Function at 0x14015a670
Capabilities:
Hide graphical window
Load assembly via iassembly
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rsi
push rdi
mov eax, 0x1638
call fcn.14026deb0
sub rsp, rax
mov rax, qword [0x140325ed8]
xor rax, rsp
mov qword [rsp + 0x1620], rax
cmp dword [rsp + 0x1650], 1
jne 0x14015a6ef
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rsp + 0x20], 0
lea r9, [0x14015a470]
xor r8d, r8d
mov edx, reloc.WS2_32.dll_WSAStartup
xor ecx, ecx
call qword [sym.imp.USER32.dll_DialogBoxParamA]
mov qword [rsp + 0x190], rax
cmp qword [rsp + 0x190], 1
je 0x14015a6ef
xor eax, eax
jmp 0x14015d23b
mov qword [rsp + 0x1c8], 0
mov dword [rsp + 0x8c], 0
mov eax, dword [rsp + 0x1650]
inc eax
cdqe
shl rax, 3
mov ecx, 0xffffffff
cmp rax, rcx
jae 0x14015a783
mov eax, dword [rsp + 0x1650]
inc eax
cdqe
shl rax, 3
mov ecx, 0xffffffff
sub rcx, rax
mov rax, rcx
test rax, rax
jbe 0x14015a783
mov eax, dword [rsp + 0x1650]
inc eax
cdqe
shl rax, 3
mov ecx, 0xffffffe7
cmp rax, rcx
jae 0x14015a783
xor eax, eax
cmp eax, 1
je 0x14015a783
mov eax, dword [rsp + 0x1650]
inc eax
cdqe
lea rax, [rax*8 + 0x18]
mov rcx, rax
call fcn.14027bb94
mov qword [rsp + 0x128], rax
jmp 0x14015a78f
mov qword [rsp + 0x128], 0
mov eax, dword [rsp + 0x1650]
inc eax
cdqe
shl rax, 3
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rsp + 0x128]
call fcn.140113960
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x58], 0
jmp 0x14015a7cd
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x1650]
cmp dword [rsp + 0x58], eax
jge 0x14015a91e
movsxd rax, dword [rsp + 0x58]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xffffffff
mov rcx, qword [rsp + 0x1658]
mov r8, qword [rcx + rax*8]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [rsp + 0x88], eax
movsxd rax, dword [rsp + 0x88]
mov ecx, 0xffffffff
cmp rax, rcx
jae 0x14015a88d
movsxd rax, dword [rsp + 0x88]
mov ecx, 0xffffffff
sub rcx, rax
mov rax, rcx
test rax, rax
jbe 0x14015a88d
movsxd rax, dword [rsp + 0x88]
mov ecx, 0xffffffe7
cmp rax, rcx
jae 0x14015a88d
xor eax, eax
cmp eax, 1
je 0x14015a88d
movsxd rax, dword [rsp + 0x88]
add rax, 0x18
mov rcx, rax
call fcn.14027bb94
mov qword [rsp + 0x130], rax
jmp 0x14015a899
mov qword [rsp + 0x130], 0
movsxd rax, dword [rsp + 0x88]
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rsp + 0x130]
call fcn.140113960
movsxd rcx, dword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
mov qword [rdx + rcx*8], rax
movsxd rax, dword [rsp + 0x58]
movsxd rcx, dword [rsp + 0x58]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov edx, dword [rsp + 0x88]
mov dword [rsp + 0x28], edx
mov rdx, qword [rsp + 0x50]
mov rax, qword [rdx + rax*8]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov rax, qword [rsp + 0x1658]
mov r8, qword [rax + rcx*8]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x14015a7c3
cmp dword [rsp + 0x1650], 1
jle 0x14015aac0
mov eax, 8
imul rax, rax, 1
lea rdx, str._finstall
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015aa2a
mov eax, 8
imul rax, rax, 1
lea rdx, str._funinstall
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015aa2a
mov eax, 8
imul rax, rax, 1
lea rdx, str._fulluninstall
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015aa2a
mov eax, 8
imul rax, rax, 1
lea rdx, str._fullinstall
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015aa2a
mov eax, 8
imul rax, rax, 1
lea rdx, str._install
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015aa2a
mov eax, 8
imul rax, rax, 1
lea rdx, str._uninstall
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015aa2a
mov eax, 8
imul rax, rax, 1
lea rdx, str._state
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015aac0
mov eax, 8
imul rax, rax, 1
movsxd rcx, dword [rsp + 0x1650]
mov rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x50]
mov rax, qword [r8 + rax]
mov qword [rdx + rcx*8], rax
mov ecx, 0x1c
call fcn.14027bb94
xor r9d, r9d
xor r8d, r8d
mov edx, 4
mov rcx, rax
call fcn.140113960
mov ecx, 8
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x50]
mov qword [rdx + rcx], rax
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
mov ecx, 8
imul rcx, rcx, 1
lea r8, [0x140335184]
mov rdx, qword [rax - 0x18]
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + rcx]
call fcn.140001420
mov eax, dword [rsp + 0x1650]
inc eax
mov dword [rsp + 0x1650], eax
mov dword [rsp + 0x80], 0
jmp 0x14015aadd
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x1650]
cmp dword [rsp + 0x80], eax
jge 0x14015ab7d
movsxd rax, dword [rsp + 0x80]
lea rdx, [0x1403b5d10]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.14027a6f0
test eax, eax
je 0x14015ab33
movsxd rax, dword [rsp + 0x80]
lea rdx, [0x1403b5c78]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.14027a6f0
test eax, eax
jne 0x14015ab3a
call fcn.140159300
jmp 0x14015ab78
movsxd rax, dword [rsp + 0x80]
lea rdx, [0x1403b5c68]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.14027a6f0
test eax, eax
je 0x14015ab78
movsxd rax, dword [rsp + 0x80]
lea rdx, [0x1403b5b48]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.14027a6f0
jmp 0x14015aacd
cmp dword [rsp + 0x1650], 1
jle 0x14015aec8
mov eax, 8
imul rax, rax, 1
lea rdx, str._licenses
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015aec8
lea rcx, str._n
call fcn.1400012d0
lea rcx, str._MeshCentral_MeshAgent:_Copyright_2006___2022_Intel_Corporation_n
call fcn.1400012d0
lea rcx, str.________________________https:__github.com_Ylianst_MeshAgent__n
call fcn.1400012d0
lea rcx, str._________________________________________________________________________________________n
call fcn.1400012d0
lea rcx, str.___Licensed_under_the_Apache_License__Version_2.0__the__License____n
call fcn.1400012d0
lea rcx, str.___you_may_not_use_this_file_except_in_compliance_with_the_License._n
call fcn.1400012d0
lea rcx, str.___You_may_obtain_a_copy_of_the_License_at_n
call fcn.1400012d0
lea rcx, str.____n
call fcn.1400012d0
lea rcx, str.___http:__www.apache.org_licenses_LICENSE_2.0_n
call fcn.1400012d0
