Function at 0x1401aa9c0
Capabilities:
Check for time delay via gettickcount
Check if file exists
Copy file
Create directory
Create process on windows
Delete file
Get common file path
Get disk information
Get disk size
Manipulate boot configuration
Open clipboard
Read .ini file
Write clipboard data

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x10e50
call fcn.1401da720
sub rsp, rax
mov qword [rsp + 0x10460], 0xfffffffffffffffe
mov rax, qword [0x1402aa5c0]
xor rax, rsp
mov qword [rsp + 0x10e48], rax
mov dword [rsp + 0x1045c], 0
mov rax, qword [rsp + 0x10e68]
mov qword [rsp + 0x10468], rax
cmp qword [rsp + 0x10468], 0x8144
ja 0x1401aaa81
cmp qword [rsp + 0x10468], 0x8144
je 0x1401b35f3
mov rax, qword [rsp + 0x10468]
sub rax, 0x800e
mov qword [rsp + 0x10468], rax
cmp qword [rsp + 0x10468], 0xe3
ja case.0x1401aaa7f.32802
lea rcx, [0x140000000]
mov rax, qword [rsp + 0x10468]
movzx eax, byte [rcx + rax + 0x1b4f28]
mov eax, dword [rcx + rax*4 + 0x1b4ed4]
add rax, rcx
jmp rax
cmp qword [rsp + 0x10468], 0x8146
je 0x1401b38a4
cmp qword [rsp + 0x10468], 0x8154
je 0x1401b37e8
jmp case.0x1401aaa7f.32802
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0
jl 0x1401aab50
cmp dword [rsp + 0x50], 0
jl 0x1401aab50
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r9d, 1
mov r8d, dword [rsp + 0x50]
lea rdx, [rsp + 0xfcb8]
call fcn.1400839b8
mov qword [rsp + 0x10470], rax
mov rcx, qword [rsp + 0x10470]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400d8340
lea rcx, [rsp + 0xfcb8]
call fcn.140001490
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x50]
call fcn.14000c920
mov dword [rsp + 0x50], eax
jmp 0x1401aaad4
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x54], 0
jl 0x1401aad7c
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x54]
lea rdx, [rsp + 0xfcc0]
call fcn.1400839b8
mov qword [rsp + 0x10478], rax
mov rax, qword [rsp + 0x10478]
mov qword [rsp + 0x10480], rax
lea rdx, [0x14024bca0]
lea rcx, [rsp + 0xfcc8]
call fcn.1400ef320
mov qword [rsp + 0x10488], rax
mov rax, qword [rsp + 0x10488]
mov qword [rsp + 0x10490], rax
lea r8, [0x14024bc44]
mov rdx, qword [rsp + 0x10490]
lea rcx, [rsp + 0xfcd0]
call fcn.1400010b0
mov qword [rsp + 0x10498], rax
mov rax, qword [rsp + 0x10498]
mov qword [rsp + 0x104a0], rax
mov r8, qword [rsp + 0x10480]
mov rdx, qword [rsp + 0x104a0]
lea rcx, [rsp + 0xfcd8]
call fcn.140006bd0
mov qword [rsp + 0x104a8], rax
mov rax, qword [rsp + 0x104a8]
mov qword [rsp + 0x104b0], rax
lea r8, [0x140249fcc]
mov rdx, qword [rsp + 0x104b0]
lea rcx, [rsp + 0x58]
call fcn.1400010b0
nop
lea rcx, [rsp + 0xfcd8]
call fcn.140001490
nop
lea rcx, [rsp + 0xfcd0]
call fcn.140001490
nop
lea rcx, [rsp + 0xfcc8]
call fcn.140001490
nop
lea rcx, [rsp + 0xfcc0]
call fcn.140001490
lea rcx, [rsp + 0x58]
call fcn.14000f8f0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef950
cmp eax, 7
jne 0x1401aacd5
lea rcx, [rsp + 0x58]
call fcn.140001490
jmp case.0x1401aaa7f.32802
cmp dword [rsp + 0x54], 0
jl 0x1401aad72
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x54]
call fcn.140082c64
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8044
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x54]
call fcn.140082c64
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x54]
call fcn.14000c920
mov dword [rsp + 0x54], eax
jmp 0x1401aacd5
lea rcx, [rsp + 0x58]
call fcn.140001490
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jl 0x1401aaf6e
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x60]
lea rdx, [rsp + 0xfce0]
call fcn.1400839b8
mov qword [rsp + 0x104b8], rax
mov rax, qword [rsp + 0x104b8]
mov qword [rsp + 0x104c0], rax
lea rdx, str.Shutdown_it_
lea rcx, [rsp + 0xfce8]
call fcn.1400ef320
mov qword [rsp + 0x104c8], rax
mov rax, qword [rsp + 0x104c8]
mov qword [rsp + 0x104d0], rax
lea r8, [0x14024bcbc]
mov rdx, qword [rsp + 0x104d0]
lea rcx, [rsp + 0xfcf0]
call fcn.1400010b0
mov qword [rsp + 0x104d8], rax
mov rax, qword [rsp + 0x104d8]
mov qword [rsp + 0x104e0], rax
mov r8, qword [rsp + 0x104c0]
mov rdx, qword [rsp + 0x104e0]
lea rcx, [rsp + 0xfcf8]
call fcn.140006bd0
mov qword [rsp + 0x104e8], rax
mov rax, qword [rsp + 0x104e8]
mov qword [rsp + 0x104f0], rax
lea r8, [0x140249fe4]
mov rdx, qword [rsp + 0x104f0]
lea rcx, [rsp + 0x68]
call fcn.1400010b0
nop
lea rcx, [rsp + 0xfcf8]
call fcn.140001490
nop
lea rcx, [rsp + 0xfcf0]
call fcn.140001490
nop
lea rcx, [rsp + 0xfce8]
call fcn.140001490
nop
lea rcx, [rsp + 0xfce0]
call fcn.140001490
lea rcx, [rsp + 0x68]
call fcn.14000f8f0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef950
cmp eax, 7
jne 0x1401aaf01
lea rcx, [rsp + 0x68]
call fcn.140001490
jmp case.0x1401aaa7f.32802
cmp dword [rsp + 0x60], 0
jl 0x1401aaf64
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x60]
call fcn.140082c64
mov qword [rsp + 0x20], rax
mov r9, 0xffffffffffffffff
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x60]
call fcn.14000c920
mov dword [rsp + 0x60], eax
jmp 0x1401aaf01
lea rcx, [rsp + 0x68]
call fcn.140001490
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 0
jl 0x1401ab19a
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x70]
lea rdx, [rsp + 0xfd00]
call fcn.1400839b8
mov qword [rsp + 0x104f8], rax
mov rax, qword [rsp + 0x104f8]
mov qword [rsp + 0x10500], rax
lea rdx, str.Reboot_it_
lea rcx, [rsp + 0xfd08]
call fcn.1400ef320
mov qword [rsp + 0x10508], rax
mov rax, qword [rsp + 0x10508]
mov qword [rsp + 0x10510], rax
lea r8, [0x14024bce4]
mov rdx, qword [rsp + 0x10510]
lea rcx, [rsp + 0xfd10]
call fcn.1400010b0
mov qword [rsp + 0x10518], rax
mov rax, qword [rsp + 0x10518]
mov qword [rsp + 0x10520], rax
mov r8, qword [rsp + 0x10500]
mov rdx, qword [rsp + 0x10520]
lea rcx, [rsp + 0xfd18]
call fcn.140006bd0
mov qword [rsp + 0x10528], rax
mov rax, qword [rsp + 0x10528]
mov qword [rsp + 0x10530], rax
lea r8, [0x140249ff4]
mov rdx, qword [rsp + 0x10530]
lea rcx, [rsp + 0x78]
call fcn.1400010b0
nop
lea rcx, [rsp + 0xfd18]
call fcn.140001490
nop
lea rcx, [rsp + 0xfd10]
call fcn.140001490
nop
lea rcx, [rsp + 0xfd08]
call fcn.140001490
nop
lea rcx, [rsp + 0xfd00]
call fcn.140001490
lea rcx, [rsp + 0x78]
call fcn.14000f8f0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef950
cmp eax, 7
jne 0x1401ab0f3
lea rcx, [rsp + 0x78]
call fcn.140001490
jmp case.0x1401aaa7f.32802
cmp dword [rsp + 0x70], 0
jl 0x1401ab190
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x70]
call fcn.140082c64
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8044
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x70]
call fcn.140082c64
mov qword [rsp + 0x20], rax
mov r9d, 2
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x70]
call fcn.14000c920
mov dword [rsp + 0x70], eax
jmp 0x1401ab0f3
lea rcx, [rsp + 0x78]
call fcn.140001490
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x80], eax
cmp dword [rsp + 0x80], 0
jl 0x1401ab3a9
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x80]
lea rdx, [rsp + 0xfd20]
call fcn.1400839b8
mov qword [rsp + 0x10538], rax
mov rax, qword [rsp + 0x10538]
mov qword [rsp + 0x10540], rax
lea rdx, str.Logoff_it_
lea rcx, [rsp + 0xfd28]
call fcn.1400ef320
mov qword [rsp + 0x10548], rax
mov rax, qword [rsp + 0x10548]
mov qword [rsp + 0x10550], rax
lea r8, [0x14024bd08]
mov rdx, qword [rsp + 0x10550]
lea rcx, [rsp + 0xfd30]
call fcn.1400010b0
mov qword [rsp + 0x10558], rax
mov rax, qword [rsp + 0x10558]
mov qword [rsp + 0x10560], rax
mov r8, qword [rsp + 0x10540]
mov rdx, qword [rsp + 0x10560]
lea rcx, [rsp + 0xfd38]
call fcn.140006bd0
mov qword [rsp + 0x10568], rax
mov rax, qword [rsp + 0x10568]
mov qword [rsp + 0x10570], rax
lea r8, [0x14024a014]
mov rdx, qword [rsp + 0x10570]
lea rcx, [rsp + 0x88]
call fcn.1400010b0
nop
lea rcx, [rsp + 0xfd38]
call fcn.140001490
nop
lea rcx, [rsp + 0xfd30]
call fcn.140001490
nop
lea rcx, [rsp + 0xfd28]
call fcn.140001490
nop
lea rcx, [rsp + 0xfd20]
call fcn.140001490
lea rcx, [rsp + 0x88]
call fcn.14000f8f0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef950
cmp eax, 7
jne 0x1401ab331
lea rcx, [rsp + 0x88]
call fcn.140001490
jmp case.0x1401aaa7f.32802
cmp dword [rsp + 0x80], 0
jl 0x1401ab39c
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x80]
call fcn.140082c64
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x80]
call fcn.14000c920
mov dword [rsp + 0x80], eax
jmp 0x1401ab331
lea rcx, [rsp + 0x88]
call fcn.140001490
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 0
jl 0x1401ab42d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x8b0], edx
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x90]
call fcn.140082c64
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8042
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x94], eax
cmp dword [rsp + 0x94], 0
jl 0x1401ab4cf
cmp dword [rsp + 0x94], 0
jl 0x1401ab4cf
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x94]
call fcn.140082c64
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8049
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x94]
call fcn.14000c920
mov dword [rsp + 0x94], eax
jmp 0x1401ab464
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x98], eax
cmp dword [rsp + 0x98], 0
jl 0x1401ab553
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x8b0], edx
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x98]
call fcn.140082c64
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8043
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
xor eax, eax
jmp 0x1401b4eba
xor edx, edx
lea rcx, [rsp + 0xa0]
call fcn.140173810
nop
lea rcx, [rsp + 0xa0]
call fcn.140082174
nop
lea rcx, [rsp + 0xa0]
call fcn.140173760
xor eax, eax
jmp 0x1401b4eba
xor r8d, r8d
lea rdx, [rsp + 0xfd48]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x10578], rax
mov rax, qword [rsp + 0x10578]
mov qword [rsp + 0x10580], rax
mov eax, dword [rsp + 0x1045c]
or eax, 1
mov dword [rsp + 0x1045c], eax
lea rdx, [0x14024bd28]
mov rcx, qword [rsp + 0x10580]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401ab641
xor r8d, r8d
lea rdx, [rsp + 0xfd50]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x10588], rax
mov eax, dword [rsp + 0x1045c]
or eax, 2
mov dword [rsp + 0x1045c], eax
lea rdx, [0x14024bd48]
mov rcx, qword [rsp + 0x10588]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401ab641
mov dword [rsp + 0x10590], 0
jmp 0x1401ab64c
mov dword [rsp + 0x10590], 1
movzx eax, byte [rsp + 0x10590]
mov byte [rsp + 0xfd40], al
mov eax, dword [rsp + 0x1045c]
and eax, 2
test eax, eax
je 0x1401ab67f
and dword [rsp + 0x1045c], 0xfffffffd
lea rcx, [rsp + 0xfd50]
call fcn.140001490
nop
mov eax, dword [rsp + 0x1045c]
and eax, 1
test eax, eax
je 0x1401ab6a2
and dword [rsp + 0x1045c], 0xfffffffe
lea rcx, [rsp + 0xfd48]
call fcn.140001490
movzx eax, byte [rsp + 0xfd40]
test eax, eax
je 0x1401ab7b1
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x500], eax
cmp dword [rsp + 0x500], 0
jge 0x1401ab6e7
jmp case.0x1401aaa7f.32802
mov r8d, 0xffffffff
mov edx, 0x144
mov ecx, 0x76
call fcn.1400f16c0
cmp eax, 6
jne 0x1401ab7b1
cmp dword [rsp + 0x500], 0
jl 0x1401ab7b1
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x500]
call fcn.140082c64
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x500]
call fcn.140082c64
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x500]
call fcn.14000c920
mov dword [rsp + 0x500], eax
jmp 0x1401ab705
xor eax, eax
jmp 0x1401b4eba
xor r8d, r8d
lea rdx, [rsp + 0xfd60]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x10598], rax
mov rax, qword [rsp + 0x10598]
mov qword [rsp + 0x105a0], rax
mov eax, dword [rsp + 0x1045c]
or eax, 4
mov dword [rsp + 0x1045c], eax
lea rdx, [0x14024bd70]
mov rcx, qword [rsp + 0x105a0]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401ab86d
xor r8d, r8d
lea rdx, [rsp + 0xfd68]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x105a8], rax
mov eax, dword [rsp + 0x1045c]
or eax, 8
mov dword [rsp + 0x1045c], eax
lea rdx, [0x14024bd90]
mov rcx, qword [rsp + 0x105a8]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401ab86d
mov dword [rsp + 0x105b0], 0
jmp 0x1401ab878
mov dword [rsp + 0x105b0], 1
movzx eax, byte [rsp + 0x105b0]
mov byte [rsp + 0xfd58], al
mov eax, dword [rsp + 0x1045c]
and eax, 8
test eax, eax
je 0x1401ab8ab
and dword [rsp + 0x1045c], 0xfffffff7
lea rcx, [rsp + 0xfd68]
call fcn.140001490
nop
mov eax, dword [rsp + 0x1045c]
and eax, 4
test eax, eax
je 0x1401ab8ce
and dword [rsp + 0x1045c], 0xfffffffb
lea rcx, [rsp + 0xfd60]
call fcn.140001490
movzx eax, byte [rsp + 0xfd58]
test eax, eax
je 0x1401ab99b
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x504], eax
cmp dword [rsp + 0x504], 0
jge 0x1401ab913
jmp case.0x1401aaa7f.32802
mov r8d, 0xffffffff
mov edx, 0x144
mov ecx, 0x77
call fcn.1400f16c0
cmp eax, 6
jne 0x1401ab99b
cmp dword [rsp + 0x504], 0
jl 0x1401ab99b
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x504]
call fcn.140082c64
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x504]
call fcn.14000c920
mov dword [rsp + 0x504], eax
jmp 0x1401ab92d
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
call fcn.14019d2f0
xor eax, eax
jmp 0x1401b4eba
xor r8d, r8d
lea rdx, [rsp + 0xfd78]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x105b8], rax
mov rax, qword [rsp + 0x105b8]
mov qword [rsp + 0x105c0], rax
mov eax, dword [rsp + 0x1045c]
or eax, 0x10
mov dword [rsp + 0x1045c], eax
lea rdx, [0x14024bdb8]
mov rcx, qword [rsp + 0x105c0]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401aba6b
xor r8d, r8d
lea rdx, [rsp + 0xfd80]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x105c8], rax
mov eax, dword [rsp + 0x1045c]
or eax, 0x20
mov dword [rsp + 0x1045c], eax
lea rdx, [0x14024bdd8]
mov rcx, qword [rsp + 0x105c8]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401aba6b
mov dword [rsp + 0x105d0], 0
jmp 0x1401aba76
mov dword [rsp + 0x105d0], 1
movzx eax, byte [rsp + 0x105d0]
mov byte [rsp + 0xfd70], al
mov eax, dword [rsp + 0x1045c]
and eax, 0x20
test eax, eax
je 0x1401abaa9
and dword [rsp + 0x1045c], 0xffffffdf
lea rcx, [rsp + 0xfd80]
call fcn.140001490
nop
mov eax, dword [rsp + 0x1045c]
and eax, 0x10
test eax, eax
je 0x1401abacc
and dword [rsp + 0x1045c], 0xffffffef
lea rcx, [rsp + 0xfd78]
call fcn.140001490
movzx eax, byte [rsp + 0xfd70]
test eax, eax
je 0x1401abe86
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x538], eax
cmp dword [rsp + 0x538], 0
jge 0x1401abb13
xor eax, eax
jmp 0x1401b4eba
lea rcx, [rsp + 0x540]
call fcn.1401d19d0
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x538]
call fcn.140082c64
mov dword [rsp + 0x6d8], eax
lea rcx, [rsp + 0x540]
call fcn.1401d6a40
mov edx, dword [rsp + 0x6d8]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov dword [rsp + 0x880], eax
cmp dword [rsp + 0x880], 0
jne 0x1401abba8
mov dword [rsp + 0xfd88], 0
lea rcx, [rsp + 0x540]
call fcn.140014ec0
mov eax, dword [rsp + 0xfd88]
jmp 0x1401b4eba
lea rcx, [rsp + 0x8c8]
call fcn.140002de0
nop
mov r8d, dword [rsp + 0x880]
lea rdx, [0x14024be00]
lea rcx, [rsp + 0x8c8]
call fcn.140002c70
lea rcx, [rsp + 0x8c8]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x8c0], rax
lea rcx, [rsp + 0x508]
call fcn.1400767b0
nop
lea r8, [rsp + 0x6e0]
lea rdx, [rsp + 0x8c8]
lea rcx, [rsp + 0xfd90]
call fcn.140006bd0
mov qword [rsp + 0x105d8], rax
mov rax, qword [rsp + 0x105d8]
mov qword [rsp + 0x105e0], rax
lea r8, [0x14024be10]
mov rdx, qword [rsp + 0x105e0]
lea rcx, [rsp + 0xfd98]
call fcn.1400010b0
mov qword [rsp + 0x105e8], rax
mov rax, qword [rsp + 0x105e8]
mov qword [rsp + 0x105f0], rax
mov rcx, qword [rsp + 0x105f0]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x508]
call fcn.1400768b4
mov dword [rsp + 0x8b8], eax
lea rcx, [rsp + 0xfd98]
call fcn.140001490
nop
lea rcx, [rsp + 0xfd90]
call fcn.140001490
lea rcx, [rsp + 0x888]
call fcn.14001fc80
nop
cmp dword [rsp + 0x8b8], 0
je 0x1401abd4c
lea rcx, [rsp + 0x508]
call fcn.1400764bc
mov dword [rsp + 0x8b8], eax
lea rdx, [rsp + 0xfda8]
lea rcx, [rsp + 0x508]
call fcn.140076d08
mov qword [rsp + 0x105f8], rax
mov rax, qword [rsp + 0x105f8]
mov qword [rsp + 0x10600], rax
mov rcx, qword [rsp + 0x10600]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xfda0], rax
lea rdx, [rsp + 0xfda0]
lea rcx, [rsp + 0x888]
call fcn.140029ec0
nop
lea rcx, [rsp + 0xfda8]
call fcn.140001490
jmp 0x1401abcb7
lea rcx, [rsp + 0x888]
call fcn.14001be50
test rax, rax
je 0x1401abd95
xor edx, edx
lea rcx, [rsp + 0x888]
call fcn.14001fd00
mov rdi, rax
lea rcx, [rsp + 0x888]
call fcn.14001be50
xor r9d, r9d
mov r8, rdi
mov edx, eax
mov rcx, qword [rsp + 0x8c0]
call qword [sym.imp.SHELL32.dll_SHOpenFolderAndSelectItems]
jmp 0x1401abdc3
lea rcx, [rsp + 0x8c8]
call fcn.14000f8f0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp qword [rsp + 0x8c0], 0
je 0x1401abddc
mov rcx, qword [rsp + 0x8c0]
call qword [sym.imp.SHELL32.dll_ILFree]
mov dword [rsp + 0x8d0], 0
jmp 0x1401abdfa
mov eax, dword [rsp + 0x8d0]
add eax, 1
mov dword [rsp + 0x8d0], eax
movsxd rdi, dword [rsp + 0x8d0]
lea rcx, [rsp + 0x888]
call fcn.14001be50
cmp rdi, rax
jae 0x1401abe4f
movsxd rdx, dword [rsp + 0x8d0]
lea rcx, [rsp + 0x888]
call fcn.14001fd00
cmp qword [rax], 0
je 0x1401abe4d
movsxd rdx, dword [rsp + 0x8d0]
lea rcx, [rsp + 0x888]
call fcn.14001fd00
mov rcx, qword [rax]
call qword [sym.imp.SHELL32.dll_ILFree]
jmp 0x1401abde9
lea rcx, [rsp + 0x888]
call fcn.1400070c0
nop
lea rcx, [rsp + 0x508]
call fcn.14007680c
nop
lea rcx, [rsp + 0x8c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x540]
call fcn.140014ec0
xor eax, eax
jmp 0x1401b4eba
mov rdx, qword [rsp + 0x10e60]
lea rcx, [rsp + 0x8e0]
call fcn.14016ac80
nop
mov dword [rsp + 0xf70], 0
xor r8d, r8d
lea rdx, [rsp + 0xfdb8]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x10608], rax
lea rdx, [0x14024be20]
mov rcx, qword [rsp + 0x10608]
call fcn.140006d50
mov byte [rsp + 0xfdb0], al
lea rcx, [rsp + 0xfdb8]
call fcn.140001490
movzx edx, byte [rsp + 0xfdb0]
test edx, edx
je 0x1401abf18
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
call fcn.140192390
mov dword [rsp + 0xff8], eax
lea rcx, [rsp + 0x8e0]
call fcn.140082174
cmp rax, 1
jne 0x1401ac09a
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000cd90
mov dword [rsp + 0x1040], eax
xor r8d, r8d
lea rdx, [rsp + 0xfdc8]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x10610], rax
lea rdx, [0x14024be48]
mov rcx, qword [rsp + 0x10610]
call fcn.140006d50
mov byte [rsp + 0xfdc0], al
lea rcx, [rsp + 0xfdc8]
call fcn.140001490
movzx edx, byte [rsp + 0xfdc0]
test edx, edx
je 0x1401ac06d
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
call fcn.140192390
mov edx, eax
lea rcx, [rsp + 0x1050]
call fcn.1401d1dc0
nop
mov eax, dword [rsp + 0xf74]
mov dword [rsp + 0x11e8], eax
lea rcx, [rsp + 0x1050]
call fcn.1401d3790
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000cd90
mov rdx, qword [rsp + 0x10e60]
add rdx, 0xdc8
mov r9d, dword [rsp + 0xf74]
mov r8d, eax
mov rcx, qword [rsp + 0x10e60]
call fcn.1401a96a0
mov edi, dword [rsp + 0x11e8]
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000cd90
mov edx, eax
sub edx, 1
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8, rdi
call fcn.14000c7f0
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
nop
lea rcx, [rsp + 0x1050]
call fcn.140012e70
jmp 0x1401ac09a
mov rdx, qword [rsp + 0x10e60]
add rdx, 0xdc8
mov r9d, dword [rsp + 0xf74]
mov r8d, dword [rsp + 0x1040]
mov rcx, qword [rsp + 0x10e60]
call fcn.1401a96a0
nop
lea rcx, [rsp + 0x8e0]
call fcn.14016a920
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x1390], eax
cmp dword [rsp + 0x1390], 0
jge 0x1401ac0e3
jmp case.0x1401aaa7f.32802
lea rcx, [rsp + 0x1398]
call fcn.140002de0
nop
cmp dword [rsp + 0x1390], 0
jl 0x1401ac1ec
mov dword [rsp + 0x13a0], 0
jmp 0x1401ac11d
mov eax, dword [rsp + 0x13a0]
add eax, 1
mov dword [rsp + 0x13a0], eax
cmp dword [rsp + 0x13a0], 0x18
jge 0x1401ac1ab
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r9d, dword [rsp + 0x13a0]
mov r8d, dword [rsp + 0x1390]
lea rdx, [rsp + 0xfdd0]
call fcn.1400839b8
mov qword [rsp + 0x10618], rax
mov rax, qword [rsp + 0x10618]
mov qword [rsp + 0x10620], rax
mov rdx, qword [rsp + 0x10620]
lea rcx, [rsp + 0x1398]
call fcn.1400060a0
nop
lea rcx, [rsp + 0xfdd0]
call fcn.140001490
lea rdx, [0x14024a024]
lea rcx, [rsp + 0x1398]
call fcn.1400060d0
jmp 0x1401ac10c
lea rdx, [0x14024be70]
lea rcx, [rsp + 0x1398]
call fcn.1400060d0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x1390]
call fcn.14000c920
mov dword [rsp + 0x1390], eax
jmp 0x1401ac0f1
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x1401ac29a
call qword [sym.imp.USER32.dll_EmptyClipboard]
lea rcx, [rsp + 0x1398]
call fcn.140001a40
add eax, 1
movsxd rdx, eax
shl rdx, 1
mov ecx, 0x2000
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [rsp + 0x13a8], rax
mov rcx, qword [rsp + 0x13a8]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov qword [rsp + 0x13b0], rax
lea rcx, [rsp + 0x1398]
call fcn.14000f8f0
mov rdx, rax
mov rcx, qword [rsp + 0x13b0]
call fcn.1400a99dc
mov rcx, qword [rsp + 0x13a8]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rdx, qword [rsp + 0x13a8]
mov ecx, reloc.WSOCK32.dll_listen
call qword [sym.imp.USER32.dll_SetClipboardData]
call qword [sym.imp.USER32.dll_CloseClipboard]
xor r8d, r8d
mov edx, 0x40
lea rcx, str.The_client_information_is_already_copied_to_the_clipboard.
