Function at 0x1401a55c0
Capabilities:
Check for time delay via gettickcount
Check if file exists
Create process on windows
Delete file
Get disk size
Manipulate boot configuration
Open clipboard
Write clipboard data

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
mov eax, 0x7870
call fcn.1401d4c90
sub rsp, rax
mov qword [rsp + 0x7470], 0xfffffffffffffffe
mov dword [rsp + 0x7468], 0
mov rax, qword [rsp + 0x7888]
mov qword [rsp + 0x7478], rax
cmp qword [rsp + 0x7478], 0x800e
ja 0x1401a565f
cmp qword [rsp + 0x7478], 0x800e
je 0x1401a6aa8
cmp qword [rsp + 0x7478], 0x10b
je 0x1401ab26b
cmp qword [rsp + 0x7478], 0x10c
je 0x1401ab096
cmp qword [rsp + 0x7478], 0x10d
je 0x1401aaec1
jmp case.0x1401a56c8.32801
cmp qword [rsp + 0x7478], 0x8144
ja 0x1401a56ca
cmp qword [rsp + 0x7478], 0x8144
je 0x1401a95f3
mov rax, qword [rsp + 0x7478]
sub rax, 0x800f
mov qword [rsp + 0x7478], rax
cmp qword [rsp + 0x7478], 0xca
ja case.0x1401a56c8.32801
lea rcx, [0x140000000]
mov rax, qword [rsp + 0x7478]
movzx eax, byte [rcx + rax + 0x1ab778]
mov eax, dword [rcx + rax*4 + 0x1ab72c]
add rax, rcx
jmp rax
cmp qword [rsp + 0x7478], 0x8146
je 0x1401a98a4
cmp qword [rsp + 0x7478], 0x8154
je 0x1401a97e8
cmp qword [rsp + 0x7478], 0x8166
je 0x1401ab440
jmp case.0x1401a56c8.32801
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jl 0x1401a57ab
cmp dword [rsp + 0x30], 0
jl 0x1401a57ab
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, 1
mov r8d, dword [rsp + 0x30]
lea rdx, [rsp + 0x7120]
call fcn.140083150
mov qword [rsp + 0x7480], rax
mov rcx, qword [rsp + 0x7480]
call fcn.140023510
mov rcx, rax
call fcn.1400d6fa0
lea rcx, [rsp + 0x7120]
call fcn.140001490
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x30]
call fcn.14000e740
mov dword [rsp + 0x30], eax
jmp 0x1401a572f
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jl 0x1401a59d7
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x34]
lea rdx, [rsp + 0x7128]
call fcn.140083150
mov qword [rsp + 0x7488], rax
mov rax, qword [rsp + 0x7488]
mov qword [rsp + 0x7490], rax
lea rdx, [0x140246090]
lea rcx, [rsp + 0x7130]
call fcn.1400eeb90
mov qword [rsp + 0x7498], rax
mov rax, qword [rsp + 0x7498]
mov qword [rsp + 0x74a0], rax
lea r8, [0x140246034]
mov rdx, qword [rsp + 0x74a0]
lea rcx, [rsp + 0x7138]
call fcn.1400010b0
mov qword [rsp + 0x74a8], rax
mov rax, qword [rsp + 0x74a8]
mov qword [rsp + 0x74b0], rax
mov r8, qword [rsp + 0x7490]
mov rdx, qword [rsp + 0x74b0]
lea rcx, [rsp + 0x7140]
call fcn.140006bd0
mov qword [rsp + 0x74b8], rax
mov rax, qword [rsp + 0x74b8]
mov qword [rsp + 0x74c0], rax
lea r8, [0x1402444dc]
mov rdx, qword [rsp + 0x74c0]
lea rcx, [rsp + 0x38]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x7140]
call fcn.140001490
nop
lea rcx, [rsp + 0x7138]
call fcn.140001490
nop
lea rcx, [rsp + 0x7130]
call fcn.140001490
nop
lea rcx, [rsp + 0x7128]
call fcn.140001490
lea rcx, [rsp + 0x38]
call fcn.140023510
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef1c0
cmp eax, 7
jne 0x1401a5930
lea rcx, [rsp + 0x38]
call fcn.140001490
jmp case.0x1401a56c8.32801
cmp dword [rsp + 0x34], 0
jl 0x1401a59cd
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x34]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8044
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x34]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x34]
call fcn.14000e740
mov dword [rsp + 0x34], eax
jmp 0x1401a5930
lea rcx, [rsp + 0x38]
call fcn.140001490
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jl 0x1401a5bc9
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x40]
lea rdx, [rsp + 0x7148]
call fcn.140083150
mov qword [rsp + 0x74c8], rax
mov rax, qword [rsp + 0x74c8]
mov qword [rsp + 0x74d0], rax
lea rdx, str.Shutdown_it_
lea rcx, [rsp + 0x7150]
call fcn.1400eeb90
mov qword [rsp + 0x74d8], rax
mov rax, qword [rsp + 0x74d8]
mov qword [rsp + 0x74e0], rax
lea r8, [0x1402460ac]
mov rdx, qword [rsp + 0x74e0]
lea rcx, [rsp + 0x7158]
call fcn.1400010b0
mov qword [rsp + 0x74e8], rax
mov rax, qword [rsp + 0x74e8]
mov qword [rsp + 0x74f0], rax
mov r8, qword [rsp + 0x74d0]
mov rdx, qword [rsp + 0x74f0]
lea rcx, [rsp + 0x7160]
call fcn.140006bd0
mov qword [rsp + 0x74f8], rax
mov rax, qword [rsp + 0x74f8]
mov qword [rsp + 0x7500], rax
lea r8, [0x14024457c]
mov rdx, qword [rsp + 0x7500]
lea rcx, [rsp + 0x48]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x7160]
call fcn.140001490
nop
lea rcx, [rsp + 0x7158]
call fcn.140001490
nop
lea rcx, [rsp + 0x7150]
call fcn.140001490
nop
lea rcx, [rsp + 0x7148]
call fcn.140001490
lea rcx, [rsp + 0x48]
call fcn.140023510
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef1c0
cmp eax, 7
jne 0x1401a5b5c
lea rcx, [rsp + 0x48]
call fcn.140001490
jmp case.0x1401a56c8.32801
cmp dword [rsp + 0x40], 0
jl 0x1401a5bbf
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x40]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
mov r9, 0xffffffffffffffff
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x40]
call fcn.14000e740
mov dword [rsp + 0x40], eax
jmp 0x1401a5b5c
lea rcx, [rsp + 0x48]
call fcn.140001490
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0
jl 0x1401a5df5
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x50]
lea rdx, [rsp + 0x7168]
call fcn.140083150
mov qword [rsp + 0x7508], rax
mov rax, qword [rsp + 0x7508]
mov qword [rsp + 0x7510], rax
lea rdx, str.Reboot_it_
lea rcx, [rsp + 0x7170]
call fcn.1400eeb90
mov qword [rsp + 0x7518], rax
mov rax, qword [rsp + 0x7518]
mov qword [rsp + 0x7520], rax
lea r8, [0x1402460d4]
mov rdx, qword [rsp + 0x7520]
lea rcx, [rsp + 0x7178]
call fcn.1400010b0
mov qword [rsp + 0x7528], rax
mov rax, qword [rsp + 0x7528]
mov qword [rsp + 0x7530], rax
mov r8, qword [rsp + 0x7510]
mov rdx, qword [rsp + 0x7530]
lea rcx, [rsp + 0x7180]
call fcn.140006bd0
mov qword [rsp + 0x7538], rax
mov rax, qword [rsp + 0x7538]
mov qword [rsp + 0x7540], rax
lea r8, [0x1402445c4]
mov rdx, qword [rsp + 0x7540]
lea rcx, [rsp + 0x58]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x7180]
call fcn.140001490
nop
lea rcx, [rsp + 0x7178]
call fcn.140001490
nop
lea rcx, [rsp + 0x7170]
call fcn.140001490
nop
lea rcx, [rsp + 0x7168]
call fcn.140001490
lea rcx, [rsp + 0x58]
call fcn.140023510
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef1c0
cmp eax, 7
jne 0x1401a5d4e
lea rcx, [rsp + 0x58]
call fcn.140001490
jmp case.0x1401a56c8.32801
cmp dword [rsp + 0x50], 0
jl 0x1401a5deb
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x50]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8044
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x50]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
mov r9d, 2
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x50]
call fcn.14000e740
mov dword [rsp + 0x50], eax
jmp 0x1401a5d4e
lea rcx, [rsp + 0x58]
call fcn.140001490
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jl 0x1401a5fe3
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r9d, r9d
mov r8d, dword [rsp + 0x60]
lea rdx, [rsp + 0x7188]
call fcn.140083150
mov qword [rsp + 0x7548], rax
mov rax, qword [rsp + 0x7548]
mov qword [rsp + 0x7550], rax
lea rdx, str.Logoff_it_
lea rcx, [rsp + 0x7190]
call fcn.1400eeb90
mov qword [rsp + 0x7558], rax
mov rax, qword [rsp + 0x7558]
mov qword [rsp + 0x7560], rax
lea r8, [0x1402460f8]
mov rdx, qword [rsp + 0x7560]
lea rcx, [rsp + 0x7198]
call fcn.1400010b0
mov qword [rsp + 0x7568], rax
mov rax, qword [rsp + 0x7568]
mov qword [rsp + 0x7570], rax
mov r8, qword [rsp + 0x7550]
mov rdx, qword [rsp + 0x7570]
lea rcx, [rsp + 0x71a0]
call fcn.140006bd0
mov qword [rsp + 0x7578], rax
mov rax, qword [rsp + 0x7578]
mov qword [rsp + 0x7580], rax
lea r8, [0x1402445dc]
mov rdx, qword [rsp + 0x7580]
lea rcx, [rsp + 0x68]
call fcn.1400010b0
nop
lea rcx, [rsp + 0x71a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x7198]
call fcn.140001490
nop
lea rcx, [rsp + 0x7190]
call fcn.140001490
nop
lea rcx, [rsp + 0x7188]
call fcn.140001490
lea rcx, [rsp + 0x68]
call fcn.140023510
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef1c0
cmp eax, 7
jne 0x1401a5f7a
lea rcx, [rsp + 0x68]
call fcn.140001490
jmp case.0x1401a56c8.32801
cmp dword [rsp + 0x60], 0
jl 0x1401a5fd9
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x60]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8041
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x60]
call fcn.14000e740
mov dword [rsp + 0x60], eax
jmp 0x1401a5f7a
lea rcx, [rsp + 0x68]
call fcn.140001490
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 0
jl 0x1401a6060
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r11d, eax
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x8b0], r11d
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x70]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8042
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x74], eax
cmp dword [rsp + 0x74], 0
jl 0x1401a60f0
cmp dword [rsp + 0x74], 0
jl 0x1401a60f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x74]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8049
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x74]
call fcn.14000e740
mov dword [rsp + 0x74], eax
jmp 0x1401a6091
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x78], 0
jl 0x1401a616d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r11d, eax
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x8b0], r11d
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x78]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8043
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
xor eax, eax
jmp 0x1401ab723
xor edx, edx
lea rcx, [rsp + 0x80]
call fcn.14016df90
nop
lea rcx, [rsp + 0x80]
call fcn.140081900
nop
lea rcx, [rsp + 0x80]
call fcn.14016dee0
xor eax, eax
jmp 0x1401ab723
xor r8d, r8d
lea rdx, [rsp + 0x71b0]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x7588], rax
mov rax, qword [rsp + 0x7588]
mov qword [rsp + 0x7590], rax
mov eax, dword [rsp + 0x7468]
or eax, 1
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246118]
mov rcx, qword [rsp + 0x7590]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401a625b
xor r8d, r8d
lea rdx, [rsp + 0x71b8]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x7598], rax
mov eax, dword [rsp + 0x7468]
or eax, 2
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246138]
mov rcx, qword [rsp + 0x7598]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401a625b
mov dword [rsp + 0x75a0], 0
jmp 0x1401a6266
mov dword [rsp + 0x75a0], 1
movzx eax, byte [rsp + 0x75a0]
mov byte [rsp + 0x71a8], al
mov eax, dword [rsp + 0x7468]
and eax, 2
test eax, eax
je 0x1401a6299
and dword [rsp + 0x7468], 0xfffffffd
lea rcx, [rsp + 0x71b8]
call fcn.140001490
