Function at 0x140187de0
Capabilities:
Accept command line arguments
Check if file exists
Delete file

Disassembly:
push rbx
mov eax, 0x2810
call fcn.1401d5c30
sub rsp, rax
mov qword [rsp + 0x2700], 0xfffffffffffffffe
mov dword [rsp + 0x30], 0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x38], rax
cmp dword [rsp + 0x30], 1
jg 0x140187e38
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, 1
jmp 0x1401899e8
cmp dword [rsp + 0x30], 2
jle 0x140187ef1
lea rdx, str._wol
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x140187ef1
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400db990
xor r8d, r8d
lea rdx, [0x140240ab4]
lea rcx, [rsp + 0x40]
call fcn.140006720
test eax, eax
jl 0x140187ee7
lea rcx, [rsp + 0x40]
call fcn.1400019f0
movsxd rbx, eax
lea rcx, str.00:00:00:00:00:00
call fcn.1400a81f4
cmp rbx, rax
jne 0x140187ee7
lea rcx, [rsp + 0x40]
call fcn.1400012c0
mov rcx, rax
call fcn.1400d6f90
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2564], 0
lea rcx, [rsp + 0x40]
call fcn.140001470
mov eax, dword [rsp + 0x2564]
jmp 0x1401899e8
lea rcx, [rsp + 0x40]
call fcn.140001470
lea rdx, [0x140241c40]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x140187fb6
lea rcx, [0x1403ade90]
call fcn.1400d4030
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d6440
mov dword [rsp + 0x48], 0
lea rcx, [0x1403adbe0]
call fcn.140012bb0
test eax, eax
jne 0x140187f61
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0x48]
add eax, 1
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 5
jl 0x140187f5f
jmp 0x140187f61
jmp 0x140187f30
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x8037
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1403adbe0]
call fcn.1400d57a0
lea rcx, [0x1403ade90]
call fcn.1400d39b0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
jmp 0x1401899e8
lea rdx, [0x140240b24]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x140187ff5
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Help:_nCCBoot.exe____n_n_t_t_t_t_t_t__Wake_On_LAN:_nCCBoot.exe__WOL_PC050_n_n_t_t_t_t_t_t__Reboot_client_PC:_nCCBoot.exe__Reboot_PC01_n_n_t_t_t_t_t_t__Shutdown_client_PC:_nCCBoot.exe__Shutdown_PC01_n_n_t_t_t_t_t_t__Logoff_client_PC:_nCCBoot.exe__Logoff_PC01_n_n_t_t_t_t_t_t__Magic_Shutdown_client_PC:_nCCBoot.exe__Sleep_PC01_n_n_t_t_t_t_t_t__Enable_super_client:_nCCBoot.exe__EnableSC_PC100_Disk1_Disk2_n_n_t_t_t_t_t_t__Disable_super_client:_nCCBoot.exe__DisableSC_PC100___Update___Recovery_Desc___n_n_t_t_t_t_t_t__Restart_CCBoot_service:_nCCBoot.exe__Restart_n_n_t_t_t_t_t_t__Start_CCBoot_service:_nCCBoot.exe__start_n_n_t_t_t_t_t_t__Stop_CCBoot_service:_nCCBoot.exe__stop_n_n_t_t_t_t_t_t__Pause_CCBoot_service:_nCCBoot.exe__pause_n_n
call fcn.1400ef150
xor eax, eax
jmp 0x1401899e8
cmp dword [rsp + 0x30], 1
jle 0x1401899d0
lea rdx, [0x140242148]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x140188180
lea rax, [rsp + 0x2568]
mov qword [rsp + 0x2570], rax
lea rcx, [rsp + 0x2578]
call fcn.140001000
mov qword [rsp + 0x2708], rax
mov rax, qword [rsp + 0x2708]
mov qword [rsp + 0x2710], rax
lea r8, [0x140242158]
mov rdx, qword [rsp + 0x2710]
mov rcx, qword [rsp + 0x2570]
call fcn.1400010b0
mov qword [rsp + 0x2718], rax
mov rcx, qword [rsp + 0x2718]