call fcn.1400ef950
nop
lea rcx, [rsp + 0x1398]
call fcn.140001490
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x13b8], eax
cmp dword [rsp + 0x13b8], 0
jge 0x1401ac2e5
xor eax, eax
jmp 0x1401b4eba
lea rcx, [rsp + 0x13c0]
call fcn.14008257c
nop
xor r8d, r8d
lea rdx, [rsp + 0xfde0]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x10628], rax
lea rdx, [0x14024bef8]
mov rcx, qword [rsp + 0x10628]
call fcn.140006d50
mov byte [rsp + 0xfdd8], al
lea rcx, [rsp + 0xfde0]
call fcn.140001490
movzx edx, byte [rsp + 0xfdd8]
test edx, edx
je 0x1401ac500
mov rdx, qword [rsp + 0x10e60]
lea rcx, [rsp + 0x13f0]
call fcn.14016ac80
nop
mov dword [rsp + 0x1a80], 1
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x13b8]
call fcn.140082c64
mov dword [rsp + 0x1a84], eax
cmp dword [rsp + 0x13b8], 0
jl 0x1401ac400
mov edx, dword [rsp + 0x13b8]
lea rcx, [rsp + 0x13c0]
call fcn.14000cdc0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x13b8]
call fcn.140082c64
mov edx, eax
lea rcx, [rsp + 0x1ad8]
call fcn.14000cdc0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x13b8]
call fcn.14000c920
mov dword [rsp + 0x13b8], eax
jmp 0x1401ac38e
lea rcx, [rsp + 0x13f0]
call fcn.140082174
cmp rax, 1
jne 0x1401ac4f3
mov qword [rsp + 0x1b50], 0
jmp 0x1401ac439
mov rax, qword [rsp + 0x1b50]
add rax, 1
mov qword [rsp + 0x1b50], rax
lea rcx, [rsp + 0x13c0]
call fcn.140012e60
cmp qword [rsp + 0x1b50], rax
jge 0x1401ac4f3
cmp dword [rsp + 0x1b08], 0xffffffff
jne 0x1401ac49f
lea rcx, [rsp + 0x13c0]
call fcn.140012e60
mov rdx, rax
sub rdx, 1
sub rdx, qword [rsp + 0x1b50]
lea rcx, [rsp + 0x13c0]
call fcn.14000d010
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.14000c850
jmp 0x1401ac425
mov rdx, qword [rsp + 0x1b50]
lea rcx, [rsp + 0x1ad8]
call fcn.14000d010
mov rdi, rax
mov rdx, qword [rsp + 0x1b50]
lea rcx, [rsp + 0x13c0]
call fcn.14000d010
mov rdx, qword [rsp + 0x10e60]
add rdx, 0xdc8
mov r9d, dword [rdi]
mov r8d, dword [rax]
mov rcx, qword [rsp + 0x10e60]
call fcn.1401a96a0
jmp 0x1401ac425
lea rcx, [rsp + 0x13f0]
call fcn.14016a920
xor r8d, r8d
lea rdx, [rsp + 0xfdf0]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x10630], rax
lea rdx, [0x14024bf18]
mov rcx, qword [rsp + 0x10630]
call fcn.140006d50
mov byte [rsp + 0xfde8], al
lea rcx, [rsp + 0xfdf0]
call fcn.140001490
movzx edx, byte [rsp + 0xfde8]
test edx, edx
je 0x1401ac82a
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
call fcn.140192390
mov edx, eax
lea rcx, [rsp + 0x1b60]
call fcn.1401d1dc0
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x13b8]
call fcn.140082c64
mov dword [rsp + 0x1cf8], eax
lea rcx, [rsp + 0x1b60]
call fcn.1401d6a40
mov rdx, qword [rsp + 0x10e60]
lea rcx, [rsp + 0x1ea0]
call fcn.14016ac80
nop
mov dword [rsp + 0x2530], 1
mov eax, dword [rsp + 0x1cf8]
mov dword [rsp + 0x2534], eax
cmp dword [rsp + 0x13b8], 0
jl 0x1401ac667
mov edx, dword [rsp + 0x13b8]
lea rcx, [rsp + 0x13c0]
call fcn.14000cdc0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x13b8]
call fcn.140082c64
mov dword [rsp + 0x1cf8], eax
lea rcx, [rsp + 0x1b60]
call fcn.1401d6a40
mov edx, dword [rsp + 0x1cf8]
lea rcx, [rsp + 0x2588]
call fcn.14000cdc0
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x13b8]
call fcn.14000c920
mov dword [rsp + 0x13b8], eax
jmp 0x1401ac5d5
lea rcx, [rsp + 0x1ea0]
call fcn.140082174
cmp rax, 1
jne 0x1401ac80e
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
call fcn.140192390
cmp dword [rsp + 0x25b8], eax
jne 0x1401ac794
mov qword [rsp + 0x2600], 0
jmp 0x1401ac6bc
mov rax, qword [rsp + 0x2600]
add rax, 1
mov qword [rsp + 0x2600], rax
lea rcx, [rsp + 0x13c0]
call fcn.140012e60
cmp qword [rsp + 0x2600], rax
jge 0x1401ac792
mov rdx, qword [rsp + 0x2600]
lea rcx, [rsp + 0x13c0]
call fcn.14000d010
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.140082c64
mov dword [rsp + 0x2608], eax
mov rdx, qword [rsp + 0x2600]
lea rcx, [rsp + 0x2588]
call fcn.14000d010
mov rdi, rax
mov rdx, qword [rsp + 0x2600]
lea rcx, [rsp + 0x13c0]
call fcn.14000d010
mov rdx, qword [rsp + 0x10e60]
add rdx, 0xdc8
mov r9d, dword [rdi]
mov r8d, dword [rax]
mov rcx, qword [rsp + 0x10e60]
call fcn.1401a96a0
mov edi, dword [rsp + 0x2608]
mov rdx, qword [rsp + 0x2600]
lea rcx, [rsp + 0x13c0]
call fcn.14000d010
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8, rdi
mov edx, dword [rax]
call fcn.14000c7f0
jmp 0x1401ac6a8
jmp 0x1401ac80e
mov qword [rsp + 0x2610], 0
jmp 0x1401ac7b6
mov rax, qword [rsp + 0x2610]
add rax, 1
mov qword [rsp + 0x2610], rax
lea rcx, [rsp + 0x13c0]
call fcn.140012e60
cmp qword [rsp + 0x2610], rax
jge 0x1401ac80e
lea rcx, [rsp + 0x13c0]
call fcn.140012e60
mov rdx, rax
sub rdx, 1
sub rdx, qword [rsp + 0x2610]
lea rcx, [rsp + 0x13c0]
call fcn.14000d010
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.14000c850
jmp 0x1401ac7a2
lea rcx, [rsp + 0x1ea0]
call fcn.14016a920
nop
lea rcx, [rsp + 0x1b60]
call fcn.140012e70
nop
lea rcx, [rsp + 0x13c0]
call fcn.14008259c
xor eax, eax
jmp 0x1401b4eba
xor r8d, r8d
lea rdx, [rsp + 0xfe00]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x10638], rax
mov rax, qword [rsp + 0x10638]
mov qword [rsp + 0x10640], rax
mov eax, dword [rsp + 0x1045c]
or eax, 0x40
mov dword [rsp + 0x1045c], eax
lea rdx, [0x14024bf40]
mov rcx, qword [rsp + 0x10640]
call fcn.140006d90
movzx eax, al
test eax, eax
je 0x1401ac8f5
xor r8d, r8d
lea rdx, [rsp + 0xfe08]
mov rcx, qword [rsp + 0x10e60]
call fcn.140193f10
mov qword [rsp + 0x10648], rax
mov eax, dword [rsp + 0x1045c]
or eax, 0x80
mov dword [rsp + 0x1045c], eax
lea rdx, [0x14024bf60]
mov rcx, qword [rsp + 0x10648]
call fcn.140006d90
movzx eax, al
test eax, eax
je 0x1401ac8f5
mov dword [rsp + 0x10650], 1
jmp 0x1401ac900
mov dword [rsp + 0x10650], 0
movzx eax, byte [rsp + 0x10650]
mov byte [rsp + 0xfdf8], al
mov eax, dword [rsp + 0x1045c]
and eax, 0x80
test eax, eax
je 0x1401ac938
and dword [rsp + 0x1045c], 0xffffff7f
lea rcx, [rsp + 0xfe08]
call fcn.140001490
nop
mov eax, dword [rsp + 0x1045c]
and eax, 0x40
test eax, eax
je 0x1401ac95b
and dword [rsp + 0x1045c], 0xffffffbf
lea rcx, [rsp + 0xfe00]
call fcn.140001490
movzx eax, byte [rsp + 0xfdf8]
test eax, eax
je 0x1401ac96c
jmp case.0x1401aaa7f.32802
lea rcx, [rsp + 0x2620]
call fcn.14008257c
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x2618], eax
cmp dword [rsp + 0x2618], 0
jl 0x1401aca7e
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f16c0
cmp eax, 6
jne 0x1401aca7e
cmp dword [rsp + 0x2618], 0
jl 0x1401aca7e
lea rcx, [rsp + 0x2650]
call fcn.1401d19d0
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x2618]
call fcn.140082c64
mov dword [rsp + 0x27e8], eax
mov edx, dword [rsp + 0x27e8]
lea rcx, [rsp + 0x2620]
call fcn.14000cdc0
lea rcx, [rsp + 0x2650]
call fcn.1401bf390
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x2618]
call fcn.14000c850
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x2618], eax
lea rcx, [rsp + 0x2650]
call fcn.140014ec0
jmp 0x1401ac9cc
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov dword [rsp + 0x2990], 0
jmp 0x1401acaab
mov eax, dword [rsp + 0x2990]
add eax, 1
mov dword [rsp + 0x2990], eax
movsxd rdi, dword [rsp + 0x2990]
lea rcx, [rsp + 0x2620]
call fcn.140012e60
cmp rdi, rax
jge 0x1401acafa
movsxd rdx, dword [rsp + 0x2990]
lea rcx, [rsp + 0x2620]
call fcn.14000d010
mov eax, dword [rax]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x803c
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
jmp 0x1401aca9a
lea rcx, [rsp + 0x2620]
call fcn.14008259c
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000c7c0
mov dword [rsp + 0x29c0], eax
cmp dword [rsp + 0x29c0], 1
je 0x1401acb3a
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x2d10], eax
lea rcx, [rsp + 0x2d20]
call fcn.1401d19d0
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x2d10]
call fcn.140082c64
mov dword [rsp + 0x2eb8], eax
lea rcx, [rsp + 0x2d20]
call fcn.1401d6a40
lea rcx, [rsp + 0x2998]
call fcn.14008257c
nop
mov edx, dword [rsp + 0x2eb8]
lea rcx, [rsp + 0x29d0]
call fcn.14000c750
nop
lea rcx, [rsp + 0x3350]
call fcn.140006ef0
nop
lea rdx, [rsp + 0x3350]
lea rcx, [rsp + 0x29d0]
call fcn.1401bee60
mov dword [rsp + 0x3380], 0
jmp 0x1401acc01
mov eax, dword [rsp + 0x3380]
add eax, 1
mov dword [rsp + 0x3380], eax
movsxd rdi, dword [rsp + 0x3380]
lea rcx, [rsp + 0x3350]
call fcn.140006f70
cmp rdi, rax
jae 0x1401acc58
movsxd rdx, dword [rsp + 0x3380]
lea rcx, [rsp + 0x3350]
call fcn.140006fa0
mov rcx, rax
add rcx, 0x1a0
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov edx, eax
lea rcx, [rsp + 0x2998]
call fcn.14000cdc0
jmp 0x1401acbf0
xor edx, edx
lea rcx, [rsp + 0x3060]
call fcn.140160500
nop
lea rdx, [rsp + 0x2998]
lea rcx, [rsp + 0x3318]
call fcn.140082754
mov edx, dword [rsp + 0x2eb8]
mov dword [rsp + 0x3340], edx
lea rcx, [rsp + 0x3060]
call fcn.140082174
cmp rax, 1
jne 0x1401ada3d
mov dword [rsp + 0x3384], 0
jmp 0x1401accc0
mov eax, dword [rsp + 0x3384]
add eax, 1
mov dword [rsp + 0x3384], eax
movsxd rdi, dword [rsp + 0x3384]
lea rcx, [rsp + 0x3318]
call fcn.140012e60
cmp rdi, rax
jge 0x1401ad8e6
movsxd rdx, dword [rsp + 0x3384]
lea rcx, [rsp + 0x3318]
call fcn.14000d010
mov edx, dword [rax]
lea rcx, [rsp + 0x3390]
call fcn.1401d2de0
nop
movsxd rdx, dword [rsp + 0x3384]
lea rcx, [rsp + 0x3318]
call fcn.14000d010
mov rdi, rax
lea rcx, [rsp + 0x2f10]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
cmp dword [rdi], eax
jne 0x1401acde4
movsxd rdx, dword [rsp + 0x3384]
lea rcx, [rsp + 0x3318]
call fcn.14000d010
cmp dword [rax], 0
je 0x1401acde4
movsxd rdx, dword [rsp + 0x3384]
lea rcx, [rsp + 0x3318]
call fcn.14000d010
mov edx, dword [rax]
lea rcx, [rsp + 0x33a0]
call fcn.14000c6c0
nop
lea rax, [rsp + 0xfe10]
mov qword [rsp + 0xfe18], rax
lea rdx, [rsp + 0x2fc8]
mov rcx, qword [rsp + 0xfe18]
call fcn.140001430
mov qword [rsp + 0x10658], rax
mov rdx, qword [rsp + 0x10658]
lea rcx, [rsp + 0x33a0]
call fcn.1401d32e0
test eax, eax
je 0x1401acdd7
lea rdx, [rsp + 0x3548]
lea rcx, [rsp + 0x3390]
call fcn.140002db0
nop
lea rcx, [rsp + 0x33a0]
call fcn.140014ec0
lea rcx, [rsp + 0x3390]
call fcn.140006eb0
movzx eax, al
test eax, eax
je 0x1401ace0a
lea rcx, [rsp + 0x3390]
call fcn.140001490
jmp 0x1401accaf
lea rcx, [rsp + 0x3390]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400f9330
mov dword [rsp + 0x3388], eax
cmp dword [rsp + 0x3388], 3
je 0x1401ad8d4
cmp dword [rsp + 0x3388], 4
je 0x1401ad8d4
cmp dword [rsp + 0x3388], 5
je 0x1401ad8d4
lea rcx, [rsp + 0x2f20]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
cmp eax, 1
je 0x1401ace6f
jmp 0x1401ad857
mov eax, dword [rsp + 0x2eb8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov dword [rsp + 0x3968], eax
cmp dword [rsp + 0x3968], 0
jne 0x1401acea8
jmp 0x1401ad857
lea rcx, [rsp + 0x3718]
call fcn.140002de0
nop
lea rcx, [rsp + 0x3390]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0xfe20]
call fcn.140107e90
mov qword [rsp + 0x10660], rax
mov rax, qword [rsp + 0x10660]
mov qword [rsp + 0x10668], rax
lea rcx, [rsp + 0x3390]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0xfe28]
call fcn.1400f9dc0
mov qword [rsp + 0x10670], rax
mov rax, qword [rsp + 0x10670]
mov qword [rsp + 0x10678], rax
mov rax, qword [rsp + 0x10668]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10678]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x2ec0]
mov r8d, dword [rsp + 0x3968]
lea rdx, str._c:_s__s_s
lea rcx, [rsp + 0x3718]
call fcn.140002c70
nop
lea rcx, [rsp + 0xfe28]
call fcn.140001490
nop
lea rcx, [rsp + 0xfe20]
call fcn.140001490
lea rcx, [rsp + 0x3718]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401acfac
lea rcx, [rsp + 0x3718]
call fcn.140001490
jmp 0x1401ad857
xor edx, edx
lea rcx, [rsp + 0x3730]
call fcn.140161450
nop
lea rdx, [rsp + 0x3390]
lea rcx, [rsp + 0x3940]
call fcn.140002db0
lea rcx, [rsp + 0x3980]
call fcn.14000c880
nop
lea rax, [rsp + 0xfe30]
mov qword [rsp + 0xfe38], rax
lea rdx, [rsp + 0x3390]
mov rcx, qword [rsp + 0xfe38]
call fcn.140001430
mov qword [rsp + 0x10680], rax
mov rdx, qword [rsp + 0x10680]
lea rcx, [rsp + 0x3980]
call fcn.1401d50b0
test eax, eax
jne 0x1401ad053
lea rcx, [rsp + 0x3980]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x3730]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x3718]
call fcn.140001490
jmp 0x1401ad857
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f16c0
cmp eax, 7
jne 0x1401ad09b
lea rcx, [rsp + 0x3980]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x3730]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x3718]
call fcn.140001490
jmp 0x1401ad857
lea rcx, [rsp + 0x36e8]
call fcn.1400767b0
nop
lea rcx, [rsp + 0x3718]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x36e8]
call fcn.1400768b4
lea rcx, [rsp + 0x36e8]
call fcn.1400764bc
mov qword [rsp + 0x3970], 0
mov qword [rsp + 0x3960], 0
mov qword [rsp + 0x3720], 0
mov r9d, 3
xor r8d, r8d
lea rdx, [rsp + 0xfe48]
lea rcx, [rsp + 0x3390]
call fcn.1400022a0
mov qword [rsp + 0x10688], rax
mov rcx, qword [rsp + 0x10688]
call fcn.14000f8f0
lea r9, [rsp + 0x3720]
lea r8, [rsp + 0x3960]
lea rdx, [rsp + 0x3970]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401ad15f
mov dword [rsp + 0x10690], 1
jmp 0x1401ad16a
mov dword [rsp + 0x10690], 0
movzx eax, byte [rsp + 0x10690]
mov byte [rsp + 0xfe40], al
lea rcx, [rsp + 0xfe48]
call fcn.140001490
movzx edx, byte [rsp + 0xfe40]
test edx, edx
je 0x1401ad1e3
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024bfa0]
call fcn.1400ef950
nop
lea rcx, [rsp + 0x36e8]
call fcn.14007680c
nop
lea rcx, [rsp + 0x3980]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x3730]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x3718]
call fcn.140001490
jmp 0x1401ad857
lea rcx, [rsp + 0x36e8]
call fcn.140076508
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401ad206
addsd xmm1, qword [0x140261550]
mov rax, qword [rsp + 0x3720]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401ad224
addsd xmm0, qword [0x140261550]
mulsd xmm0, qword [0x140263800]
comisd xmm1, xmm0
jbe 0x1401ad283
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024c010]
call fcn.1400ef950
nop
lea rcx, [rsp + 0x36e8]
call fcn.14007680c
nop
lea rcx, [rsp + 0x3980]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x3730]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x3718]
call fcn.140001490
jmp 0x1401ad857
xor r8d, r8d
mov edx, 0x24
lea rcx, [0x14024c080]
call fcn.1400ef950
cmp eax, 6
jne 0x1401ad652
lea rcx, [rsp + 0xfe50]
call fcn.14000e290
lea r8, [0x14024c0d0]
lea rdx, [rsp + 0xfe58]
mov rcx, rax
call fcn.14000c960
mov qword [rsp + 0x10698], rax
mov rax, qword [rsp + 0x10698]
mov qword [rsp + 0x106a0], rax
mov rdx, qword [rsp + 0x106a0]
lea rcx, [rsp + 0x3948]
call fcn.140002db0
nop
lea rcx, [rsp + 0xfe58]
call fcn.140001490
lea rcx, [rsp + 0x3730]
call fcn.140082174
cmp rax, 1
je 0x1401ad34e
lea rcx, [rsp + 0x36e8]
call fcn.14007680c
nop
lea rcx, [rsp + 0x3980]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x3730]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x3718]
call fcn.140001490
jmp 0x1401ad857
mov edx, dword [rsp + 0x3b18]
lea rcx, [rsp + 0x3cc0]
call fcn.1401d18c0
nop
lea rcx, [rsp + 0x3940]
call fcn.14000f8f0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x4008]
call fcn.1400fa8d0
nop
mov dx, 0x2e
lea rcx, [rsp + 0x4008]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0xfe60]
lea rcx, [rsp + 0x4008]
call fcn.140006a00
mov qword [rsp + 0x106a8], rax
mov rcx, qword [rsp + 0x106a8]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov dword [rsp + 0x4000], eax
lea rcx, [rsp + 0xfe60]
call fcn.140001490
lea rcx, [rsp + 0x3e60]
mov r8d, dword [rsp + 0x4000]
lea rdx, [0x14024c0f4]