nop
mov eax, dword [rsp + 0x7468]
and eax, 1
test eax, eax
je 0x1401a62bc
and dword [rsp + 0x7468], 0xfffffffe
lea rcx, [rsp + 0x71b0]
call fcn.140001490
movzx eax, byte [rsp + 0x71a8]
test eax, eax
je 0x1401a63cb
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x4e0], eax
cmp dword [rsp + 0x4e0], 0
jge 0x1401a6301
jmp case.0x1401a56c8.32801
mov r8d, 0xffffffff
mov edx, 0x144
mov ecx, 0x76
call fcn.1400f0f30
cmp eax, 6
jne 0x1401a63cb
cmp dword [rsp + 0x4e0], 0
jl 0x1401a63cb
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x4e0]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x4e0]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x4e0]
call fcn.14000e740
mov dword [rsp + 0x4e0], eax
jmp 0x1401a631f
xor eax, eax
jmp 0x1401ab723
xor r8d, r8d
lea rdx, [rsp + 0x71c8]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x75a8], rax
mov rax, qword [rsp + 0x75a8]
mov qword [rsp + 0x75b0], rax
mov eax, dword [rsp + 0x7468]
or eax, 4
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246160]
mov rcx, qword [rsp + 0x75b0]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401a6487
xor r8d, r8d
lea rdx, [rsp + 0x71d0]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x75b8], rax
mov eax, dword [rsp + 0x7468]
or eax, 8
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246180]
mov rcx, qword [rsp + 0x75b8]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401a6487
mov dword [rsp + 0x75c0], 0
jmp 0x1401a6492
mov dword [rsp + 0x75c0], 1
movzx eax, byte [rsp + 0x75c0]
mov byte [rsp + 0x71c0], al
mov eax, dword [rsp + 0x7468]
and eax, 8
test eax, eax
je 0x1401a64c5
and dword [rsp + 0x7468], 0xfffffff7
lea rcx, [rsp + 0x71d0]
call fcn.140001490
nop
mov eax, dword [rsp + 0x7468]
and eax, 4
test eax, eax
je 0x1401a64e8
and dword [rsp + 0x7468], 0xfffffffb
lea rcx, [rsp + 0x71c8]
call fcn.140001490
movzx eax, byte [rsp + 0x71c0]
test eax, eax
je 0x1401a65b5
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x4e4], eax
cmp dword [rsp + 0x4e4], 0
jge 0x1401a652d
jmp case.0x1401a56c8.32801
mov r8d, 0xffffffff
mov edx, 0x144
mov ecx, 0x77
call fcn.1400f0f30
cmp eax, 6
jne 0x1401a65b5
cmp dword [rsp + 0x4e4], 0
jl 0x1401a65b5
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x4e4]
call fcn.1400823f0
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x4e4]
call fcn.14000e740
mov dword [rsp + 0x4e4], eax
jmp 0x1401a6547
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
call fcn.14019af90
xor eax, eax
jmp 0x1401ab723
xor r8d, r8d
lea rdx, [rsp + 0x71e0]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x75c8], rax
mov rax, qword [rsp + 0x75c8]
mov qword [rsp + 0x75d0], rax
mov eax, dword [rsp + 0x7468]
or eax, 0x10
mov dword [rsp + 0x7468], eax
lea rdx, [0x1402461a8]
mov rcx, qword [rsp + 0x75d0]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401a6685
xor r8d, r8d
lea rdx, [rsp + 0x71e8]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x75d8], rax
mov eax, dword [rsp + 0x7468]
or eax, 0x20
mov dword [rsp + 0x7468], eax
lea rdx, [0x1402461c8]
mov rcx, qword [rsp + 0x75d8]
call fcn.140006d50
movzx eax, al
test eax, eax
jne 0x1401a6685
mov dword [rsp + 0x75e0], 0
jmp 0x1401a6690
mov dword [rsp + 0x75e0], 1
movzx eax, byte [rsp + 0x75e0]
mov byte [rsp + 0x71d8], al
mov eax, dword [rsp + 0x7468]
and eax, 0x20
test eax, eax
je 0x1401a66c3
and dword [rsp + 0x7468], 0xffffffdf
lea rcx, [rsp + 0x71e8]
call fcn.140001490
nop
mov eax, dword [rsp + 0x7468]
and eax, 0x10
test eax, eax
je 0x1401a66e6
and dword [rsp + 0x7468], 0xffffffef
lea rcx, [rsp + 0x71e0]
call fcn.140001490
movzx eax, byte [rsp + 0x71d8]
test eax, eax
je 0x1401a6aa1
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x518], eax
cmp dword [rsp + 0x518], 0
jge 0x1401a672d
xor eax, eax
jmp 0x1401ab723
lea rcx, [rsp + 0x520]
call fcn.1401cc380
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x518]
call fcn.1400823f0
mov dword [rsp + 0x6b8], eax
lea rcx, [rsp + 0x520]
call fcn.1401d0fb0
mov r11d, dword [rsp + 0x6b8]
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov dword [rsp + 0x860], eax
cmp dword [rsp + 0x860], 0
jne 0x1401a67c3
mov dword [rsp + 0x71f0], 0
lea rcx, [rsp + 0x520]
call fcn.140005db0
mov eax, dword [rsp + 0x71f0]
jmp 0x1401ab723
lea rcx, [rsp + 0x8a8]
call fcn.140002db0
nop
mov r8d, dword [rsp + 0x860]
lea rdx, [0x1402461f0]
lea rcx, [rsp + 0x8a8]
call fcn.140002c40
lea rcx, [rsp + 0x8a8]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x8a0], rax
lea rcx, [rsp + 0x4e8]
call fcn.140076008
nop
lea r8, [rsp + 0x6c0]
lea rdx, [rsp + 0x8a8]
lea rcx, [rsp + 0x71f8]
call fcn.140006bd0
mov qword [rsp + 0x75e8], rax
mov rax, qword [rsp + 0x75e8]
mov qword [rsp + 0x75f0], rax
lea r8, [0x140246200]
mov rdx, qword [rsp + 0x75f0]
lea rcx, [rsp + 0x7200]
call fcn.1400010b0
mov qword [rsp + 0x75f8], rax
mov rax, qword [rsp + 0x75f8]
mov qword [rsp + 0x7600], rax
mov rcx, qword [rsp + 0x7600]
call fcn.140023510
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x4e8]
call fcn.14007610c
mov dword [rsp + 0x898], eax
lea rcx, [rsp + 0x7200]
call fcn.140001490
nop
lea rcx, [rsp + 0x71f8]
call fcn.140001490
lea rcx, [rsp + 0x868]
call fcn.140021960
nop
cmp dword [rsp + 0x898], 0
je 0x1401a6967
lea rcx, [rsp + 0x4e8]
call fcn.140075d14
mov dword [rsp + 0x898], eax
lea rdx, [rsp + 0x7210]
lea rcx, [rsp + 0x4e8]
call fcn.140076560
mov qword [rsp + 0x7608], rax
mov rax, qword [rsp + 0x7608]
mov qword [rsp + 0x7610], rax
mov rcx, qword [rsp + 0x7610]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x7208], rax
lea rdx, [rsp + 0x7208]
lea rcx, [rsp + 0x868]
call fcn.1400219b0
nop
lea rcx, [rsp + 0x7210]
call fcn.140001490
jmp 0x1401a68d2
lea rcx, [rsp + 0x868]
call fcn.14001db40
test rax, rax
je 0x1401a69b0
xor edx, edx
lea rcx, [rsp + 0x868]
call fcn.140007d10
mov rbx, rax
lea rcx, [rsp + 0x868]
call fcn.14001db40
xor r9d, r9d
mov r8, rbx
mov edx, eax
mov rcx, qword [rsp + 0x8a0]
call qword [sym.imp.SHELL32.dll_SHOpenFolderAndSelectItems]
jmp 0x1401a69de
lea rcx, [rsp + 0x8a8]
call fcn.140023510
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp qword [rsp + 0x8a0], 0
je 0x1401a69f7
mov rcx, qword [rsp + 0x8a0]
call qword [sym.imp.SHELL32.dll_ILFree]
mov dword [rsp + 0x8b0], 0
jmp 0x1401a6a15
mov eax, dword [rsp + 0x8b0]
add eax, 1
mov dword [rsp + 0x8b0], eax
movsxd rbx, dword [rsp + 0x8b0]
lea rcx, [rsp + 0x868]
call fcn.14001db40
cmp rbx, rax
jae 0x1401a6a6a
movsxd rdx, dword [rsp + 0x8b0]
lea rcx, [rsp + 0x868]
call fcn.140007d10
cmp qword [rax], 0
je 0x1401a6a68
movsxd rdx, dword [rsp + 0x8b0]
lea rcx, [rsp + 0x868]
call fcn.140007d10
mov rcx, qword [rax]
call qword [sym.imp.SHELL32.dll_ILFree]
jmp 0x1401a6a04
lea rcx, [rsp + 0x868]
call fcn.140007ce0
nop
lea rcx, [rsp + 0x4e8]
call fcn.140076064
nop
lea rcx, [rsp + 0x8a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x520]
call fcn.140005db0
xor eax, eax
jmp 0x1401ab723
mov rdx, qword [rsp + 0x7880]
lea rcx, [rsp + 0x8c0]
call fcn.140165190
nop
mov dword [rsp + 0xf50], 0
xor r8d, r8d
lea rdx, [rsp + 0x7220]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x7618], rax
lea rdx, [0x140246210]
mov rcx, qword [rsp + 0x7618]
call fcn.140006d50
mov byte [rsp + 0x7218], al
lea rcx, [rsp + 0x7220]
call fcn.140001490
movzx r11d, byte [rsp + 0x7218]
test r11d, r11d
je 0x1401a6b35
xor edx, edx
mov rcx, qword [rsp + 0x7880]
call fcn.14018b5b0
mov dword [rsp + 0xfd8], eax
lea rcx, [rsp + 0x8c0]
call fcn.140081900
cmp rax, 1
jne 0x1401a6cb9
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000ebf0
mov dword [rsp + 0x1020], eax
xor r8d, r8d
lea rdx, [rsp + 0x7230]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x7620], rax
lea rdx, [0x140246238]
mov rcx, qword [rsp + 0x7620]
call fcn.140006d50
mov byte [rsp + 0x7228], al
lea rcx, [rsp + 0x7230]
call fcn.140001490
movzx r11d, byte [rsp + 0x7228]
test r11d, r11d
je 0x1401a6c8c
xor edx, edx
mov rcx, qword [rsp + 0x7880]
call fcn.14018b5b0
mov edx, eax
lea rcx, [rsp + 0x1030]
call fcn.1401cc770
nop
mov eax, dword [rsp + 0xf54]
mov dword [rsp + 0x11c8], eax
lea rcx, [rsp + 0x1030]
call fcn.1401cde20
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000ebf0
mov rdx, qword [rsp + 0x7880]
add rdx, 0xdc8
mov r9d, dword [rsp + 0xf54]
mov r8d, eax
mov rcx, qword [rsp + 0x7880]
call fcn.1401a53d0
mov ebx, dword [rsp + 0x11c8]
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000ebf0
mov edx, eax
sub edx, 1
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8, rbx
call fcn.14000e580
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
nop
lea rcx, [rsp + 0x1030]
call fcn.140005d90
jmp 0x1401a6cb9
mov rdx, qword [rsp + 0x7880]
add rdx, 0xdc8
mov r9d, dword [rsp + 0xf54]
mov r8d, dword [rsp + 0x1020]
mov rcx, qword [rsp + 0x7880]
call fcn.1401a53d0
nop
lea rcx, [rsp + 0x8c0]
call fcn.140164e30
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x1370], eax
cmp dword [rsp + 0x1370], 0
jge 0x1401a6d02
jmp case.0x1401a56c8.32801
lea rcx, [rsp + 0x1378]
call fcn.140002db0
nop
cmp dword [rsp + 0x1370], 0
jl 0x1401a6e0b
mov dword [rsp + 0x1380], 0
jmp 0x1401a6d3c
mov eax, dword [rsp + 0x1380]
add eax, 1
mov dword [rsp + 0x1380], eax
cmp dword [rsp + 0x1380], 0x1c
jge 0x1401a6dca
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, dword [rsp + 0x1380]
mov r8d, dword [rsp + 0x1370]
lea rdx, [rsp + 0x7238]
call fcn.140083150
mov qword [rsp + 0x7628], rax
mov rax, qword [rsp + 0x7628]
mov qword [rsp + 0x7630], rax
mov rdx, qword [rsp + 0x7630]
lea rcx, [rsp + 0x1378]
call fcn.140005fd0
nop
lea rcx, [rsp + 0x7238]
call fcn.140001490
lea rdx, [0x1402445f4]
lea rcx, [rsp + 0x1378]
call fcn.140006000
jmp 0x1401a6d2b
lea rdx, [0x140246260]
lea rcx, [rsp + 0x1378]
call fcn.140006000
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x1370]
call fcn.14000e740
mov dword [rsp + 0x1370], eax
jmp 0x1401a6d10
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x1401a6eb9
call qword [sym.imp.USER32.dll_EmptyClipboard]
lea rcx, [rsp + 0x1378]
call fcn.140001a40
add eax, 1
movsxd rdx, eax
shl rdx, 1
mov ecx, 0x2000
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [rsp + 0x1388], rax
mov rcx, qword [rsp + 0x1388]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov qword [rsp + 0x1390], rax
lea rcx, [rsp + 0x1378]
call fcn.140023510
mov rdx, rax
mov rcx, qword [rsp + 0x1390]
call fcn.1400a9470
mov rcx, qword [rsp + 0x1388]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rdx, qword [rsp + 0x1388]
mov ecx, reloc.WS2_32.dll_listen
call qword [sym.imp.USER32.dll_SetClipboardData]
call qword [sym.imp.USER32.dll_CloseClipboard]
xor r8d, r8d
mov edx, 0x40
lea rcx, str.The_client_information_is_already_copied_to_the_clipboard.