lea rcx, [0x1403b5718]
call fcn.1400012d0
lea rcx, str.___Unless_required_by_applicable_law_or_agreed_to_in_writing__software_n
call fcn.1400012d0
lea rcx, str.___distributed_under_the_License_is_distributed_on_an__AS_IS__BASIS__n
call fcn.1400012d0
lea rcx, str.___WITHOUT_WARRANTIES_OR_CONDITIONS_OF_ANY_KIND__either_express_or_implied._n
call fcn.1400012d0
lea rcx, str.___See_the_License_for_the_specific_language_governing_permissions_and_n
call fcn.1400012d0
lea rcx, str.___limitations_under_the_License._n_n
call fcn.1400012d0
lea rcx, [0x1403b5900]
call fcn.1400012d0
lea rcx, str._Duktape_Javascript_Engine:_Copyright__c__2013_2019_by_Duktape_authors__see_AUTHORS.rst__n
call fcn.1400012d0
lea rcx, str.________________________https:__github.com_svaarala_duktape__n
call fcn.1400012d0
lea rcx, str.________________________http:__opensource.org_licenses_MIT__n
call fcn.1400012d0
lea rcx, [0x1403b5840]
call fcn.1400012d0
lea rcx, str.___Permission_is_hereby_granted__free_of_charge__to_any_person_obtaining_a_copy_n
call fcn.1400012d0
lea rcx, str.___of_this_software_and_associated_documentation_files_the__Software____to_deal_n
call fcn.1400012d0
lea rcx, str.___in_the_Software_without_restriction__including_without_limitation_the_rights_n
call fcn.1400012d0
lea rcx, str.___to_use__copy__modify__merge__publish__distribute__sublicense__and___or_sell_n
call fcn.1400012d0
lea rcx, str.___copies_of_the_Software__and_to_permit_persons_to_whom_the_Software_is_n
call fcn.1400012d0
lea rcx, str.___furnished_to_do_so__subject_to_the_following_conditions_:_n
call fcn.1400012d0
lea rcx, [0x1403b5530]
call fcn.1400012d0
lea rcx, str.___The_above_copyright_notice_and_this_permission_notice_shall_be_included_in_n
call fcn.1400012d0
lea rcx, str.___all_copies_or_substantial_portions_of_the_Software._n
call fcn.1400012d0
lea rcx, [0x1403b4fe4]
call fcn.1400012d0
lea rcx, str.___THE_SOFTWARE_IS_PROVIDED__AS_IS___WITHOUT_WARRANTY_OF_ANY_KIND__EXPRESS_OR_n
call fcn.1400012d0
lea rcx, str.___IMPLIED__INCLUDING_BUT_NOT_LIMITED_TO_THE_WARRANTIES_OF_MERCHANTABILITY__n
call fcn.1400012d0
lea rcx, str.___FITNESS_FOR_A_PARTICULAR_PURPOSE_AND_NONINFRINGEMENT.IN_NO_EVENT_SHALL_THE_n
call fcn.1400012d0
lea rcx, str.___AUTHORS_OR_COPYRIGHT_HOLDERS_BE_LIABLE_FOR_ANY_CLAIM__DAMAGES_OR_OTHER_n
call fcn.1400012d0
lea rcx, str.___LIABILITY__WHETHER_IN_AN_ACTION_OF_CONTRACT__TORT_OR_OTHERWISE__ARISING_FROM__n
call fcn.1400012d0
lea rcx, str.___OUT_OF_OR_IN_CONNECTION_WITH_THE_SOFTWARE_OR_THE_USE_OR_OTHER_DEALINGS_IN_n
call fcn.1400012d0
lea rcx, str.___THE_SOFTWARE._n
call fcn.1400012d0
lea rcx, [0x1403b5260]
call fcn.1400012d0
lea rcx, str.ZLIB_Data_Compression_Library:_Copyright__c__1995_2017_Jean_loup_Gailly_and_Mark_Adler_n
call fcn.1400012d0
lea rcx, str._______________________________http:__www.zlib.net__n
call fcn.1400012d0
lea rcx, [0x1403b5190]
call fcn.1400012d0
lea rcx, str.___This_software_is_provided_as_is__without_any_express_or_implied_n
call fcn.1400012d0
lea rcx, str.___warranty.In_no_event_will_the_authors_be_held_liable_for_any_damages_n
call fcn.1400012d0
lea rcx, str.___arising_from_the_use_of_this_software._n
call fcn.1400012d0
lea rcx, [0x14033510c]
call fcn.1400012d0
lea rcx, str.___Permission_is_granted_to_anyone_to_use_this_software_for_any_purpose__n
call fcn.1400012d0
lea rcx, str.___including_commercial_applications__and_to_alter_it_and_redistribute_it_n
call fcn.1400012d0
lea rcx, str.___freely__subject_to_the_following_restrictions_:_n
call fcn.1400012d0
lea rcx, [0x1403350bc]
call fcn.1400012d0
lea rcx, str.___1._The_origin_of_this_software_must_not_be_misrepresented__you_must_not_n
call fcn.1400012d0
lea rcx, str.______claim_that_you_wrote_the_original_software.If_you_use_this_software_n
call fcn.1400012d0
lea rcx, str.______in_a_product__an_acknowledgment_in_the_product_documentation_would_be_n
call fcn.1400012d0
lea rcx, str.______appreciated_but_is_not_required._n
call fcn.1400012d0
lea rcx, str.___2._Altered_source_versions_must_be_plainly_marked_as_such__and_must_not_be_n
call fcn.1400012d0
lea rcx, str.______misrepresented_as_being_the_original_software._n
call fcn.1400012d0
lea rcx, str.___3._This_notice_may_not_be_removed_or_altered_from_any_source_distribution._n
call fcn.1400012d0
lea rcx, [0x1403350ac]
call fcn.1400012d0
lea rcx, str.___Jean___loup_Gailly________Mark_Adler_n
call fcn.1400012d0
lea rcx, str.___jloup_gzip.org____________madler_alumni.caltech.edu_n
call fcn.1400012d0
mov dword [rsp + 0x58], 0
jmp 0x14015ae89
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov rax, qword [rax - 0x18]
mov ecx, 8
div rcx
cmp dword [rsp + 0x58], eax
jge 0x14015aeb7
movsxd rax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.140113b40
jmp 0x14015ae7f
mov rcx, qword [rsp + 0x50]
call fcn.140113b40
xor eax, eax
jmp 0x14015d23b
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x68], 0
cmp dword [rsp + 0x1650], 1
jle 0x14015afb6
mov eax, 8
imul rax, rax, 1
lea rdx, str._info
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015afb6
lea r8, str.Apr_23_2024
lea rdx, str.14:37:31
lea rcx, str.Compiled_on:__s___s_n
call fcn.1400012d0
xor eax, eax
cmp eax, 1
je 0x14015af54
lea rdx, str.80b3ff5e84b0fdfa5249fa39d09860334a69debf
lea rcx, str.___Commit_Hash:__s_n
call fcn.1400012d0
lea rdx, [0x1403b4cb0]
lea rcx, str.___Commit_Date:__s_n
call fcn.1400012d0
xor ecx, ecx
call fcn.140178bc0
mov rdx, rax
lea rcx, str.Using__s_n
call fcn.1400012d0
mov edx, 4
lea rcx, str.Agent_ARCHID:__d_n
call fcn.1400012d0
lea rax, [rsp + 0x1060]
lea rcx, str.var__tmp__Detected_OS:___require_os_.Name__try_tmp________require_os_.arch____catch_x_console.log__tmp__if_process.platformwin32___tmprequire_win_authenticode_opus__process.execPath___if__tmp_null___tmp.url_null___tmprequire_win_authenticode_opus_.locked__tmp.url___if__tmp_null___console.log_LOCKED_to:____tmp.dns___console.log_______tmp.id______process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, 0x198