call fcn.1401b8070
nop
lea rcx, [rsp + 0x2578]
call fcn.140001470
lea rcx, [rsp + 0x50]
call fcn.1401cd320
nop
cmp dword [rsp + 0x30], 2
jg 0x1401880cf
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2580], 0
lea rcx, [rsp + 0x50]
call fcn.140005d50
mov eax, dword [rsp + 0x2580]
jmp 0x1401899e8
lea rax, [rsp + 0x2588]
mov qword [rsp + 0x2590], rax
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
mov rcx, qword [rsp + 0x2590]
call fcn.1400db990
mov qword [rsp + 0x2720], rax
mov rdx, qword [rsp + 0x2720]
lea rcx, [rsp + 0x50]
call fcn.1401d2ac0
test eax, eax
jne 0x14018813f
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2598], 0
lea rcx, [rsp + 0x50]
call fcn.140005d50
mov eax, dword [rsp + 0x2598]
jmp 0x1401899e8
lea rcx, [rsp + 0x218]
call fcn.1400012c0
mov rcx, rax
call fcn.1400d6f90
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x259c], 0
lea rcx, [rsp + 0x50]
call fcn.140005d50
mov eax, dword [rsp + 0x259c]
jmp 0x1401899e8
lea rdx, [0x140242168]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
je 0x1401881e8
lea rdx, [0x140242178]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
je 0x1401881e8
lea rdx, [0x140242190]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
je 0x1401881e8
lea rdx, [0x1402421a0]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x1401884c1
lea rax, [rsp + 0x25a0]
mov qword [rsp + 0x25a8], rax
lea rcx, [rsp + 0x25b0]
call fcn.140001000
mov qword [rsp + 0x2728], rax
mov rax, qword [rsp + 0x2728]
mov qword [rsp + 0x2730], rax
lea r8, [0x1402421b0]
mov rdx, qword [rsp + 0x2730]
mov rcx, qword [rsp + 0x25a8]
call fcn.1400010b0
mov qword [rsp + 0x2738], rax
mov rcx, qword [rsp + 0x2738]
call fcn.1401b8070
nop
lea rcx, [rsp + 0x25b0]
call fcn.140001470
lea rcx, [rsp + 0x3a0]
call fcn.1401cd320
nop
cmp dword [rsp + 0x30], 2
jg 0x1401882a0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x25b8], 0
lea rcx, [rsp + 0x3a0]
call fcn.140005d50
mov eax, dword [rsp + 0x25b8]
jmp 0x1401899e8
lea rax, [rsp + 0x25c0]
mov qword [rsp + 0x25c8], rax
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
mov rcx, qword [rsp + 0x25c8]
call fcn.1400db990
mov qword [rsp + 0x2740], rax
mov rdx, qword [rsp + 0x2740]
lea rcx, [rsp + 0x3a0]
call fcn.1401d2ac0
test eax, eax
jne 0x140188316
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x25d0], 0
lea rcx, [rsp + 0x3a0]
call fcn.140005d50
mov eax, dword [rsp + 0x25d0]
jmp 0x1401899e8
lea rcx, [0x1403ade90]
call fcn.1400d4030
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d6440
mov dword [rsp + 0x390], 0
lea rcx, [0x1403adbe0]
call fcn.140012bb0
test eax, eax
jne 0x140188375
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0x390]
add eax, 1
mov dword [rsp + 0x390], eax
cmp dword [rsp + 0x390], 5
jl 0x140188373
jmp 0x140188375
jmp 0x14018833b
lea rdx, str._Reboot
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x1401883b4
mov eax, dword [rsp + 0x538]
mov qword [rsp + 0x20], rax
mov r9d, 2
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
lea rdx, str._Shutdown
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x1401883f3
mov eax, dword [rsp + 0x538]
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
lea rdx, [0x1402421e8]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x14018842f