call fcn.1400ef1c0
nop
lea rcx, [rsp + 0x1378]
call fcn.140001490
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x1398], eax
cmp dword [rsp + 0x1398], 0
jge 0x1401a6f04
xor eax, eax
jmp 0x1401ab723
lea rcx, [rsp + 0x13a0]
call fcn.140081d08
nop
xor r8d, r8d
lea rdx, [rsp + 0x7248]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x7638], rax
lea rdx, [0x1402462e8]
mov rcx, qword [rsp + 0x7638]
call fcn.140006d50
mov byte [rsp + 0x7240], al
lea rcx, [rsp + 0x7248]
call fcn.140001490
movzx r11d, byte [rsp + 0x7240]
test r11d, r11d
je 0x1401a7121
mov rdx, qword [rsp + 0x7880]
lea rcx, [rsp + 0x13d0]
call fcn.140165190
nop
mov dword [rsp + 0x1a60], 1
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x1398]
call fcn.1400823f0
mov dword [rsp + 0x1a64], eax
cmp dword [rsp + 0x1398], 0
jl 0x1401a7021
mov edx, dword [rsp + 0x1398]
lea rcx, [rsp + 0x13a0]
call fcn.14000ec20
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x1398]
call fcn.1400823f0
mov edx, eax
lea rcx, [rsp + 0x1ab8]
call fcn.14000ec20
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x1398]
call fcn.14000e740
mov dword [rsp + 0x1398], eax
jmp 0x1401a6faf
lea rcx, [rsp + 0x13d0]
call fcn.140081900
cmp rax, 1
jne 0x1401a7114
mov qword [rsp + 0x1b30], 0
jmp 0x1401a705a
mov rax, qword [rsp + 0x1b30]
add rax, 1
mov qword [rsp + 0x1b30], rax
lea rcx, [rsp + 0x13a0]
call fcn.140014cc0
cmp qword [rsp + 0x1b30], rax
jge 0x1401a7114
cmp dword [rsp + 0x1ae8], 0xffffffff
jne 0x1401a70c0
lea rcx, [rsp + 0x13a0]
call fcn.140014cc0
mov rdx, rax
sub rdx, 1
sub rdx, qword [rsp + 0x1b30]
lea rcx, [rsp + 0x13a0]
call fcn.14000eee0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.14000e670
jmp 0x1401a7046
mov rdx, qword [rsp + 0x1b30]
lea rcx, [rsp + 0x1ab8]
call fcn.14000eee0
mov rbx, rax
mov rdx, qword [rsp + 0x1b30]
lea rcx, [rsp + 0x13a0]
call fcn.14000eee0
mov rdx, qword [rsp + 0x7880]
add rdx, 0xdc8
mov r9d, dword [rbx]
mov r8d, dword [rax]
mov rcx, qword [rsp + 0x7880]
call fcn.1401a53d0
jmp 0x1401a7046
lea rcx, [rsp + 0x13d0]
call fcn.140164e30
xor r8d, r8d
lea rdx, [rsp + 0x7258]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x7640], rax
lea rdx, [0x140246308]
mov rcx, qword [rsp + 0x7640]
call fcn.140006d50
mov byte [rsp + 0x7250], al
lea rcx, [rsp + 0x7258]
call fcn.140001490
movzx r11d, byte [rsp + 0x7250]
test r11d, r11d
je 0x1401a744d
xor edx, edx
mov rcx, qword [rsp + 0x7880]
call fcn.14018b5b0
mov edx, eax
lea rcx, [rsp + 0x1b40]
call fcn.1401cc770
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x1398]
call fcn.1400823f0
mov dword [rsp + 0x1cd8], eax
lea rcx, [rsp + 0x1b40]
call fcn.1401d0fb0
mov rdx, qword [rsp + 0x7880]
lea rcx, [rsp + 0x1e80]
call fcn.140165190
nop
mov dword [rsp + 0x2510], 1
mov eax, dword [rsp + 0x1cd8]
mov dword [rsp + 0x2514], eax
cmp dword [rsp + 0x1398], 0
jl 0x1401a728a
mov edx, dword [rsp + 0x1398]
lea rcx, [rsp + 0x13a0]
call fcn.14000ec20
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x1398]
call fcn.1400823f0
mov dword [rsp + 0x1cd8], eax
lea rcx, [rsp + 0x1b40]
call fcn.1401d0fb0
mov edx, dword [rsp + 0x1cd8]
lea rcx, [rsp + 0x2568]
call fcn.14000ec20
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x1398]
call fcn.14000e740
mov dword [rsp + 0x1398], eax
jmp 0x1401a71f8
lea rcx, [rsp + 0x1e80]
call fcn.140081900
cmp rax, 1
jne 0x1401a7431
xor edx, edx
mov rcx, qword [rsp + 0x7880]
call fcn.14018b5b0
cmp dword [rsp + 0x2598], eax
jne 0x1401a73b7
mov qword [rsp + 0x25e0], 0
jmp 0x1401a72df
mov rax, qword [rsp + 0x25e0]
add rax, 1
mov qword [rsp + 0x25e0], rax
lea rcx, [rsp + 0x13a0]
call fcn.140014cc0
cmp qword [rsp + 0x25e0], rax
jge 0x1401a73b5
mov rdx, qword [rsp + 0x25e0]
lea rcx, [rsp + 0x13a0]
call fcn.14000eee0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.1400823f0
mov dword [rsp + 0x25e8], eax
mov rdx, qword [rsp + 0x25e0]
lea rcx, [rsp + 0x2568]
call fcn.14000eee0
mov rbx, rax
mov rdx, qword [rsp + 0x25e0]
lea rcx, [rsp + 0x13a0]
call fcn.14000eee0
mov rdx, qword [rsp + 0x7880]
add rdx, 0xdc8
mov r9d, dword [rbx]
mov r8d, dword [rax]
mov rcx, qword [rsp + 0x7880]
call fcn.1401a53d0
mov ebx, dword [rsp + 0x25e8]
mov rdx, qword [rsp + 0x25e0]
lea rcx, [rsp + 0x13a0]
call fcn.14000eee0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8, rbx
mov edx, dword [rax]
call fcn.14000e580
jmp 0x1401a72cb
jmp 0x1401a7431
mov qword [rsp + 0x25f0], 0
jmp 0x1401a73d9
mov rax, qword [rsp + 0x25f0]
add rax, 1
mov qword [rsp + 0x25f0], rax
lea rcx, [rsp + 0x13a0]
call fcn.140014cc0
cmp qword [rsp + 0x25f0], rax
jge 0x1401a7431
lea rcx, [rsp + 0x13a0]
call fcn.140014cc0
mov rdx, rax
sub rdx, 1
sub rdx, qword [rsp + 0x25f0]
lea rcx, [rsp + 0x13a0]
call fcn.14000eee0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rax]
call fcn.14000e670
jmp 0x1401a73c5
lea rcx, [rsp + 0x1e80]
call fcn.140164e30
nop
lea rcx, [rsp + 0x1b40]
call fcn.140005d90
nop
lea rcx, [rsp + 0x13a0]
call fcn.140081d28
xor eax, eax
jmp 0x1401ab723
xor r8d, r8d
lea rdx, [rsp + 0x7268]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x7648], rax
mov rax, qword [rsp + 0x7648]
mov qword [rsp + 0x7650], rax
mov eax, dword [rsp + 0x7468]
or eax, 0x40
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246330]
mov rcx, qword [rsp + 0x7650]
call fcn.140006d90
movzx eax, al
test eax, eax
je 0x1401a7518
xor r8d, r8d
lea rdx, [rsp + 0x7270]
mov rcx, qword [rsp + 0x7880]
call fcn.14018d770
mov qword [rsp + 0x7658], rax
mov eax, dword [rsp + 0x7468]
or eax, 0x80
mov dword [rsp + 0x7468], eax
lea rdx, [0x140246350]
mov rcx, qword [rsp + 0x7658]
call fcn.140006d90
movzx eax, al
test eax, eax
je 0x1401a7518
mov dword [rsp + 0x7660], 1
jmp 0x1401a7523
mov dword [rsp + 0x7660], 0
movzx eax, byte [rsp + 0x7660]
mov byte [rsp + 0x7260], al
mov eax, dword [rsp + 0x7468]
and eax, 0x80
test eax, eax
je 0x1401a755b
and dword [rsp + 0x7468], 0xffffff7f
lea rcx, [rsp + 0x7270]
call fcn.140001490
nop
mov eax, dword [rsp + 0x7468]
and eax, 0x40
test eax, eax
je 0x1401a757e
and dword [rsp + 0x7468], 0xffffffbf
lea rcx, [rsp + 0x7268]
call fcn.140001490
movzx eax, byte [rsp + 0x7260]
test eax, eax
je 0x1401a758f
jmp case.0x1401a56c8.32801
lea rcx, [rsp + 0x2600]
call fcn.140081d08
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x25f8], eax
cmp dword [rsp + 0x25f8], 0
jl 0x1401a76a1
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f0f30
cmp eax, 6
jne 0x1401a76a1
cmp dword [rsp + 0x25f8], 0
jl 0x1401a76a1
lea rcx, [rsp + 0x2630]
call fcn.1401cc380
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x25f8]
call fcn.1400823f0
mov dword [rsp + 0x27c8], eax
mov edx, dword [rsp + 0x27c8]
lea rcx, [rsp + 0x2600]
call fcn.14000ec20
lea rcx, [rsp + 0x2630]
call fcn.1401b76a0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x25f8]
call fcn.14000e670
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x25f8], eax
lea rcx, [rsp + 0x2630]
call fcn.140005db0
jmp 0x1401a75ef
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov dword [rsp + 0x2970], 0
jmp 0x1401a76ce
mov eax, dword [rsp + 0x2970]
add eax, 1
mov dword [rsp + 0x2970], eax
movsxd rbx, dword [rsp + 0x2970]
lea rcx, [rsp + 0x2600]
call fcn.140014cc0
cmp rbx, rax
jge 0x1401a771d
movsxd rdx, dword [rsp + 0x2970]
lea rcx, [rsp + 0x2600]
call fcn.14000eee0
mov eax, dword [rax]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x803c
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
jmp 0x1401a76bd
lea rcx, [rsp + 0x2600]
call fcn.140081d28
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000e550
mov dword [rsp + 0x2974], eax
cmp dword [rsp + 0x2974], 1
je 0x1401a775d
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x2cc0], eax
lea rcx, [rsp + 0x2cd0]
call fcn.1401cc380
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x2cc0]
call fcn.1400823f0
mov dword [rsp + 0x2e68], eax
lea rcx, [rsp + 0x2cd0]
call fcn.1401d0fb0
lea rcx, [rsp + 0x2ed0]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
test eax, eax
je 0x1401a7811
xor r8d, r8d
mov edx, 0x40
lea rcx, str.The_client_keeps_write_back_file__cannot_be_super_client.