rep movsb byte [rdi], byte [rsi]
mov edx, 0x197
lea rcx, [rsp + 0x1060]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0x197
cmp dword [rsp + 0x1650], 2
jle 0x14015b0a2
mov eax, 8
imul rax, rax, 1
lea rdx, str._faddr
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b0a2
mov qword [rsp + 0x138], 0
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
add rax, 2
lea r8, [rsp + 0x138]
lea rdx, str._016llx
mov rcx, rax
call fcn.1400157b0
mov r8, qword [rsp + 0x138]
mov edx, 0x1000
lea rcx, [0x1403bdcc0]
call fcn.140117580
lea rdx, [0x1403bdcc0]
lea rcx, [0x140335094]
call fcn.1400012d0
mov dword [rsp + 0x58], 0
jmp 0x14015b063
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov rax, qword [rax - 0x18]
mov ecx, 8
div rcx
cmp dword [rsp + 0x58], eax
jge 0x14015b091
movsxd rax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.140113b40
jmp 0x14015b059
mov rcx, qword [rsp + 0x50]
call fcn.140113b40
xor eax, eax
jmp 0x14015d23b
cmp dword [rsp + 0x1650], 2
jle 0x14015b187
mov eax, 8
imul rax, rax, 1
lea rdx, str._fdelta
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b187
mov qword [rsp + 0x140], 0
mov eax, 8
imul rax, rax, 2
lea r8, [rsp + 0x140]
lea rdx, str._lld
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.1400157b0
mov r8, qword [rsp + 0x140]
mov edx, 0x1000
lea rcx, [0x1403bdcc0]
call fcn.140117540
lea rdx, [0x1403bdcc0]
lea rcx, [0x14033505c]
call fcn.1400012d0
mov dword [rsp + 0x58], 0
jmp 0x14015b148
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov rax, qword [rax - 0x18]
mov ecx, 8
div rcx
cmp dword [rsp + 0x58], eax
jge 0x14015b176
movsxd rax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.140113b40
jmp 0x14015b13e
mov rcx, qword [rsp + 0x50]
call fcn.140113b40
xor eax, eax
jmp 0x14015d23b
cmp qword [rsp + 0x70], 0
je 0x14015b196
cmp dword [rsp + 0x68], 0
jne 0x14015b1a5
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.1400f9800
cmp dword [rsp + 0x1650], 1
jle 0x14015b214
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
lea rcx, str._export
sub rcx, rax
movzx edx, byte [rax]
cmp dl, byte [rax + rcx]
jne 0x14015b1de
inc rax
test dl, dl
jne 0x14015b1cb
xor eax, eax
jmp 0x14015b1e3
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14015b214
cmp dword [rsp + 0x68], 0
jne 0x14015b214
xor edx, edx
lea rcx, str.require_code_utils_.expand_embedded:_true__process.exit___
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov edx, 0x1000
mov rcx, qword [rsp + 0x70]
call fcn.140001160
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x1650], 1
jle 0x14015b283
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
lea rcx, str._import
sub rcx, rax
movzx edx, byte [rax]
cmp dl, byte [rax + rcx]
jne 0x14015b24d
inc rax
test dl, dl
jne 0x14015b23a
xor eax, eax
jmp 0x14015b252
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14015b283
cmp dword [rsp + 0x68], 0
jne 0x14015b283
xor edx, edx
lea rcx, str.require_code_utils_.shrink___process.exit___
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov edx, 0x1000
mov rcx, qword [rsp + 0x70]
call fcn.140001160
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x1650], 2
jle 0x14015b2fd
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
lea rcx, str._exec
sub rcx, rax
movzx edx, byte [rax]
cmp dl, byte [rax + rcx]
jne 0x14015b2bc
inc rax
test dl, dl
jne 0x14015b2a9
xor eax, eax
jmp 0x14015b2c1
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14015b2fd
cmp dword [rsp + 0x68], 0
jne 0x14015b2fd
mov eax, 8
imul rax, rax, 2
xor edx, edx
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov edx, 0x1000
mov rcx, qword [rsp + 0x70]
call fcn.140001160
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x1650], 2
jle 0x14015b384
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
lea rcx, str._b64exec
sub rcx, rax
movzx edx, byte [rax]
cmp dl, byte [rax + rcx]
jne 0x14015b336
inc rax
test dl, dl
jne 0x14015b323
xor eax, eax
jmp 0x14015b33b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14015b384
cmp dword [rsp + 0x68], 0
jne 0x14015b384
mov eax, 8
imul rax, rax, 2
mov edx, 0x10000
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.140001160
mov ecx, 8
imul rcx, rcx, 2
lea r8, [rsp + 0x70]
mov edx, eax
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + rcx]
call fcn.1401203a0
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x1650], 1
jle 0x14015b3eb
mov eax, 8
imul rax, rax, 1
lea rdx, str._nodeid
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b3eb
lea rax, [rsp + 0x7e0]
lea rcx, str.console.log_require__agentNodeId_____process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, gethostname
rep movsb byte [rdi], byte [rsi]
mov edx, gethostname
lea rcx, [rsp + 0x7e0]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], gethostname
cmp dword [rsp + 0x1650], 1
jle 0x14015b452
mov eax, 8
imul rax, rax, 1
lea rdx, str._name
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b452
lea rax, [rsp + 0x820]
lea rcx, str.console.log_require__agentNodeId_.serviceName____process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, 0x43
rep movsb byte [rdi], byte [rsi]
mov edx, 0x42
lea rcx, [rsp + 0x820]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0x42
cmp dword [rsp + 0x1650], 1
jle 0x14015b4b9
mov eax, 8
imul rax, rax, 1
lea rdx, str.exstate
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b4b9
lea rax, [rsp + 0xb40]
lea rcx, str.var_rrawState:__1__state:_NOT_INSTALLED_tryrrequire_service_manager_.manager.getService_require__agentNodeId_.serviceName___.status_catch_z__console.log_r.state__process.exit_r.rawState__
mov rdi, rax
mov rsi, rcx
mov ecx, 0xca
rep movsb byte [rdi], byte [rsi]
mov edx, 0xc9
lea rcx, [rsp + 0xb40]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0xc9
cmp dword [rsp + 0x1650], 1
jle 0x14015b520
mov eax, 8
imul rax, rax, 1
lea rdx, str.state
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b520
lea rax, [rsp + 0x9c0]