call fcn.140002c70
lea rcx, [rsp + 0x3e68]
lea rdx, [rsp + 0x3950]
call fcn.140002db0
lea rcx, [rsp + 0x3e70]
lea rdx, [rsp + 0x3948]
call fcn.140002db0
lea rcx, [rsp + 0x3cc0]
call fcn.1401bf8a0
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r8, qword [rsp + 0x3b28]
lea rdx, [0x14024c100]
xor ecx, ecx
call fcn.1400dcf70
mov edx, dword [rsp + 0x2eb8]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 1
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x968], 0
je 0x1401ad4c4
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401ad50e
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call fcn.14007d104
xor edx, edx
mov rcx, rax
call fcn.14007c7e4
mov edx, 5
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x4008]
call fcn.14000f8f0
mov rdi, rax
lea rcx, [rsp + 0x3718]
call fcn.14000f8f0
mov r8, qword [rsp + 0x10e60]
mov r8, qword [r8 + 0x968]
mov rdx, rdi
mov rcx, rax
call fcn.140106b10
test eax, eax
jne 0x1401ad5f7
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401ad576
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0x3b28]
lea rdx, [0x14024c140]
xor ecx, ecx
call fcn.1400dcf70
nop
lea rcx, [rsp + 0x4008]
call fcn.140001490
nop
lea rcx, [rsp + 0x3cc0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x36e8]
call fcn.14007680c
nop
lea rcx, [rsp + 0x3980]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x3730]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x3718]
call fcn.140001490
jmp 0x1401ad857
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401ad620
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4008]
call fcn.140001490
nop
lea rcx, [rsp + 0x3cc0]
call fcn.140014ec0
jmp 0x1401ad816
mov r8, qword [rsp + 0x3b28]
lea rdx, [0x14024c190]
xor ecx, ecx
call fcn.1400dcf70
mov edx, dword [rsp + 0x2eb8]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 1
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x968], 0
je 0x1401ad6cf
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401ad719
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call fcn.14007d104
xor edx, edx
mov rcx, rax
call fcn.14007c7e4
mov edx, 5
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x3718]
call fcn.14000f8f0
mov r9, qword [rsp + 0x10e60]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.1401050c0
test eax, eax
jne 0x1401ad7db
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401ad779
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0x3b28]
lea rdx, [0x14024c1d0]
xor ecx, ecx
call fcn.1400dcf70
nop
lea rcx, [rsp + 0x36e8]
call fcn.14007680c
nop
lea rcx, [rsp + 0x3980]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x3730]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x3718]
call fcn.140001490
jmp 0x1401ad857
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401ad804
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x36e8]
call fcn.14007680c
nop
lea rcx, [rsp + 0x3980]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x3730]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x3718]
call fcn.140001490
xor eax, eax
test eax, eax
jne 0x1401ace50
lea rcx, [rsp + 0x36e0]
call fcn.140002de0
nop
mov r8, qword [rsp + 0x3390]
lea rdx, str._s.Super.vhd
lea rcx, [rsp + 0x36e0]
call fcn.140002c70
lea rcx, [rsp + 0x36e0]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x36e0]
call fcn.14000f8f0
mov rdi, rax
lea rcx, [rsp + 0x3390]
call fcn.14000f8f0
mov r8d, 1
mov rdx, rdi
mov rcx, rax
call fcn.140107430
nop
lea rcx, [rsp + 0x36e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x3390]
call fcn.140001490
jmp 0x1401accaf
lea rdx, [rsp + 0x3318]
lea rcx, [rsp + 0x2998]
call fcn.140082754
lea rcx, [rsp + 0x2998]
call fcn.140012e60
test rax, rax
je 0x1401ada29
mov edx, dword [rsp + 0x2eb8]
lea rcx, [rsp + 0x4010]
call fcn.14000c750
nop
lea rcx, [rsp + 0x4010]
call fcn.1401bf280
mov dword [rsp + 0x4350], 0
jmp 0x1401ad951
mov eax, dword [rsp + 0x4350]
add eax, 1
mov dword [rsp + 0x4350], eax
movsxd rdi, dword [rsp + 0x4350]
lea rcx, [rsp + 0x2998]
call fcn.140012e60
cmp rdi, rax
jge 0x1401ad9a6
movsxd rdx, dword [rsp + 0x4350]
lea rcx, [rsp + 0x2998]
call fcn.14000d010
lea rcx, [rsp + 0x41b0]
mov r8d, dword [rax]
lea rdx, [0x14024c23c]
call fcn.140002c70
lea rcx, [rsp + 0x4010]
call fcn.14000c540
jmp 0x1401ad940
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r9d, dword [rsp + 0x2eb8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10e60]
call fcn.14000d5a0
mov edx, dword [rsp + 0x2eb8]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov edx, dword [rsp + 0x2eb8]
mov qword [rsp + 0x20], rdx
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
nop
lea rcx, [rsp + 0x4010]
call fcn.140014ec0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024c248]
call fcn.1400ef950
mov dword [rsp + 0xfe68], 0
lea rcx, [rsp + 0x3060]
call fcn.1401604a0
nop
lea rcx, [rsp + 0x3350]
call fcn.140006f40
nop
lea rcx, [rsp + 0x29d0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x2998]
call fcn.14008259c
nop
lea rcx, [rsp + 0x2d20]
call fcn.140014ec0
mov eax, dword [rsp + 0xfe68]
jmp 0x1401b4eba
mov rax, qword [rsp + 0x10e60]
cmp dword [rax + 0x978], 0
je 0x1401adab8
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000c7c0
mov dword [rsp + 0x4380], eax
cmp dword [rsp + 0x4380], 1
je 0x1401adae4
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x46d0], eax
lea rcx, [rsp + 0x46e0]
call fcn.1401d19d0
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x46d0]
call fcn.140082c64
mov dword [rsp + 0x4878], eax
lea rcx, [rsp + 0x46e0]
call fcn.1401d6a40
lea rcx, [rsp + 0x4888]
lea rdx, [0x14024a0c4]
call fcn.1400020d0
lea rcx, [rsp + 0x46e0]
call fcn.1401d4410
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r9d, dword [rsp + 0x4878]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10e60]
call fcn.14000d5a0
lea rcx, [rsp + 0x4358]
call fcn.14008257c
nop
mov edx, dword [rsp + 0x4878]
lea rcx, [rsp + 0x4390]
call fcn.14000c750
nop
lea rcx, [rsp + 0x4d60]
call fcn.140006ef0
nop
lea rdx, [rsp + 0x4d60]
lea rcx, [rsp + 0x4390]
call fcn.1401bee60
mov dword [rsp + 0x4d90], 0
jmp 0x1401adbf8
mov eax, dword [rsp + 0x4d90]
add eax, 1
mov dword [rsp + 0x4d90], eax
movsxd rdi, dword [rsp + 0x4d90]
lea rcx, [rsp + 0x4d60]
call fcn.140006f70
cmp rdi, rax
jae 0x1401adc4f
movsxd rdx, dword [rsp + 0x4d90]
lea rcx, [rsp + 0x4d60]
call fcn.140006fa0
mov rcx, rax
add rcx, 0x1a0
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov edx, eax
lea rcx, [rsp + 0x4358]
call fcn.14000cdc0
jmp 0x1401adbe7
lea rcx, [rsp + 0x4d60]
call fcn.140006f70
test rax, rax
jne 0x1401adc9d
lea rcx, [rsp + 0x4968]
lea rdx, [0x14024a114]
call fcn.140006d50
movzx eax, al
test eax, eax
je 0x1401adc9d
lea rcx, [rsp + 0x4968]
lea rdx, [0x14024a17c]
call fcn.1400020d0
lea rcx, [rsp + 0x46e0]
call fcn.1401d4410
mov eax, dword [rsp + 0x4878]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 1
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Do_you_want_to_update_the_image_
call fcn.1400ef950
cmp eax, 7
jne 0x1401ae02d
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
mov dword [rsp + 0x50e0], 0
jmp 0x1401add1f
mov eax, dword [rsp + 0x50e0]
add eax, 1
mov dword [rsp + 0x50e0], eax
movsxd rdi, dword [rsp + 0x50e0]
lea rcx, [rsp + 0x4358]
call fcn.140012e60
cmp rdi, rax
jge 0x1401adf2d
movsxd rdx, dword [rsp + 0x50e0]
lea rcx, [rsp + 0x4358]
call fcn.14000d010
mov edx, dword [rax]
lea rcx, [rsp + 0x50e8]
call fcn.1401d2de0
nop
movsxd rdx, dword [rsp + 0x50e0]
lea rcx, [rsp + 0x4358]
call fcn.14000d010
mov rdi, rax
lea rcx, [rsp + 0x48d0]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
cmp dword [rdi], eax
jne 0x1401ade43
movsxd rdx, dword [rsp + 0x50e0]
lea rcx, [rsp + 0x4358]
call fcn.14000d010
cmp dword [rax], 0
je 0x1401ade43
movsxd rdx, dword [rsp + 0x50e0]
lea rcx, [rsp + 0x4358]
call fcn.14000d010
mov edx, dword [rax]
lea rcx, [rsp + 0x50f0]
call fcn.14000c6c0
nop
lea rax, [rsp + 0xfe70]
mov qword [rsp + 0xfe78], rax
lea rdx, [rsp + 0x4988]
mov rcx, qword [rsp + 0xfe78]
call fcn.140001430
mov qword [rsp + 0x106b0], rax
mov rdx, qword [rsp + 0x106b0]
lea rcx, [rsp + 0x50f0]
call fcn.1401d32e0
test eax, eax
je 0x1401ade36
lea rdx, [rsp + 0x5298]
lea rcx, [rsp + 0x50e8]
call fcn.140002db0
nop
lea rcx, [rsp + 0x50f0]
call fcn.140014ec0
lea r8, [0x14024c298]
lea rdx, [rsp + 0x50e8]
lea rcx, [rsp + 0xfe88]
call fcn.1400010b0
mov qword [rsp + 0x106b8], rax
mov rcx, qword [rsp + 0x106b8]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401ade8e
mov dword [rsp + 0x106c0], 1
jmp 0x1401ade99
mov dword [rsp + 0x106c0], 0
movzx eax, byte [rsp + 0x106c0]
mov byte [rsp + 0xfe80], al
lea rcx, [rsp + 0xfe88]
call fcn.140001490
movzx edx, byte [rsp + 0xfe80]
test edx, edx
je 0x1401aded3
lea rcx, [rsp + 0x50e8]
call fcn.140001490
jmp 0x1401add0e
lea r8, [0x14024c2b0]
lea rdx, [rsp + 0x50e8]
lea rcx, [rsp + 0xfe90]
call fcn.1400010b0
mov qword [rsp + 0x106c8], rax
mov rcx, qword [rsp + 0x106c8]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xfe90]
call fcn.140001490
nop
lea rcx, [rsp + 0x50e8]
call fcn.140001490
jmp 0x1401add0e
lea rcx, [rsp + 0x4358]
call fcn.14000c510
mov edx, dword [rsp + 0x4878]
lea rcx, [rsp + 0x4da0]
call fcn.14000c750
nop
lea rcx, [rsp + 0x4da0]
call fcn.1401bf280
lea rcx, [rsp + 0x4888]
lea rdx, [0x14024a194]
call fcn.1400020d0
lea rcx, [rsp + 0x4968]
lea rdx, [0x14024a2b4]
call fcn.1400020d0
lea rcx, [rsp + 0x46e0]
call fcn.1401d4410
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r9d, dword [rsp + 0x4878]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10e60]
call fcn.14000d5a0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024c2c8]
call fcn.1400ef950
mov dword [rsp + 0xfe98], 0
lea rcx, [rsp + 0x4da0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x4d60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x4390]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x4358]
call fcn.14008259c
nop
lea rcx, [rsp + 0x46e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xfe98]
jmp 0x1401b4eba
lea rcx, [rsp + 0x4358]
call fcn.140012e60
mov dword [rsp + 0x4380], eax
mov dword [rsp + 0x5430], 0
jmp 0x1401ae05f
mov eax, dword [rsp + 0x5430]
add eax, 1
mov dword [rsp + 0x5430], eax
mov eax, dword [rsp + 0x4380]
cmp dword [rsp + 0x5430], eax
jge 0x1401af307
lea rcx, [rsp + 0x5470]
call fcn.140002de0
nop
mov dword [rsp + 0x56d0], 0
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.14000d010
mov edx, dword [rax]
lea rcx, [rsp + 0x56e0]
call fcn.1401d2de0
nop
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.14000d010
mov rdi, rax
lea rcx, [rsp + 0x48d0]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
cmp dword [rdi], eax
jne 0x1401ae187
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.14000d010
cmp dword [rax], 0
je 0x1401ae187
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.14000d010
mov edx, dword [rax]
lea rcx, [rsp + 0x5a40]
call fcn.14000c6c0
nop
lea rax, [rsp + 0xfea0]
mov qword [rsp + 0xfea8], rax
lea rdx, [rsp + 0x4988]
mov rcx, qword [rsp + 0xfea8]
call fcn.140001430
mov qword [rsp + 0x106d0], rax
mov rdx, qword [rsp + 0x106d0]
lea rcx, [rsp + 0x5a40]
call fcn.1401d32e0
test eax, eax
je 0x1401ae17a
lea rdx, [rsp + 0x5be8]
lea rcx, [rsp + 0x56e0]
call fcn.140002db0
mov edx, dword [rsp + 0x5bd8]
mov dword [rsp + 0x56d0], edx
lea rcx, [rsp + 0x5a40]
call fcn.140014ec0
lea rcx, [rsp + 0x56e0]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400f9330
mov dword [rsp + 0x5434], eax
lea rdx, [0x14024a2dc]
lea rcx, [rsp + 0x5478]
call fcn.140002100
nop
lea rcx, [rsp + 0x56f0]
call fcn.14000d210
nop
mov dword [rsp + 0x5888], 1
lea rcx, [rsp + 0x56f0]
call fcn.1401d56b0
lea rdx, [rsp + 0x5898]
lea rcx, [rsp + 0x5468]
call fcn.140001430
nop
mov dword [rsp + 0x5a30], 0
cmp dword [rsp + 0x5a30], 0
jl 0x1401ae4de
lea r9, [rsp + 0x5a30]
lea r8, [0x14024a304]
lea rdx, [rsp + 0x5d88]
lea rcx, [rsp + 0x5468]
call fcn.1400065a0
nop
lea rcx, [rsp + 0x5d88]
call fcn.140006eb0
movzx eax, al
test eax, eax
je 0x1401ae258
lea rcx, [rsp + 0x5d88]
call fcn.140001490
jmp 0x1401ae4de
xor edx, edx
lea rcx, [rsp + 0x5d88]
call fcn.140006dd0
movzx r8d, ax
lea rdx, [0x14024c2d0]
lea rcx, [rsp + 0x5d88]
call fcn.140002c70
lea rcx, [rsp + 0x5d80]
call fcn.140002de0
nop
lea rcx, [rsp + 0x56e0]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0xfeb0]
call fcn.140107e90
mov qword [rsp + 0x106d8], rax
mov rax, qword [rsp + 0x106d8]
mov qword [rsp + 0x106e0], rax
lea rcx, [rsp + 0x56e0]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0xfeb8]
call fcn.1400f9dc0
mov qword [rsp + 0x106e8], rax
mov rax, qword [rsp + 0x106e8]
mov qword [rsp + 0x106f0], rax
mov rax, qword [rsp + 0x106e0]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x106f0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x4880]
mov r8, qword [rsp + 0x5d88]
lea rdx, [0x14024c2e0]
lea rcx, [rsp + 0x5d80]
call fcn.140002c70
nop
lea rcx, [rsp + 0xfeb8]
call fcn.140001490
nop
lea rcx, [rsp + 0xfeb0]
call fcn.140001490
lea rcx, [rsp + 0x5d80]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401ae3a7
lea rdx, [rsp + 0x5d80]
lea rcx, [rsp + 0x5478]
call fcn.140002db0
nop
lea rcx, [rsp + 0x5d80]
call fcn.140001490
nop
lea rcx, [rsp + 0x5d88]
call fcn.140001490
jmp 0x1401ae4de
lea rcx, [rsp + 0x56e0]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0xfec0]
call fcn.140107e90
mov qword [rsp + 0x106f8], rax
mov rax, qword [rsp + 0x106f8]
mov qword [rsp + 0x10700], rax
lea rcx, [rsp + 0x56e0]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0xfec8]
call fcn.1400f9dc0
mov qword [rsp + 0x10708], rax
mov rax, qword [rsp + 0x10708]
mov qword [rsp + 0x10710], rax
mov rax, qword [rsp + 0x10700]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10710]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x4898]
mov r8, qword [rsp + 0x5d88]
lea rdx, [0x14024c300]
lea rcx, [rsp + 0x5d80]
call fcn.140002c70
nop
lea rcx, [rsp + 0xfec8]
call fcn.140001490
nop
lea rcx, [rsp + 0xfec0]
call fcn.140001490
lea rcx, [rsp + 0x5d80]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401ae4be
lea rdx, [rsp + 0x5d80]
lea rcx, [rsp + 0x5478]
call fcn.140002db0
nop
lea rcx, [rsp + 0x5d80]
call fcn.140001490
nop
lea rcx, [rsp + 0x5d88]
call fcn.140001490
jmp 0x1401ae4de
lea rcx, [rsp + 0x5d80]
call fcn.140001490
nop
lea rcx, [rsp + 0x5d88]
call fcn.140001490
jmp 0x1401ae1ff
lea r8, [0x14024c320]
lea rdx, [rsp + 0x56e0]
lea rcx, [rsp + 0xfed0]
call fcn.1400010b0
mov qword [rsp + 0x10718], rax
mov rax, qword [rsp + 0x10718]
mov qword [rsp + 0x10720], rax
mov rdx, qword [rsp + 0x10720]
lea rcx, [rsp + 0x5470]
call fcn.140002db0
nop
lea rcx, [rsp + 0xfed0]
call fcn.140001490
lea rcx, [rsp + 0x5470]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401ae5af
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.140082810
nop
lea rcx, [rsp + 0x5468]
call fcn.140001490
nop
lea rcx, [rsp + 0x56f0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x5478]
call fcn.140001490
nop
lea rcx, [rsp + 0x56e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x5470]
call fcn.140001490
jmp 0x1401ae04e
lea rcx, [rsp + 0x5438]
call fcn.1400767b0
nop
lea rcx, [rsp + 0x5470]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x5438]
call fcn.1400768b4
lea rcx, [rsp + 0x5438]
call fcn.1400764bc
mov qword [rsp + 0x56d8], 0
mov qword [rsp + 0x56c0], 0
mov qword [rsp + 0x5480], 0
lea rdx, [rsp + 0xfee0]
lea rcx, [rsp + 0x5438]
call fcn.140076858
mov qword [rsp + 0x10728], rax
mov rcx, qword [rsp + 0x10728]
call fcn.14000f8f0
lea r9, [rsp + 0x5480]
lea r8, [rsp + 0x56c0]
lea rdx, [rsp + 0x56d8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401ae66a
mov dword [rsp + 0x10730], 1