call fcn.1400ef1c0
mov dword [rsp + 0x7278], 0
lea rcx, [rsp + 0x2cd0]
call fcn.140005db0
mov eax, dword [rsp + 0x7278]
jmp 0x1401ab723
lea rcx, [rsp + 0x3300]
call fcn.140081d08
nop
mov edx, dword [rsp + 0x2e68]
lea rcx, [rsp + 0x2980]
call fcn.14000e4e0
nop
lea rcx, [rsp + 0x3328]
call fcn.140007ac0
nop
lea rdx, [rsp + 0x3328]
lea rcx, [rsp + 0x2980]
call fcn.1401b7170
mov dword [rsp + 0x3358], 0
jmp 0x1401a7875
mov eax, dword [rsp + 0x3358]
add eax, 1
mov dword [rsp + 0x3358], eax
movsxd rbx, dword [rsp + 0x3358]
lea rcx, [rsp + 0x3328]
call fcn.140007b40
cmp rbx, rax
jae 0x1401a78cc
movsxd rdx, dword [rsp + 0x3358]
lea rcx, [rsp + 0x3328]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1a0
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edx, eax
lea rcx, [rsp + 0x3300]
call fcn.14000ec20
jmp 0x1401a7864
xor edx, edx
lea rcx, [rsp + 0x3010]
call fcn.140159730
nop
lea rdx, [rsp + 0x3300]
lea rcx, [rsp + 0x32c8]
call fcn.140081ee0
mov r11d, dword [rsp + 0x2e68]
mov dword [rsp + 0x32f0], r11d
lea rcx, [rsp + 0x3010]
call fcn.140081900
cmp rax, 1
je 0x1401a7970
mov dword [rsp + 0x727c], 0
lea rcx, [rsp + 0x3010]
call fcn.1401596d0
nop
lea rcx, [rsp + 0x3328]
call fcn.140007b10
nop
lea rcx, [rsp + 0x2980]
call fcn.140005db0
nop
lea rcx, [rsp + 0x3300]
call fcn.140081d28
nop
lea rcx, [rsp + 0x2cd0]
call fcn.140005db0
mov eax, dword [rsp + 0x727c]
jmp 0x1401ab723
mov dword [rsp + 0x335c], 0
jmp 0x1401a798e
mov eax, dword [rsp + 0x335c]
add eax, 1
mov dword [rsp + 0x335c], eax
movsxd rbx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.140014cc0
cmp rbx, rax
jge 0x1401a7b39
movsxd rdx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x3368]
call fcn.1401cd550
nop
movsxd rdx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.14000eee0
mov rbx, rax
lea rcx, [rsp + 0x2ec0]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
cmp dword [rbx], eax
jne 0x1401a7ab2
movsxd rdx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.14000eee0
cmp dword [rax], 0
je 0x1401a7ab2
movsxd rdx, dword [rsp + 0x335c]
lea rcx, [rsp + 0x32c8]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x3370]
call fcn.14000e5e0
nop
lea rax, [rsp + 0x7280]
mov qword [rsp + 0x7288], rax
lea rdx, [rsp + 0x2f78]
mov rcx, qword [rsp + 0x7288]
call fcn.140001430
mov qword [rsp + 0x7668], rax
mov rdx, qword [rsp + 0x7668]
lea rcx, [rsp + 0x3370]
call fcn.1401cda50
test eax, eax
je 0x1401a7aa5
lea rdx, [rsp + 0x3518]
lea rcx, [rsp + 0x3368]
call fcn.140002d80
nop
lea rcx, [rsp + 0x3370]
call fcn.140005db0
lea rcx, [rsp + 0x3368]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x1401a7ad8
lea rcx, [rsp + 0x3368]
call fcn.140001490
jmp 0x1401a797d
lea rcx, [rsp + 0x3360]
call fcn.140002db0
nop
mov r8, qword [rsp + 0x3368]
lea rdx, [0x1402463f8]
lea rcx, [rsp + 0x3360]
call fcn.140002c40
lea rcx, [rsp + 0x3360]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x3360]
call fcn.140001490
nop
lea rcx, [rsp + 0x3368]
call fcn.140001490
jmp 0x1401a797d
lea rdx, [rsp + 0x32c8]
lea rcx, [rsp + 0x3300]
call fcn.140081ee0
lea rcx, [rsp + 0x2980]
call fcn.1401b7590
mov dword [rsp + 0x36b0], 0
jmp 0x1401a7b79
mov eax, dword [rsp + 0x36b0]
add eax, 1
mov dword [rsp + 0x36b0], eax
movsxd rbx, dword [rsp + 0x36b0]
lea rcx, [rsp + 0x3300]
call fcn.140014cc0
cmp rbx, rax
jge 0x1401a7bce
movsxd rdx, dword [rsp + 0x36b0]
lea rcx, [rsp + 0x3300]
call fcn.14000eee0
lea rcx, [rsp + 0x2b20]
mov r8d, dword [rax]
lea rdx, [0x140246378]
call fcn.140002c40
lea rcx, [rsp + 0x2980]
call fcn.14000e360
jmp 0x1401a7b68
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov r9d, dword [rsp + 0x2e68]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000f550
mov r11d, dword [rsp + 0x2e68]
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0x8029
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov r11d, dword [rsp + 0x2e68]
mov qword [rsp + 0x20], r11
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140246418]
call fcn.1400ef1c0
nop
lea rcx, [rsp + 0x3010]
call fcn.1401596d0
nop
lea rcx, [rsp + 0x3328]
call fcn.140007b10
nop
lea rcx, [rsp + 0x2980]
call fcn.140005db0
nop
lea rcx, [rsp + 0x3300]
call fcn.140081d28
nop
lea rcx, [rsp + 0x2cd0]
call fcn.140005db0
xor eax, eax
jmp 0x1401ab723
mov rax, qword [rsp + 0x7880]
cmp dword [rax + 0x978], 0
je 0x1401a7cbe
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000e550
mov dword [rsp + 0x36b4], eax
cmp dword [rsp + 0x36b4], 1
je 0x1401a7cea
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x3a00], eax
lea rcx, [rsp + 0x3a10]
call fcn.1401cc380
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x3a00]
call fcn.1400823f0
mov dword [rsp + 0x3ba8], eax
lea rcx, [rsp + 0x3a10]
call fcn.1401d0fb0
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x14024460c]
call fcn.1400020a0
lea rcx, [rsp + 0x3a10]
call fcn.1401ceaa0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000f550
lea rcx, [rsp + 0x4090]
call fcn.140081d08
nop
mov edx, dword [rsp + 0x3ba8]
lea rcx, [rsp + 0x36c0]
call fcn.14000e4e0
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007ac0
nop
lea rdx, [rsp + 0x40b8]
lea rcx, [rsp + 0x36c0]
call fcn.1401b7170
mov dword [rsp + 0x40e8], 0
jmp 0x1401a7dfe
mov eax, dword [rsp + 0x40e8]
add eax, 1
mov dword [rsp + 0x40e8], eax
movsxd rbx, dword [rsp + 0x40e8]
lea rcx, [rsp + 0x40b8]
call fcn.140007b40
cmp rbx, rax
jae 0x1401a7e55
movsxd rdx, dword [rsp + 0x40e8]
lea rcx, [rsp + 0x40b8]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1a0
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edx, eax
lea rcx, [rsp + 0x4090]
call fcn.14000ec20
jmp 0x1401a7ded
lea rcx, [rsp + 0x40b8]
call fcn.140007b40
test rax, rax
jne 0x1401a7ea3
lea rcx, [rsp + 0x3c98]
lea rdx, [0x140244724]
call fcn.140006d50
movzx eax, al
test eax, eax
je 0x1401a7ea3
lea rcx, [rsp + 0x3c98]
lea rdx, [0x140244744]
call fcn.1400020a0
lea rcx, [rsp + 0x3a10]
call fcn.1401ceaa0
mov eax, dword [rsp + 0x3ba8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov r11, qword [rsp + 0x7880]
mov dword [r11 + 0x978], 1
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Do_you_want_to_update_the_image_
call fcn.1400ef1c0
cmp eax, 7
jne 0x1401a8236
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
mov dword [rsp + 0x4430], 0
jmp 0x1401a7f26
mov eax, dword [rsp + 0x4430]
add eax, 1
mov dword [rsp + 0x4430], eax
movsxd rbx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.140014cc0
cmp rbx, rax
jge 0x1401a8136
movsxd rdx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x4438]
call fcn.1401cd550
nop
movsxd rdx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
mov rbx, rax
lea rcx, [rsp + 0x3c00]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
cmp dword [rbx], eax
jne 0x1401a804a
movsxd rdx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
cmp dword [rax], 0
je 0x1401a804a
movsxd rdx, dword [rsp + 0x4430]
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x4440]
call fcn.14000e5e0
nop
lea rax, [rsp + 0x7290]
mov qword [rsp + 0x7298], rax
lea rdx, [rsp + 0x3cb8]
mov rcx, qword [rsp + 0x7298]
call fcn.140001430
mov qword [rsp + 0x7670], rax
mov rdx, qword [rsp + 0x7670]
lea rcx, [rsp + 0x4440]
call fcn.1401cda50
test eax, eax
je 0x1401a803d
lea rdx, [rsp + 0x45e8]
lea rcx, [rsp + 0x4438]
call fcn.140002d80
nop
lea rcx, [rsp + 0x4440]
call fcn.140005db0
lea r8, [0x140246468]
lea rdx, [rsp + 0x4438]
lea rcx, [rsp + 0x72a8]
call fcn.1400010b0
mov qword [rsp + 0x7678], rax
mov rcx, qword [rsp + 0x7678]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401a8095
mov dword [rsp + 0x7680], 1
jmp 0x1401a80a0
mov dword [rsp + 0x7680], 0
movzx eax, byte [rsp + 0x7680]
mov byte [rsp + 0x72a0], al
lea rcx, [rsp + 0x72a8]
call fcn.140001490
movzx r11d, byte [rsp + 0x72a0]
test r11d, r11d
je 0x1401a80dc
lea rcx, [rsp + 0x4438]
call fcn.140001490
jmp 0x1401a7f15
lea r8, [0x140246480]
lea rdx, [rsp + 0x4438]
lea rcx, [rsp + 0x72b0]
call fcn.1400010b0
mov qword [rsp + 0x7688], rax
mov rcx, qword [rsp + 0x7688]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x72b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x4438]
call fcn.140001490
jmp 0x1401a7f15
lea rcx, [rsp + 0x4090]
call fcn.14000e330
mov edx, dword [rsp + 0x3ba8]
lea rcx, [rsp + 0x40f0]
call fcn.14000e4e0
nop
lea rcx, [rsp + 0x40f0]
call fcn.1401b7590
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x14024475c]
call fcn.1400020a0
lea rcx, [rsp + 0x3c98]
lea rdx, [0x14024476c]
call fcn.1400020a0
lea rcx, [rsp + 0x3a10]
call fcn.1401ceaa0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000f550
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140246498]
call fcn.1400ef1c0
mov dword [rsp + 0x72b8], 0
lea rcx, [rsp + 0x40f0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007b10
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x4090]
call fcn.140081d28
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005db0
mov eax, dword [rsp + 0x72b8]
jmp 0x1401ab723
lea rcx, [rsp + 0x4090]
call fcn.140014cc0
mov dword [rsp + 0x36b4], eax
mov dword [rsp + 0x4780], 0
jmp 0x1401a8268
mov eax, dword [rsp + 0x4780]
add eax, 1
mov dword [rsp + 0x4780], eax
mov eax, dword [rsp + 0x36b4]
cmp dword [rsp + 0x4780], eax
jge 0x1401a94da
lea rcx, [rsp + 0x47c0]
call fcn.140002db0
nop
mov dword [rsp + 0x4a20], 0
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x4a30]
call fcn.1401cd550
nop
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
mov rbx, rax
lea rcx, [rsp + 0x3c00]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
cmp dword [rbx], eax
jne 0x1401a8392
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
cmp dword [rax], 0
je 0x1401a8392
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x4d90]
call fcn.14000e5e0
nop
lea rax, [rsp + 0x72c0]
mov qword [rsp + 0x72c8], rax
lea rdx, [rsp + 0x3cb8]
mov rcx, qword [rsp + 0x72c8]
call fcn.140001430
mov qword [rsp + 0x7690], rax
mov rdx, qword [rsp + 0x7690]
lea rcx, [rsp + 0x4d90]
call fcn.1401cda50
test eax, eax
je 0x1401a8385
lea rdx, [rsp + 0x4f38]
lea rcx, [rsp + 0x4a30]
call fcn.140002d80
mov r11d, dword [rsp + 0x4f28]
mov dword [rsp + 0x4a20], r11d
lea rcx, [rsp + 0x4d90]
call fcn.140005db0
lea rcx, [rsp + 0x4a30]