lea rcx, str.tryconsole.log_require_service_manager_.manager.getService_require__agentNodeId_.serviceName___.status.state__catch_z_console.log_NOT_INSTALLED___process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, 0xac
rep movsb byte [rdi], byte [rsi]
mov edx, 0xab
lea rcx, [rsp + 0x9c0]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0xab
cmp dword [rsp + 0x1650], 1
jle 0x14015b5a9
mov eax, 8
imul rax, rax, 1
lea rdx, str.start
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015b56e
mov eax, 8
imul rax, rax, 1
lea rdx, str._start
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b5a9
lea rax, [rsp + 0xa70]
lea rcx, str.tryrequire_service_manager_.manager.getService_require__agentNodeId_.serviceName___.start___console.log_Service_Started__catch_z_console.log_Failed_to_start_service__process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc2
rep movsb byte [rdi], byte [rsi]
mov edx, 0xc1
lea rcx, [rsp + 0xa70]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0xc1
cmp dword [rsp + 0x1650], 1
jle 0x14015b632
mov eax, 8
imul rax, rax, 1
lea rdx, str.stop
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015b5f7
mov eax, 8
imul rax, rax, 1
lea rdx, str._stop
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b632
lea rax, [rsp + 0xe30]
lea rcx, str.tryrequire_service_manager_.manager.getService_require__agentNodeId_.serviceName___.stop__.then_function_m_console.log_Service_Stopped__process.exit_____function_m_console.log_m__process.exit_____catch_z_console.log_Failed_to_stop_service__process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, 0x110
rep movsb byte [rdi], byte [rsi]
mov edx, 0x10f
lea rcx, [rsp + 0xe30]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0x10f
cmp dword [rsp + 0x1650], 1
jle 0x14015b6bb
mov eax, 8
imul rax, rax, 1
lea rdx, str.restart
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015b680
mov eax, 8
imul rax, rax, 1
lea rdx, str._restart
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b6bb
lea rax, [rsp + 0xf40]
lea rcx, str.tryrequire_service_manager_.manager.getService_require__agentNodeId_.serviceName___.restart__.then_function_m_console.log_Service_Restarted__process.exit_____function_m_console.log_m__process.exit_____catch_z_console.log_Failed_to_restart_service__process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, 0x118
rep movsb byte [rdi], byte [rsi]
mov edx, 0x117
lea rcx, [rsp + 0xf40]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0x117
cmp dword [rsp + 0x1650], 1
jle 0x14015b729
mov eax, 8
imul rax, rax, 1
lea rdx, str._agentHash
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b729
cmp dword [rsp + 0x68], 0
jne 0x14015b729
lea rax, [rsp + 0x8d0]
lea rcx, str.console.log_getSHA384FileHash_process.execPath_.toString_hex_.substring_0_16___process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, 0x61
rep movsb byte [rdi], byte [rsi]
mov edx, 0x60
lea rcx, [rsp + 0x8d0]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0x60
cmp dword [rsp + 0x1650], 1
jle 0x14015b797
mov eax, 8
imul rax, rax, 1
lea rdx, str._agentFullHash
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b797
cmp dword [rsp + 0x68], 0
jne 0x14015b797
lea rax, [rsp + 0x870]
lea rcx, str.console.log_getSHA384FileHash_process.execPath_.toString_hex___process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, 0x51
rep movsb byte [rdi], byte [rsi]
mov edx, 0x50
lea rcx, [rsp + 0x870]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0x50
cmp dword [rsp + 0x1650], 2
jne 0x14015b7fe
mov eax, 8
imul rax, rax, 1
lea rdx, str._resetnodeid
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b7fe
lea rax, [rsp + 0x940]
lea rcx, str.tryrequire__agentNodeId_.resetNodeId___catch_z_console.log_This_command_requires_admin.__process.exit___
mov rdi, rax
mov rsi, rcx
mov ecx, WSAStartup
rep movsb byte [rdi], byte [rsi]
mov edx, reloc.WS2_32.dll_WSASetLastError
lea rcx, [rsp + 0x940]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], reloc.WS2_32.dll_WSASetLastError
cmp dword [rsp + 0x1650], 1
jle 0x14015b865
mov eax, 8
imul rax, rax, 1
lea rdx, str._setfirewall
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b865
lea rax, [rsp + 0x750]
lea rcx, str.require_agent_installer_.setfirewall___
mov rdi, rax
mov rsi, rcx
mov ecx, 0x2a
rep movsb byte [rdi], byte [rsi]
mov edx, 0x29
lea rcx, [rsp + 0x750]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0x29
cmp dword [rsp + 0x1650], 1
jle 0x14015b8cc
mov eax, 8
imul rax, rax, 1
lea rdx, str._clearfirewall
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b8cc
lea rax, [rsp + 0x780]
lea rcx, str.require_agent_installer_.clearfirewall___
mov rdi, rax
mov rsi, rcx
mov ecx, 0x2c
rep movsb byte [rdi], byte [rsi]
mov edx, 0x2b
lea rcx, [rsp + 0x780]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0x2b
cmp dword [rsp + 0x1650], 1
jle 0x14015b933
mov eax, 8
imul rax, rax, 1
lea rdx, str._checkfirewall
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b933
lea rax, [rsp + 0x7b0]
lea rcx, str.require_agent_installer_.checkfirewall___
mov rdi, rax
mov rsi, rcx
mov ecx, 0x2c
rep movsb byte [rdi], byte [rsi]
mov edx, 0x2b
lea rcx, [rsp + 0x7b0]
call fcn.140123d20
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], 0x2b
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
cmp dword [rsp + 0x1650], 1
jle 0x14015b9f6
mov eax, 8
imul rax, rax, 1
lea rdx, str._updaterversion
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015b9f6
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x188]
mov r8d, 2
lea rdx, [0x14033504c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rsp + 0x58], 0
jmp 0x14015b9b7
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov rax, qword [rax - 0x18]
mov ecx, 8
div rcx
cmp dword [rsp + 0x58], eax
jge 0x14015b9e5
movsxd rax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.140113b40
jmp 0x14015b9ad
mov rcx, qword [rsp + 0x50]
call fcn.140113b40
xor eax, eax
jmp 0x14015d23b
cmp dword [rsp + 0x1650], 1
jle 0x14015bc6b
mov eax, 8
imul rax, rax, 1
lea rdx, str._kvm0
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015bc6b