mov eax, dword [rsp + 0x538]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
lea rdx, str._Sleep
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x14018846f
mov eax, dword [rsp + 0x538]
mov qword [rsp + 0x20], rax
mov r9, 0xffffffffffffffff
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1403adbe0]
call fcn.1400d57a0
lea rcx, [0x1403ade90]
call fcn.1400d39b0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x25d4], 0
lea rcx, [rsp + 0x3a0]
call fcn.140005d50
mov eax, dword [rsp + 0x25d4]
jmp 0x1401899e8
lea rdx, str._RefreshCache
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x1401884e1
xor eax, eax
jmp 0x1401899e8
lea rdx, [0x140242228]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x140188b6d
lea rax, [rsp + 0x25d8]
mov qword [rsp + 0x25e0], rax
lea rcx, [rsp + 0x25e8]
call fcn.140001000
mov qword [rsp + 0x2748], rax
mov rax, qword [rsp + 0x2748]
mov qword [rsp + 0x2750], rax
lea r8, [0x140242240]
mov rdx, qword [rsp + 0x2750]
mov rcx, qword [rsp + 0x25e0]
call fcn.1400010b0
mov qword [rsp + 0x2758], rax
mov rcx, qword [rsp + 0x2758]
call fcn.1401b8070
nop
lea rcx, [rsp + 0x25e8]
call fcn.140001470
cmp dword [rsp + 0x30], 4
jge 0x14018858b
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
jmp 0x1401899e8
lea rcx, [rsp + 0xa30]
call fcn.1401cd320
nop
lea rax, [rsp + 0x25f0]
mov qword [rsp + 0x25f8], rax
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
mov rcx, qword [rsp + 0x25f8]
call fcn.140002090
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
lea rcx, [rsp + 0xa30]
call fcn.1401d2ac0
test eax, eax
jne 0x14018860f
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2600], 0
lea rcx, [rsp + 0xa30]
call fcn.140005d50
mov eax, dword [rsp + 0x2600]
jmp 0x1401899e8
lea rcx, [rsp + 0xd70]
call fcn.140006dc0
nop
mov dword [rsp + 0xda0], 3
jmp 0x14018863b
mov eax, dword [rsp + 0xda0]
add eax, 1
mov dword [rsp + 0xda0], eax
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0xda0], eax
jge 0x140188729
movsxd rax, dword [rsp + 0xda0]
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + rax*8]
lea rcx, [rsp + 0xda8]
call fcn.1400db990
nop
lea rax, [rsp + 0x2608]
mov qword [rsp + 0x2610], rax
lea rdx, [rsp + 0xda8]
mov rcx, qword [rsp + 0x2610]
call fcn.140001440
mov qword [rsp + 0x2768], rax
mov rcx, qword [rsp + 0x2768]
call fcn.1401d2840
mov dword [rsp + 0xdb0], eax
cmp dword [rsp + 0xdb0], 0
jne 0x140188701
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2618], 0
lea rcx, [rsp + 0xda8]
call fcn.140001470
nop
lea rcx, [rsp + 0xd70]
call fcn.140006e10
nop
lea rcx, [rsp + 0xa30]
call fcn.140005d50
mov eax, dword [rsp + 0x2618]
jmp 0x1401899e8
lea rdx, [rsp + 0xdb0]
lea rcx, [rsp + 0xd70]
call fcn.140022930
nop
lea rcx, [rsp + 0xda8]
call fcn.140001470
jmp 0x14018862a
lea rcx, [0x1403ade90]
call fcn.1400d4030
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d6440
mov dword [rsp + 0xa20], 0
lea rcx, [0x1403adbe0]
call fcn.140012bb0
test eax, eax
jne 0x140188788
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0xa20]
add eax, 1
mov dword [rsp + 0xa20], eax
cmp dword [rsp + 0xa20], 5
jl 0x140188786
jmp 0x140188788
jmp 0x14018874e
mov eax, dword [rsp + 0xbc8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