call fcn.140023510
mov rcx, rax
call fcn.1400f9010
mov dword [rsp + 0x4784], eax
lea rdx, [0x1402447b4]
lea rcx, [rsp + 0x47c8]
call fcn.1400020d0
nop
lea rcx, [rsp + 0x4a40]
call fcn.14000f1c0
nop
mov dword [rsp + 0x4bd8], 1
lea rcx, [rsp + 0x4a40]
call fcn.1401cfc20
lea rdx, [rsp + 0x4be8]
lea rcx, [rsp + 0x47b8]
call fcn.140001430
nop
mov dword [rsp + 0x4d80], 0
cmp dword [rsp + 0x4d80], 0
jl 0x1401a86e9
lea r9, [rsp + 0x4d80]
lea r8, [0x1402447c4]
lea rdx, [rsp + 0x50d8]
lea rcx, [rsp + 0x47b8]
call fcn.1400065a0
nop
lea rcx, [rsp + 0x50d8]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x1401a8463
lea rcx, [rsp + 0x50d8]
call fcn.140001490
jmp 0x1401a86e9
xor edx, edx
lea rcx, [rsp + 0x50d8]
call fcn.140006dd0
movzx r8d, ax
lea rdx, [0x1402464a0]
lea rcx, [rsp + 0x50d8]
call fcn.140002c40
lea rcx, [rsp + 0x50d0]
call fcn.140002db0
nop
lea rcx, [rsp + 0x4a30]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x72d0]
call fcn.140105e00
mov qword [rsp + 0x7698], rax
mov rax, qword [rsp + 0x7698]
mov qword [rsp + 0x76a0], rax
lea rcx, [rsp + 0x4a30]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x72d8]
call fcn.1400f98b0
mov qword [rsp + 0x76a8], rax
mov rax, qword [rsp + 0x76a8]
mov qword [rsp + 0x76b0], rax
mov rax, qword [rsp + 0x76a0]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x76b0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x3bb0]
mov r8, qword [rsp + 0x50d8]
lea rdx, [0x1402464b0]
lea rcx, [rsp + 0x50d0]
call fcn.140002c40
nop
lea rcx, [rsp + 0x72d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x72d0]
call fcn.140001490
lea rcx, [rsp + 0x50d0]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401a85b2
lea rdx, [rsp + 0x50d0]
lea rcx, [rsp + 0x47c8]
call fcn.140002d80
nop
lea rcx, [rsp + 0x50d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x50d8]
call fcn.140001490
jmp 0x1401a86e9
lea rcx, [rsp + 0x4a30]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x72e0]
call fcn.140105e00
mov qword [rsp + 0x76b8], rax
mov rax, qword [rsp + 0x76b8]
mov qword [rsp + 0x76c0], rax
lea rcx, [rsp + 0x4a30]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x72e8]
call fcn.1400f98b0
mov qword [rsp + 0x76c8], rax
mov rax, qword [rsp + 0x76c8]
mov qword [rsp + 0x76d0], rax
mov rax, qword [rsp + 0x76c0]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x76d0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x3bc8]
mov r8, qword [rsp + 0x50d8]
lea rdx, [0x1402464d0]
lea rcx, [rsp + 0x50d0]
call fcn.140002c40
nop
lea rcx, [rsp + 0x72e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x72e0]
call fcn.140001490
lea rcx, [rsp + 0x50d0]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1401a86c9
lea rdx, [rsp + 0x50d0]
lea rcx, [rsp + 0x47c8]
call fcn.140002d80
nop
lea rcx, [rsp + 0x50d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x50d8]
call fcn.140001490
jmp 0x1401a86e9
lea rcx, [rsp + 0x50d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x50d8]
call fcn.140001490
jmp 0x1401a840a
lea r8, [0x1402464f0]
lea rdx, [rsp + 0x4a30]
lea rcx, [rsp + 0x72f0]
call fcn.1400010b0
mov qword [rsp + 0x76d8], rax
mov rax, qword [rsp + 0x76d8]
mov qword [rsp + 0x76e0], rax
mov rdx, qword [rsp + 0x76e0]
lea rcx, [rsp + 0x47c0]
call fcn.140002d80
nop
lea rcx, [rsp + 0x72f0]
call fcn.140001490
lea rcx, [rsp + 0x47c0]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401a87ba
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.140081f9c
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005db0
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001490
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001490
jmp 0x1401a8257
lea rcx, [rsp + 0x4788]
call fcn.140076008
nop
lea rcx, [rsp + 0x47c0]
call fcn.140023510
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x4788]
call fcn.14007610c
lea rcx, [rsp + 0x4788]
call fcn.140075d14
mov qword [rsp + 0x4a28], 0
mov qword [rsp + 0x4a10], 0
mov qword [rsp + 0x47d0], 0
lea rdx, [rsp + 0x7300]
lea rcx, [rsp + 0x4788]
call fcn.1400760b0
mov qword [rsp + 0x76e8], rax
mov rcx, qword [rsp + 0x76e8]
call fcn.140023510
lea r9, [rsp + 0x47d0]
lea r8, [rsp + 0x4a10]
lea rdx, [rsp + 0x4a28]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401a8875
mov dword [rsp + 0x76f0], 1
jmp 0x1401a8880
mov dword [rsp + 0x76f0], 0
movzx eax, byte [rsp + 0x76f0]
mov byte [rsp + 0x72f8], al
lea rcx, [rsp + 0x7300]
call fcn.140001490
movzx r11d, byte [rsp + 0x72f8]
test r11d, r11d
je 0x1401a89c3
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x1402447d4]
call fcn.1400020a0
lea rcx, [rsp + 0x3a10]
call fcn.1401ceaa0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000f550
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140246510]
call fcn.1400ef1c0
mov dword [rsp + 0x7308], 0
lea rcx, [rsp + 0x4788]
call fcn.140076064
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005db0
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001490
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007b10
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x4090]
call fcn.140081d28
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005db0
mov eax, dword [rsp + 0x7308]
jmp 0x1401ab723
lea rcx, [rsp + 0x4788]
call fcn.140075d60
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401a89e6
addsd xmm1, qword [0x14025a290]
mov rax, qword [rsp + 0x47d0]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401a8a04
addsd xmm0, qword [0x14025a290]
mulsd xmm0, qword [0x14025c468]
comisd xmm1, xmm0
jbe 0x1401a8b2b
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x1402447f4]
call fcn.1400020a0
lea rcx, [rsp + 0x3a10]
call fcn.1401ceaa0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000f550
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140246580]
call fcn.1400ef1c0
mov dword [rsp + 0x730c], 0
lea rcx, [rsp + 0x4788]
call fcn.140076064
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005db0
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001490
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007b10
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x4090]
call fcn.140081d28
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005db0
mov eax, dword [rsp + 0x730c]
jmp 0x1401ab723
lea rcx, [rsp + 0x4a18]
call fcn.140002db0
nop
mov edx, 0xc2
lea rcx, [rsp + 0x7310]
call fcn.1400efb10
mov qword [rsp + 0x76f8], rax
mov rax, qword [rsp + 0x76f8]
mov qword [rsp + 0x7700], rax
mov rcx, qword [rsp + 0x7700]
call fcn.140023510
mov r8, qword [rsp + 0x4a30]
mov rdx, rax
lea rcx, [rsp + 0x4a18]
call fcn.140002c40
nop
lea rcx, [rsp + 0x7310]
call fcn.140001490
cmp dword [rsp + 0x4784], 3
je 0x1401a8bb4
cmp dword [rsp + 0x4784], 4
je 0x1401a8bb4
cmp dword [rsp + 0x4784], 5
jne 0x1401a8c30
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.140081f9c
nop
lea rcx, [rsp + 0x4a18]
call fcn.140001490
nop
lea rcx, [rsp + 0x4788]
call fcn.140076064
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005db0
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001490
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001490
jmp 0x1401a8257
lea rcx, [rsp + 0x4a18]
call fcn.140023510
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef1c0
cmp eax, 7
jne 0x1401a8f4d
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x968], 0
je 0x1401a8c88
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401a8cd2
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call fcn.14007c95c
xor edx, edx
mov rcx, rax
call fcn.14007c03c
mov edx, 5
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x47c0]
call fcn.140023510
mov r9, qword [rsp + 0x7880]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.1401032d0
test eax, eax
jne 0x1401a8e68
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401a8d32
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x14024480c]
call fcn.1400020a0
lea rcx, [rsp + 0x3a10]
call fcn.1401ceaa0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000f550
mov r8, qword [rsp + 0x4a30]
lea rdx, [0x1402465f0]
xor ecx, ecx
call fcn.1400dc610
xor r8d, r8d
xor edx, edx
lea rcx, [0x140246640]
call fcn.1400ef1c0
mov dword [rsp + 0x7318], 0
lea rcx, [rsp + 0x4a18]
call fcn.140001490
nop
lea rcx, [rsp + 0x4788]
call fcn.140076064
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005db0
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001490
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007b10
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x4090]
call fcn.140081d28
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005db0
mov eax, dword [rsp + 0x7318]
jmp 0x1401ab723
lea rcx, [rsp + 0x47c0]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x47c8]
call fcn.140006e20
movzx eax, al
test eax, eax
jne 0x1401a8ea8
lea rcx, [rsp + 0x47c8]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.140081f9c
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401a8ee7
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rsp + 0x4a18]
call fcn.140001490
nop
lea rcx, [rsp + 0x4788]
call fcn.140076064
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005db0
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001490
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001490
jmp 0x1401a8257
xor edx, edx
lea rcx, [rsp + 0x47e0]
call fcn.14015a860
nop
lea rdx, [rsp + 0x4a30]
lea rcx, [rsp + 0x49f0]
call fcn.140002d80
lea rcx, [rsp + 0x7320]
call fcn.14000edc0
lea r8, [0x140246650]
lea rdx, [rsp + 0x7328]
mov rcx, rax
call fcn.14000e780
mov qword [rsp + 0x7708], rax
mov rax, qword [rsp + 0x7708]
mov qword [rsp + 0x7710], rax
mov rdx, qword [rsp + 0x7710]
lea rcx, [rsp + 0x49f8]
call fcn.140002d80
nop
lea rcx, [rsp + 0x7328]
call fcn.140001490
lea rcx, [rsp + 0x47e0]
call fcn.140081900
cmp rax, 1
je 0x1401a9105
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x14024481c]
call fcn.1400020a0
lea rcx, [rsp + 0x3a10]
call fcn.1401ceaa0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000f550
mov dword [rsp + 0x7330], 0
lea rcx, [rsp + 0x47e0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x4a18]
call fcn.140001490
nop
lea rcx, [rsp + 0x4788]
call fcn.140076064
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005db0
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001490