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x20
call fcn.140113f90
mov qword [rsp + 0xd8], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0xd8]
lea rdx, [0x14015a1b0]
mov qword [rcx + rax], rdx
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0xd8]
add rcx, rax
mov rax, rcx
mov ecx, 4
imul rcx, rcx, 0
mov dword [rax + rcx], 0
cmp dword [rsp + 0x1650], 2
jle 0x14015bac0
mov eax, 8
imul rax, rax, 2
lea rdx, str._coredump
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015bac0
mov dword [rsp + 0xa8], 1
jmp 0x14015bacb
mov dword [rsp + 0xa8], 0
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0xd8]
add rcx, rax
mov rax, rcx
mov ecx, 4
imul rcx, rcx, 0
mov edx, dword [rsp + 0xa8]
mov dword [rax + rcx], edx
cmp dword [rsp + 0x1650], 2
jle 0x14015bb21
mov eax, 8
imul rax, rax, 2
lea rdx, str._remotecursor
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015bb4d
cmp dword [rsp + 0x1650], 3
jle 0x14015bb57
mov eax, 8
imul rax, rax, 3
lea rdx, [0x1403b4268]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015bb57
mov dword [0x1403b8ab4], 1
mov r8d, 0x800
xor edx, edx
lea rcx, str.Shcore.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xd0], 0
cmp qword [rsp + 0x98], 0
je 0x14015bbcd
lea rdx, str.SetProcessDpiAwareness
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xd0], rax
cmp qword [rsp + 0xd0], 0
jne 0x14015bbcd
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rsp + 0x98], 0
cmp qword [rsp + 0xd0], 0
je 0x14015bc00
mov ecx, 2
call qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rsp + 0x98], 0
jmp 0x14015bc06
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
mov rcx, qword [rsp + 0xd8]
call fcn.1400183d0
mov dword [rsp + 0x58], 0
jmp 0x14015bc27
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov rax, qword [rax - 0x18]
mov ecx, 8
div rcx
cmp dword [rsp + 0x58], eax
jge 0x14015bc55
movsxd rax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.140113b40
jmp 0x14015bc1d
mov rcx, qword [rsp + 0x50]
call fcn.140113b40
xor eax, eax
jmp 0x14015d23b
cmp dword [rsp + 0x1650], 1
jle 0x14015bfab
mov eax, 8
imul rax, rax, 1
lea rdx, str._kvm1
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015bfab
mov qword [rsp + 0xb8], 0
mov dword [rsp + 0x170], 0x18
mov qword [rsp + 0x178], 0
mov dword [rsp + 0x180], 1
mov ecx, 0x28
call fcn.14027bb94
mov qword [rsp + 0xb8], rax
cmp qword [rsp + 0xb8], 0
je 0x14015bd44
mov edx, 1
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
je 0x14015bd44
xor r9d, r9d
xor r8d, r8d
mov edx, 1
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
je 0x14015bd44
mov dword [rsp + 0x170], 0x18
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x178], rax
mov dword [rsp + 0x180], 1
mov qword [rsp + 0x198], 0
lea r8, [0x1403b4218]
xor edx, edx
lea rcx, [rsp + 0x170]
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x198], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x20
call fcn.140113f90
mov qword [rsp + 0xe8], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0xe8]
lea rdx, [0x14015a1b0]
mov qword [rcx + rax], rdx
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0xe8]
add rcx, rax
mov rax, rcx
mov ecx, 4
imul rcx, rcx, 0
mov dword [rax + rcx], 1
cmp dword [rsp + 0x1650], 2
jle 0x14015be05
mov eax, 8
imul rax, rax, 2
lea rdx, [0x1403b4208]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015be05
mov dword [rsp + 0xb4], 1
jmp 0x14015be10
mov dword [rsp + 0xb4], 0
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0xe8]
add rcx, rax
mov rax, rcx
mov ecx, 4
imul rcx, rcx, 0
mov edx, dword [rsp + 0xb4]
mov dword [rax + rcx], edx
cmp dword [rsp + 0x1650], 2
jle 0x14015be66
mov eax, 8
imul rax, rax, 2
lea rdx, [0x1403b41f8]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015be92
cmp dword [rsp + 0x1650], 3
jle 0x14015be9c
mov eax, 8
imul rax, rax, 3
lea rdx, [0x1403b41e8]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015be9c
mov dword [0x1403b8ab4], 1
mov r8d, 0x800
xor edx, edx
lea rcx, [0x1403b41d8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xe0], 0
cmp qword [rsp + 0xa0], 0
je 0x14015bf12
lea rdx, [0x1403b41c0]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xe0], rax
cmp qword [rsp + 0xe0], 0
jne 0x14015bf12
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rsp + 0xa0], 0
cmp qword [rsp + 0xe0], 0
je 0x14015bf45
mov ecx, 2
call qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rsp + 0xa0], 0
jmp 0x14015bf4b
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
mov rcx, qword [rsp + 0xe8]
call fcn.1400183d0
mov dword [rsp + 0x58], 0
jmp 0x14015bf6c
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov rax, qword [rax - 0x18]
mov ecx, 8
div rcx
cmp dword [rsp + 0x58], eax
jge 0x14015bf9a
movsxd rax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.140113b40
jmp 0x14015bf62
mov rcx, qword [rsp + 0x50]
call fcn.140113b40
xor eax, eax
jmp 0x14015d23b
cmp qword [rsp + 0x70], 0
jne 0x14015c05b
cmp dword [rsp + 0x1650], 0
jle 0x14015bfe3
mov eax, 8
imul rax, rax, 0
lea rdx, str.__slave
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015c05b
cmp dword [rsp + 0x1650], 1
jle 0x14015c2b5
mov eax, 8
imul rax, rax, 1
lea rdx, [0x14033500c]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015c05b
mov eax, 8
imul rax, rax, 1
lea rdx, str.connect
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015c05b
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1403b41a8]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015c2b5
mov edx, 1
lea rcx, [0x14015a200]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
nop
mov dword [rsp + 0xac], 0
cmp dword [rsp + 0x1650], 1
jle 0x14015c0b0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1403b41a0]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015c0b0
mov dword [rsp + 0xac], 0x20
mov ecx, dword [rsp + 0xac]
call fcn.14000cff0
mov qword [0x1403b96f8], rax
mov rax, qword [0x1403b96f8]
mov rcx, qword [rsp + 0x70]
mov qword [rax + 0x20], rcx
mov rax, qword [0x1403b96f8]