test rax, rax
je 0x1401887fe
xor r8d, r8d
xor edx, edx
lea rcx, [0x140242250]
call fcn.1400ef150
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x261c], 0
lea rcx, [rsp + 0xd70]
call fcn.140006e10
nop
lea rcx, [rsp + 0xa30]
call fcn.140005d50
mov eax, dword [rsp + 0x261c]
jmp 0x1401899e8
mov dword [rsp + 0xdb4], 0
jmp 0x14018881c
mov eax, dword [rsp + 0xdb4]
add eax, 1
mov dword [rsp + 0xdb4], eax
movsxd rbx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140007dd0
cmp rbx, rax
jae 0x140188a11
movsxd rdx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140012ce0
mov edx, dword [rax]
lea rcx, [rsp + 0xdc0]
call fcn.1401ce4f0
nop
movsxd rdx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140012ce0
mov rbx, rax
lea rcx, [rsp + 0xc20]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
cmp dword [rbx], eax
jne 0x140188940
movsxd rdx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140012ce0
cmp dword [rax], 0
je 0x140188940
movsxd rdx, dword [rsp + 0xdb4]
lea rcx, [rsp + 0xd70]
call fcn.140012ce0
mov edx, dword [rax]
lea rcx, [rsp + 0xdd0]
call fcn.14000eef0
nop
lea rax, [rsp + 0x2620]
mov qword [rsp + 0x2628], rax
lea rdx, [rsp + 0xcd8]
mov rcx, qword [rsp + 0x2628]
call fcn.140001440
mov qword [rsp + 0x2770], rax
mov rdx, qword [rsp + 0x2770]
lea rcx, [rsp + 0xdd0]
call fcn.1401ce9f0
test eax, eax
je 0x140188933
lea rdx, [rsp + 0xf78]
lea rcx, [rsp + 0xdc0]
call fcn.140002d20
nop
lea rcx, [rsp + 0xdd0]
call fcn.140005d50
lea rcx, [rsp + 0xdc0]
call fcn.1400012c0
mov rcx, rax
call fcn.1400f8fa0
mov dword [rsp + 0xdb8], eax
cmp dword [rsp + 0xdb8], 3
je 0x1401889ff
cmp dword [rsp + 0xdb8], 4
je 0x1401889ff
cmp dword [rsp + 0xdb8], 5
je 0x1401889ff
lea rcx, [rsp + 0x1110]
call fcn.140002d50
nop
mov r8, qword [rsp + 0xdc0]
lea rdx, str._s.Super.vhd
lea rcx, [rsp + 0x1110]
call fcn.140002be0
lea rcx, [rsp + 0x1110]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x1110]
call fcn.1400012c0
mov rbx, rax
lea rcx, [rsp + 0xdc0]
call fcn.1400012c0
mov r8d, 1
mov rdx, rbx
mov rcx, rax
call fcn.140105390
nop
lea rcx, [rsp + 0x1110]
call fcn.140001470
nop
lea rcx, [rsp + 0xdc0]
call fcn.140001470
jmp 0x14018880b
mov eax, dword [rsp + 0xbc8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov r11d, dword [rsp + 0xbc8]
mov qword [rsp + 0x20], r11
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov edx, dword [rsp + 0xbc8]
lea rcx, [rsp + 0x6e0]
call fcn.14000edf0
nop
lea rcx, [rsp + 0x6e0]
call fcn.1401b8530
mov dword [rsp + 0x1118], 0
jmp 0x140188a9b
mov eax, dword [rsp + 0x1118]
add eax, 1
mov dword [rsp + 0x1118], eax
movsxd rbx, dword [rsp + 0x1118]
lea rcx, [rsp + 0xd70]
call fcn.140007dd0
cmp rbx, rax
jae 0x140188af0
movsxd rdx, dword [rsp + 0x1118]
lea rcx, [rsp + 0xd70]
call fcn.140012ce0
lea rcx, [rsp + 0x880]
mov r8d, dword [rax]
lea rdx, [0x140240b74]
call fcn.140002be0
lea rcx, [rsp + 0x6e0]
call fcn.14000ec70
jmp 0x140188a8a
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1403adbe0]
call fcn.1400d57a0
lea rcx, [0x1403ade90]
call fcn.1400d39b0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2630], 0
lea rcx, [rsp + 0x6e0]
call fcn.140005d50
nop
lea rcx, [rsp + 0xd70]
call fcn.140006e10
nop
lea rcx, [rsp + 0xa30]
call fcn.140005d50