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007b10
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x4090]
call fcn.140081d28
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005db0
mov eax, dword [rsp + 0x7330]
jmp 0x1401ab723
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
mov rbx, rax
lea rcx, [rsp + 0x49f0]
call fcn.140023510
mov r9d, dword [rsp + 0x4a20]
mov r8d, dword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x4a38]
call fcn.1400fffd0
nop
cmp dword [rsp + 0x4a20], 0
je 0x1401a9239
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
mov r8d, dword [rsp + 0x4a20]
mov edx, dword [rax]
lea rcx, [rsp + 0x50e0]
call fcn.1401cc1c0
nop
mov dx, 0x2e
lea rcx, [rsp + 0x4a38]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x7338]
lea rcx, [rsp + 0x4a38]
call fcn.140006a00
mov qword [rsp + 0x7718], rax
mov rcx, qword [rsp + 0x7718]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov dword [rsp + 0x5420], eax
lea rcx, [rsp + 0x7338]
call fcn.140001490
lea rcx, [rsp + 0x5280]
mov r8d, dword [rsp + 0x5420]
lea rdx, [0x140246674]
call fcn.140002c40
lea rcx, [rsp + 0x5288]
lea rdx, [rsp + 0x4a00]
call fcn.140002d80
lea rcx, [rsp + 0x5290]
lea rdx, [rsp + 0x49f8]
call fcn.140002d80
lea rcx, [rsp + 0x50e0]
call fcn.1401b7bb0
nop
lea rcx, [rsp + 0x50e0]
call fcn.140005db0
jmp 0x1401a9317
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.14000eee0
mov edx, dword [rax]
lea rcx, [rsp + 0x5430]
call fcn.1401cc270
nop
mov dx, 0x2e
lea rcx, [rsp + 0x4a38]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x7340]
lea rcx, [rsp + 0x4a38]
call fcn.140006a00
mov qword [rsp + 0x7720], rax
mov rcx, qword [rsp + 0x7720]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov dword [rsp + 0x5770], eax
lea rcx, [rsp + 0x7340]
call fcn.140001490
lea rcx, [rsp + 0x55d0]
mov r8d, dword [rsp + 0x5770]
lea rdx, [0x14024667c]
call fcn.140002c40
lea rcx, [rsp + 0x55d8]
lea rdx, [rsp + 0x4a00]
call fcn.140002d80
lea rcx, [rsp + 0x55e0]
lea rdx, [rsp + 0x49f8]
call fcn.140002d80
lea rcx, [rsp + 0x5430]
call fcn.1401b7bb0
nop
lea rcx, [rsp + 0x5430]
call fcn.140005db0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x968], 0
je 0x1401a9358
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401a93a2
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call fcn.14007c95c
xor edx, edx
mov rcx, rax
call fcn.14007c03c
mov edx, 5
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x4a38]
call fcn.140023510
mov rbx, rax
lea rcx, [rsp + 0x47c0]
call fcn.140023510
mov r8, qword [rsp + 0x7880]
mov r8, qword [r8 + 0x968]
mov rdx, rbx
mov rcx, rax
call fcn.140104bd0
lea rcx, [rsp + 0x47c0]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x47c8]
call fcn.140006e20
movzx eax, al
test eax, eax
jne 0x1401a9419
lea rcx, [rsp + 0x47c8]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x4090]
call fcn.140081f9c
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401a9458
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rsp + 0x4a38]
call fcn.140001490
nop
lea rcx, [rsp + 0x47e0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x4a18]
call fcn.140001490
nop
lea rcx, [rsp + 0x4788]
call fcn.140076064
nop
lea rcx, [rsp + 0x47b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a40]
call fcn.140005db0
nop
lea rcx, [rsp + 0x47c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x4a30]
call fcn.140001490
nop
lea rcx, [rsp + 0x47c0]
call fcn.140001490
jmp 0x1401a8257
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x4090]
call fcn.14000e330
mov edx, dword [rsp + 0x3ba8]
lea rcx, [rsp + 0x3d50]
call fcn.14000e4e0
nop
lea rcx, [rsp + 0x3d50]
call fcn.1401b7590
lea rcx, [rsp + 0x3bb8]
lea rdx, [0x14024482c]
call fcn.1400020a0
lea rcx, [rsp + 0x3c98]
lea rdx, [0x140244854]
call fcn.1400020a0
lea rcx, [rsp + 0x3a10]
call fcn.1401ceaa0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov r9d, dword [rsp + 0x3ba8]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000f550
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140246688]
call fcn.1400ef1c0
mov dword [rsp + 0x7348], 0
lea rcx, [rsp + 0x3d50]
call fcn.140005db0
nop
lea rcx, [rsp + 0x40b8]
call fcn.140007b10
nop
lea rcx, [rsp + 0x36c0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x4090]
call fcn.140081d28
nop
lea rcx, [rsp + 0x3a10]
call fcn.140005db0
mov eax, dword [rsp + 0x7348]
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000e550
mov dword [rsp + 0x5774], eax
cmp dword [rsp + 0x5774], 1
je 0x1401a961f
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x5778], eax
lea rcx, [rsp + 0x5780]
call fcn.1401cc380
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x5778]
call fcn.1400823f0
mov dword [rsp + 0x5918], eax
lea rcx, [rsp + 0x5780]
call fcn.1401d0fb0
test eax, eax
jne 0x1401a96aa
mov dword [rsp + 0x734c], 0
lea rcx, [rsp + 0x5780]
call fcn.140005db0
mov eax, dword [rsp + 0x734c]
jmp 0x1401ab723
lea rcx, [rsp + 0x5980]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov dword [rsp + 0x577c], eax
cmp dword [rsp + 0x577c], 0
jne 0x1401a96dd
mov dword [rsp + 0x7728], 1
jmp 0x1401a96e8
mov dword [rsp + 0x7728], 0
lea rcx, [rsp + 0x5980]
mov r8d, dword [rsp + 0x7728]
lea rdx, [0x140246690]
call fcn.140002c40
lea rcx, [rsp + 0x5780]
call fcn.1401ceaa0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
cmp dword [rsp + 0x577c], 0
jne 0x1401a97a0
mov eax, dword [rsp + 0x5918]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov qword [rsp + 0x5ac0], rax
cmp qword [rsp + 0x5ac0], 0
jne 0x1401a97a0
mov r8d, 0xffffffff
mov edx, 0x44
mov ecx, 0x77
call fcn.1400f0f30
cmp eax, 6
jne 0x1401a97a0
mov eax, dword [rsp + 0x5918]
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, 0x802a
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov r9d, dword [rsp + 0x5918]
xor r8d, r8d
mov edx, 0x8017
mov rcx, qword [rsp + 0x7880]
call fcn.14000f550
mov dword [rsp + 0x7350], 0
lea rcx, [rsp + 0x5780]
call fcn.140005db0
mov eax, dword [rsp + 0x7350]
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000e550
mov dword [rsp + 0x5ac8], eax
cmp dword [rsp + 0x5ac8], 1
je 0x1401a9814
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x5acc], eax
xor edx, edx
lea rcx, [rsp + 0x5ad0]
call fcn.140163280
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x5acc]
call fcn.1400823f0
mov dword [rsp + 0x5ce0], eax
lea rcx, [rsp + 0x5ad0]
call fcn.140081900
mov dword [rsp + 0x7354], 0
lea rcx, [rsp + 0x5ad0]
call fcn.140163230
mov eax, dword [rsp + 0x7354]
jmp 0x1401ab723
mov rax, qword [rsp + 0x7880]
cmp dword [rax + 0x978], 0
je 0x1401a98bc
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000e550
mov dword [rsp + 0x5da8], eax
cmp dword [rsp + 0x5da8], 1
je 0x1401a98e8
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x5dac], eax
lea rcx, [rsp + 0x5db0]
call fcn.1401cc380
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x5dac]
call fcn.1400823f0
mov dword [rsp + 0x5f48], eax
lea rcx, [rsp + 0x5db0]
call fcn.1401d0fb0
test eax, eax
jne 0x1401a9973
mov dword [rsp + 0x7358], 0
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x7358]
jmp 0x1401ab723
lea rcx, [rsp + 0x5ff8]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
test eax, eax
je 0x1401a99f7
lea rcx, [rsp + 0x5fb0]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
test eax, eax
jne 0x1401a99f7
lea rcx, [rsp + 0x6008]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
test eax, eax
jne 0x1401a99f7
mov r8d, 0xffffffff
mov edx, 0x40
mov ecx, 0xc1
call fcn.1400f0f30
mov dword [rsp + 0x735c], 0
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x735c]
jmp 0x1401ab723
mov eax, dword [rsp + 0x5f48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x801b
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov qword [rsp + 0x6328], rax
cmp qword [rsp + 0x6328], 0
je 0x1401a9a66
mov r8d, 0xffffffff
mov edx, 0x40
mov ecx, 0xab
call fcn.1400f0f30
mov dword [rsp + 0x7360], 0
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x7360]
jmp 0x1401ab723
mov r8d, 0xffffffff
mov edx, 0x124
mov ecx, WSASetLastError
call fcn.1400f0f30
cmp eax, 6
je 0x1401a9aa4
mov dword [rsp + 0x7364], 0
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x7364]
jmp 0x1401ab723
xor edx, edx
lea rcx, [rsp + 0x60f0]
call fcn.14015a860
nop
lea rdx, [rsp + 0x5da0]
lea rcx, [rsp + 0x5db0]
call fcn.1401ce6f0
nop
mov dword [rsp + 0x6320], 0
cmp dword [rsp + 0x6320], 0xffffffff
je 0x1401aae7a
lea r9, [rsp + 0x6320]
lea r8, [0x14024486c]
lea rdx, [rsp + 0x7368]
lea rcx, [rsp + 0x5da0]
call fcn.1400065a0
mov qword [rsp + 0x7730], rax
mov rax, qword [rsp + 0x7730]
mov qword [rsp + 0x7738], rax
mov rdx, qword [rsp + 0x7738]
lea rcx, [rsp + 0x6300]
call fcn.140002d80
nop
lea rcx, [rsp + 0x7368]
call fcn.140001490
lea rcx, [rsp + 0x6300]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x1401a9b5b
jmp 0x1401aae7a
lea rcx, [rsp + 0x63a0]
call fcn.14000e6a0
nop
lea rax, [rsp + 0x7370]
mov qword [rsp + 0x7378], rax
lea rdx, [rsp + 0x6300]
mov rcx, qword [rsp + 0x7378]
call fcn.140001430
mov qword [rsp + 0x7740], rax
mov rdx, qword [rsp + 0x7740]
lea rcx, [rsp + 0x63a0]
call fcn.1401cf620
test eax, eax
jne 0x1401a9bc1
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
jmp 0x1401a9ad5
lea rcx, [rsp + 0x6368]
call fcn.140002db0
nop
mov eax, dword [rsp + 0x5f48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x804d
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov dword [rsp + 0x6388], eax
cmp dword [rsp + 0x6388], 0
jne 0x1401a9c5f
mov dword [rsp + 0x7380], 0
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001490
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x7380]
jmp 0x1401ab723
lea rcx, [rsp + 0x6398]
call fcn.140002db0
nop
mov r8d, dword [rsp + 0x6388]
lea rdx, [0x140246698]
lea rcx, [rsp + 0x6398]
call fcn.140002c40
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x7388]
call fcn.140105e00
mov qword [rsp + 0x7748], rax
mov rax, qword [rsp + 0x7748]
mov qword [rsp + 0x7750], rax
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x7390]
call fcn.1400f98b0
mov qword [rsp + 0x7758], rax
mov rax, qword [rsp + 0x7758]
mov qword [rsp + 0x7760], rax
