lea rcx, [rsp + 0x40]
call fcn.14000b150
mov rdx, rax
xor eax, eax
mov word [rdx], ax
lea r8, [0x14022d920]
mov edx, 0x400
lea rcx, [rsp + 0x40]
call fcn.1400ab3f4
lea rcx, [rsp + 0x1078]
call fcn.14000dd70
lea r8, [0x14022d930]
lea rdx, [rsp + 0x1080]
mov rcx, rax
call fcn.14000d730
mov qword [rsp + 0x1208], rax
mov rax, qword [rsp + 0x1208]
mov qword [rsp + 0x1210], rax
mov r9, qword [rsp + 0x1210]
mov r9, qword [r9]
lea r8, [rsp + 0x40]
lea rdx, str._sLog__s.txt
lea rcx, [rsp + 0x840]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x1080]
call fcn.140007060
lea rcx, [rsp + 0x840]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x840]
call fcn.140007060
mov eax, 1
jmp 0x1400f5589
lea rcx, [rsp + 0x1050]
call fcn.140002d10
nop
xor eax, eax
mov word [rsp + 0x850], ax
lea rdi, [rsp + 0x852]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov r8d, 0x400
lea rdx, [rsp + 0x850]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dx, VarDateFromDisp
lea rcx, [rsp + 0x850]
call fcn.14000b150
mov rdx, rax
xor eax, eax
mov word [rdx], ax
lea r8, [0x14022d968]
mov edx, 0x400
lea rcx, [rsp + 0x850]
call fcn.1400ab3f4
lea rcx, [rsp + 0x1088]
call fcn.14000dd70
lea r8, [0x14022d978]
lea rdx, [rsp + 0x1090]
mov rcx, rax
call fcn.14000d730
mov qword [rsp + 0x1218], rax
mov rax, qword [rsp + 0x1218]
mov qword [rsp + 0x1220], rax
mov r9, qword [rsp + 0x1220]
mov r9, qword [r9]
lea r8, [rsp + 0x850]
lea rdx, str._sFatal__s.txt
lea rcx, [rsp + 0x1050]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x1090]
call fcn.140007060
lea rcx, [rsp + 0x1050]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1400f49f1
xor r8d, r8d
mov edx, 0x40
lea rcx, str.No_errors
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0x1050]
call fcn.140007060
jmp 0x1400f556c
lea rcx, [rsp + 0x1050]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rdx, [0x14022d9d8]
lea rcx, [rsp + 0x10a0]
call fcn.1400f05c0
mov qword [rsp + 0x1228], rax
lea rdx, [0x14022d9c8]
mov rcx, qword [rsp + 0x1228]
call fcn.140006e10
mov byte [rsp + 0x1098], al
lea rcx, [rsp + 0x10a0]
call fcn.140007060
movzx edx, byte [rsp + 0x1098]
test edx, edx
je 0x1400f4a81
lea rcx, [rsp + 0x1050]
call fcn.140007060
jmp 0x1400f556c
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Do_you_want_to_see_how_to_fix_common_errors_
call fcn.1400f0bf0
cmp eax, 6
jne 0x1400f4ac0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.http:__www.ccboot.com_wiki_how_to_view_server_error_log.htm
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x1050]
call fcn.140007060
mov eax, 1
jmp 0x1400f5589
lea rdx, [0x14022dae0]
lea rcx, [rsp + 0x10b0]
call fcn.1400f05c0
mov qword [rsp + 0x1230], rax
lea rdx, [0x14022dac8]
mov rcx, qword [rsp + 0x1230]
call fcn.140006e10
mov byte [rsp + 0x10a8], al
lea rcx, [rsp + 0x10b0]
call fcn.140007060
movzx edx, byte [rsp + 0x10a8]
test edx, edx
je 0x1400f4b85
lea rdx, [0x14022daf8]
lea rcx, [rsp + 0x10b8]
call fcn.1400f05c0
mov qword [rsp + 0x1238], rax