mov eax, dword [rsp + 0x2630]
jmp 0x1401899e8
lea rdx, str._DisableSC
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.1400aa17c
test eax, eax
jne 0x1401899d0
lea rax, [rsp + 0x2638]
mov qword [rsp + 0x2640], rax
lea rcx, [rsp + 0x2648]
call fcn.140001000
mov qword [rsp + 0x2778], rax
mov rax, qword [rsp + 0x2778]
mov qword [rsp + 0x2780], rax
lea r8, [0x1402422f8]
mov rdx, qword [rsp + 0x2780]
mov rcx, qword [rsp + 0x2640]
call fcn.1400010b0
mov qword [rsp + 0x2788], rax
mov rcx, qword [rsp + 0x2788]
call fcn.1401b8070
nop
lea rcx, [rsp + 0x2648]
call fcn.140001470
cmp dword [rsp + 0x30], 3
jge 0x140188c17
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
jmp 0x1401899e8
lea rcx, [rsp + 0x1470]
call fcn.1401cd320
nop
lea rax, [rsp + 0x2650]
mov qword [rsp + 0x2658], rax
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x10]
mov rcx, qword [rsp + 0x2658]
call fcn.140002090
mov qword [rsp + 0x2790], rax
mov rdx, qword [rsp + 0x2790]
lea rcx, [rsp + 0x1470]
call fcn.1401d2ac0
test eax, eax
jne 0x140188c9b
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2660], 0
lea rcx, [rsp + 0x1470]
call fcn.140005d50
mov eax, dword [rsp + 0x2660]
jmp 0x1401899e8
lea rcx, [0x1403ade90]
call fcn.1400d4030
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d6440
mov dword [rsp + 0x1460], 0
lea rcx, [0x1403adbe0]
call fcn.140012bb0
test eax, eax
jne 0x140188cfa
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0x1460]
add eax, 1
mov dword [rsp + 0x1460], eax
cmp dword [rsp + 0x1460], 5
jl 0x140188cf8
jmp 0x140188cfa
jmp 0x140188cc0
mov eax, dword [rsp + 0x1608]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
test rax, rax
je 0x140188d62
xor r8d, r8d
xor edx, edx
lea rcx, str.The_client_is_online_and_cannot_be_set_as_super_client.
call fcn.1400ef150
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2664], 0
lea rcx, [rsp + 0x1470]
call fcn.140005d50
mov eax, dword [rsp + 0x2664]
jmp 0x1401899e8
lea rcx, [rsp + 0x17b0]
call fcn.140081e00
nop
mov edx, dword [rsp + 0x1608]
lea rcx, [rsp + 0x1120]
call fcn.14000edf0
nop
lea rcx, [rsp + 0x17e0]
call fcn.140007bb0
nop
lea rdx, [rsp + 0x17e0]
lea rcx, [rsp + 0x1120]
call fcn.1401b8110
mov dword [rsp + 0x1810], 0
jmp 0x140188dc6
mov eax, dword [rsp + 0x1810]
add eax, 1
mov dword [rsp + 0x1810], eax
movsxd rbx, dword [rsp + 0x1810]
lea rcx, [rsp + 0x17e0]
call fcn.140007c30
cmp rbx, rax
jae 0x140188e1d
movsxd rdx, dword [rsp + 0x1810]
lea rcx, [rsp + 0x17e0]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a0
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edx, eax
lea rcx, [rsp + 0x17b0]
call fcn.14000f530
jmp 0x140188db5
cmp dword [rsp + 0x30], 3
jne 0x1401890ee
mov eax, dword [rsp + 0x1608]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov dword [rsp + 0x1814], 0
jmp 0x140188e69
mov eax, dword [rsp + 0x1814]
add eax, 1
mov dword [rsp + 0x1814], eax
movsxd rbx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.14000f920
cmp rbx, rax
jge 0x140189079
movsxd rdx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x1818]
call fcn.1401ce4f0
nop
movsxd rdx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
mov rbx, rax
lea rcx, [rsp + 0x1660]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
cmp dword [rbx], eax