mov rax, qword [rsp + 0x7750]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x7760]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f50]
mov r8, qword [rsp + 0x6398]
lea rdx, str._s_s__s_s
lea rcx, [rsp + 0x6368]
call fcn.140002c40
nop
lea rcx, [rsp + 0x7390]
call fcn.140001490
nop
lea rcx, [rsp + 0x7388]
call fcn.140001490
lea rcx, [rsp + 0x6368]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1401a9d9b
lea rcx, [rsp + 0x6398]
call fcn.140001490
nop
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
jmp 0x1401a9ad5
lea rcx, [rsp + 0x6380]
call fcn.140002db0
nop
mov edx, 0xc3
lea rcx, [rsp + 0x7398]
call fcn.1400efb10
mov qword [rsp + 0x7768], rax
mov rax, qword [rsp + 0x7768]
mov qword [rsp + 0x7770], rax
mov rcx, qword [rsp + 0x7770]
call fcn.140023510
mov r8, qword [rsp + 0x6300]
mov rdx, rax
lea rcx, [rsp + 0x6380]
call fcn.140002c40
nop
lea rcx, [rsp + 0x7398]
call fcn.140001490
lea rcx, [rsp + 0x6380]
call fcn.140023510
xor r8d, r8d
mov edx, 0x24
mov rcx, rax
call fcn.1400ef1c0
cmp eax, 7
jne 0x1401a9e64
lea rcx, [rsp + 0x6380]
call fcn.140001490
nop
lea rcx, [rsp + 0x6398]
call fcn.140001490
nop
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
jmp 0x1401a9ad5
lea rcx, [rsp + 0x6300]
call fcn.140023510
mov rcx, rax
call fcn.1400f9010
mov dword [rsp + 0x6330], eax
cmp dword [rsp + 0x6330], 3
je 0x1401a9ea2
cmp dword [rsp + 0x6330], 4
je 0x1401a9ea2
cmp dword [rsp + 0x6330], 5
jne 0x1401a9f2c
mov r8d, 0xffffffff
xor edx, edx
mov ecx, ILCreateFromPathW
call fcn.1400f0f30
mov dword [rsp + 0x73a0], 0
lea rcx, [rsp + 0x6380]
call fcn.140001490
nop
lea rcx, [rsp + 0x6398]
call fcn.140001490
nop
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001490
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x73a0]
jmp 0x1401ab723
lea rcx, [rsp + 0x6338]
call fcn.140076008
nop
lea rcx, [rsp + 0x6368]
call fcn.140023510
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6338]
call fcn.14007610c
lea rcx, [rsp + 0x6338]
call fcn.140075d14
mov qword [rsp + 0x6390], 0
mov qword [rsp + 0x6378], 0
mov qword [rsp + 0x6370], 0
mov r9d, 3
xor r8d, r8d
lea rdx, [rsp + 0x73a8]
lea rcx, [rsp + 0x6300]
call fcn.140002270
mov qword [rsp + 0x7778], rax
mov rcx, qword [rsp + 0x7778]
call fcn.140023510
lea r9, [rsp + 0x6370]
lea r8, [rsp + 0x6378]
lea rdx, [rsp + 0x6390]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1401a9ff0
mov dword [rsp + 0x7780], 1
jmp 0x1401a9ffb
mov dword [rsp + 0x7780], 0
movzx eax, byte [rsp + 0x7780]
mov byte [rsp + 0x73a4], al
lea rcx, [rsp + 0x73a8]
call fcn.140001490
movzx r11d, byte [rsp + 0x73a4]
test r11d, r11d
je 0x1401aa0c3
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x1402466c0]
call fcn.1400ef1c0
mov dword [rsp + 0x73b0], 0
lea rcx, [rsp + 0x6338]
call fcn.140076064
nop
lea rcx, [rsp + 0x6380]
call fcn.140001490
nop
lea rcx, [rsp + 0x6398]
call fcn.140001490
nop
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001490
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x73b0]
jmp 0x1401ab723
lea rcx, [rsp + 0x6338]
call fcn.140075d60
pxor xmm1, xmm1
cvtsi2sd xmm1, rax
test rax, rax
jge 0x1401aa0e6
addsd xmm1, qword [0x14025a290]
mov rax, qword [rsp + 0x6370]
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jge 0x1401aa104
addsd xmm0, qword [0x14025a290]
mulsd xmm0, qword [0x14025c468]
comisd xmm1, xmm0
jbe 0x1401aa1b0
xor r8d, r8d
mov edx, 0x40
lea rcx, str.Disk_space_is_not_enough._Please_try_to_merge_all.
call fcn.1400ef1c0
mov dword [rsp + 0x73b4], 0
lea rcx, [rsp + 0x6338]
call fcn.140076064
nop
lea rcx, [rsp + 0x6380]
call fcn.140001490
nop
lea rcx, [rsp + 0x6398]
call fcn.140001490
nop
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001490
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x73b4]
jmp 0x1401ab723
xor r8d, r8d
mov edx, 0x24
lea rcx, str.Do_you_want_to_create_restore_point_
call fcn.1400ef1c0
cmp eax, 6
jne 0x1401aa911
lea rcx, [rsp + 0x73b8]
call fcn.14000edc0
lea r8, [0x1402467f0]
lea rdx, [rsp + 0x73c0]
mov rcx, rax
call fcn.14000e780
mov qword [rsp + 0x7788], rax
mov rax, qword [rsp + 0x7788]
mov qword [rsp + 0x7790], rax
mov rdx, qword [rsp + 0x7790]
lea rcx, [rsp + 0x6308]
call fcn.140002d80
nop
lea rcx, [rsp + 0x73c0]
call fcn.140001490
lea rcx, [rsp + 0x60f0]
call fcn.140081900
cmp rax, 1
je 0x1401aa2c9
mov dword [rsp + 0x73c8], 0
lea rcx, [rsp + 0x6338]
call fcn.140076064
nop
lea rcx, [rsp + 0x6380]
call fcn.140001490
nop
lea rcx, [rsp + 0x6398]
call fcn.140001490
nop
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001490
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x73c8]
jmp 0x1401ab723
mov edx, dword [rsp + 0x6538]
lea rcx, [rsp + 0x66e0]
call fcn.1401cc270
nop
lea rcx, [rsp + 0x6300]
call fcn.140023510
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6d70]
call fcn.1400fffd0
nop
mov dx, 0x2e
lea rcx, [rsp + 0x6d70]
call fcn.1400068a0
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x73d0]
lea rcx, [rsp + 0x6d70]
call fcn.140006a00
mov qword [rsp + 0x7798], rax
mov rcx, qword [rsp + 0x7798]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov dword [rsp + 0x6a28], eax
lea rcx, [rsp + 0x73d0]
call fcn.140001490
lea rcx, [rsp + 0x6880]
mov r8d, dword [rsp + 0x6a28]
lea rdx, [0x140246814]
call fcn.140002c40
lea rcx, [rsp + 0x6888]
lea rdx, [rsp + 0x6310]
call fcn.140002d80
lea rcx, [rsp + 0x6890]
lea rdx, [rsp + 0x6308]
call fcn.140002d80
lea rcx, [rsp + 0x66e0]
call fcn.1401b7bb0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
mov r8, qword [rsp + 0x6548]
lea rdx, [0x140246820]
xor ecx, ecx
call fcn.1400dc610
mov r11d, dword [rsp + 0x5f48]
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov r11, qword [rsp + 0x7880]
mov dword [r11 + 0x978], 1
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x968], 0
je 0x1401aa441
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401aa48b
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call fcn.14007c95c
xor edx, edx
mov rcx, rax
call fcn.14007c03c
mov edx, 5
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x6d70]
call fcn.140023510
mov rbx, rax
lea rcx, [rsp + 0x6368]
call fcn.140023510
mov r8, qword [rsp + 0x7880]
mov r8, qword [r8 + 0x968]
mov rdx, rbx
mov rcx, rax
call fcn.140104bd0
test eax, eax
jne 0x1401aa5ce
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401aa4f3
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0x6548]
lea rdx, [0x140246860]
xor ecx, ecx
call fcn.1400dc610
xor r8d, r8d
xor edx, edx
lea rcx, [0x1402468b0]
call fcn.1400ef1c0
mov dword [rsp + 0x73d8], 0
lea rcx, [rsp + 0x6d70]
call fcn.140001490
nop
lea rcx, [rsp + 0x66e0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x6338]
call fcn.140076064
nop
lea rcx, [rsp + 0x6380]
call fcn.140001490
nop
lea rcx, [rsp + 0x6398]
call fcn.140001490
nop
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001490
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x73d8]
jmp 0x1401ab723
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401aa5f7
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x6368]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x6a30]
call fcn.14000f1c0
nop
mov dword [rsp + 0x6bc8], 1
lea rcx, [rsp + 0x6a30]
call fcn.1401cfc20
lea rdx, [rsp + 0x6bd8]
lea rcx, [rsp + 0x6a20]
call fcn.140001430
nop
mov dword [rsp + 0x6d78], 0
cmp dword [rsp + 0x6d78], 0
jl 0x1401aa8d5
lea r9, [rsp + 0x6d78]
lea r8, [0x14024487c]
lea rdx, [rsp + 0x6d88]
lea rcx, [rsp + 0x6a20]
call fcn.1400065a0
nop
lea rcx, [rsp + 0x6d88]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x1401aa6bf
lea rcx, [rsp + 0x6d88]
call fcn.140001490
jmp 0x1401aa8d5
xor edx, edx
lea rcx, [rsp + 0x6d88]
call fcn.140006dd0
movzx r8d, ax
lea rdx, [0x1402468c0]
lea rcx, [rsp + 0x6d88]
call fcn.140002c40
lea rcx, [rsp + 0x6d80]
call fcn.140002db0
nop
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x73e0]
call fcn.140105e00
mov qword [rsp + 0x77a0], rax
mov rax, qword [rsp + 0x77a0]
mov qword [rsp + 0x77a8], rax
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x73e8]
call fcn.1400f98b0
mov qword [rsp + 0x77b0], rax
mov rax, qword [rsp + 0x77b0]
mov qword [rsp + 0x77b8], rax
mov rax, qword [rsp + 0x77a8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x77b8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f50]
mov r8, qword [rsp + 0x6d88]
lea rdx, [0x1402468d0]
lea rcx, [rsp + 0x6d80]
call fcn.140002c40
nop
lea rcx, [rsp + 0x73e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x73e0]
call fcn.140001490
lea rcx, [rsp + 0x6d80]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x73f0]
call fcn.140105e00
mov qword [rsp + 0x77c0], rax
mov rax, qword [rsp + 0x77c0]
mov qword [rsp + 0x77c8], rax
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x73f8]
call fcn.1400f98b0
mov qword [rsp + 0x77d0], rax
mov rax, qword [rsp + 0x77d0]
mov qword [rsp + 0x77d8], rax
mov rax, qword [rsp + 0x77c8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x77d8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f68]
mov r8, qword [rsp + 0x6d88]
lea rdx, [0x1402468f0]
lea rcx, [rsp + 0x6d80]
call fcn.140002c40
nop
lea rcx, [rsp + 0x73f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x73f0]
call fcn.140001490
lea rcx, [rsp + 0x6d80]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x6d80]
call fcn.140001490
nop
lea rcx, [rsp + 0x6d88]
call fcn.140001490
jmp 0x1401aa666
lea rcx, [rsp + 0x6a20]
call fcn.140001490
nop
lea rcx, [rsp + 0x6a30]
call fcn.140005db0
nop
lea rcx, [rsp + 0x6d70]
call fcn.140001490
nop
lea rcx, [rsp + 0x66e0]
call fcn.140005db0
jmp 0x1401aae1b
mov r8, qword [rsp + 0x6548]
lea rdx, str.Receive_CMD_SAVE_TO_IMAGE__s
xor ecx, ecx
call fcn.1400dc610
mov r11d, dword [rsp + 0x5f48]
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0x8038
xor edx, edx
lea rcx, [0x1403acbe0]
call fcn.1400d5e60
mov r11, qword [rsp + 0x7880]
mov dword [r11 + 0x978], 1
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x968], 0
je 0x1401aa990
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x968]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401aa9da
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call fcn.14007c95c
xor edx, edx
mov rcx, rax
call fcn.14007c03c
mov edx, 5
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x6368]