mov rcx, qword [rsp + 0x1238]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x10b8]
call fcn.140007060
xor eax, eax
jmp 0x1400f5589
call fcn.14000f0b0
mov rdx, rax
lea rcx, [rsp + 0x10c0]
call fcn.140002050
mov qword [rsp + 0x1240], rax
mov rax, qword [rsp + 0x1240]
mov qword [rsp + 0x1248], rax
mov r8, qword [rsp + 0x1248]
lea rdx, [0x14022db30]
lea rcx, [rsp + 0x10c8]
call fcn.140006d10
mov qword [rsp + 0x1250], rax
mov rax, qword [rsp + 0x1250]
mov qword [rsp + 0x1258], rax
lea r8, [0x14022db10]
mov rdx, qword [rsp + 0x1258]
lea rcx, [rsp + 0x10d0]
call fcn.1400010b0
mov qword [rsp + 0x1260], rax
mov rcx, qword [rsp + 0x1260]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x10d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x10c8]
call fcn.140007060
nop
lea rcx, [rsp + 0x10c0]
call fcn.140007060
mov eax, 1
jmp 0x1400f5589
lea rdx, [0x14022db60]
lea rcx, [rsp + 0x10e0]
call fcn.1400f05c0
mov qword [rsp + 0x1268], rax
lea rdx, [0x14022db48]
mov rcx, qword [rsp + 0x1268]
call fcn.140006e10
mov byte [rsp + 0x10d8], al
lea rcx, [rsp + 0x10e0]
call fcn.140007060
movzx edx, byte [rsp + 0x10d8]
test edx, edx
je 0x1400f4d19
lea rdx, [0x14022db78]
lea rcx, [rsp + 0x10e8]
call fcn.1400f05c0
mov qword [rsp + 0x1270], rax
mov rcx, qword [rsp + 0x1270]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x10e8]
call fcn.140007060
xor eax, eax
jmp 0x1400f5589
call fcn.14000f0b0
mov rdx, rax
lea rcx, [rsp + 0x10f0]
call fcn.140002050
mov qword [rsp + 0x1278], rax
mov rax, qword [rsp + 0x1278]
mov qword [rsp + 0x1280], rax
mov r8, qword [rsp + 0x1280]
lea rdx, str.http:__www.
lea rcx, [rsp + 0x10f8]
call fcn.140006d10
mov qword [rsp + 0x1288], rax
mov rax, qword [rsp + 0x1288]
mov qword [rsp + 0x1290], rax
lea r8, str..com__refprog
mov rdx, qword [rsp + 0x1290]
lea rcx, [rsp + 0x1100]
call fcn.1400010b0
mov qword [rsp + 0x1298], rax
mov rcx, qword [rsp + 0x1298]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1100]
call fcn.140007060
nop
lea rcx, [rsp + 0x10f8]
call fcn.140007060
nop
lea rcx, [rsp + 0x10f0]
call fcn.140007060
mov eax, 1
jmp 0x1400f5589
lea rdx, [0x14022dbe8]
lea rcx, [rsp + 0x1110]
call fcn.1400f05c0
mov qword [rsp + 0x12a0], rax
lea rdx, [0x14022dbc8]
mov rcx, qword [rsp + 0x12a0]
call fcn.140006e10
mov byte [rsp + 0x1108], al
lea rcx, [rsp + 0x1110]
call fcn.140007060
movzx edx, byte [rsp + 0x1108]
test edx, edx
je 0x1400f4ead
lea rdx, [0x14022dc08]
lea rcx, [rsp + 0x1118]
call fcn.1400f05c0
mov qword [rsp + 0x12a8], rax
mov rcx, qword [rsp + 0x12a8]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1118]
call fcn.140007060
xor eax, eax
jmp 0x1400f5589
call fcn.14000f0b0
mov rdx, rax
lea rcx, [rsp + 0x1120]
call fcn.140002050
mov qword [rsp + 0x12b0], rax
mov rax, qword [rsp + 0x12b0]
mov qword [rsp + 0x12b8], rax
mov r8, qword [rsp + 0x12b8]
lea rdx, str.http:__forum.icafeman.com__ref
lea rcx, [rsp + 0x1128]
call fcn.140006d10
mov qword [rsp + 0x12c0], rax