jne 0x140188f8d
movsxd rdx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
cmp dword [rax], 0
je 0x140188f8d
movsxd rdx, dword [rsp + 0x1814]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x1820]
call fcn.14000eef0
nop
lea rax, [rsp + 0x2668]
mov qword [rsp + 0x2670], rax
lea rdx, [rsp + 0x1718]
mov rcx, qword [rsp + 0x2670]
call fcn.140001440
mov qword [rsp + 0x2798], rax
mov rdx, qword [rsp + 0x2798]
lea rcx, [rsp + 0x1820]
call fcn.1401ce9f0
test eax, eax
je 0x140188f80
lea rdx, [rsp + 0x19c8]
lea rcx, [rsp + 0x1818]
call fcn.140002d20
nop
lea rcx, [rsp + 0x1820]
call fcn.140005d50
lea r8, [0x140242308]
lea rdx, [rsp + 0x1818]
lea rcx, [rsp + 0x2680]
call fcn.1400010b0
mov qword [rsp + 0x27a0], rax
mov rcx, qword [rsp + 0x27a0]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x140188fd8
mov dword [rsp + 0x27a8], 1
jmp 0x140188fe3
mov dword [rsp + 0x27a8], 0
movzx eax, byte [rsp + 0x27a8]
mov byte [rsp + 0x2678], al
lea rcx, [rsp + 0x2680]
call fcn.140001470
movzx r11d, byte [rsp + 0x2678]
test r11d, r11d
je 0x14018901f
lea rcx, [rsp + 0x1818]
call fcn.140001470
jmp 0x140188e58
lea r8, [0x140242390]
lea rdx, [rsp + 0x1818]
lea rcx, [rsp + 0x2688]
call fcn.1400010b0
mov qword [rsp + 0x27b0], rax
mov rcx, qword [rsp + 0x27b0]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x2688]
call fcn.140001470
nop
lea rcx, [rsp + 0x1818]
call fcn.140001470
jmp 0x140188e58
lea rcx, [rsp + 0x1120]
call fcn.1401b8530
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2690], 0
lea rcx, [rsp + 0x17e0]
call fcn.140007c00
nop
lea rcx, [rsp + 0x1120]
call fcn.140005d50
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081e20
nop
lea rcx, [rsp + 0x1470]
call fcn.140005d50
mov eax, dword [rsp + 0x2690]
jmp 0x1401899e8
lea rdx, str._Update
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x18]
call fcn.1400aa17c
test eax, eax
je 0x140189160
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2694], 0
lea rcx, [rsp + 0x17e0]
call fcn.140007c00
nop
lea rcx, [rsp + 0x1120]
call fcn.140005d50
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081e20
nop
lea rcx, [rsp + 0x1470]
call fcn.140005d50
mov eax, dword [rsp + 0x2694]
jmp 0x1401899e8
lea rcx, [rsp + 0x17d8]
call fcn.140002d50
nop
cmp dword [rsp + 0x30], 5
jl 0x14018928d
lea rdx, str._Recovery
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x20]
call fcn.1400aa17c
test eax, eax
je 0x1401891f9
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x2698], 0
lea rcx, [rsp + 0x17d8]
call fcn.140001470
nop
lea rcx, [rsp + 0x17e0]
call fcn.140007c00
nop
lea rcx, [rsp + 0x1120]
call fcn.140005d50
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081e20
nop
lea rcx, [rsp + 0x1470]
call fcn.140005d50
mov eax, dword [rsp + 0x2698]
jmp 0x1401899e8
lea rdx, [0x1402423d0]
lea rcx, [rsp + 0x17d8]
call fcn.140002060
cmp dword [rsp + 0x30], 6
jl 0x140189265
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 0x28]
lea rcx, [rsp + 0x26a0]
call fcn.1400db990
mov qword [rsp + 0x27b8], rax
mov rax, qword [rsp + 0x27b8]
mov qword [rsp + 0x27c0], rax
mov rdx, qword [rsp + 0x27c0]
lea rcx, [rsp + 0x17d8]
call fcn.140002d20
nop
lea rcx, [rsp + 0x26a0]
call fcn.140001470
lea rcx, [rsp + 0x17d8]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x14018928d