jmp 0x1401ae675
mov dword [rsp + 0x10730], 0
movzx eax, byte [rsp + 0x10730]
mov byte [rsp + 0xfed8], al
lea rcx, [rsp + 0xfee0]
call fcn.140001490
movzx edx, byte [rsp + 0xfed8]
test edx, edx
je 0x1401ae7b6
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4888]
lea rdx, [0x14024a31c]
call fcn.1400020d0
lea rcx, [rsp + 0x46e0]
call fcn.1401d4410
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r9d, dword [rsp + 0x4878]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10e60]
call fcn.14000d5a0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024c340]
call fcn.1400ef950
mov dword [rsp + 0xfee8], 0
lea rcx, [rsp + 0x5438]
call fcn.14007680c
nop
lea rcx, [rsp + 0x5468]
call fcn.140001490
nop
lea rcx, [rsp + 0x56f0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x5478]
call fcn.140001490
nop
lea rcx, [rsp + 0x56e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x5470]
call fcn.140001490
nop
lea rcx, [rsp + 0x4d60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x4390]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x4358]
call fcn.14008259c
nop
lea rcx, [rsp + 0x46e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xfee8]
jmp 0x1401b4eba
lea rcx, [rsp + 0x5438]
call fcn.140076508
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401ae7d9
addsd xmm1, qword [0x140261550]
mov rax, qword [rsp + 0x5480]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401ae7f7
addsd xmm0, qword [0x140261550]
mulsd xmm0, qword [0x140263800]
comisd xmm1, xmm0
jbe 0x1401ae91e
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4888]
lea rdx, [0x14024a36c]
call fcn.1400020d0
lea rcx, [rsp + 0x46e0]
call fcn.1401d4410
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r9d, dword [rsp + 0x4878]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10e60]
call fcn.14000d5a0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024c3b0]
call fcn.1400ef950
mov dword [rsp + 0xfeec], 0
lea rcx, [rsp + 0x5438]
call fcn.14007680c
nop
lea rcx, [rsp + 0x5468]
call fcn.140001490
nop
lea rcx, [rsp + 0x56f0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x5478]
call fcn.140001490
nop
lea rcx, [rsp + 0x56e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x5470]
call fcn.140001490
nop
lea rcx, [rsp + 0x4d60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x4390]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x4358]
call fcn.14008259c
nop
lea rcx, [rsp + 0x46e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xfeec]
jmp 0x1401b4eba
lea rcx, [rsp + 0x56c8]
call fcn.140002de0
nop
mov edx, 0xc2
lea rcx, [rsp + 0xfef0]
call fcn.1400f02a0
mov qword [rsp + 0x10738], rax
mov rax, qword [rsp + 0x10738]
mov qword [rsp + 0x10740], rax
mov rcx, qword [rsp + 0x10740]
call fcn.14000f8f0
mov r8, qword [rsp + 0x56e0]
mov rdx, rax
lea rcx, [rsp + 0x56c8]
call fcn.140002c70
nop
lea rcx, [rsp + 0xfef0]
call fcn.140001490
cmp dword [rsp + 0x5434], 3
je 0x1401ae9a7
cmp dword [rsp + 0x5434], 4
je 0x1401ae9a7
cmp dword [rsp + 0x5434], 5
jne 0x1401aea23
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.140082810
nop
lea rcx, [rsp + 0x56c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x5438]
call fcn.14007680c
nop
lea rcx, [rsp + 0x5468]
call fcn.140001490
nop
lea rcx, [rsp + 0x56f0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x5478]
call fcn.140001490
nop
lea rcx, [rsp + 0x56e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x5470]
call fcn.140001490
jmp 0x1401ae04e
lea rcx, [rsp + 0x56c8]
call fcn.14000f8f0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef950
cmp eax, 7
jne 0x1401aed7a
lea rcx, [rsp + 0x56e0]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x5d90]
call fcn.1400f9820
nop
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x968], 0
je 0x1401aea99
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401aeae3
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call fcn.14007d104
xor edx, edx
mov rcx, rax
call fcn.14007c7e4
mov edx, 5
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x5470]
call fcn.14000f8f0
mov r9, qword [rsp + 0x10e60]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.1401050c0
test eax, eax
jne 0x1401aec87
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401aeb43
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4888]
lea rdx, [0x14024a3ac]
call fcn.1400020d0
lea rcx, [rsp + 0x46e0]
call fcn.1401d4410
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r9d, dword [rsp + 0x4878]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10e60]
call fcn.14000d5a0
mov r8, qword [rsp + 0x56e0]
lea rdx, [0x14024c420]
xor ecx, ecx
call fcn.1400dcf70
xor r8d, r8d
xor edx, edx
lea rcx, [0x14024c470]
call fcn.1400ef950
mov dword [rsp + 0xfef8], 0
lea rcx, [rsp + 0x5d90]
call fcn.140001490
nop
lea rcx, [rsp + 0x56c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x5438]
call fcn.14007680c
nop
lea rcx, [rsp + 0x5468]
call fcn.140001490
nop
lea rcx, [rsp + 0x56f0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x5478]
call fcn.140001490
nop
lea rcx, [rsp + 0x56e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x5470]
call fcn.140001490
nop
lea rcx, [rsp + 0x4d60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x4390]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x4358]
call fcn.14008259c
nop
lea rcx, [rsp + 0x46e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xfef8]
jmp 0x1401b4eba
lea rcx, [rsp + 0x5470]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x5478]
call fcn.140006eb0
movzx eax, al
test eax, eax
jne 0x1401aecc7
lea rcx, [rsp + 0x5478]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.140082810
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401aed06
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rsp + 0x5d90]
call fcn.140001490
nop
lea rcx, [rsp + 0x56c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x5438]
call fcn.14007680c
nop
lea rcx, [rsp + 0x5468]
call fcn.140001490
nop
lea rcx, [rsp + 0x56f0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x5478]
call fcn.140001490
nop
lea rcx, [rsp + 0x56e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x5470]
call fcn.140001490
jmp 0x1401ae04e
xor edx, edx
lea rcx, [rsp + 0x5490]
call fcn.140161450
nop
lea rdx, [rsp + 0x56e0]
lea rcx, [rsp + 0x56a0]
call fcn.140002db0
lea rcx, [rsp + 0xff00]
call fcn.14000e290
lea r8, [0x14024c480]
lea rdx, [rsp + 0xff08]
mov rcx, rax
call fcn.14000c960
mov qword [rsp + 0x10748], rax
mov rax, qword [rsp + 0x10748]
mov qword [rsp + 0x10750], rax
mov rdx, qword [rsp + 0x10750]
lea rcx, [rsp + 0x56a8]
call fcn.140002db0
nop
lea rcx, [rsp + 0xff08]
call fcn.140001490
lea rcx, [rsp + 0x5490]
call fcn.140082174
cmp rax, 1
je 0x1401aef32
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4888]
lea rdx, [0x14024a41c]
call fcn.1400020d0
lea rcx, [rsp + 0x46e0]
call fcn.1401d4410
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r9d, dword [rsp + 0x4878]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10e60]
call fcn.14000d5a0
mov dword [rsp + 0xff10], 0
lea rcx, [rsp + 0x5490]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x56c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x5438]
call fcn.14007680c
nop
lea rcx, [rsp + 0x5468]
call fcn.140001490
nop
lea rcx, [rsp + 0x56f0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x5478]
call fcn.140001490
nop
lea rcx, [rsp + 0x56e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x5470]
call fcn.140001490
nop
lea rcx, [rsp + 0x4d60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x4390]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x4358]
call fcn.14008259c
nop
lea rcx, [rsp + 0x46e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff10]
jmp 0x1401b4eba
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.14000d010
mov rdi, rax
lea rcx, [rsp + 0x56a0]
call fcn.14000f8f0
mov r9d, dword [rsp + 0x56d0]
mov r8d, dword [rdi]
mov rdx, rax
lea rcx, [rsp + 0x56e8]
call fcn.1400fa8d0
nop
cmp dword [rsp + 0x56d0], 0
je 0x1401af066
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.14000d010
mov r8d, dword [rsp + 0x56d0]
mov edx, dword [rax]
lea rcx, [rsp + 0x5da0]
call fcn.1401d1810
nop
mov dx, 0x2e
lea rcx, [rsp + 0x56e8]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0xff18]
lea rcx, [rsp + 0x56e8]
call fcn.140006a00
mov qword [rsp + 0x10758], rax
mov rcx, qword [rsp + 0x10758]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov dword [rsp + 0x60e0], eax
lea rcx, [rsp + 0xff18]
call fcn.140001490
lea rcx, [rsp + 0x5f40]
mov r8d, dword [rsp + 0x60e0]
lea rdx, [0x14024c4a4]
call fcn.140002c70
lea rcx, [rsp + 0x5f48]
lea rdx, [rsp + 0x56b0]
call fcn.140002db0
lea rcx, [rsp + 0x5f50]
lea rdx, [rsp + 0x56a8]
call fcn.140002db0
lea rcx, [rsp + 0x5da0]
call fcn.1401bf8a0
nop
lea rcx, [rsp + 0x5da0]
call fcn.140014ec0
jmp 0x1401af144
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.14000d010
mov edx, dword [rax]
lea rcx, [rsp + 0x60f0]
call fcn.1401d18c0
nop
mov dx, 0x2e
lea rcx, [rsp + 0x56e8]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0xff20]
lea rcx, [rsp + 0x56e8]
call fcn.140006a00
mov qword [rsp + 0x10760], rax
mov rcx, qword [rsp + 0x10760]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov dword [rsp + 0x6430], eax
lea rcx, [rsp + 0xff20]
call fcn.140001490
lea rcx, [rsp + 0x6290]
mov r8d, dword [rsp + 0x6430]
lea rdx, [0x14024c4ac]
call fcn.140002c70
lea rcx, [rsp + 0x6298]
lea rdx, [rsp + 0x56b0]
call fcn.140002db0
lea rcx, [rsp + 0x62a0]
lea rdx, [rsp + 0x56a8]
call fcn.140002db0
lea rcx, [rsp + 0x60f0]
call fcn.1401bf8a0
nop
lea rcx, [rsp + 0x60f0]
call fcn.140014ec0
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x968], 0
je 0x1401af185
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401af1cf
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call fcn.14007d104
xor edx, edx
mov rcx, rax
call fcn.14007c7e4
mov edx, 5
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x56e8]
call fcn.14000f8f0
mov rdi, rax
lea rcx, [rsp + 0x5470]
call fcn.14000f8f0
mov r8, qword [rsp + 0x10e60]
mov r8, qword [r8 + 0x968]
mov rdx, rdi
mov rcx, rax
call fcn.140106b10
lea rcx, [rsp + 0x5470]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x5478]
call fcn.140006eb0
movzx eax, al
test eax, eax
jne 0x1401af246
lea rcx, [rsp + 0x5478]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4358]
call fcn.140082810
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401af285
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rsp + 0x56e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x5490]
call fcn.1401613f0
nop
lea rcx, [rsp + 0x56c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x5438]
call fcn.14007680c
nop
lea rcx, [rsp + 0x5468]
call fcn.140001490
nop
lea rcx, [rsp + 0x56f0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x5478]
call fcn.140001490
nop
lea rcx, [rsp + 0x56e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x5470]
call fcn.140001490
jmp 0x1401ae04e
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4358]
call fcn.14000c510
mov edx, dword [rsp + 0x4878]
lea rcx, [rsp + 0x4a20]
call fcn.14000c750
nop
lea rcx, [rsp + 0x4a20]
call fcn.1401bf280
lea rcx, [rsp + 0x4888]
lea rdx, [0x14024a4bc]
call fcn.1400020d0
lea rcx, [rsp + 0x4968]
lea rdx, [0x14024a504]
call fcn.1400020d0
lea rcx, [rsp + 0x46e0]
call fcn.1401d4410
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r9d, dword [rsp + 0x4878]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10e60]
call fcn.14000d5a0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024c4b8]
call fcn.1400ef950
mov dword [rsp + 0xff28], 0
lea rcx, [rsp + 0x4a20]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x4d60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x4390]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x4358]
call fcn.14008259c
nop
lea rcx, [rsp + 0x46e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff28]
jmp 0x1401b4eba
mov rax, qword [rsp + 0x10e60]
cmp dword [rax + 0x978], 0
je 0x1401af438
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000ce00
test eax, eax
jne 0x1401af457
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000c7c0
mov dword [rsp + 0x67c0], eax
cmp dword [rsp + 0x67c0], 1
je 0x1401af483
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0x67c8], eax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x8028
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov dword [rsp + 0x6b20], eax
cmp dword [rsp + 0x6b20], 0
jne 0x1401af4e1
xor eax, eax
jmp 0x1401b4eba
lea rcx, [rsp + 0x67e0]
call fcn.1401d19d0
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0x67c8]
call fcn.140082c64
mov dword [rsp + 0x6978], eax
lea rcx, [rsp + 0x67e0]
call fcn.1401d6a40
test eax, eax
jne 0x1401af546
mov dword [rsp + 0xff2c], 0
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff2c]
jmp 0x1401b4eba
lea rcx, [rsp + 0x6a68]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
test eax, eax
je 0x1401af583
mov dword [rsp + 0xff30], 0
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff30]
jmp 0x1401b4eba
lea rcx, [rsp + 0x6440]
call fcn.140002de0
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e7060
nop
lea rcx, [rsp + 0xff38]
call fcn.140001000
mov qword [rsp + 0x10768], rax
mov rax, qword [rsp + 0x10768]
mov qword [rsp + 0x10770], rax
lea r8, [0x14024c4c0]
mov rdx, qword [rsp + 0x10770]
lea rcx, [rsp + 0xff40]
call fcn.1400010b0
mov qword [rsp + 0x10778], rax
mov rax, qword [rsp + 0x10778]
mov qword [rsp + 0x10780], rax
mov rcx, qword [rsp + 0x10780]
call fcn.14000f8f0
mov dword [rsp + 0x20], 0
mov r9d, reloc.WSOCK32.dll_WSACleanup
mov r8, rax
lea rdx, [rsp + 0xff48]
lea rcx, [rsp + 0x7340]
call fcn.1400ea430
nop
lea rcx, [rsp + 0xff40]
call fcn.140001490
nop
lea rcx, [rsp + 0xff38]
call fcn.140001490
lea rcx, [rsp + 0x67d0]
call fcn.140002de0
nop
mov r8, qword [rsp + 0x69a8]
lea rdx, [0x14024c4e0]
lea rcx, [rsp + 0x67d0]
call fcn.140002c70
lea rcx, [rsp + 0x67d0]
call fcn.14000f8f0
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x7420]
lea rcx, [rsp + 0x7340]
call fcn.1400eacc0
lea rcx, [rsp + 0xff60]
call fcn.1400e5260
mov rdx, rax
lea rcx, [rsp + 0x7420]
call fcn.1400e5140
movzx eax, al
test eax, eax
je 0x1401af745
lea rdx, [rsp + 0xff70]
lea rcx, [rsp + 0x7420]
call fcn.1400e6730
lea r8, [0x14024c550]
lea rdx, [rsp + 0x7430]
mov rcx, rax
call fcn.1400e5c40
lea rcx, [rsp + 0xff78]
call fcn.1400e4480
mov rdx, rax
lea rcx, [rsp + 0x7430]
call fcn.1400e4380
movzx eax, al
test eax, eax
je 0x1401af745
lea r8, [0x14024c558]
lea rdx, [rsp + 0xff80]
lea rcx, [rsp + 0x7430]
call fcn.1400e5b90
mov rcx, rax
call fcn.1400e44c0
mov rdx, rax
lea rcx, [rsp + 0x6440]
call fcn.1400020d0
lea rcx, [rsp + 0x6440]
call fcn.140006eb0
movzx eax, al
test eax, eax
je 0x1401af7bb
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Getting_NIC_vendor_information_failed_
call fcn.1400ef950
mov dword [rsp + 0xff88], 0
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff88]
jmp 0x1401b4eba
lea rcx, [rsp + 0x6480]
call fcn.14000c880
nop
lea rcx, [rsp + 0x69d0]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov dword [rsp + 0x6618], eax
lea rcx, [rsp + 0x6480]
call fcn.1401bf080
test eax, eax
jne 0x1401af866
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Please_make_sure_that_Image1_has_been_set_
call fcn.1400ef950
mov dword [rsp + 0xff8c], 0
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff8c]
jmp 0x1401b4eba
lea rcx, [rsp + 0x6628]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400f9330
mov dword [rsp + 0x6438], eax
cmp dword [rsp + 0x6438], 2
je 0x1401af8fc
xor r8d, r8d
mov edx, 0x40
lea rcx, str.This_function_only_supports_VHD_files__other_formats_are_not_supported.