mov rcx, qword [rsp + 0x12c0]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1128]
call fcn.140007060
nop
lea rcx, [rsp + 0x1120]
call fcn.140007060
mov eax, 1
jmp 0x1400f5589
lea rcx, [rsp + 0x1130]
call fcn.14018ffa0
mov qword [rsp + 0x12c8], rax
mov rax, qword [rsp + 0x12c8]
mov qword [rsp + 0x12d0], rax
call fcn.14000f0b0
mov rdx, rax
lea rcx, [rsp + 0x1138]
call fcn.1400f05c0
mov qword [rsp + 0x12d8], rax
mov rax, qword [rsp + 0x12d8]
mov qword [rsp + 0x12e0], rax
mov rcx, qword [rsp + 0x12d0]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x12e0]
call fcn.140050200
lea r9, str.http:__update.youngzsoft.com_updatesystem_update.php
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call fcn.1400df3a0
nop
lea rcx, [rsp + 0x1138]
call fcn.140007060
nop
lea rcx, [rsp + 0x1130]
call fcn.140007060
mov eax, 1
jmp 0x1400f5589
lea rcx, [rsp + 0x1140]
call fcn.140001000
mov qword [rsp + 0x12e8], rax
mov rax, qword [rsp + 0x12e8]
mov qword [rsp + 0x12f0], rax
lea r8, str.History.txt
mov rdx, qword [rsp + 0x12f0]
lea rcx, [rsp + 0x1148]
call fcn.1400010b0
mov qword [rsp + 0x12f8], rax
mov rcx, qword [rsp + 0x12f8]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, [0x14022dd00]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1148]
call fcn.140007060
nop
lea rcx, [rsp + 0x1140]
call fcn.140007060
xor eax, eax
jmp 0x1400f5589
lea rcx, [rsp + 0x1150]
call fcn.140001000
mov qword [rsp + 0x1300], rax
mov rax, qword [rsp + 0x1300]
mov qword [rsp + 0x1308], rax
lea r8, [0x14022dd10]
mov rdx, qword [rsp + 0x1308]
lea rcx, [rsp + 0x1158]
call fcn.1400010b0
mov qword [rsp + 0x1310], rax
mov rax, qword [rsp + 0x1310]
mov qword [rsp + 0x1318], rax
mov rcx, qword [rsp + 0x1318]
call fcn.140050200
mov rcx, rax
call fcn.140004b40
nop
lea rcx, [rsp + 0x1158]
call fcn.140007060
nop
lea rcx, [rsp + 0x1150]
call fcn.140007060
lea rcx, [rsp + 0x1168]
call fcn.140001000
mov qword [rsp + 0x1320], rax
mov rax, qword [rsp + 0x1320]
mov qword [rsp + 0x1328], rax
lea r8, [0x14022dd28]
mov rdx, qword [rsp + 0x1328]
lea rcx, [rsp + 0x1170]
call fcn.1400010b0
mov qword [rsp + 0x1330], rax
mov rcx, qword [rsp + 0x1330]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [rsp + 0x1160], eax
lea rcx, [rsp + 0x1170]
call fcn.140007060
nop
lea rcx, [rsp + 0x1168]
call fcn.140007060
cmp dword [rsp + 0x1160], 0
je 0x1400f54a4
lea rcx, [rsp + 0x1178]
call fcn.140001000
mov qword [rsp + 0x1338], rax
mov rax, qword [rsp + 0x1338]
mov qword [rsp + 0x1340], rax
lea r8, [0x14022dd48]
mov rdx, qword [rsp + 0x1340]
lea rcx, [rsp + 0x1180]
call fcn.1400010b0
mov qword [rsp + 0x1348], rax
mov rax, qword [rsp + 0x1348]
mov qword [rsp + 0x1350], rax
lea rcx, [rsp + 0x1188]
call fcn.140001000
mov qword [rsp + 0x1358], rax
mov rax, qword [rsp + 0x1358]
mov qword [rsp + 0x1360], rax
lea r8, str.RemoteMe.exe
mov rdx, qword [rsp + 0x1360]
lea rcx, [rsp + 0x1190]
call fcn.1400010b0
mov qword [rsp + 0x1368], rax
mov rcx, qword [rsp + 0x1350]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x1368]