lea rdx, [0x1402423d8]
lea rcx, [rsp + 0x17d8]
call fcn.140002060
mov dword [rsp + 0x1b60], 0
jmp 0x1401892ab
mov eax, dword [rsp + 0x1b60]
add eax, 1
mov dword [rsp + 0x1b60], eax
movsxd rbx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000f920
cmp rbx, rax
jge 0x1401898e3
mov dword [rsp + 0x1b70], 0
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x1b78]
call fcn.1401ce4f0
nop
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
mov rbx, rax
lea rcx, [rsp + 0x1660]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
cmp dword [rbx], eax
jne 0x1401893e9
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
cmp dword [rax], 0
je 0x1401893e9
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x1b90]
call fcn.14000eef0
nop
lea rax, [rsp + 0x26a8]
mov qword [rsp + 0x26b0], rax
lea rdx, [rsp + 0x1718]
mov rcx, qword [rsp + 0x26b0]
call fcn.140001440
mov qword [rsp + 0x27c8], rax
mov rdx, qword [rsp + 0x27c8]
lea rcx, [rsp + 0x1b90]
call fcn.1401ce9f0
test eax, eax
je 0x1401893dc
lea rdx, [rsp + 0x1d38]
lea rcx, [rsp + 0x1b78]
call fcn.140002d20
mov r11d, dword [rsp + 0x1d28]
mov dword [rsp + 0x1b70], r11d
lea rcx, [rsp + 0x1b90]
call fcn.140005d50
lea rcx, [rsp + 0x1b68]
call fcn.140002d50
nop
lea r8, [0x1402423e0]
lea rdx, [rsp + 0x1b78]
lea rcx, [rsp + 0x26b8]
call fcn.1400010b0
mov qword [rsp + 0x27d0], rax
mov rax, qword [rsp + 0x27d0]
mov qword [rsp + 0x27d8], rax
mov rdx, qword [rsp + 0x27d8]
lea rcx, [rsp + 0x1b68]
call fcn.140002d20
nop
lea rcx, [rsp + 0x26b8]
call fcn.140001470
lea rcx, [rsp + 0x1b68]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x140189488
lea rcx, [rsp + 0x1b68]
call fcn.140001470
nop
lea rcx, [rsp + 0x1b78]
call fcn.140001470
jmp 0x14018929a
lea rcx, [rsp + 0x17d8]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401895ac
lea rcx, [rsp + 0x1b68]
call fcn.1400012c0
xor r9d, r9d
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.140103260
test eax, eax
jne 0x140189575
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r8, qword [rsp + 0x1b78]
lea rdx, [0x140242400]
xor ecx, ecx
call fcn.1400dc5d0
xor r8d, r8d
xor edx, edx
lea rcx, [0x140242450]
call fcn.1400ef150
mov dword [rsp + 0x26c0], 0
lea rcx, [rsp + 0x1b68]
call fcn.140001470
nop
lea rcx, [rsp + 0x1b78]
call fcn.140001470
nop
lea rcx, [rsp + 0x17d8]
call fcn.140001470
nop
lea rcx, [rsp + 0x17e0]
call fcn.140007c00
nop
lea rcx, [rsp + 0x1120]
call fcn.140005d50
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081e20
nop
lea rcx, [rsp + 0x1470]
call fcn.140005d50
mov eax, dword [rsp + 0x26c0]
jmp 0x1401899e8
lea rcx, [rsp + 0x1b68]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x1b68]
call fcn.140001470
nop
lea rcx, [rsp + 0x1b78]
call fcn.140001470
jmp 0x14018929a
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
mov rbx, rax
lea rcx, [rsp + 0x1b78]
call fcn.1400012c0
mov r9d, dword [rsp + 0x1b70]
mov r8d, dword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x1b80]
call fcn.1400fff60
nop
cmp dword [rsp + 0x1b70], 0
je 0x140189736
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
mov r8d, dword [rsp + 0x1b70]
mov edx, dword [rax]
lea rcx, [rsp + 0x1ed0]
call fcn.1401cd160
nop
mov dx, 0x2e
lea rcx, [rsp + 0x1b80]