call fcn.1400ef950
mov dword [rsp + 0xff90], 0
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff90]
jmp 0x1401b4eba
lea rdx, [rsp + 0x6628]
lea r8, [0x14024c6b0]
lea rcx, [rsp + 0x7330]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rdi, rax
lea rcx, [rsp + 0x6628]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call fcn.140107430
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 1
lea rcx, [0x14024c6c8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x67d8], rax
cmp qword [rsp + 0x67d8], 0
jne 0x1401afa20
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024c6f0]
call fcn.1400ef950
mov dword [rsp + 0xff94], 0
lea rcx, [rsp + 0x7330]
call fcn.140001490
nop
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff94]
jmp 0x1401b4eba
lea rdx, [0x14024c748]
mov rcx, qword [rsp + 0x67d8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x7338], rax
lea rdx, [0x14024c760]
mov rcx, qword [rsp + 0x67d8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x7410], rax
lea rdx, [0x14024c770]
mov rcx, qword [rsp + 0x67d8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x6478], rax
lea rdx, [0x14024c788]
mov rcx, qword [rsp + 0x67d8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x7418], rax
mov qword [rsp + 0x6470], 0xffffffffffffffff
mov dword [rsp + 0x6458], 2
mov dword [rsp + 0x645c], 0xec984aec
mov eax, 0xa0f9
mov word [rsp + 0x6460], ax
mov eax, 0x47e9
mov word [rsp + 0x6462], ax
mov byte [rsp + 0x6464], 0x90
mov byte [rsp + 0x6465], 0x1f
mov byte [rsp + 0x6466], 0x71
mov byte [rsp + 0x6467], 0x41
mov byte [rsp + 0x6468], 0x5a
mov byte [rsp + 0x6469], 0x66
mov byte [rsp + 0x646a], 0x34
mov byte [rsp + 0x646b], 0x5b
mov dword [rsp + 0x6b28], 1
lea rdi, [rsp + 0x6b2c]
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x6b2c], 1
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rdx, rax
lea rax, [rsp + 0x6470]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x6b28]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x3f0000
lea rcx, [rsp + 0x6458]
call qword [rsp + 0x7410]
test eax, eax
je 0x1401afc27
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14024c7a8]
call fcn.1400ef950
mov dword [rsp + 0xff98], 0
lea rcx, [rsp + 0x7330]
call fcn.140001490
nop
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff98]
jmp 0x1401b4eba
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6470]
call qword [rsp + 0x6478]
test eax, eax
je 0x1401afd0c
mov rcx, qword [rsp + 0x6470]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14024c7d0]
call fcn.1400ef950
mov dword [rsp + 0xff9c], 0
lea rcx, [rsp + 0x7330]
call fcn.140001490
nop
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xff9c]
jmp 0x1401b4eba
xor eax, eax
mov word [rsp + 0x6b30], ax
lea rdi, [rsp + 0x6b32]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov dword [rsp + 0x6448], 0x800
lea r8, [rsp + 0x6b30]
lea rdx, [rsp + 0x6448]
mov rcx, qword [rsp + 0x6470]
call qword [rsp + 0x7418]
lea rcx, [0x14024c7f8]
call fcn.1400a8944
lea rcx, [rsp + rax*2 + 0x6b30]
call fcn.1400a99f8
mov dword [rsp + 0x6434], eax
mov eax, 0x43
mov word [rsp + 0x67c4], ax
mov dword [rsp + 0x7438], 0
jmp 0x1401afd9c
mov eax, dword [rsp + 0x7438]
add eax, 1
mov dword [rsp + 0x7438], eax
cmp dword [rsp + 0x7438], 0x14
jge 0x1401b0063
movzx eax, word [rsp + 0x67c4]
cmp eax, 0x43
jne 0x1401b0063
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x743c], eax
mov byte [rsp + 0x7440], 0x43
jmp 0x1401afdee
movzx eax, byte [rsp + 0x7440]
add al, 1
mov byte [rsp + 0x7440], al
movsx eax, byte [rsp + 0x7440]
cmp eax, 0x5a
jg 0x1401b005e
movzx eax, word [rsp + 0x67c4]
cmp eax, 0x43
jne 0x1401b005e
movsx ecx, byte [rsp + 0x7440]
sub ecx, 0x41
mov eax, 1
shl eax, cl
mov ecx, eax
mov eax, dword [rsp + 0x743c]
and eax, ecx
test eax, eax
jne 0x1401afe33
jmp 0x1401afddd
lea rcx, [rsp + 0xb458]
call fcn.140002de0
nop
movsx r8d, byte [rsp + 0x7440]
lea rdx, [0x14024c820]
lea rcx, [rsp + 0xb458]
call fcn.140002c70
lea rcx, [rsp + 0xb458]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
je 0x1401afe8b
lea rcx, [rsp + 0xb458]
call fcn.140001490
jmp 0x1401afddd
movsx r8d, byte [rsp + 0x7440]
lea rdx, [0x14024c828]
lea rcx, [rsp + 0xb458]
call fcn.140002c70
lea rcx, [rsp + 0xb458]
call fcn.14000f8f0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 3
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x7448], rax
cmp qword [rsp + 0x7448], 0xffffffffffffffff
jne 0x1401aff0a
lea rcx, [rsp + 0xb458]
call fcn.140001490
jmp 0x1401afddd
mov dword [rsp + 0xb450], 0
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0xb450]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x4000
lea rax, [rsp + 0x7450]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x560000
mov rcx, qword [rsp + 0x7448]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1401b003d
mov dword [rsp + 0xb460], 0
mov dword [rsp + 0xb460], 0
jmp 0x1401aff8a
mov eax, dword [rsp + 0xb460]
add eax, 1
mov dword [rsp + 0xb460], eax
mov eax, dword [rsp + 0x7450]
cmp dword [rsp + 0xb460], eax
jge 0x1401b003d
cmp dword [rsp + 0x6434], 0xffffffff
je 0x1401affc6
movsxd rax, dword [rsp + 0xb460]
imul rax, rax, 0x18
mov eax, dword [rsp + rax + 0x7458]
cmp dword [rsp + 0x6434], eax
je 0x1401affc6
jmp 0x1401aff79
lea rcx, [rsp + 0xb468]
call fcn.140002de0
nop
movsx r8d, byte [rsp + 0x7440]
lea rdx, [0x14024c838]
lea rcx, [rsp + 0xb468]
call fcn.140002c70
lea rcx, [rsp + 0xb468]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401b002b
movsx ax, byte [rsp + 0x7440]
mov word [rsp + 0x67c4], ax
lea rcx, [rsp + 0xb468]
call fcn.140001490
jmp 0x1401b003d
lea rcx, [rsp + 0xb468]
call fcn.140001490
jmp 0x1401aff79
mov rcx, qword [rsp + 0x7448]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0xb458]
call fcn.140001490
jmp 0x1401afddd
jmp 0x1401afd8b
movzx eax, word [rsp + 0x67c4]
cmp eax, 0x43
jne 0x1401b0153
cmp qword [rsp + 0x6470], 0xffffffffffffffff
je 0x1401b00ad
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6470]
call qword [rsp + 0x7338]
mov rcx, qword [rsp + 0x6470]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x6470], 0xffffffffffffffff
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14024c850]
call fcn.1400ef950
mov dword [rsp + 0xffa0], 0
lea rcx, [rsp + 0x7330]
call fcn.140001490
nop
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xffa0]
jmp 0x1401b4eba
call fcn.1400d7f30
test eax, eax
jne 0x1401b023f
cmp qword [rsp + 0x6470], 0xffffffffffffffff
je 0x1401b0199
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6470]
call qword [rsp + 0x7338]
mov rcx, qword [rsp + 0x6470]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x6470], 0xffffffffffffffff
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14024c878]
call fcn.1400ef950
mov dword [rsp + 0xffa4], 0
lea rcx, [rsp + 0x7330]
call fcn.140001490
nop
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xffa4]
jmp 0x1401b4eba
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0xffa8]
call fcn.140005ec0
mov qword [rsp + 0x10788], rax
mov rax, qword [rsp + 0x10788]
mov qword [rsp + 0x10790], rax
lea r8, [0x14024c8b0]
mov rdx, qword [rsp + 0x10790]
lea rcx, [rsp + 0xffb0]
call fcn.1400010b0
mov qword [rsp + 0x10798], rax
mov rcx, qword [rsp + 0x10798]
call fcn.14000f8f0
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0xffb0]
call fcn.140001490
nop
lea rcx, [rsp + 0xffa8]
call fcn.140001490
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0xffb8]
call fcn.140005ec0
mov qword [rsp + 0x107a0], rax
mov rax, qword [rsp + 0x107a0]
mov qword [rsp + 0x107a8], rax
lea r8, [0x14024c8c0]
mov rdx, qword [rsp + 0x107a8]
lea rcx, [rsp + 0xffc0]
call fcn.1400010b0
mov qword [rsp + 0x107b0], rax
mov rcx, qword [rsp + 0x107b0]
call fcn.14000f8f0
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0xffc0]
call fcn.140001490
nop
lea rcx, [rsp + 0xffb8]
call fcn.140001490
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0xffd0]
call fcn.140005ec0
mov qword [rsp + 0x107b8], rax
mov rax, qword [rsp + 0x107b8]
mov qword [rsp + 0x107c0], rax
lea r8, [0x14024c8e0]
mov rdx, qword [rsp + 0x107c0]
lea rcx, [rsp + 0xffd8]
call fcn.1400010b0
mov qword [rsp + 0x107c8], rax
mov rax, qword [rsp + 0x107c8]
mov qword [rsp + 0x107d0], rax
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0xffe0]
call fcn.140005ec0
mov qword [rsp + 0x107d8], rax
mov rax, qword [rsp + 0x107d8]
mov qword [rsp + 0x107e0], rax
lea r8, [0x14024c928]
mov rdx, qword [rsp + 0x107e0]
lea rcx, [rsp + 0xffe8]
call fcn.1400010b0
mov qword [rsp + 0x107e8], rax
mov rcx, qword [rsp + 0x107d0]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x107e8]
call fcn.14000f8f0
mov r8, rdi
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [rsp + 0xffc8], eax
lea rcx, [rsp + 0xffe8]
call fcn.140001490
nop
lea rcx, [rsp + 0xffe0]
call fcn.140001490
nop
lea rcx, [rsp + 0xffd8]
call fcn.140001490
nop
lea rcx, [rsp + 0xffd0]
call fcn.140001490
cmp dword [rsp + 0xffc8], 0
je 0x1401b0576
cmp qword [rsp + 0x6470], 0xffffffffffffffff
je 0x1401b04d0
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6470]
call qword [rsp + 0x7338]
mov rcx, qword [rsp + 0x6470]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x6470], 0xffffffffffffffff
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14024c938]
call fcn.1400ef950
mov dword [rsp + 0xfff0], 0
lea rcx, [rsp + 0x7330]
call fcn.140001490
nop
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0xfff0]
jmp 0x1401b4eba
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0xfff8]
call fcn.140005ec0
mov qword [rsp + 0x107f0], rax
mov rax, qword [rsp + 0x107f0]
mov qword [rsp + 0x107f8], rax
lea r8, [0x14024c970]
mov rdx, qword [rsp + 0x107f8]
lea rcx, [rsp + 0x10000]
call fcn.1400010b0
mov qword [rsp + 0x10800], rax
mov rax, qword [rsp + 0x10800]
mov qword [rsp + 0x10808], rax
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10008]
call fcn.140005ec0
mov qword [rsp + 0x10810], rax
mov rax, qword [rsp + 0x10810]
mov qword [rsp + 0x10818], rax
lea r8, [0x14024c9b8]
mov rdx, qword [rsp + 0x10818]
lea rcx, [rsp + 0x10010]
call fcn.1400010b0
mov qword [rsp + 0x10820], rax
mov rcx, qword [rsp + 0x10808]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x10820]
call fcn.14000f8f0
mov r8, rdi
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [rsp + 0xfff4], eax
lea rcx, [rsp + 0x10010]
call fcn.140001490
nop
lea rcx, [rsp + 0x10008]
call fcn.140001490
nop
lea rcx, [rsp + 0x10000]
call fcn.140001490
nop
lea rcx, [rsp + 0xfff8]
call fcn.140001490
cmp dword [rsp + 0xfff4], 0
je 0x1401b081e
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10018]
call fcn.140005ec0
mov qword [rsp + 0x10828], rax
mov rax, qword [rsp + 0x10828]
mov qword [rsp + 0x10830], rax
lea r8, [0x14024c9d0]
mov rdx, qword [rsp + 0x10830]
lea rcx, [rsp + 0x10020]
call fcn.1400010b0
mov qword [rsp + 0x10838], rax
mov rcx, qword [rsp + 0x10838]
call fcn.14000f8f0
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10020]
call fcn.140001490
nop
lea rcx, [rsp + 0x10018]
call fcn.140001490
cmp qword [rsp + 0x6470], 0xffffffffffffffff
je 0x1401b0778
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6470]
call qword [rsp + 0x7338]
mov rcx, qword [rsp + 0x6470]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x6470], 0xffffffffffffffff
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 0
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14024c9e0]
call fcn.1400ef950
mov dword [rsp + 0x10028], 0
lea rcx, [rsp + 0x7330]
call fcn.140001490
nop
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0x10028]
jmp 0x1401b4eba
mov dword [rsp + 0x643c], 0
lea rcx, [rsp + 0xb848]
call fcn.140002de0
nop
lea rcx, [rsp + 0xb828]
call fcn.140002de0
nop
lea rcx, [rsp + 0xb830]
call fcn.140005560
nop
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10030]
call fcn.140005ec0
mov qword [rsp + 0x10840], rax
mov rax, qword [rsp + 0x10840]
mov qword [rsp + 0x10848], rax
lea r8, str._SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rdx, qword [rsp + 0x10848]
lea rcx, [rsp + 0x10038]
call fcn.1400010b0
mov qword [rsp + 0x10850], rax
mov rcx, qword [rsp + 0x10850]
call fcn.14000f8f0
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xb830]
call fcn.140005720
test eax, eax
jne 0x1401b08e5
mov dword [rsp + 0x10858], 1
jmp 0x1401b08f0
mov dword [rsp + 0x10858], 0
movzx eax, byte [rsp + 0x10858]
mov byte [rsp + 0x1002c], al
lea rcx, [rsp + 0x10038]
call fcn.140001490
nop
lea rcx, [rsp + 0x10030]
call fcn.140001490
movzx edx, byte [rsp + 0x1002c]
test edx, edx
je 0x1401b0be7
xor eax, eax
mov word [rsp + 0xc8c0], ax
lea rdi, [rsp + 0xc8c2]
xor eax, eax
mov ecx, 0x1fe
rep stosb byte [rdi], al
mov dword [rsp + 0xc8b4], 0x100
lea r9, [rsp + 0xc8b4]
lea r8, [rsp + 0xc8c0]
lea rdx, str.CurrentVersion
lea rcx, [rsp + 0xb830]
call fcn.140005830
mov dword [rsp + 0xc8ac], 0
mov dword [rsp + 0xc8b0], 0
lea r8, [rsp + 0xc8ac]
lea rdx, str.CurrentMajorVersionNumber
lea rcx, [rsp + 0xb830]
call fcn.1400057b0
lea r8, [rsp + 0xc8b0]
lea rdx, str.CurrentMinorVersionNumber
lea rcx, [rsp + 0xb830]
call fcn.1400057b0
lea rcx, [rsp + 0xb830]
call fcn.1400055f0
lea rdx, [rsp + 0xc8c0]
lea rcx, [rsp + 0xcac0]
call fcn.140002100
nop
lea rcx, [rsp + 0xcac0]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov dword [rsp + 0xcac8], eax
xor r8d, r8d
lea rdx, [0x14024a51c]
lea rcx, [rsp + 0xcac0]
call fcn.140006780
mov r8d, eax
add r8d, 1
lea rdx, [rsp + 0x10040]
lea rcx, [rsp + 0xcac0]
call fcn.140006a00
mov qword [rsp + 0x10860], rax
mov rcx, qword [rsp + 0x10860]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov dword [rsp + 0xcacc], eax
lea rcx, [rsp + 0x10040]
call fcn.140001490
cmp dword [rsp + 0xcac8], 6
jne 0x1401b0a8e
cmp dword [rsp + 0xcacc], 3
jne 0x1401b0a8e
cmp dword [rsp + 0xc8ac], 0xa
je 0x1401b0a8e
mov dword [rsp + 0xcacc], 2
movsxd rax, dword [rsp + 0xcac8]
and rax, 0xff
movzx edx, al
movsxd rax, dword [rsp + 0xcacc]
and rax, 0xff
movzx ecx, al
shl ecx, 8
mov eax, edx
or eax, ecx
movzx eax, ax
and rax, 0xffff
movzx eax, ax
mov dword [rsp + 0xc8a8], eax
mov eax, dword [rsp + 0xc8a8]
and rax, 0xffff
movzx eax, ax
and rax, 0xff
movzx eax, al
cmp eax, 6
jb 0x1401b0bc5
mov eax, dword [rsp + 0xc8a8]
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
test eax, eax
jne 0x1401b0b21
lea rdx, str.Vista
lea rcx, [rsp + 0xb848]
call fcn.1400020d0
mov eax, dword [rsp + 0xc8a8]
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 1
jne 0x1401b0b57
lea rdx, str.Win7
lea rcx, [rsp + 0xb848]
call fcn.1400020d0
mov eax, dword [rsp + 0xc8a8]
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 2
jne 0x1401b0b8d
lea rdx, str.Win8
lea rcx, [rsp + 0xb848]
call fcn.1400020d0
mov eax, dword [rsp + 0xc8a8]
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
cmp eax, 3
jne 0x1401b0bc3
lea rdx, str.Win10
lea rcx, [rsp + 0xb848]
call fcn.1400020d0
jmp 0x1401b0bda
lea rdx, [0x14024c4d4]
lea rcx, [rsp + 0xb848]
call fcn.1400020d0
nop
lea rcx, [rsp + 0xcac0]
call fcn.140001490
lea rcx, [rsp + 0xb848]
call fcn.140006eb0
movzx eax, al
test eax, eax
je 0x1401b0c3e
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Getting_OS_information_failed_
call fcn.1400ef950
nop
lea rcx, [rsp + 0xb830]
call fcn.140005590
nop
lea rcx, [rsp + 0xb828]
call fcn.140001490
nop
lea rcx, [rsp + 0xb848]
call fcn.140001490
jmp 0x1401b340e
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10048]
call fcn.140005ec0
mov qword [rsp + 0x10868], rax
mov rax, qword [rsp + 0x10868]
mov qword [rsp + 0x10870], rax
lea r8, str.:WindowsSysWOW64
mov rdx, qword [rsp + 0x10870]
lea rcx, [rsp + 0x10050]
call fcn.1400010b0
mov qword [rsp + 0x10878], rax
mov rax, qword [rsp + 0x10878]
mov qword [rsp + 0x10880], rax
mov rcx, qword [rsp + 0x10880]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401b0cd0
lea rax, [0x14024c564]
mov qword [rsp + 0x10888], rax
jmp 0x1401b0cdf
lea rax, [0x14024c8d4]
mov qword [rsp + 0x10888], rax
mov rdx, qword [rsp + 0x10888]
lea rcx, [rsp + 0xb828]
call fcn.1400020d0
nop
lea rcx, [rsp + 0x10050]
call fcn.140001490
nop
lea rcx, [rsp + 0x10048]
call fcn.140001490
xor edx, edx
mov word [rsp + 0xb860], dx
lea rdi, [rsp + 0xb862]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10058]
call fcn.140001000
mov qword [rsp + 0x10890], rax
mov rax, qword [rsp + 0x10890]
mov qword [rsp + 0x10898], rax
lea r8, [0x14024cbb8]
mov rdx, qword [rsp + 0x10898]
lea rcx, [rsp + 0x10060]
call fcn.1400010b0
mov qword [rsp + 0x108a0], rax
mov rcx, qword [rsp + 0x108a0]
call fcn.14000f8f0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
lea r9, [rsp + 0xb860]
lea r8, [0x14024a584]
lea rdx, str.Email
lea rcx, [0x14024cbe0]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x10060]
call fcn.140001490
nop
lea rcx, [rsp + 0x10058]
call fcn.140001490
lea rdx, [rsp + 0xb860]
lea rcx, [rsp + 0xb7e8]
call fcn.140002100
nop
lea rcx, [rsp + 0x10068]
call fcn.140001000
mov qword [rsp + 0x108a8], rax
mov rax, qword [rsp + 0x108a8]
mov qword [rsp + 0x108b0], rax
lea r8, [0x14024cbf0]
mov rdx, qword [rsp + 0x108b0]
lea rcx, [rsp + 0x10070]
call fcn.1400010b0
mov qword [rsp + 0x108b8], rax
mov rcx, qword [rsp + 0x108b8]
call fcn.14000f8f0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
lea r9, [rsp + 0xb860]
lea r8, [0x14024a5a4]
lea rdx, str.EmailPWD
lea rcx, str.Config
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rcx, [rsp + 0x10070]
call fcn.140001490
nop
lea rcx, [rsp + 0x10068]
call fcn.140001490
lea rdx, [rsp + 0xb860]
lea rcx, [rsp + 0xc898]
call fcn.140004e30
nop
lea rcx, [rsp + 0xc060]
call fcn.140002de0
nop
lea r8, [0x14024a5bc]
lea rdx, [rsp + 0xb848]
lea rcx, [rsp + 0x10078]
call fcn.1400010b0
mov qword [rsp + 0x108c0], rax
mov rax, qword [rsp + 0x108c0]
mov qword [rsp + 0x108c8], rax
lea r8, [rsp + 0xb828]
mov rdx, qword [rsp + 0x108c8]
lea rcx, [rsp + 0x10080]
call fcn.140006bd0
mov qword [rsp + 0x108d0], rax
mov rax, qword [rsp + 0x108d0]
mov qword [rsp + 0x108d8], rax
mov rcx, qword [rsp + 0x108d8]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10088]
call fcn.1400d9ff0
mov qword [rsp + 0x108e0], rax
mov rax, qword [rsp + 0x108e0]
mov qword [rsp + 0x108e8], rax
lea rcx, [rsp + 0x6440]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10090]
call fcn.1400d9ff0
mov qword [rsp + 0x108f0], rax
mov rax, qword [rsp + 0x108f0]
mov qword [rsp + 0x108f8], rax
lea rcx, [rsp + 0x10098]
call fcn.140005140
mov qword [rsp + 0x10900], rax
mov rax, qword [rsp + 0x10900]
mov qword [rsp + 0x10908], rax
mov rcx, qword [rsp + 0x10908]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x100a0]
call fcn.1400d9ff0
mov qword [rsp + 0x10910], rax
mov rax, qword [rsp + 0x10910]
mov qword [rsp + 0x10918], rax
mov edx, 3
lea rcx, [rsp + 0x100a8]
call fcn.1400dde90
mov qword [rsp + 0x10920], rax
mov rax, qword [rsp + 0x10920]
mov qword [rsp + 0x10928], rax
mov rcx, qword [rsp + 0x10928]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x100b0]
call fcn.1400d9ff0
mov qword [rsp + 0x10930], rax
mov rax, qword [rsp + 0x10930]
mov qword [rsp + 0x10938], rax
call fcn.14000e2c0
mov rdx, rax
lea rcx, [rsp + 0x100b8]
call fcn.140002100
mov qword [rsp + 0x10940], rax
mov rax, qword [rsp + 0x10940]
mov qword [rsp + 0x10948], rax
mov rcx, qword [rsp + 0x10948]
call fcn.140006970
mov rcx, rax
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x100c0]
call fcn.1400d9ff0
mov qword [rsp + 0x10950], rax
mov rax, qword [rsp + 0x10950]
mov qword [rsp + 0x10958], rax
lea rcx, [rsp + 0x100c8]
call fcn.14018aa70
mov qword [rsp + 0x10960], rax
mov rax, qword [rsp + 0x10960]
mov qword [rsp + 0x10968], rax
mov rcx, qword [rsp + 0x10968]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x100d0]
call fcn.1400d9ff0
mov qword [rsp + 0x10970], rax
mov rax, qword [rsp + 0x10970]
mov qword [rsp + 0x10978], rax
lea rcx, [rsp + 0xc898]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x100d8]
call fcn.1400047b0
mov qword [rsp + 0x10980], rax
mov rax, qword [rsp + 0x10980]
mov qword [rsp + 0x10988], rax
mov rcx, qword [rsp + 0x10988]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x100e0]
call fcn.1400d9ff0
mov qword [rsp + 0x10990], rax
mov rax, qword [rsp + 0x10990]
mov qword [rsp + 0x10998], rax
lea rcx, [rsp + 0xb7e8]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x100e8]
call fcn.1400d9ff0
mov qword [rsp + 0x109a0], rax
mov rax, qword [rsp + 0x109a0]
mov qword [rsp + 0x109a8], rax
mov rax, qword [rsp + 0x108e8]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x108f8]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x10918]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x10938]
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x10958]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10978]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x10998]
mov r9, qword [r9]
mov r8, qword [rsp + 0x109a8]
mov r8, qword [r8]
lea rdx, str.http:__cp.youngzsoft.com_updatenic.php_typeupdatenicfromidcemail_spassword_slicense_sproduct_smachineid_sreleasetime_snicvendor_sos_s
lea rcx, [rsp + 0xc060]
call fcn.140002c70
nop
lea rcx, [rsp + 0x100e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x100e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x100d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x100d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x100c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x100c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x100b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x100b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x100a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x100a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x10098]
call fcn.140001490
nop
lea rcx, [rsp + 0x10090]
call fcn.140001490
nop
lea rcx, [rsp + 0x10088]
call fcn.140001490
nop
lea rcx, [rsp + 0x10080]
call fcn.140001490
nop
lea rcx, [rsp + 0x10078]
call fcn.140001490
lea rcx, [rsp + 0xc060]
call fcn.14000f8f0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc8a0]
call fcn.1400edcb0
nop
lea rcx, [rsp + 0xc8a0]
call fcn.14000f8f0
mov r9d, reloc.WSOCK32.dll_WSACleanup
mov r8, rax
lea rdx, [rsp + 0x100f0]
lea rcx, [rsp + 0x7340]
call fcn.1400ea4a0
mov rcx, rax
call fcn.1400e4160
movzx eax, al
test eax, eax
jne 0x1401b13dd
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x14024cd60]
call fcn.1400ef950
nop
lea rcx, [rsp + 0xc8a0]
call fcn.140001490
nop
lea rcx, [rsp + 0xc060]
call fcn.140001490
nop
lea rcx, [rsp + 0xc898]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e8]
call fcn.140001490
nop
lea rcx, [rsp + 0xb830]
call fcn.140005590
nop
lea rcx, [rsp + 0xb828]
call fcn.140001490
nop
lea rcx, [rsp + 0xb848]
call fcn.140001490
jmp 0x1401b340e
lea r8, str.UpdateInfo
lea rdx, [rsp + 0xc078]
lea rcx, [rsp + 0x7340]
call fcn.1400e5c40
lea rcx, [rsp + 0xc078]
call fcn.1400e4300
movzx eax, al
test eax, eax
je 0x1401b1488
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Checking_for_update_failed._Please_make_sure_that_the_server_is_connected_to_the_Internet.