mov ecx, dword [rsp + 0x68]
mov dword [rax + 0x28], ecx
cmp qword [rsp + 0x70], 0
jne 0x14015c137
cmp dword [rsp + 0x1650], 1
jle 0x14015c148
mov eax, 8
imul rax, rax, 1
lea rdx, [0x140334fcc]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
je 0x14015c137
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1403b4198]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015c148
mov rax, qword [0x1403b96f8]
mov dword [rax + 0xdfc], 1
mov r8, qword [rsp + 0x50]
mov edx, dword [rsp + 0x1650]
mov rcx, qword [0x1403b96f8]
call fcn.140013300
mov rax, qword [0x1403b96f8]
mov eax, dword [rax + 0xdb4]
mov dword [rsp + 0x8c], eax
mov rcx, qword [0x1403b96f8]
call fcn.140013fd0
mov qword [0x1403b96f8], 0
jmp 0x14015c19b
mov dword [rsp + 0x84], 0
jmp 0x14015c1b8
mov eax, dword [rsp + 0x84]
inc eax
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x1650]
cmp dword [rsp + 0x84], eax
jge 0x14015c258
movsxd rax, dword [rsp + 0x84]
lea rdx, [0x1403b4188]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.14027a6f0
test eax, eax
je 0x14015c20e
movsxd rax, dword [rsp + 0x84]
lea rdx, [0x1403b4178]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.14027a6f0
test eax, eax
jne 0x14015c215
call fcn.140159400
jmp 0x14015c253
movsxd rax, dword [rsp + 0x84]
lea rdx, [0x1403b4168]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.14027a6f0
test eax, eax
je 0x14015c253
movsxd rax, dword [rsp + 0x84]
lea rdx, [0x1403b4158]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.14027a6f0
jmp 0x14015c1a8
mov dword [rsp + 0x58], 0
jmp 0x14015c26c
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov rax, qword [rax - 0x18]
mov ecx, 8
div rcx
cmp dword [rsp + 0x58], eax
jge 0x14015c29a
movsxd rax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.140113b40
jmp 0x14015c262
mov rcx, qword [rsp + 0x50]
call fcn.140113b40
mov eax, dword [rsp + 0x8c]
jmp 0x14015d23b
cmp dword [rsp + 0x1650], 1
jle 0x14015c598
mov eax, 8
imul rax, rax, 1
mov r8d, 8
lea rdx, str._update:
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.140270070
test eax, eax
jne 0x14015c598
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x400
call fcn.140113f90
mov qword [rsp + 0xf0], rax
mov eax, 8
imul rax, rax, 1
mov ecx, 1
imul rcx, rcx, 8
mov rdx, qword [rsp + 0x50]
mov rax, qword [rdx + rax]
movsx eax, byte [rax + rcx]
cmp eax, 0x2a
jne 0x14015c3e4
cmp dword [rsp + 0x1650], 2
jle 0x14015c357
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x150], rax
jmp 0x14015c366
lea rax, str.null
mov qword [rsp + 0x150], rax
mov eax, 8
imul rax, rax, 1
mov ecx, 1
imul rcx, rcx, 9
mov rdx, qword [rsp + 0x50]
mov rax, qword [rdx + rax]
movsx eax, byte [rax + rcx]
cmp eax, 0x53
jne 0x14015c39b
lea rax, [0x1403b4138]
mov qword [rsp + 0x158], rax
jmp 0x14015c3aa
lea rax, [0x1403b4130]
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x158]
lea r8, str.require_agent_installer_.update__s___s__
mov edx, 0x400
mov rcx, qword [rsp + 0xf0]
call fcn.140001420
mov dword [rsp + 0x90], eax
jmp 0x14015c4b6
cmp dword [rsp + 0x1650], 2
jle 0x14015c496
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
lea rcx, [0x140334fbc]
sub rcx, rax
movzx edx, byte [rax]
cmp dl, byte [rax + rcx]
jne 0x14015c421
inc rax
test dl, dl
jne 0x14015c40e
xor eax, eax
jmp 0x14015c426
sbb eax, eax
or eax, 1
test eax, eax
je 0x14015c462
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
lea rcx, [0x1403b40f8]
sub rcx, rax
movzx edx, byte [rax]
cmp dl, byte [rax + rcx]
jne 0x14015c459
inc rax
test dl, dl
jne 0x14015c446
xor eax, eax
jmp 0x14015c45e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14015c496
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x50]
mov r9, qword [rcx + rax]
lea r8, str.require_agent_installer_.update_false____s___
mov edx, 0x400
mov rcx, qword [rsp + 0xf0]
call fcn.140001420
mov dword [rsp + 0x90], eax
jmp 0x14015c4b6
lea r8, str.require_agent_installer_.update_true__
mov edx, 0x400
mov rcx, qword [rsp + 0xf0]
call fcn.140001420
mov dword [rsp + 0x90], eax
xor ecx, ecx
call fcn.14000cff0
mov qword [0x1403b96f8], rax
mov rax, qword [0x1403b96f8]
mov rcx, qword [rsp + 0xf0]
mov qword [rax + 0x20], rcx
mov rax, qword [0x1403b96f8]
mov ecx, dword [rsp + 0x90]
mov dword [rax + 0x28], ecx
mov r8, qword [rsp + 0x50]
mov edx, dword [rsp + 0x1650]
mov rcx, qword [0x1403b96f8]
call fcn.140013300
mov rax, qword [0x1403b96f8]
mov eax, dword [rax + 0xdb4]
mov dword [rsp + 0x8c], eax
mov rcx, qword [0x1403b96f8]
call fcn.140013fd0
mov qword [0x1403b96f8], 0
jmp 0x14015c53b
mov dword [rsp + 0x58], 0
jmp 0x14015c54f
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov rax, qword [rax - 0x18]
mov ecx, 8
div rcx
cmp dword [rsp + 0x58], eax
jge 0x14015c57d
movsxd rax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.140113b40
jmp 0x14015c545
mov rcx, qword [rsp + 0x50]
call fcn.140113b40
mov eax, dword [rsp + 0x8c]
jmp 0x14015d23b
cmp dword [rsp + 0x1650], 1
jle 0x14015c5f4
mov eax, 8
imul rax, rax, 1
lea rdx, str._netinfo
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.14027a6f0
test eax, eax
jne 0x14015c5f4
lea rcx, [rsp + 0x1a0]
call fcn.14001bd90
mov dword [rsp + 0x110], eax
cmp dword [rsp + 0x110], 0
jle 0x14015c5ef
mov rcx, qword [rsp + 0x1a0]
call fcn.140158770
jmp 0x14015d1e7
mov dword [rsp + 0xb0], 0
mov rdx, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x1650]
call fcn.14015a120
test eax, eax
jne 0x14015d1e7
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x427
jne 0x14015d1e7
cmp dword [rsp + 0x1650], 2
jl 0x14015c70b
mov eax, 8
imul rax, rax, 1
mov r9d, 3
lea r8, [0x140334f6c]
mov rdx, 0xffffffffffffffff
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.1401235e0
test eax, eax
jne 0x14015c695
mov eax, 8
imul rax, rax, 1
mov r9d, 4
lea r8, str..zip
mov rdx, 0xffffffffffffffff
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.1401235e0
test eax, eax
je 0x14015c70b
mov edx, 1
lea rcx, [0x14015a200]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
nop
xor ecx, ecx
call fcn.14000cff0