call fcn.140006840
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x26c8]
lea rcx, [rsp + 0x1b80]
call fcn.1400069a0
mov qword [rsp + 0x27e0], rax
mov rcx, qword [rsp + 0x27e0]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x2210], eax
lea rcx, [rsp + 0x26c8]
call fcn.140001470
lea rcx, [rsp + 0x2070]
mov r8d, dword [rsp + 0x2210]
lea rdx, [0x140240c34]
call fcn.140002be0
lea rcx, [rsp + 0x2078]
lea rdx, [rsp + 0x17d8]
call fcn.140002d20
lea rcx, [rsp + 0x26d0]
call fcn.14000f6f0
lea r8, [0x140242460]
lea rdx, [rsp + 0x26d8]
mov rcx, rax
call fcn.14000f090
mov qword [rsp + 0x27e8], rax
mov rax, qword [rsp + 0x27e8]
mov qword [rsp + 0x27f0], rax
lea rcx, [rsp + 0x2080]
mov rdx, qword [rsp + 0x27f0]
call fcn.140002d20
nop
lea rcx, [rsp + 0x26d8]
call fcn.140001470
lea rcx, [rsp + 0x1ed0]
call fcn.1401b8b50
nop
lea rcx, [rsp + 0x1ed0]
call fcn.140005d50
jmp 0x140189864
movsxd rdx, dword [rsp + 0x1b60]
lea rcx, [rsp + 0x17b0]
call fcn.14000f810
mov edx, dword [rax]
lea rcx, [rsp + 0x2220]
call fcn.1401cd210
nop
mov dx, 0x2e
lea rcx, [rsp + 0x1b80]
call fcn.140006840
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x26e0]
lea rcx, [rsp + 0x1b80]
call fcn.1400069a0
mov qword [rsp + 0x27f8], rax
mov rcx, qword [rsp + 0x27f8]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x2560], eax
lea rcx, [rsp + 0x26e0]
call fcn.140001470
lea rcx, [rsp + 0x23c0]
mov r8d, dword [rsp + 0x2560]
lea rdx, [0x140240c84]
call fcn.140002be0
lea rcx, [rsp + 0x23c8]
lea rdx, [rsp + 0x17d8]
call fcn.140002d20
lea rcx, [rsp + 0x26e8]
call fcn.14000f6f0
lea r8, [0x140242488]
lea rdx, [rsp + 0x26f0]
mov rcx, rax
call fcn.14000f090
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2800]
mov qword [rsp + 0x2808], rax
lea rcx, [rsp + 0x23d0]
mov rdx, qword [rsp + 0x2808]
call fcn.140002d20
nop
lea rcx, [rsp + 0x26f0]
call fcn.140001470
lea rcx, [rsp + 0x2220]
call fcn.1401b8b50
nop
lea rcx, [rsp + 0x2220]
call fcn.140005d50
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
lea rcx, [rsp + 0x1b80]
call fcn.1400012c0
mov rbx, rax
lea rcx, [rsp + 0x1b68]
call fcn.1400012c0
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140104b60
lea rcx, [rsp + 0x1b68]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x1b80]
call fcn.140001470
nop
lea rcx, [rsp + 0x1b68]
call fcn.140001470
nop
lea rcx, [rsp + 0x1b78]
call fcn.140001470
jmp 0x14018929a
mov eax, dword [rsp + 0x1608]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
mov r11d, dword [rsp + 0x1608]
mov qword [rsp + 0x20], r11
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403adbe0]
call fcn.1400d5e50
lea rcx, [rsp + 0x1120]
call fcn.1401b8530
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1403adbe0]
call fcn.1400d57a0
lea rcx, [0x1403ade90]
call fcn.1400d39b0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [rsp + 0x26f8], 0
lea rcx, [rsp + 0x17d8]
call fcn.140001470
nop
lea rcx, [rsp + 0x17e0]
call fcn.140007c00
nop
lea rcx, [rsp + 0x1120]
call fcn.140005d50
nop
lea rcx, [rsp + 0x17b0]
call fcn.140081e20
nop
lea rcx, [rsp + 0x1470]
call fcn.140005d50
mov eax, dword [rsp + 0x26f8]
jmp 0x1401899e8
cmp qword [rsp + 0x38], 0
je 0x1401899e3
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, 1
add rsp, 0x2810
pop rbx
ret