call fcn.1400ef950
nop
lea rcx, [rsp + 0xc8a0]
call fcn.140001490
nop
lea rcx, [rsp + 0xc060]
call fcn.140001490
nop
lea rcx, [rsp + 0xc898]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e8]
call fcn.140001490
nop
lea rcx, [rsp + 0xb830]
call fcn.140005590
nop
lea rcx, [rsp + 0xb828]
call fcn.140001490
nop
lea rcx, [rsp + 0xb848]
call fcn.140001490
jmp 0x1401b340e
lea rcx, [rsp + 0xc890]
call fcn.140002de0
nop
lea rcx, [rsp + 0xb820]
call fcn.140002de0
nop
lea rcx, [rsp + 0xb7e0]
call fcn.140002de0
nop
lea rcx, [rsp + 0xb810]
call fcn.140002de0
nop
lea r8, str.notification
lea rdx, [rsp + 0xb7f8]
lea rcx, [rsp + 0xc078]
call fcn.1400e5c40
lea rcx, [rsp + 0xb7f8]
call fcn.1400e4300
movzx eax, al
test eax, eax
jne 0x1401b1524
lea r8, [0x14024cf08]
lea rdx, [rsp + 0x10108]
lea rcx, [rsp + 0xb7f8]
call fcn.1400e5b90
mov rcx, rax
call fcn.1400e44c0
mov rdx, rax
lea rcx, [rsp + 0xc890]
call fcn.1400020d0
lea r8, str.targeturl
lea rdx, [rsp + 0x10110]
lea rcx, [rsp + 0xc078]
call fcn.1400e5c40
mov rax, qword [rax]
mov qword [rsp + 0xb7f8], rax
lea rcx, [rsp + 0xb7f8]
call fcn.1400e4300
movzx eax, al
test eax, eax
jne 0x1401b1593
lea r8, [0x14024cf30]
lea rdx, [rsp + 0x10118]
lea rcx, [rsp + 0xb7f8]
call fcn.1400e5b90
mov rcx, rax
call fcn.1400e44c0
mov rdx, rax
lea rcx, [rsp + 0xb820]
call fcn.1400020d0
lea r8, str.size
lea rdx, [rsp + 0x10120]
lea rcx, [rsp + 0xc078]
call fcn.1400e5c40
mov rax, qword [rax]
mov qword [rsp + 0xb7f8], rax
lea rcx, [rsp + 0xb7f8]
call fcn.1400e4300
movzx eax, al
test eax, eax
jne 0x1401b1602
lea r8, [0x14024cf50]
lea rdx, [rsp + 0x10128]
lea rcx, [rsp + 0xb7f8]
call fcn.1400e5b90
mov rcx, rax
call fcn.1400e44c0
mov rdx, rax
lea rcx, [rsp + 0xb810]
call fcn.1400020d0
lea r8, str.result
lea rdx, [rsp + 0x10130]
lea rcx, [rsp + 0xc078]
call fcn.1400e5c40
mov rax, qword [rax]
mov qword [rsp + 0xb7f8], rax
lea rcx, [rsp + 0xb7f8]
call fcn.1400e4300
movzx eax, al
test eax, eax
jne 0x1401b1671
lea r8, [0x14024cf70]
lea rdx, [rsp + 0x10138]
lea rcx, [rsp + 0xb7f8]
call fcn.1400e5b90
mov rcx, rax
call fcn.1400e44c0
mov rdx, rax
lea rcx, [rsp + 0xb7e0]
call fcn.1400020d0
lea rdx, [0x14024cf7c]
lea rcx, [rsp + 0xb7e0]
call fcn.140006180
test eax, eax
je 0x1401b1749
lea rcx, [rsp + 0xc890]
call fcn.14000f8f0
xor r8d, r8d
mov edx, 0x40
mov rcx, rax
call fcn.1400ef950
nop
lea rcx, [rsp + 0xb810]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e0]
call fcn.140001490
nop
lea rcx, [rsp + 0xb820]
call fcn.140001490
nop
lea rcx, [rsp + 0xc890]
call fcn.140001490
nop
lea rcx, [rsp + 0xc8a0]
call fcn.140001490
nop
lea rcx, [rsp + 0xc060]
call fcn.140001490
nop
lea rcx, [rsp + 0xc898]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e8]
call fcn.140001490
nop
lea rcx, [rsp + 0xb830]
call fcn.140005590
nop
lea rcx, [rsp + 0xb828]
call fcn.140001490
nop
lea rcx, [rsp + 0xb848]
call fcn.140001490
jmp 0x1401b340e
xor r8d, r8d
mov edx, 0x24
lea rcx, str.A_valid_update_has_been_found__do_you_want_to_update_it_now_
call fcn.1400ef950
cmp eax, 7
jne 0x1401b1804
lea rcx, [rsp + 0xb810]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e0]
call fcn.140001490
nop
lea rcx, [rsp + 0xb820]
call fcn.140001490
nop
lea rcx, [rsp + 0xc890]
call fcn.140001490
nop
lea rcx, [rsp + 0xc8a0]
call fcn.140001490
nop
lea rcx, [rsp + 0xc060]
call fcn.140001490
nop
lea rcx, [rsp + 0xc898]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e8]
call fcn.140001490
nop
lea rcx, [rsp + 0xb830]
call fcn.140005590
nop
lea rcx, [rsp + 0xb828]
call fcn.140001490
nop
lea rcx, [rsp + 0xb848]
call fcn.140001490
jmp 0x1401b340e
xor eax, eax
mov word [rsp + 0xc090], ax
lea rdi, [rsp + 0xc092]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10140]
call fcn.140001000
mov qword [rsp + 0x109b0], rax
mov r8, qword [rsp + 0x109b0]
mov r8, qword [r8]
lea rdx, str._szip
lea rcx, [rsp + 0xc090]
call fcn.1400a97a4
lea rcx, [rsp + 0x10140]
call fcn.140001490
lea rcx, [rsp + 0xc090]
call fcn.140004ff0
lea rcx, [rsp + 0xc090]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401b188c
lea rcx, [rsp + 0xc090]
call fcn.140004bf0
lea rdx, [rsp + 0xb820]
lea rcx, [rsp + 0xc088]
call fcn.140001430
nop
mov dx, 0x2f
lea rcx, [rsp + 0xc088]
call fcn.1400068a0
mov r8d, eax
add r8d, 1
lea rdx, [rsp + 0x10148]
lea rcx, [rsp + 0xc088]
call fcn.140006a00
mov qword [rsp + 0x109b8], rax
mov rax, qword [rsp + 0x109b8]
mov qword [rsp + 0x109c0], rax
mov rdx, qword [rsp + 0x109c0]
lea rcx, [rsp + 0xc088]
call fcn.140002db0
nop
lea rcx, [rsp + 0x10148]
call fcn.140001490
lea r8, [0x14024a5cc]
mov edx, 0x400
lea rcx, [rsp + 0xc090]
call fcn.1400aa190
lea rcx, [rsp + 0xc088]
call fcn.14000f8f0
mov r8, rax
mov edx, 0x400
lea rcx, [rsp + 0xc090]
call fcn.1400aa190
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x968], 0
je 0x1401b1977
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b19c1
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call fcn.14007d104
xor edx, edx
mov rcx, rax
call fcn.14007c7e4
mov edx, 5
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xb820]
call fcn.14000f8f0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0x10e60]
mov r8, qword [r8 + 0x968]
lea rdx, [rsp + 0xc090]
mov rcx, rax
call fcn.1400ebbf0
mov qword [rsp + 0xb7f0], rax
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b1a33
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xb810]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a9a04
cmp qword [rsp + 0xb7f0], rax
je 0x1401b1b17
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Updating_NIC_failed._Download_failed.
call fcn.1400ef950
nop
lea rcx, [rsp + 0xc088]
call fcn.140001490
nop
lea rcx, [rsp + 0xb810]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e0]
call fcn.140001490
nop
lea rcx, [rsp + 0xb820]
call fcn.140001490
nop
lea rcx, [rsp + 0xc890]
call fcn.140001490
nop
lea rcx, [rsp + 0xc8a0]
call fcn.140001490
nop
lea rcx, [rsp + 0xc060]
call fcn.140001490
nop
lea rcx, [rsp + 0xc898]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e8]
call fcn.140001490
nop
lea rcx, [rsp + 0xb830]
call fcn.140005590
nop
lea rcx, [rsp + 0xb828]
call fcn.140001490
nop
lea rcx, [rsp + 0xb848]
call fcn.140001490
jmp 0x1401b340e
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10150]
call fcn.140005ec0
mov qword [rsp + 0x109c8], rax
mov rax, qword [rsp + 0x109c8]
mov qword [rsp + 0x109d0], rax
lea r8, str.:CCBootClient
mov rdx, qword [rsp + 0x109d0]
lea rcx, [rsp + 0xc080]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x10150]
call fcn.140001490
lea r8, str.Drivers
lea rdx, [rsp + 0xc080]
lea rcx, [rsp + 0x10160]
call fcn.1400010b0
mov qword [rsp + 0x109d8], rax
mov rax, qword [rsp + 0x109d8]
mov qword [rsp + 0x109e0], rax
mov rcx, qword [rsp + 0x109e0]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc090]
call fcn.140189b10
movzx eax, al
test eax, eax
jne 0x1401b1bdc
mov dword [rsp + 0x109e8], 1
jmp 0x1401b1be7
mov dword [rsp + 0x109e8], 0
movzx eax, byte [rsp + 0x109e8]
mov byte [rsp + 0x10158], al
lea rcx, [rsp + 0x10160]
call fcn.140001490
movzx edx, byte [rsp + 0x10158]
test edx, edx
je 0x1401b1ce2
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Updating_NIC_failed._Decompressing_failed.
call fcn.1400ef950
nop
lea rcx, [rsp + 0xc080]
call fcn.140001490
nop
lea rcx, [rsp + 0xc088]
call fcn.140001490
nop
lea rcx, [rsp + 0xb810]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e0]
call fcn.140001490
nop
lea rcx, [rsp + 0xb820]
call fcn.140001490
nop
lea rcx, [rsp + 0xc890]
call fcn.140001490
nop
lea rcx, [rsp + 0xc8a0]
call fcn.140001490
nop
lea rcx, [rsp + 0xc060]
call fcn.140001490
nop
lea rcx, [rsp + 0xc898]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e8]
call fcn.140001490
nop
lea rcx, [rsp + 0xb830]
call fcn.140005590
nop
lea rcx, [rsp + 0xb828]
call fcn.140001490
nop
lea rcx, [rsp + 0xb848]
call fcn.140001490
jmp 0x1401b340e
lea rdx, str.ControlSet001
lea rcx, [rsp + 0xb818]
call fcn.140002100
nop
lea rcx, [rsp + 0xb800]
call fcn.140005560
nop
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10170]
call fcn.14011d190
mov qword [rsp + 0x109f0], rax
mov rax, qword [rsp + 0x109f0]
mov qword [rsp + 0x109f8], rax
lea r8, str.SYSTEMSelect
mov rdx, qword [rsp + 0x109f8]
lea rcx, [rsp + 0x10178]
call fcn.1400010b0
mov qword [rsp + 0x10a00], rax
mov rcx, qword [rsp + 0x10a00]
call fcn.14000f8f0
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xb800]
call fcn.140005720
test eax, eax
jne 0x1401b1d91
mov dword [rsp + 0x10a08], 1
jmp 0x1401b1d9c
mov dword [rsp + 0x10a08], 0
movzx eax, byte [rsp + 0x10a08]
mov byte [rsp + 0x10168], al
lea rcx, [rsp + 0x10178]
call fcn.140001490
nop
lea rcx, [rsp + 0x10170]
call fcn.140001490
movzx edx, byte [rsp + 0x10168]
test edx, edx
je 0x1401b1e22
mov dword [rsp + 0xcad0], 1
lea r8, [rsp + 0xcad0]
lea rdx, str.Current
lea rcx, [rsp + 0xb800]
call fcn.1400057b0
mov r8d, dword [rsp + 0xcad0]
lea rdx, str.ControlSet_03d
lea rcx, [rsp + 0xb818]
call fcn.140002c70
lea rcx, [rsp + 0xb800]
call fcn.1400055f0
lea rax, [rsp + 0x10180]
mov qword [rsp + 0x10188], rax
lea rdx, [rsp + 0xc080]
mov rcx, qword [rsp + 0x10188]
call fcn.140001430
mov qword [rsp + 0x10a10], rax
movzx edx, word [rsp + 0x67c4]
mov rcx, qword [rsp + 0x10a10]
call fcn.14011d5d0
lea rcx, [rsp + 0xb7b0]
call fcn.1400767b0
nop
lea r8, str.Drivers_Converted.
lea rdx, [rsp + 0xc080]
lea rcx, [rsp + 0x10190]
call fcn.1400010b0
mov qword [rsp + 0x10a18], rax
mov rax, qword [rsp + 0x10a18]
mov qword [rsp + 0x10a20], rax
mov rcx, qword [rsp + 0x10a20]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xb7b0]
call fcn.1400768b4
mov dword [rsp + 0xb840], eax
lea rcx, [rsp + 0x10190]
call fcn.140001490
cmp dword [rsp + 0xb840], 0
je 0x1401b275b
lea rcx, [rsp + 0xb7b0]
call fcn.1400764bc
mov dword [rsp + 0xb840], eax
lea rcx, [rsp + 0xb7b0]
call fcn.14000c4e0
test eax, eax
je 0x1401b1f0f
jmp 0x1401b1eda
lea rdx, [rsp + 0x101a0]
lea rcx, [rsp + 0xb7b0]
call fcn.140076b30
mov qword [rsp + 0x10a28], rax
mov rax, qword [rsp + 0x10a28]
mov qword [rsp + 0x10a30], rax
lea rdx, [rsp + 0x10198]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10a38], rax
mov rax, qword [rsp + 0x10a38]
mov qword [rsp + 0x10a40], rax
mov rcx, qword [rsp + 0x10a30]
call fcn.140001a40
mov r8d, eax
lea rdx, [rsp + 0xd2e0]
mov rcx, qword [rsp + 0x10a40]
call fcn.140006a00
nop
lea rcx, [rsp + 0x10198]
call fcn.140001490
nop
lea rcx, [rsp + 0x101a0]
call fcn.140001490
lea rdx, str..reg
lea rcx, [rsp + 0xd2e0]
call fcn.140006180
test eax, eax
jne 0x1401b239b
lea rdx, [rsp + 0x101a8]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10a48], rax
mov rax, qword [rsp + 0x10a48]
mov qword [rsp + 0x10a50], rax
lea r8, [rsp + 0xc080]
lea rdx, str.regedit__s__
lea rcx, [rsp + 0x101b0]
call fcn.140006c90
mov qword [rsp + 0x10a58], rax
mov rax, qword [rsp + 0x10a58]
mov qword [rsp + 0x10a60], rax
lea r8, str.Drivers_Converted_
mov rdx, qword [rsp + 0x10a60]
lea rcx, [rsp + 0x101b8]
call fcn.1400010b0
mov qword [rsp + 0x10a68], rax
mov rax, qword [rsp + 0x10a68]
mov qword [rsp + 0x10a70], rax
mov r8, qword [rsp + 0x10a50]
mov rdx, qword [rsp + 0x10a70]
lea rcx, [rsp + 0x101c0]
call fcn.140006bd0
mov qword [rsp + 0x10a78], rax
mov rax, qword [rsp + 0x10a78]
mov qword [rsp + 0x10a80], rax
lea r8, [0x14024a614]
mov rdx, qword [rsp + 0x10a80]
lea rcx, [rsp + 0x101c8]
call fcn.1400010b0
mov qword [rsp + 0x10a88], rax
mov rax, qword [rsp + 0x10a88]
mov qword [rsp + 0x10a90], rax
mov rcx, qword [rsp + 0x10a90]
call fcn.14000f8f0
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov rcx, rax
call fcn.140004930
nop
lea rcx, [rsp + 0x101c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x101c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x101b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x101b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x101a8]
call fcn.140001490
lea rdx, [rsp + 0x101d8]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10a98], rax
xor r8d, r8d
lea rdx, [0x14024d200]
mov rcx, qword [rsp + 0x10a98]
call fcn.140006780
test eax, eax
jl 0x1401b216f
mov dword [rsp + 0x10aa0], 1
jmp 0x1401b217a
mov dword [rsp + 0x10aa0], 0
movzx eax, byte [rsp + 0x10aa0]
mov byte [rsp + 0x101d0], al
lea rcx, [rsp + 0x101d8]
call fcn.140001490
movzx edx, byte [rsp + 0x101d0]
test edx, edx
je 0x1401b2389
lea rcx, [rsp + 0xd2e8]
call fcn.140002de0
nop
lea rdx, [rsp + 0x101e0]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10aa8], rax
mov rax, qword [rsp + 0x10aa8]
mov qword [rsp + 0x10ab0], rax
lea rcx, str.VEN_8086DEV_10D3REV_00
call fcn.1400a98c0
mov r9d, eax
xor r8d, r8d
lea rdx, [rsp + 0x101e8]
mov rcx, qword [rsp + 0x10ab0]
call fcn.1400022a0
mov qword [rsp + 0x10ab8], rax
mov rax, qword [rsp + 0x10ab8]
mov qword [rsp + 0x10ac0], rax
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x101f0]
call fcn.14011d190
mov qword [rsp + 0x10ac8], rax
mov rax, qword [rsp + 0x10ac8]
mov qword [rsp + 0x10ad0], rax
mov r9, qword [rsp + 0x10ac0]
mov r9, qword [r9]
mov r8, qword [rsp + 0x10ad0]
mov r8, qword [r8]
lea rdx, str._sSYSTEMCCBootPnP_sService
lea rcx, [rsp + 0xd2e8]
call fcn.140002c70
nop
lea rcx, [rsp + 0x101f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x101e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x101e0]
call fcn.140001490
lea rcx, [rsp + 0xd2f0]
call fcn.140005560
lea rcx, [rsp + 0xd2e8]
call fcn.14000f8f0
mov r9d, 0x2001f
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xd2f0]
call fcn.140005720
test eax, eax
jne 0x1401b236d
xor eax, eax
mov word [rsp + 0xd310], ax
lea rdi, [rsp + 0xd312]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov dword [rsp + 0xd300], 0x400
lea r9, [rsp + 0xd300]
lea r8, [rsp + 0xd310]
lea rdx, [0x14024d280]
lea rcx, [rsp + 0xd2f0]
call fcn.140005830
lea rdx, [0x14024d298]
lea rcx, [rsp + 0xd2f0]
call fcn.1400055b0
mov r9d, 2
lea r8, [rsp + 0xd310]
lea rdx, str.ImagePath
lea rcx, [rsp + 0xd2f0]
call fcn.140005b00
lea rcx, [rsp + 0xd2f0]
call fcn.1400055f0
lea rcx, [rsp + 0xd2f0]
call fcn.140005590
nop
lea rcx, [rsp + 0xd2e8]
call fcn.140001490
nop
lea rcx, [rsp + 0xd2e0]
call fcn.140001490
jmp 0x1401b1eda
lea rdx, [rsp + 0x101f8]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10ad8], rax
mov rax, qword [rsp + 0x10ad8]
mov qword [rsp + 0x10ae0], rax
lea r8, str.CCBootPnP_
lea rdx, [rsp + 0xc080]
lea rcx, [rsp + 0x10200]
call fcn.1400010b0
mov qword [rsp + 0x10ae8], rax
mov rax, qword [rsp + 0x10ae8]
mov qword [rsp + 0x10af0], rax
lea r8, [rsp + 0xb848]
mov rdx, qword [rsp + 0x10af0]
lea rcx, [rsp + 0x10208]
call fcn.140006bd0
mov qword [rsp + 0x10af8], rax
mov rax, qword [rsp + 0x10af8]
mov qword [rsp + 0x10b00], rax
lea r8, [0x14024d2c8]
mov rdx, qword [rsp + 0x10b00]
lea rcx, [rsp + 0x10210]
call fcn.1400010b0
mov qword [rsp + 0x10b08], rax
mov rax, qword [rsp + 0x10b08]
mov qword [rsp + 0x10b10], rax
mov r8, qword [rsp + 0x10ae0]
mov rdx, qword [rsp + 0x10b10]
lea rcx, [rsp + 0x10218]
call fcn.140006bd0
mov qword [rsp + 0x10b18], rax
mov rax, qword [rsp + 0x10b18]
mov qword [rsp + 0x10b20], rax
lea rdx, [rsp + 0x10220]
lea rcx, [rsp + 0xb7b0]
call fcn.140076d08
mov qword [rsp + 0x10b28], rax
mov rcx, qword [rsp + 0x10b20]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x10b28]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x10220]
call fcn.140001490
nop
lea rcx, [rsp + 0x10218]
call fcn.140001490
nop
lea rcx, [rsp + 0x10210]
call fcn.140001490
nop
lea rcx, [rsp + 0x10208]
call fcn.140001490
nop
lea rcx, [rsp + 0x10200]
call fcn.140001490
nop
lea rcx, [rsp + 0x101f8]
call fcn.140001490
mov edx, 0x400
lea rcx, [rsp + 0xcae0]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
movzx eax, word [rsp + 0x67c4]
cmp eax, 0x43
je 0x1401b2573
movzx r8d, word [rsp + 0x67c4]
lea rdx, [0x14024d2f8]
lea rcx, [rsp + 0xcae0]
call fcn.1400a97a4
lea rdx, [rsp + 0xcae0]
lea rcx, [rsp + 0x10228]
call fcn.140002100
mov qword [rsp + 0x10b30], rax
mov rax, qword [rsp + 0x10b30]
mov qword [rsp + 0x10b38], rax
lea r8, str._system32CCBootPnP
mov rdx, qword [rsp + 0x10b38]
lea rcx, [rsp + 0x10230]
call fcn.1400010b0
mov qword [rsp + 0x10b40], rax
mov rcx, qword [rsp + 0x10b40]
call fcn.14000f8f0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rsp + 0x10230]
call fcn.140001490
nop
lea rcx, [rsp + 0x10228]
call fcn.140001490
lea rdx, [rsp + 0x10238]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10b48], rax
mov rax, qword [rsp + 0x10b48]
mov qword [rsp + 0x10b50], rax
lea rdx, [rsp + 0xcae0]
lea rcx, [rsp + 0x10240]
call fcn.140002100
mov qword [rsp + 0x10b58], rax
mov rax, qword [rsp + 0x10b58]
mov qword [rsp + 0x10b60], rax
lea r8, str._system32CCBootPnP_
mov rdx, qword [rsp + 0x10b60]
lea rcx, [rsp + 0x10248]
call fcn.1400010b0
mov qword [rsp + 0x10b68], rax
mov rax, qword [rsp + 0x10b68]
mov qword [rsp + 0x10b70], rax
mov r8, qword [rsp + 0x10b50]
mov rdx, qword [rsp + 0x10b70]
lea rcx, [rsp + 0x10250]
call fcn.140006bd0