call fcn.140050200
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x1190]
call fcn.140007060
nop
lea rcx, [rsp + 0x1188]
call fcn.140007060
nop
lea rcx, [rsp + 0x1180]
call fcn.140007060
nop
lea rcx, [rsp + 0x1178]
call fcn.140007060
lea rcx, [rsp + 0x11a0]
call fcn.140001000
mov qword [rsp + 0x1370], rax
mov rax, qword [rsp + 0x1370]
mov qword [rsp + 0x1378], rax
lea r8, [0x14022dd98]
mov rdx, qword [rsp + 0x1378]
lea rcx, [rsp + 0x11a8]
call fcn.1400010b0
mov qword [rsp + 0x1380], rax
mov rcx, qword [rsp + 0x1380]
call fcn.140050200
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [rsp + 0x1198], eax
lea rcx, [rsp + 0x11a8]
call fcn.140007060
nop
lea rcx, [rsp + 0x11a0]
call fcn.140007060
cmp dword [rsp + 0x1198], 0
je 0x1400f54a4
lea rcx, [rsp + 0x1058]
call fcn.140002d10
nop
lea rcx, [rsp + 0x11b0]
call fcn.1400020b0
mov qword [rsp + 0x1388], rax
mov rax, qword [rsp + 0x1388]
mov qword [rsp + 0x1390], rax
lea rcx, [rsp + 0x11b8]
call fcn.140001000
mov qword [rsp + 0x1398], rax
mov rax, qword [rsp + 0x1398]
mov qword [rsp + 0x13a0], rax
call fcn.14000f0b0
mov r9, rax
mov rax, qword [rsp + 0x1390]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x13a0]
mov r8, qword [r8]
lea rdx, str._sRemoteMeRemoteMe.exe__product_s__version_s
lea rcx, [rsp + 0x1058]
call fcn.140002ba0
nop
lea rcx, [rsp + 0x11b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x11b0]
call fcn.140007060
lea rcx, [rsp + 0x11c0]
call fcn.140001000
mov qword [rsp + 0x13a8], rax
mov rax, qword [rsp + 0x13a8]
mov qword [rsp + 0x13b0], rax
lea r8, str.RemoteMe
mov rdx, qword [rsp + 0x13b0]
lea rcx, [rsp + 0x11c8]
call fcn.1400010b0
mov qword [rsp + 0x13b8], rax
mov rax, qword [rsp + 0x13b8]
mov qword [rsp + 0x13c0], rax
mov rcx, qword [rsp + 0x13c0]
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0x1058]
call fcn.140050200
mov r9d, 1
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call fcn.140004880
nop
lea rcx, [rsp + 0x11c8]
call fcn.140007060
nop
lea rcx, [rsp + 0x11c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x1058]
call fcn.140007060
xor eax, eax
jmp 0x1400f5589
lea rdx, [0x14022de68]
lea rcx, [rsp + 0x11d8]
call fcn.1400f05c0
mov qword [rsp + 0x13c8], rax
lea rdx, [0x14022de50]
mov rcx, qword [rsp + 0x13c8]
call fcn.140006e10
mov byte [rsp + 0x11d0], al
lea rcx, [rsp + 0x11d8]
call fcn.140007060
movzx edx, byte [rsp + 0x11d0]
test edx, edx
je 0x1400f5502
xor eax, eax
jmp 0x1400f5589
lea rcx, [rsp + 0x1060]
call fcn.140002d10
nop
call fcn.14000f0b0
mov r8, rax
lea rdx, str.http:__user.youngzsoft.com_video.php_product_s
lea rcx, [rsp + 0x1060]
call fcn.140002ba0
lea rcx, [rsp + 0x1060]
call fcn.140050200
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x1060]
call fcn.140007060
xor eax, eax
jmp 0x1400f5589
mov r8, qword [rsp + 0x1400]
mov rdx, qword [rsp + 0x13f8]
mov rcx, qword [rsp + 0x13f0]
call fcn.14007fc6c
mov rcx, qword [rsp + 0x13d0]
xor rcx, rsp
call fcn.1400a9820
add rsp, 0x13e0
pop rdi
ret