mov qword [0x1403b96f8], rax
mov rax, qword [0x1403b96f8]
mov dword [rax + 0xdfc], 1
mov r8, qword [rsp + 0x50]
mov edx, dword [rsp + 0x1650]
mov rcx, qword [0x1403b96f8]
call fcn.140013300
mov rcx, qword [0x1403b96f8]
call fcn.140013fd0
mov qword [0x1403b96f8], 0
jmp 0x14015c706
jmp 0x14015d1e7
cmp dword [rsp + 0x1650], 2
jne 0x14015c8a0
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
lea rcx, str._lang
sub rcx, rax
movzx edx, byte [rax]
cmp dl, byte [rax + rcx]
jne 0x14015c748
inc rax
test dl, dl
jne 0x14015c735
xor eax, eax
jmp 0x14015c74d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14015c8a0
mov qword [rsp + 0x120], 0
mov r8d, 0x104
lea rdx, [rsp + 0x1200]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov r9d, 0x104
lea r8, [rsp + 0xc10]
mov edx, 0xffffffff
lea rcx, [rsp + 0x1200]
call fcn.140112bc0
call fcn.140114f30
mov qword [rsp + 0xc0], rax
mov rcx, qword [rsp + 0xc0]
call fcn.14011aa50
call fcn.1400fcc30
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
lea rcx, [rsp + 0xc10]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, qword [rsp + 0xc0]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1400fd9f0
mov qword [rsp + 0x118], rax
mov r9d, 0xe88
xor r8d, r8d
lea rdx, str.require_util_language_.current.toUpperCase__.split___.join____
mov rcx, qword [rsp + 0x118]
call fcn.1400308b0
test eax, eax
jne 0x14015c863
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x118]
call fcn.140037fd0
mov qword [rsp + 0x120], rax
mov rdx, qword [rsp + 0x120]
lea rcx, str.Current_Language:__s_n
call fcn.1400012d0
mov rcx, qword [rsp + 0x118]
call fcn.1400c98a0
mov rcx, qword [rsp + 0xc0]
call fcn.14011b630
mov rcx, qword [rsp + 0xc0]
call fcn.14011ab50
mov dword [rsp + 0x1650], 1
mov dword [rsp + 0xb0], 1
cmp dword [rsp + 0x1650], 2
jne 0x14015c9ee
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0xf8], 0xffffffffffffffff
inc qword [rsp + 0xf8]
mov rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0xf8]
cmp byte [rax + rcx], 0
jne 0x14015c8d4
mov rax, qword [rsp + 0xf8]
cmp rax, 6
jbe 0x14015c9ee
mov eax, 8
imul rax, rax, 1
mov r8d, 6
lea rdx, [0x1403b4004]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax]
call fcn.140279b30
test eax, eax
jne 0x14015c9ee
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x1c0], rax
mov ecx, 8
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rdx + rcx]
mov qword [rsp + 0x1b0], rcx
mov qword [rsp + 0x100], 0xffffffffffffffff
inc qword [rsp + 0x100]
mov rcx, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x100]
cmp byte [rcx + rdx], 0
jne 0x14015c970
mov rcx, qword [rsp + 0x100]
mov edx, 8
imul rdx, rdx, 1
mov qword [rsp + 0x1b8], rdx
mov r9d, 1
lea r8, [0x140334f34]
mov rdx, rcx
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x1b8]
mov rcx, qword [rcx + rdi]
call fcn.1401237f0
cdqe
mov rcx, qword [rsp + 0x1c0]
lea rax, [rcx + rax + 1]
mov qword [0x1403b9730], rax
mov dword [rsp + 0x1650], 1
cmp dword [rsp + 0x1650], 1
je 0x14015ca09
lea rcx, str.Invalid:_r_n
call fcn.1400012d0
jmp 0x14015d1e7
cmp dword [rsp + 0xb0], 0
jne 0x14015d1e7
mov qword [rsp + 0x78], 0
mov r8d, 0x104
lea rdx, [rsp + 0x1410]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov r9d, 0x104
lea r8, [rsp + 0xd20]
mov edx, 0xffffffff
lea rcx, [rsp + 0x1410]
call fcn.140112bc0
call fcn.140114f30
mov qword [rsp + 0xc8], rax
mov rcx, qword [rsp + 0xc8]
call fcn.14011aa50
call fcn.1400fcc30
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0x48], rcx
lea rcx, [0x14015a250]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], 0
lea rcx, [rsp + 0xd20]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, qword [rsp + 0xc8]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1400fd9f0
mov qword [rsp + 0x60], rax
mov r9d, 0xe88
xor r8d, r8d
lea rdx, str.require_win_authenticode_opus_.checkMSH___
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
test eax, eax
jne 0x14015d1af
mov r9d, 0xe88
xor r8d, r8d
lea rdx, str.require_util_language_.current.toLowerCase__.split___.join____
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
test eax, eax
jne 0x14015cb27
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140037fd0
mov qword [rsp + 0x78], rax
mov r9d, 0xe88
xor r8d, r8d
lea rdx, str._function_foo__return_JSON.parse__MSH__.translation______
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
test eax, eax
jne 0x14015cb63
lea r8, [0x140334ecc]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.1400325b0
test eax, eax
jne 0x14015cdad
mov rcx, qword [rsp + 0x60]
call fcn.14003b390
lea rdx, str.Install
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
lea r8, [0x1403b3f30]
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.1400320c0
lea rdx, [0x1403b3f20]
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
lea r8, str.uninstall
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.1400320c0
lea rdx, [0x1403b3f08]
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
lea r8, [0x1403b3f00]
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.1400320c0
lea rdx, str.Disconnect
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
lea r8, str.disconnect
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.1400320c0
lea rdx, str.Update
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
lea r8, str.update
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.1400320c0
mov rcx, qword [rsp + 0x60]
call fcn.14003b3e0
lea rdx, str.NOT_INSTALLED
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140034790
lea r8, str.push
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140031be0
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140034750
mov edx, 0xfffffffd
mov rcx, qword [rsp + 0x60]
call fcn.140034790
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.14002f170
mov rcx, qword [rsp + 0x60]
call fcn.14003d900
lea rdx, str.RUNNING
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140034790
lea r8, [0x1403b3ea4]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140031be0