mov qword [rsp + 0x10b78], rax
mov rax, qword [rsp + 0x10b78]
mov qword [rsp + 0x10b80], rax
lea rdx, [rsp + 0x10258]
lea rcx, [rsp + 0xb7b0]
call fcn.140076d08
mov qword [rsp + 0x10b88], rax
mov rcx, qword [rsp + 0x10b80]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x10b88]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x10258]
call fcn.140001490
nop
lea rcx, [rsp + 0x10250]
call fcn.140001490
nop
lea rcx, [rsp + 0x10248]
call fcn.140001490
nop
lea rcx, [rsp + 0x10240]
call fcn.140001490
nop
lea rcx, [rsp + 0x10238]
call fcn.140001490
nop
lea rcx, [rsp + 0xd2e0]
call fcn.140001490
jmp 0x1401b1eda
lea rcx, [rsp + 0xb7b0]
call fcn.1400763e8
lea r8, str.Drivers_Converted_service.reg
lea rdx, [rsp + 0xc080]
lea rcx, [rsp + 0x10260]
call fcn.1400010b0
mov qword [rsp + 0x10b90], rax
mov rax, qword [rsp + 0x10b90]
mov qword [rsp + 0x10b98], rax
mov rcx, qword [rsp + 0x10b98]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xb7b0]
call fcn.1400768b4
mov dword [rsp + 0xb840], eax
lea rcx, [rsp + 0x10260]
call fcn.140001490
cmp dword [rsp + 0xb840], 0
je 0x1401b2e73
lea rcx, [rsp + 0xb7b0]
call fcn.1400764bc
mov dword [rsp + 0xb840], eax
lea rcx, [rsp + 0xb7b0]
call fcn.14000c4e0
test eax, eax
je 0x1401b2805
jmp 0x1401b27d0
lea rdx, [rsp + 0x10270]
lea rcx, [rsp + 0xb7b0]
call fcn.140076b30
mov qword [rsp + 0x10ba0], rax
mov rax, qword [rsp + 0x10ba0]
mov qword [rsp + 0x10ba8], rax
lea rdx, [rsp + 0x10268]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10bb0], rax
mov rax, qword [rsp + 0x10bb0]
mov qword [rsp + 0x10bb8], rax
mov rcx, qword [rsp + 0x10ba8]
call fcn.140001a40
mov r8d, eax
lea rdx, [rsp + 0xdb18]
mov rcx, qword [rsp + 0x10bb8]
call fcn.140006a00
nop
lea rcx, [rsp + 0x10268]
call fcn.140001490
nop
lea rcx, [rsp + 0x10270]
call fcn.140001490
lea rdx, [rsp + 0x10280]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10bc0], rax
mov rcx, qword [rsp + 0x10bc0]
call fcn.140001a40
mov edi, eax
lea rcx, str.VEN_10DEDEV_03EEREV_A2_service.reg
call fcn.1400a8944
cmp edi, eax
jle 0x1401b28e9
mov dword [rsp + 0x10bc8], 1
jmp 0x1401b28f4
mov dword [rsp + 0x10bc8], 0
movzx eax, byte [rsp + 0x10bc8]
mov byte [rsp + 0x10278], al
lea rcx, [rsp + 0x10280]
call fcn.140001490
movzx edx, byte [rsp + 0x10278]
test edx, edx
je 0x1401b292e
lea rcx, [rsp + 0xdb18]
call fcn.140001490
jmp 0x1401b27d0
lea rdx, [rsp + 0x10288]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10bd0], rax
xor r8d, r8d
lea rdx, str._service.reg
mov rcx, qword [rsp + 0x10bd0]
call fcn.140006780
mov dword [rsp + 0xdb10], eax
lea rcx, [rsp + 0x10288]
call fcn.140001490
cmp dword [rsp + 0xdb10], 0
jl 0x1401b2e61
lea rdx, [rsp + 0x10290]
lea rcx, [rsp + 0xb7b0]
call fcn.140076dd4
mov qword [rsp + 0x10bd8], rax
mov rax, qword [rsp + 0x10bd8]
mov qword [rsp + 0x10be0], rax
mov r9d, dword [rsp + 0xdb10]
xor r8d, r8d
lea rdx, [rsp + 0xdb20]
mov rcx, qword [rsp + 0x10be0]
call fcn.1400022a0
nop
lea rcx, [rsp + 0x10290]
call fcn.140001490
lea rcx, [rsp + 0xdb28]
call fcn.140005560
nop
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x102a0]
call fcn.14011d190
mov qword [rsp + 0x10be8], rax
mov rax, qword [rsp + 0x10be8]
mov qword [rsp + 0x10bf0], rax
lea r8, [0x14024d448]
mov rdx, qword [rsp + 0x10bf0]
lea rcx, [rsp + 0x102a8]
call fcn.1400010b0
mov qword [rsp + 0x10bf8], rax
mov rax, qword [rsp + 0x10bf8]
mov qword [rsp + 0x10c00], rax
lea r8, [rsp + 0xdb20]
mov rdx, qword [rsp + 0x10c00]
lea rcx, [rsp + 0x102b0]
call fcn.140006bd0
mov qword [rsp + 0x10c08], rax
mov rax, qword [rsp + 0x10c08]
mov qword [rsp + 0x10c10], rax
lea r8, str.PciInfo
mov rdx, qword [rsp + 0x10c10]
lea rcx, [rsp + 0x102b8]
call fcn.1400010b0
mov qword [rsp + 0x10c18], rax
mov rcx, qword [rsp + 0x10c18]
call fcn.14000f8f0
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xdb28]
call fcn.140005720
test eax, eax
jne 0x1401b2ae2
mov dword [rsp + 0x10c20], 1
jmp 0x1401b2aed
mov dword [rsp + 0x10c20], 0
movzx eax, byte [rsp + 0x10c20]
mov byte [rsp + 0x10298], al
lea rcx, [rsp + 0x102b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x102b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x102a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x102a0]
call fcn.140001490
movzx edx, byte [rsp + 0x10298]
test edx, edx
je 0x1401b2e45
xor eax, eax
mov word [rsp + 0xdb40], ax
lea rdi, [rsp + 0xdb42]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov dword [rsp + 0xdb38], 0x400
lea r9, [rsp + 0xdb38]
lea r8, [rsp + 0xdb40]
lea rdx, [0x14024d470]
lea rcx, [rsp + 0xdb28]
call fcn.140005830
lea rcx, [rsp + 0xdb28]
call fcn.1400055f0
lea rdx, [rsp + 0xdb40]
lea rcx, [rsp + 0x102c0]
call fcn.140002100
mov qword [rsp + 0x10c28], rax
mov rax, qword [rsp + 0x10c28]
mov qword [rsp + 0x10c30], rax
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x102c8]
call fcn.14011d190
mov qword [rsp + 0x10c38], rax
mov rax, qword [rsp + 0x10c38]
mov qword [rsp + 0x10c40], rax
lea r8, str.SYSTEM_
mov rdx, qword [rsp + 0x10c40]
lea rcx, [rsp + 0x102d0]
call fcn.1400010b0
mov qword [rsp + 0x10c48], rax
mov rax, qword [rsp + 0x10c48]
mov qword [rsp + 0x10c50], rax
lea r8, [rsp + 0xb818]
mov rdx, qword [rsp + 0x10c50]
lea rcx, [rsp + 0x102d8]
call fcn.140006bd0
mov qword [rsp + 0x10c58], rax
mov rax, qword [rsp + 0x10c58]
mov qword [rsp + 0x10c60], rax
lea r8, str.Services_
mov rdx, qword [rsp + 0x10c60]
lea rcx, [rsp + 0x102e0]
call fcn.1400010b0
mov qword [rsp + 0x10c68], rax
mov rax, qword [rsp + 0x10c68]
mov qword [rsp + 0x10c70], rax
mov r8, qword [rsp + 0x10c30]
mov rdx, qword [rsp + 0x10c70]
lea rcx, [rsp + 0x102e8]
call fcn.140006bd0
mov qword [rsp + 0x10c78], rax
mov rax, qword [rsp + 0x10c78]
mov qword [rsp + 0x10c80], rax
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x102f0]
call fcn.14011d190
mov qword [rsp + 0x10c88], rax
mov rax, qword [rsp + 0x10c88]
mov qword [rsp + 0x10c90], rax
lea r8, str.SYSTEMCCBootPnP_
mov rdx, qword [rsp + 0x10c90]
lea rcx, [rsp + 0x102f8]
call fcn.1400010b0
mov qword [rsp + 0x10c98], rax
mov rax, qword [rsp + 0x10c98]
mov qword [rsp + 0x10ca0], rax
lea r8, [rsp + 0xdb20]
mov rdx, qword [rsp + 0x10ca0]
lea rcx, [rsp + 0x10300]
call fcn.140006bd0
mov qword [rsp + 0x10ca8], rax
mov rax, qword [rsp + 0x10ca8]
mov qword [rsp + 0x10cb0], rax
lea r8, str.Service
mov rdx, qword [rsp + 0x10cb0]
lea rcx, [rsp + 0x10308]
call fcn.1400010b0
mov qword [rsp + 0x10cb8], rax
mov rax, qword [rsp + 0x10cb8]
mov qword [rsp + 0x10cc0], rax
mov rcx, qword [rsp + 0x10c80]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x10cc0]
call fcn.14000f8f0
mov rdx, rdi
mov rcx, rax
call fcn.14011cad0
nop
lea rcx, [rsp + 0x10308]
call fcn.140001490
nop
lea rcx, [rsp + 0x10300]
call fcn.140001490
nop
lea rcx, [rsp + 0x102f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x102f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x102e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x102e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x102d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x102d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x102c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x102c0]
call fcn.140001490
nop
lea rcx, [rsp + 0xdb28]
call fcn.140005590
nop
lea rcx, [rsp + 0xdb20]
call fcn.140001490
nop
lea rcx, [rsp + 0xdb18]
call fcn.140001490
jmp 0x1401b27d0
lea rcx, [rsp + 0xb7b0]
call fcn.1400763e8
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10310]
call fcn.140005ec0
mov qword [rsp + 0x10cc8], rax
mov rax, qword [rsp + 0x10cc8]
mov qword [rsp + 0x10cd0], rax
lea r8, [0x14024d4e8]
mov rdx, qword [rsp + 0x10cd0]
lea rcx, [rsp + 0x10318]
call fcn.1400010b0
mov qword [rsp + 0x10cd8], rax
mov rcx, qword [rsp + 0x10cd8]
call fcn.14000f8f0
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10318]
call fcn.140001490
nop
lea rcx, [rsp + 0x10310]
call fcn.140001490
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10320]
call fcn.140005ec0
mov qword [rsp + 0x10ce0], rax
mov rax, qword [rsp + 0x10ce0]
mov qword [rsp + 0x10ce8], rax
lea r8, [0x14024d4f8]
mov rdx, qword [rsp + 0x10ce8]
lea rcx, [rsp + 0x10328]
call fcn.1400010b0
mov qword [rsp + 0x10cf0], rax
mov rcx, qword [rsp + 0x10cf0]
call fcn.14000f8f0
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10328]
call fcn.140001490
nop
lea rcx, [rsp + 0x10320]
call fcn.140001490
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6470]
call qword [rsp + 0x7338]
mov rcx, qword [rsp + 0x6470]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [rsp + 0x6618]
lea rcx, [rsp + 0xb470]
call fcn.1401d18c0
nop
lea rcx, [rsp + 0x6628]
call fcn.14000f8f0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc070]
call fcn.1400fa8d0
nop
mov dx, 0x2e
lea rcx, [rsp + 0xc070]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x10330]
lea rcx, [rsp + 0xc070]
call fcn.140006a00
mov qword [rsp + 0x10cf8], rax
mov rcx, qword [rsp + 0x10cf8]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov dword [rsp + 0xb850], eax
lea rcx, [rsp + 0x10330]
call fcn.140001490
lea rcx, [rsp + 0xb610]
mov r8d, dword [rsp + 0xb850]
lea rdx, [0x14024d50c]
call fcn.140002c70
lea rcx, [rsp + 0xb618]
lea rdx, str.Update_NIC_Driver_to_Image
call fcn.1400020d0
lea rcx, [rsp + 0x10338]
call fcn.14000e290
lea r8, [0x14024d550]
lea rdx, [rsp + 0x10340]
mov rcx, rax
call fcn.14000c960
mov qword [rsp + 0x10d00], rax
mov rax, qword [rsp + 0x10d00]
mov qword [rsp + 0x10d08], rax
lea rcx, [rsp + 0xb620]
mov rdx, qword [rsp + 0x10d08]
call fcn.140002db0
nop
lea rcx, [rsp + 0x10340]
call fcn.140001490
lea rcx, [rsp + 0xb470]
call fcn.1401bf8a0
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x968], 0
je 0x1401b3134
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b317e
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call fcn.14007d104
xor edx, edx
mov rcx, rax
call fcn.14007c7e4
mov edx, 5
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xc070]
call fcn.14000f8f0
mov rdi, rax
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov r8, qword [rsp + 0x10e60]
mov r8, qword [r8 + 0x968]
mov rdx, rdi
mov rcx, rax
call fcn.140106b10
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b31f4
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0xc068]
call fcn.140002de0
nop
lea rdx, str.Update_NIC_to___s__success_
lea rcx, [rsp + 0x10348]
call fcn.1400ef320
mov qword [rsp + 0x10d10], rax
mov rax, qword [rsp + 0x10d10]
mov qword [rsp + 0x10d18], rax
mov rcx, qword [rsp + 0x10d18]
call fcn.14000f8f0
mov r8, qword [rsp + 0x6620]
mov rdx, rax
lea rcx, [rsp + 0xc068]
call fcn.140002c70
nop
lea rcx, [rsp + 0x10348]
call fcn.140001490
lea rcx, [rsp + 0xc068]
call fcn.14000f8f0
xor r8d, r8d
mov edx, 0x40
mov rcx, rax
call fcn.1400ef950
mov dword [rsp + 0x10350], 0
lea rcx, [rsp + 0xc068]
call fcn.140001490
nop
lea rcx, [rsp + 0xc070]
call fcn.140001490
nop
lea rcx, [rsp + 0xb470]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xb7b0]
call fcn.14007680c
nop
lea rcx, [rsp + 0xb800]
call fcn.140005590
nop
lea rcx, [rsp + 0xb818]
call fcn.140001490
nop
lea rcx, [rsp + 0xc080]
call fcn.140001490
nop
lea rcx, [rsp + 0xc088]
call fcn.140001490
nop
lea rcx, [rsp + 0xb810]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e0]
call fcn.140001490
nop
lea rcx, [rsp + 0xb820]
call fcn.140001490
nop
lea rcx, [rsp + 0xc890]
call fcn.140001490
nop
lea rcx, [rsp + 0xc8a0]
call fcn.140001490
nop
lea rcx, [rsp + 0xc060]
call fcn.140001490
nop
lea rcx, [rsp + 0xc898]
call fcn.140001490
nop
lea rcx, [rsp + 0xb7e8]
call fcn.140001490
nop
lea rcx, [rsp + 0xb830]
call fcn.140005590
nop
lea rcx, [rsp + 0xb828]
call fcn.140001490
nop
lea rcx, [rsp + 0xb848]
call fcn.140001490
nop
lea rcx, [rsp + 0x7330]
call fcn.140001490
nop
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0x10350]
jmp 0x1401b4eba
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10358]
call fcn.140005ec0
mov qword [rsp + 0x10d20], rax
mov rax, qword [rsp + 0x10d20]
mov qword [rsp + 0x10d28], rax
lea r8, [0x14024d5b0]
mov rdx, qword [rsp + 0x10d28]
lea rcx, [rsp + 0x10360]
call fcn.1400010b0
mov qword [rsp + 0x10d30], rax
mov rcx, qword [rsp + 0x10d30]
call fcn.14000f8f0
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10360]
call fcn.140001490
nop
lea rcx, [rsp + 0x10358]
call fcn.140001490
mov r8d, 1
movzx edx, word [rsp + 0x67c4]
lea rcx, [rsp + 0x10368]
call fcn.140005ec0
mov qword [rsp + 0x10d38], rax
mov rax, qword [rsp + 0x10d38]
mov qword [rsp + 0x10d40], rax
lea r8, [0x14024d5c0]
mov rdx, qword [rsp + 0x10d40]
lea rcx, [rsp + 0x10370]
call fcn.1400010b0
mov qword [rsp + 0x10d48], rax
mov rcx, qword [rsp + 0x10d48]
call fcn.14000f8f0
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
lea rcx, [rsp + 0x10370]
call fcn.140001490
nop
lea rcx, [rsp + 0x10368]
call fcn.140001490
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x6470]
call qword [rsp + 0x7338]
mov rcx, qword [rsp + 0x6470]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x7330]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 0
mov qword [rsp + 0x6470], 0xffffffffffffffff
mov dword [rsp + 0x10378], 0
lea rcx, [rsp + 0x7330]
call fcn.140001490
nop
lea rcx, [rsp + 0x6480]
call fcn.140014ec0
nop
lea rcx, [rsp + 0x67d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7340]
call fcn.1400e5930
nop
lea rcx, [rsp + 0x6440]
call fcn.140001490
nop
lea rcx, [rsp + 0x67e0]
call fcn.140014ec0
mov eax, dword [rsp + 0x10378]
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000c7c0
mov dword [rsp + 0xe340], eax
cmp dword [rsp + 0xe340], 1
je 0x1401b361f
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0xe344], eax
lea rcx, [rsp + 0xe350]
call fcn.1401d19d0
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0xe344]
call fcn.140082c64
mov dword [rsp + 0xe4e8], eax
lea rcx, [rsp + 0xe350]
call fcn.1401d6a40
test eax, eax
jne 0x1401b36aa
mov dword [rsp + 0x1037c], 0
lea rcx, [rsp + 0xe350]
call fcn.140014ec0
mov eax, dword [rsp + 0x1037c]
jmp 0x1401b4eba
lea rcx, [rsp + 0xe550]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov dword [rsp + 0xe348], eax
cmp dword [rsp + 0xe348], 0
jne 0x1401b36dd
mov dword [rsp + 0x10d50], 1
jmp 0x1401b36e8
mov dword [rsp + 0x10d50], 0
lea rcx, [rsp + 0xe550]
mov r8d, dword [rsp + 0x10d50]
lea rdx, [0x14024d5d4]
call fcn.140002c70
lea rcx, [rsp + 0xe350]
call fcn.1401d4410
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
cmp dword [rsp + 0xe348], 0
jne 0x1401b37a0
mov eax, dword [rsp + 0xe4e8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov qword [rsp + 0xe690], rax
cmp qword [rsp + 0xe690], 0
jne 0x1401b37a0
mov r8d, 0xffffffff
mov edx, 0x44
mov ecx, 0x77
call fcn.1400f16c0
cmp eax, 6
jne 0x1401b37a0
mov eax, dword [rsp + 0xe4e8]
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov r9d, dword [rsp + 0xe4e8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x10e60]
call fcn.14000d5a0
mov dword [rsp + 0x10380], 0
lea rcx, [rsp + 0xe350]
call fcn.140014ec0
mov eax, dword [rsp + 0x10380]
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000c7c0
mov dword [rsp + 0xe698], eax
cmp dword [rsp + 0xe698], 1
je 0x1401b3814
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0xe69c], eax
xor edx, edx
lea rcx, [rsp + 0xe6a0]
call fcn.140169200
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0xe69c]
call fcn.140082c64
mov dword [rsp + 0xe8b0], eax
lea rcx, [rsp + 0xe6a0]
call fcn.140082174
mov dword [rsp + 0x10384], 0
lea rcx, [rsp + 0xe6a0]
call fcn.1401691b0
mov eax, dword [rsp + 0x10384]
jmp 0x1401b4eba
mov rax, qword [rsp + 0x10e60]
cmp dword [rax + 0x978], 0
je 0x1401b38bc
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
call fcn.14000c7c0
mov dword [rsp + 0xe968], eax
cmp dword [rsp + 0xe968], 1
je 0x1401b38e8
xor eax, eax
jmp 0x1401b4eba
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000c920
mov dword [rsp + 0xe96c], eax
lea rcx, [rsp + 0xe970]
call fcn.1401d19d0
nop
mov rcx, qword [rsp + 0x10e60]
add rcx, 0xdc8
mov edx, dword [rsp + 0xe96c]
call fcn.140082c64
mov dword [rsp + 0xeb08], eax
lea rcx, [rsp + 0xe970]
call fcn.1401d6a40
test eax, eax
jne 0x1401b3973
mov dword [rsp + 0x10388], 0
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x10388]
jmp 0x1401b4eba
lea rcx, [rsp + 0xebb8]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
test eax, eax
je 0x1401b39f7
lea rcx, [rsp + 0xeb70]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
test eax, eax
jne 0x1401b39f7
lea rcx, [rsp + 0xebc8]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
test eax, eax
jne 0x1401b39f7
mov r8d, 0xffffffff
mov edx, 0x40
mov ecx, 0xc1
call fcn.1400f16c0
mov dword [rsp + 0x1038c], 0
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x1038c]
jmp 0x1401b4eba
mov eax, dword [rsp + 0xeb08]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov qword [rsp + 0xeee8], rax
cmp qword [rsp + 0xeee8], 0
je 0x1401b3a66
mov r8d, 0xffffffff
mov edx, 0x40
mov ecx, 0xab
call fcn.1400f16c0
mov dword [rsp + 0x10390], 0