call fcn.140023510
mov r9, qword [rsp + 0x7880]
mov r9, qword [r9 + 0x968]
mov r8d, 1
mov edx, 1
mov rcx, rax
call fcn.1401032d0
test eax, eax
jne 0x1401aaaf9
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401aaa3a
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
mov r8, qword [rsp + 0x6548]
lea rdx, str._ERROR__Save_to_image__s_false
xor ecx, ecx
call fcn.1400dc610
xor r8d, r8d
xor edx, edx
lea rcx, str.False_
call fcn.1400ef1c0
mov dword [rsp + 0x7400], 0
lea rcx, [rsp + 0x6338]
call fcn.140076064
nop
lea rcx, [rsp + 0x6380]
call fcn.140001490
nop
lea rcx, [rsp + 0x6398]
call fcn.140001490
nop
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x5da0]
call fcn.140001490
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x7400]
jmp 0x1401ab723
mov rax, qword [rsp + 0x7880]
cmp qword [rax + 0x970], 0
je 0x1401aab22
xor edx, edx
mov rcx, qword [rsp + 0x7880]
mov rcx, qword [rcx + 0x970]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [rsp + 0x7880]
mov dword [rax + 0x978], 0
lea rcx, [rsp + 0x6368]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x6da0]
call fcn.14000f1c0
nop
mov dword [rsp + 0x6f38], 1
lea rcx, [rsp + 0x6da0]
call fcn.1401cfc20
lea rdx, [rsp + 0x6f48]
lea rcx, [rsp + 0x6d90]
call fcn.140001430
nop
mov dword [rsp + 0x70e0], 0
cmp dword [rsp + 0x70e0], 0
jl 0x1401aae00
lea r9, [rsp + 0x70e0]
lea r8, [0x14024488c]
lea rdx, [rsp + 0x70f0]
lea rcx, [rsp + 0x6d90]
call fcn.1400065a0
nop
lea rcx, [rsp + 0x70f0]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x1401aabea
lea rcx, [rsp + 0x70f0]
call fcn.140001490
jmp 0x1401aae00
xor edx, edx
lea rcx, [rsp + 0x70f0]
call fcn.140006dd0
movzx r8d, ax
lea rdx, [0x1402469b0]
lea rcx, [rsp + 0x70f0]
call fcn.140002c40
lea rcx, [rsp + 0x70e8]
call fcn.140002db0
nop
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x7408]
call fcn.140105e00
mov qword [rsp + 0x77e0], rax
mov rax, qword [rsp + 0x77e0]
mov qword [rsp + 0x77e8], rax
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x7410]
call fcn.1400f98b0
mov qword [rsp + 0x77f0], rax
mov rax, qword [rsp + 0x77f0]
mov qword [rsp + 0x77f8], rax
mov rax, qword [rsp + 0x77e8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x77f8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f50]
mov r8, qword [rsp + 0x70f0]
lea rdx, [0x1402469c0]
lea rcx, [rsp + 0x70e8]
call fcn.140002c40
nop
lea rcx, [rsp + 0x7410]
call fcn.140001490
nop
lea rcx, [rsp + 0x7408]
call fcn.140001490
lea rcx, [rsp + 0x70e8]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x7418]
call fcn.140105e00
mov qword [rsp + 0x7800], rax
mov rax, qword [rsp + 0x7800]
mov qword [rsp + 0x7808], rax
lea rcx, [rsp + 0x6548]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0x7420]
call fcn.1400f98b0
mov qword [rsp + 0x7810], rax
mov rax, qword [rsp + 0x7810]
mov qword [rsp + 0x7818], rax
mov rax, qword [rsp + 0x7808]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x7818]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5f68]
mov r8, qword [rsp + 0x70f0]
lea rdx, str._s_s_p___s_s
lea rcx, [rsp + 0x70e8]
call fcn.140002c40
nop
lea rcx, [rsp + 0x7420]
call fcn.140001490
nop
lea rcx, [rsp + 0x7418]
call fcn.140001490
lea rcx, [rsp + 0x70e8]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x70e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x70f0]
call fcn.140001490
jmp 0x1401aab91
lea rcx, [rsp + 0x6d90]
call fcn.140001490
nop
lea rcx, [rsp + 0x6da0]
call fcn.140005db0
xor r8d, r8d
mov edx, 0x40
lea rcx, [0x140246a00]
call fcn.1400ef1c0
nop
lea rcx, [rsp + 0x6338]
call fcn.140076064
nop
lea rcx, [rsp + 0x6380]
call fcn.140001490
nop
lea rcx, [rsp + 0x6398]
call fcn.140001490
nop
lea rcx, [rsp + 0x6368]
call fcn.140001490
nop
lea rcx, [rsp + 0x63a0]
call fcn.140005db0
jmp 0x1401a9ad5
mov dword [rsp + 0x7428], 0
lea rcx, [rsp + 0x5da0]
call fcn.140001490
nop
lea rcx, [rsp + 0x60f0]
call fcn.14015a800
nop
lea rcx, [rsp + 0x5db0]
call fcn.140005db0
mov eax, dword [rsp + 0x7428]
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
call fcn.140082f00
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, 0x20
mov edx, 0x20
call fcn.1400830e4
call fcn.140010510
mov edx, 0xdb
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0x496
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0xdc
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0x80d2
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0xda
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
mov rdx, qword [rsp + 0x7880]
add rdx, 0x1648
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000f500
lea rcx, [rsp + 0x7430]
call fcn.140001000
mov qword [rsp + 0x7820], rax
mov rax, qword [rsp + 0x7820]
mov qword [rsp + 0x7828], rax
lea r8, [0x140246a08]
mov rdx, qword [rsp + 0x7828]
lea rcx, [rsp + 0x7438]
call fcn.1400010b0
mov qword [rsp + 0x7830], rax
mov rcx, qword [rsp + 0x7830]
call fcn.140023510
mov r9, rax
lea r8, [0x140246a20]
lea rdx, [0x140246a28]
lea rcx, [0x140246a48]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x7438]
call fcn.140001490
nop
lea rcx, [rsp + 0x7430]
call fcn.140001490
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
call fcn.140082f00
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400830e4
call fcn.140010510
mov edx, 0xdb
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0x496
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0xdc
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0x80d2
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0xda
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
mov rdx, qword [rsp + 0x7880]
add rdx, 0x1648
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000f500
lea rcx, [rsp + 0x7440]
call fcn.140001000
mov qword [rsp + 0x7838], rax
mov rax, qword [rsp + 0x7838]
mov qword [rsp + 0x7840], rax
lea r8, [0x140246a58]
mov rdx, qword [rsp + 0x7840]
lea rcx, [rsp + 0x7448]
call fcn.1400010b0
mov qword [rsp + 0x7848], rax
mov rcx, qword [rsp + 0x7848]
call fcn.140023510
mov r9, rax
lea r8, [0x140246a70]
lea rdx, [0x140246a78]
lea rcx, [0x140246a98]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x7448]
call fcn.140001490
nop
lea rcx, [rsp + 0x7440]
call fcn.140001490
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
call fcn.140082f00
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
mov r9d, 0x21
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
mov edx, reloc.OLEAUT32.dll_SafeArrayLock
call fcn.1400830e4
call fcn.140010510
mov edx, 0xdb
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0x496
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0xdc
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0x80d2
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
call fcn.140010510
mov edx, 0xda
mov rcx, rax
call fcn.14000f6f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1648
mov rdx, rax
call fcn.14000fa00
mov rdx, qword [rsp + 0x7880]
add rdx, 0x1648
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 1
call fcn.14000f500
lea rcx, [rsp + 0x7450]
call fcn.140001000
mov qword [rsp + 0x7850], rax
mov rax, qword [rsp + 0x7850]
mov qword [rsp + 0x7858], rax
lea r8, [0x140246aa8]
mov rdx, qword [rsp + 0x7858]
lea rcx, [rsp + 0x7458]
call fcn.1400010b0
mov qword [rsp + 0x7860], rax
mov rcx, qword [rsp + 0x7860]
call fcn.140023510
mov r9, rax
lea r8, [0x140246ac0]
lea rdx, [0x140246ac8]
lea rcx, [0x140246ae8]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x7458]
call fcn.140001490
nop
lea rcx, [rsp + 0x7450]
call fcn.140001490
xor eax, eax
jmp 0x1401ab723
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.140078508
lea rcx, [rsp + 0x70f8]
call fcn.140002db0
nop
mov rcx, qword [rsp + 0x7880]
add rcx, 0x1658
lea rdx, [rsp + 0x70f8]
call fcn.14007e224
lea rcx, [rsp + 0x70f8]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x1401ab4b6
mov dword [rsp + 0x7460], 0
lea rcx, [rsp + 0x70f8]
call fcn.140001490
mov eax, dword [rsp + 0x7460]
jmp 0x1401ab723
mov dword [rsp + 0x7100], 0xffffffff
mov dword [rsp + 0x7104], 0
jmp 0x1401ab4df
mov eax, dword [rsp + 0x7104]
add eax, 1
mov dword [rsp + 0x7104], eax
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000ebf0
cmp dword [rsp + 0x7104], eax
jge 0x1401ab5d6
mov dword [rsp + 0x7108], 0
jmp 0x1401ab51e
mov eax, dword [rsp + 0x7108]
add eax, 1
mov dword [rsp + 0x7108], eax
cmp dword [rsp + 0x7108], 0x1c
jge 0x1401ab5c5
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, dword [rsp + 0x7108]
mov r8d, dword [rsp + 0x7104]
lea rdx, [rsp + 0x7110]
call fcn.140083150
nop
lea rcx, [rsp + 0x70f8]
call fcn.140006970
mov rcx, rax
call fcn.140023510
mov rbx, rax
lea rcx, [rsp + 0x7110]
call fcn.140006970
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140006780
cmp eax, 0xffffffff
jne 0x1401ab5a3
lea rcx, [rsp + 0x7110]
call fcn.140001490
jmp 0x1401ab50d
mov eax, dword [rsp + 0x7104]
mov dword [rsp + 0x7100], eax
lea rcx, [rsp + 0x7110]
call fcn.140001490
jmp 0x1401ab5c5
cmp dword [rsp + 0x7100], 0xffffffff
je 0x1401ab5d1
jmp 0x1401ab5d6
jmp 0x1401ab4ce
cmp dword [rsp + 0x7100], 0xffffffff
je 0x1401ab6f9
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, 0xffffffff
call fcn.14000e740
mov dword [rsp + 0x7118], eax
cmp dword [rsp + 0x7118], 0
jl 0x1401ab662
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, 2
xor r8d, r8d
mov edx, dword [rsp + 0x7118]
call fcn.140082390
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, 2
mov edx, dword [rsp + 0x7118]
call fcn.14000e740
mov dword [rsp + 0x7118], eax
jmp 0x1401ab60a
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
xor r8d, r8d
mov edx, dword [rsp + 0x7100]
call fcn.14000e2f0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov edx, dword [rsp + 0x7100]
call fcn.14000e2c0
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r9d, 2
mov r8d, 3
mov edx, dword [rsp + 0x7100]
call fcn.140082390
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
mov r8d, dword [rsp + 0x7100]
mov edx, dword [rsp + 0x7100]
call fcn.14000e280
mov rcx, qword [rsp + 0x7880]
add rcx, 0xdc8
call fcn.14000e260
mov dword [rsp + 0x7464], 0
lea rcx, [rsp + 0x70f8]
call fcn.140001490
mov eax, dword [rsp + 0x7464]
jmp 0x1401ab723
mov eax, 1
add rsp, 0x7870
pop rbx
ret