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x10390]
jmp 0x1401b4eba
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f16c0
cmp eax, 6
je 0x1401b3aa4
mov dword [rsp + 0x10394], 0
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x10394]
jmp 0x1401b4eba
xor edx, edx
lea rcx, [rsp + 0xecb0]
call fcn.140161450
nop
lea rdx, [rsp + 0xe960]
lea rcx, [rsp + 0xe970]
call fcn.1401d4060
nop
mov dword [rsp + 0xeee0], 0
cmp dword [rsp + 0xeee0], 0xffffffff
je 0x1401b4e74
lea r9, [rsp + 0xeee0]
lea r8, [0x14024a624]
lea rdx, [rsp + 0x10398]
lea rcx, [rsp + 0xe960]
call fcn.1400065a0
mov qword [rsp + 0x10d58], rax
mov rax, qword [rsp + 0x10d58]
mov qword [rsp + 0x10d60], rax
mov rdx, qword [rsp + 0x10d60]
lea rcx, [rsp + 0xeec0]
call fcn.140002db0
nop
lea rcx, [rsp + 0x10398]
call fcn.140001490
lea rcx, [rsp + 0xeec0]
call fcn.140006eb0
movzx eax, al
test eax, eax
je 0x1401b3b5b
jmp 0x1401b4e74
lea rcx, [rsp + 0xef60]
call fcn.14000c880
nop
lea rax, [rsp + 0x103a0]
mov qword [rsp + 0x103a8], rax
lea rdx, [rsp + 0xeec0]
mov rcx, qword [rsp + 0x103a8]
call fcn.140001430
mov qword [rsp + 0x10d68], rax
mov rdx, qword [rsp + 0x10d68]
lea rcx, [rsp + 0xef60]
call fcn.1401d50b0
test eax, eax
jne 0x1401b3bc1
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
jmp 0x1401b3ad5
lea rcx, [rsp + 0xef28]
call fcn.140002de0
nop
mov eax, dword [rsp + 0xeb08]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov dword [rsp + 0xef48], eax
cmp dword [rsp + 0xef48], 0
jne 0x1401b3c5f
mov dword [rsp + 0x103b0], 0
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xe960]
call fcn.140001490
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401613f0
nop
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x103b0]
jmp 0x1401b4eba
lea rcx, [rsp + 0xef58]
call fcn.140002de0
nop
mov r8d, dword [rsp + 0xef48]
lea rdx, [0x14024d5e0]
lea rcx, [rsp + 0xef58]
call fcn.140002c70
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x103b8]
call fcn.140107e90
mov qword [rsp + 0x10d70], rax
mov rax, qword [rsp + 0x10d70]
mov qword [rsp + 0x10d78], rax
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x103c0]
call fcn.1400f9dc0
mov qword [rsp + 0x10d80], rax
mov rax, qword [rsp + 0x10d80]
mov qword [rsp + 0x10d88], rax
mov rax, qword [rsp + 0x10d78]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10d88]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb10]
mov r8, qword [rsp + 0xef58]
lea rdx, str._s_s__s_s
lea rcx, [rsp + 0xef28]
call fcn.140002c70
nop
lea rcx, [rsp + 0x103c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x103b8]
call fcn.140001490
lea rcx, [rsp + 0xef28]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401b3d9b
lea rcx, [rsp + 0xef58]
call fcn.140001490
nop
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
jmp 0x1401b3ad5
lea rcx, [rsp + 0xef40]
call fcn.140002de0
nop
mov edx, 0xc3
lea rcx, [rsp + 0x103c8]
call fcn.1400f02a0
mov qword [rsp + 0x10d90], rax
mov rax, qword [rsp + 0x10d90]
mov qword [rsp + 0x10d98], rax
mov rcx, qword [rsp + 0x10d98]
call fcn.14000f8f0
mov r8, qword [rsp + 0xeec0]
mov rdx, rax
lea rcx, [rsp + 0xef40]
call fcn.140002c70
nop
lea rcx, [rsp + 0x103c8]
call fcn.140001490
lea rcx, [rsp + 0xef40]
call fcn.14000f8f0
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef950
cmp eax, 7
jne 0x1401b3e64
lea rcx, [rsp + 0xef40]
call fcn.140001490
nop
lea rcx, [rsp + 0xef58]
call fcn.140001490
nop
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
jmp 0x1401b3ad5
lea rcx, [rsp + 0xeec0]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400f9330
mov dword [rsp + 0xeef0], eax
cmp dword [rsp + 0xeef0], 3
je 0x1401b3ea2
cmp dword [rsp + 0xeef0], 4
je 0x1401b3ea2
cmp dword [rsp + 0xeef0], 5
jne 0x1401b3f2c
mov r8d, 0xffffffff
xor edx, edx
mov ecx, ILCreateFromPathW
call fcn.1400f16c0
mov dword [rsp + 0x103d0], 0
lea rcx, [rsp + 0xef40]
call fcn.140001490
nop
lea rcx, [rsp + 0xef58]
call fcn.140001490
nop
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xe960]
call fcn.140001490
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401613f0
nop
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x103d0]
jmp 0x1401b4eba
lea rcx, [rsp + 0xeef8]
call fcn.1400767b0
nop
lea rcx, [rsp + 0xef28]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xeef8]
call fcn.1400768b4
lea rcx, [rsp + 0xeef8]
call fcn.1400764bc
mov qword [rsp + 0xef50], 0
mov qword [rsp + 0xef38], 0
mov qword [rsp + 0xef30], 0
mov r9d, 3
xor r8d, r8d
lea rdx, [rsp + 0x103d8]
lea rcx, [rsp + 0xeec0]
call fcn.1400022a0
mov qword [rsp + 0x10da0], rax
mov rcx, qword [rsp + 0x10da0]
call fcn.14000f8f0
lea r9, [rsp + 0xef30]
lea r8, [rsp + 0xef38]
lea rdx, [rsp + 0xef50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401b3ff0
mov dword [rsp + 0x10da8], 1
jmp 0x1401b3ffb
mov dword [rsp + 0x10da8], 0
movzx eax, byte [rsp + 0x10da8]
mov byte [rsp + 0x103d4], al
lea rcx, [rsp + 0x103d8]
call fcn.140001490
movzx edx, byte [rsp + 0x103d4]
test edx, edx
je 0x1401b40c1
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024d610]
call fcn.1400ef950
mov dword [rsp + 0x103e0], 0
lea rcx, [rsp + 0xeef8]
call fcn.14007680c
nop
lea rcx, [rsp + 0xef40]
call fcn.140001490
nop
lea rcx, [rsp + 0xef58]
call fcn.140001490
nop
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xe960]
call fcn.140001490
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401613f0
nop
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x103e0]
jmp 0x1401b4eba
lea rcx, [rsp + 0xeef8]
call fcn.140076508
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401b40e4
addsd xmm1, qword [0x140261550]
mov rax, qword [rsp + 0xef30]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401b4102
addsd xmm0, qword [0x140261550]
mulsd xmm0, qword [0x140263800]
comisd xmm1, xmm0
jbe 0x1401b41ae
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Disk_space_is_not_enough._Please_try_to_merge_all.
call fcn.1400ef950
mov dword [rsp + 0x103e4], 0
lea rcx, [rsp + 0xeef8]
call fcn.14007680c
nop
lea rcx, [rsp + 0xef40]
call fcn.140001490
nop
lea rcx, [rsp + 0xef58]
call fcn.140001490
nop
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xe960]
call fcn.140001490
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401613f0
nop
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x103e4]
jmp 0x1401b4eba
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Do_you_want_to_create_restore_point_
call fcn.1400ef950
cmp eax, 6
jne 0x1401b490d
lea rcx, [rsp + 0x103e8]
call fcn.14000e290
lea r8, [0x14024d740]
lea rdx, [rsp + 0x103f0]
mov rcx, rax
call fcn.14000c960
mov qword [rsp + 0x10db0], rax
mov rax, qword [rsp + 0x10db0]
mov qword [rsp + 0x10db8], rax
mov rdx, qword [rsp + 0x10db8]
lea rcx, [rsp + 0xeec8]
call fcn.140002db0
nop
lea rcx, [rsp + 0x103f0]
call fcn.140001490
lea rcx, [rsp + 0xecb0]
call fcn.140082174
cmp rax, 1
je 0x1401b42c7
mov dword [rsp + 0x103f8], 0
lea rcx, [rsp + 0xeef8]
call fcn.14007680c
nop
lea rcx, [rsp + 0xef40]
call fcn.140001490
nop
lea rcx, [rsp + 0xef58]
call fcn.140001490
nop
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xe960]
call fcn.140001490
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401613f0
nop
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x103f8]
jmp 0x1401b4eba
mov edx, dword [rsp + 0xf0f8]
lea rcx, [rsp + 0xf2a0]
call fcn.1401d18c0
nop
lea rcx, [rsp + 0xeec0]
call fcn.14000f8f0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xf930]
call fcn.1400fa8d0
nop
mov dx, 0x2e
lea rcx, [rsp + 0xf930]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x10400]
lea rcx, [rsp + 0xf930]
call fcn.140006a00
mov qword [rsp + 0x10dc0], rax
mov rcx, qword [rsp + 0x10dc0]
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov dword [rsp + 0xf5e8], eax
lea rcx, [rsp + 0x10400]
call fcn.140001490
lea rcx, [rsp + 0xf440]
mov r8d, dword [rsp + 0xf5e8]
lea rdx, [0x14024d604]
call fcn.140002c70
lea rcx, [rsp + 0xf448]
lea rdx, [rsp + 0xeed0]
call fcn.140002db0
lea rcx, [rsp + 0xf450]
lea rdx, [rsp + 0xeec8]
call fcn.140002db0
lea rcx, [rsp + 0xf2a0]
call fcn.1401bf8a0
mov edx, 1
mov ecx, 1
call fcn.1401bfc60
mov r8, qword [rsp + 0xf108]
lea rdx, [0x14024d768]
xor ecx, ecx
call fcn.1400dcf70
mov edx, dword [rsp + 0xeb08]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 1
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x968], 0
je 0x1401b443d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b4487
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call fcn.14007d104
xor edx, edx
mov rcx, rax
call fcn.14007c7e4
mov edx, 5
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xf930]
call fcn.14000f8f0
mov rdi, rax
lea rcx, [rsp + 0xef28]
call fcn.14000f8f0
mov r8, qword [rsp + 0x10e60]
mov r8, qword [r8 + 0x968]
mov rdx, rdi
mov rcx, rax
call fcn.140106b10
test eax, eax
jne 0x1401b45ca
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b44ef
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0xf108]
lea rdx, [0x14024d7b0]
xor ecx, ecx
call fcn.1400dcf70
xor r8d, r8d
xor edx, edx
lea rcx, [0x14024d800]
call fcn.1400ef950
mov dword [rsp + 0x10408], 0
lea rcx, [rsp + 0xf930]
call fcn.140001490
nop
lea rcx, [rsp + 0xf2a0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xeef8]
call fcn.14007680c
nop
lea rcx, [rsp + 0xef40]
call fcn.140001490
nop
lea rcx, [rsp + 0xef58]
call fcn.140001490
nop
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xe960]
call fcn.140001490
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401613f0
nop
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x10408]
jmp 0x1401b4eba
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b45f3
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0xef28]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xf5f0]
call fcn.14000d210
nop
mov dword [rsp + 0xf788], 1
lea rcx, [rsp + 0xf5f0]
call fcn.1401d56b0
lea rdx, [rsp + 0xf798]
lea rcx, [rsp + 0xf5e0]
call fcn.140001430
nop
mov dword [rsp + 0xf938], 0
cmp dword [rsp + 0xf938], 0
jl 0x1401b48d1
lea r9, [rsp + 0xf938]
lea r8, [0x14024a634]
lea rdx, [rsp + 0xf948]
lea rcx, [rsp + 0xf5e0]
call fcn.1400065a0
nop
lea rcx, [rsp + 0xf948]
call fcn.140006eb0
movzx eax, al
test eax, eax
je 0x1401b46bb
lea rcx, [rsp + 0xf948]
call fcn.140001490
jmp 0x1401b48d1
xor edx, edx
lea rcx, [rsp + 0xf948]
call fcn.140006dd0
movzx r8d, ax
lea rdx, [0x14024d810]
lea rcx, [rsp + 0xf948]
call fcn.140002c70
lea rcx, [rsp + 0xf940]
call fcn.140002de0
nop
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10410]
call fcn.140107e90
mov qword [rsp + 0x10dc8], rax
mov rax, qword [rsp + 0x10dc8]
mov qword [rsp + 0x10dd0], rax
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10418]
call fcn.1400f9dc0
mov qword [rsp + 0x10dd8], rax
mov rax, qword [rsp + 0x10dd8]
mov qword [rsp + 0x10de0], rax
mov rax, qword [rsp + 0x10dd0]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10de0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb10]
mov r8, qword [rsp + 0xf948]
lea rdx, [0x14024d820]
lea rcx, [rsp + 0xf940]
call fcn.140002c70
nop
lea rcx, [rsp + 0x10418]
call fcn.140001490
nop
lea rcx, [rsp + 0x10410]
call fcn.140001490
lea rcx, [rsp + 0xf940]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10420]
call fcn.140107e90
mov qword [rsp + 0x10de8], rax
mov rax, qword [rsp + 0x10de8]
mov qword [rsp + 0x10df0], rax
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10428]
call fcn.1400f9dc0
mov qword [rsp + 0x10df8], rax
mov rax, qword [rsp + 0x10df8]
mov qword [rsp + 0x10e00], rax
mov rax, qword [rsp + 0x10df0]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10e00]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb28]
mov r8, qword [rsp + 0xf948]
lea rdx, [0x14024d840]
lea rcx, [rsp + 0xf940]
call fcn.140002c70
nop
lea rcx, [rsp + 0x10428]
call fcn.140001490
nop
lea rcx, [rsp + 0x10420]
call fcn.140001490
lea rcx, [rsp + 0xf940]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0xf940]
call fcn.140001490
nop
lea rcx, [rsp + 0xf948]
call fcn.140001490
jmp 0x1401b4662
lea rcx, [rsp + 0xf5e0]
call fcn.140001490
nop
lea rcx, [rsp + 0xf5f0]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xf930]
call fcn.140001490
nop
lea rcx, [rsp + 0xf2a0]
call fcn.140014ec0
jmp 0x1401b4e15
mov r8, qword [rsp + 0xf108]
lea rdx, str.Receive_CMD_SAVE_TO_IMAGE__s
xor ecx, ecx
call fcn.1400dcf70
mov edx, dword [rsp + 0xeb08]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403b5c10]
call fcn.1400d71f0
mov rdx, qword [rsp + 0x10e60]
mov dword [rdx + 0x978], 1
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x968], 0
je 0x1401b498a
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b49d4
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call fcn.14007d104
xor edx, edx
mov rcx, rax
call fcn.14007c7e4
mov edx, 5
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0xef28]
call fcn.14000f8f0
mov r9, qword [rsp + 0x10e60]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.1401050c0
test eax, eax
jne 0x1401b4af3
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b4a34
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0xf108]
lea rdx, str._ERROR__Save_to_image__s_false
xor ecx, ecx
call fcn.1400dcf70
xor r8d, r8d
xor edx, edx
lea rcx, str.False_
call fcn.1400ef950
mov dword [rsp + 0x10430], 0
lea rcx, [rsp + 0xeef8]
call fcn.14007680c
nop
lea rcx, [rsp + 0xef40]
call fcn.140001490
nop
lea rcx, [rsp + 0xef58]
call fcn.140001490
nop
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
nop
lea rcx, [rsp + 0xe960]
call fcn.140001490
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401613f0
nop
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x10430]
jmp 0x1401b4eba
mov rax, qword [rsp + 0x10e60]
cmp qword [rax + 0x970], 0
je 0x1401b4b1c
xor edx, edx
mov rcx, qword [rsp + 0x10e60]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x10e60]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0xef28]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xf960]
call fcn.14000d210
nop
mov dword [rsp + 0xfaf8], 1
lea rcx, [rsp + 0xf960]
call fcn.1401d56b0
lea rdx, [rsp + 0xfb08]
lea rcx, [rsp + 0xf950]
call fcn.140001430
nop
mov dword [rsp + 0xfca0], 0
cmp dword [rsp + 0xfca0], 0
jl 0x1401b4dfa
lea r9, [rsp + 0xfca0]
lea r8, [0x14024a654]
lea rdx, [rsp + 0xfcb0]
lea rcx, [rsp + 0xf950]
call fcn.1400065a0
nop
lea rcx, [rsp + 0xfcb0]
call fcn.140006eb0
movzx eax, al
test eax, eax
je 0x1401b4be4
lea rcx, [rsp + 0xfcb0]
call fcn.140001490
jmp 0x1401b4dfa
xor edx, edx
lea rcx, [rsp + 0xfcb0]
call fcn.140006dd0
movzx r8d, ax
lea rdx, [0x14024d900]
lea rcx, [rsp + 0xfcb0]
call fcn.140002c70
lea rcx, [rsp + 0xfca8]
call fcn.140002de0
nop
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10438]
call fcn.140107e90
mov qword [rsp + 0x10e08], rax
mov rax, qword [rsp + 0x10e08]
mov qword [rsp + 0x10e10], rax
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10440]
call fcn.1400f9dc0
mov qword [rsp + 0x10e18], rax
mov rax, qword [rsp + 0x10e18]
mov qword [rsp + 0x10e20], rax
mov rax, qword [rsp + 0x10e10]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10e20]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb10]
mov r8, qword [rsp + 0xfcb0]
lea rdx, [0x14024d910]
lea rcx, [rsp + 0xfca8]
call fcn.140002c70
nop
lea rcx, [rsp + 0x10440]
call fcn.140001490
nop
lea rcx, [rsp + 0x10438]
call fcn.140001490
lea rcx, [rsp + 0xfca8]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10448]
call fcn.140107e90
mov qword [rsp + 0x10e28], rax
mov rax, qword [rsp + 0x10e28]
mov qword [rsp + 0x10e30], rax
lea rcx, [rsp + 0xf108]
call fcn.14000f8f0
mov rdx, rax
lea rcx, [rsp + 0x10450]
call fcn.1400f9dc0
mov qword [rsp + 0x10e38], rax
mov rax, qword [rsp + 0x10e38]
mov qword [rsp + 0x10e40], rax
mov rax, qword [rsp + 0x10e30]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10e40]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xeb28]
mov r8, qword [rsp + 0xfcb0]
lea rdx, str._s_s_p___s_s
lea rcx, [rsp + 0xfca8]
call fcn.140002c70
nop
lea rcx, [rsp + 0x10450]
call fcn.140001490
nop
lea rcx, [rsp + 0x10448]
call fcn.140001490
lea rcx, [rsp + 0xfca8]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0xfca8]
call fcn.140001490
nop
lea rcx, [rsp + 0xfcb0]
call fcn.140001490
jmp 0x1401b4b8b
lea rcx, [rsp + 0xf950]
call fcn.140001490
nop
lea rcx, [rsp + 0xf960]
call fcn.140014ec0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x14024d950]
call fcn.1400ef950
nop
lea rcx, [rsp + 0xeef8]
call fcn.14007680c
nop
lea rcx, [rsp + 0xef40]
call fcn.140001490
nop
lea rcx, [rsp + 0xef58]
call fcn.140001490
nop
lea rcx, [rsp + 0xef28]
call fcn.140001490
nop
lea rcx, [rsp + 0xef60]
call fcn.140014ec0
jmp 0x1401b3ad5
mov dword [rsp + 0x10458], 0
lea rcx, [rsp + 0xe960]
call fcn.140001490
nop
lea rcx, [rsp + 0xecb0]
call fcn.1401613f0
nop
lea rcx, [rsp + 0xe970]
call fcn.140014ec0
mov eax, dword [rsp + 0x10458]
jmp 0x1401b4eba
mov eax, 1
mov rcx, qword [rsp + 0x10e48]
xor rcx, rsp
call fcn.1400a8790
add rsp, 0x10e50
pop rdi
ret