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140034750
mov edx, 0xfffffffd
mov rcx, qword [rsp + 0x60]
call fcn.140034790
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.14002f170
mov rcx, qword [rsp + 0x60]
call fcn.14003d900
lea rdx, str.NOT_RUNNING
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140034790
lea r8, [0x1403b3e8c]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140031be0
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140034750
mov edx, 0xfffffffd
mov rcx, qword [rsp + 0x60]
call fcn.140034790
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.14002f170
mov rcx, qword [rsp + 0x60]
call fcn.14003d900
lea r8, str.status
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.1400320c0
lea r8, [0x140334eac]
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.1400320c0
cmp qword [0x1403b9730], 0
je 0x14015cdc3
mov rax, qword [0x1403b9730]
mov qword [rsp + 0x78], rax
mov r8, qword [rsp + 0x78]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.1400325b0
test eax, eax
jne 0x14015cea8
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140034790
lea r8, str.split
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140031be0
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140034750
lea rdx, [0x140334e24]
mov rcx, qword [rsp + 0x60]
call fcn.14003a550
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.14002eec0
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140034790
lea r8, str.shift
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140031be0
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140034750
xor edx, edx
mov rcx, qword [rsp + 0x60]
call fcn.14002eec0
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140037fd0
mov qword [rsp + 0x78], rax
mov edx, 0xfffffffc
mov rcx, qword [rsp + 0x60]
call fcn.140034790
mov r8, qword [rsp + 0x78]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.1400325b0
test eax, eax
jne 0x14015cecc
lea rax, [0x140334dbc]
mov qword [rsp + 0x78], rax
lea rax, [0x140334d8c]
mov rcx, qword [rsp + 0x78]
sub rcx, rax
movzx edx, byte [rax]
cmp dl, byte [rax + rcx]
jne 0x14015ceee
inc rax
test dl, dl
jne 0x14015cedb
xor eax, eax
jmp 0x14015cef3
sbb eax, eax
or eax, 1
test eax, eax
je 0x14015cf9f
lea r8, [0x140334d74]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140031be0
mov r8, qword [rsp + 0x78]
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140031be0
mov r8d, reloc.WS2_32.dll_recv
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140032d40
mov r8d, 1
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140032da0
test eax, eax
je 0x14015cf95
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140035b70
mov r8, rax
mov edx, 0xfffffffc
mov rcx, qword [rsp + 0x60]
call fcn.1400325b0
test eax, eax
jne 0x14015cf89
mov edx, 0xfffffffc
mov rcx, qword [rsp + 0x60]
call fcn.140032080
jmp 0x14015cf93
mov rcx, qword [rsp + 0x60]
call fcn.14003d900
jmp 0x14015cf3a
mov rcx, qword [rsp + 0x60]
call fcn.14003d9b0
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140036910
mov qword [0x1403b96f0], rax
mov rax, qword [rsp + 0x60]
mov qword [0x1403b9720], rax
mov rax, qword [rsp + 0x78]
mov qword [0x1403b9700], rax
mov rcx, qword [rsp + 0x60]
call fcn.14003ac70
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.140034790
lea r8, [0x1403b3e70]
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.1400320c0
xor r8d, r8d
lea rdx, [0x14015a310]
mov rcx, qword [rsp + 0x60]
call fcn.14003c020
lea r8, [0x1403b3c84]
mov edx, 0xfffffffe
mov rcx, qword [rsp + 0x60]
call fcn.1400320c0
mov r9d, 0xe08
xor r8d, r8d
lea rdx, str.global.__msh___MSH__
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
lea r8, [0x140334d5c]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.1400325b0
test eax, eax
je 0x14015d17c
mov rcx, qword [rsp + 0x60]
call fcn.14003d530
mov r9d, 0xf08
xor r8d, r8d
lea rdx, str.global.ackJSON.parse_global.__msh.ack_
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
mov r9d, 0xf08
xor r8d, r8d
lea rdx, str.global.bcolorglobal.__msh.background
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
mov r9d, 0xf08
xor r8d, r8d
lea rdx, str.global.fcolorglobal.__msh.foreground
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
mov r9d, 0xf08
xor r8d, r8d
lea rdx, str.global.bimageglobal.__msh.image_global.__msh.image:default2_
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
mov r9, qword [rsp + 0x78]
mov r8, qword [rsp + 0x78]
lea rdx, str.global.ackTitle__global.ack.captions__s__global.ack.captions__s_.title:global.ack.captions_en_.title_
mov rcx, qword [rsp + 0x60]
call fcn.14003b050
mov r9d, 0x909
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
mov r9, qword [rsp + 0x78]
mov r8, qword [rsp + 0x78]
lea rdx, str.global.ackText__global.ack.captions__s__global.ack.captions__s_.caption:global.ack.captions_en_.caption_
mov rcx, qword [rsp + 0x60]
call fcn.14003b050
mov r9d, 0x909
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
mov r9, qword [rsp + 0x78]
mov r8, qword [rsp + 0x78]
lea rdx, str.global.ackLink___text:_global.ack.captions__s_.linkText__url:_global.ack.captions__s_.linkUrl__if_global.ackLink.textnull__global.ackLink.urlnull_delete_global.ackLink_
mov rcx, qword [rsp + 0x60]
call fcn.14003b050
mov r9d, 0x909
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
mov r9d, 0xf08
xor r8d, r8d
lea rdx, str.var_x__require_win_userconsent_.create_global.ackTitle__global.ackText____noCheck:_true__background:_global.bcolor__foreground:_global.fcolor__b64Image:_global.bimage__linkText:_global.ackLink__x.then_function_____global._OK__true_____x.pump.on_exit__function______start______
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
jmp 0x14015d1a0
mov rcx, qword [rsp + 0x60]
call fcn.14003d530
mov r9d, 0xf08
xor r8d, r8d
lea rdx, str.global._OKtrue___start___
mov rcx, qword [rsp + 0x60]
call fcn.1400308b0
mov rcx, qword [rsp + 0xc8]
call fcn.14011ab50
jmp 0x14015d1e7
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call fcn.140037fd0
mov rdx, rax
lea rcx, str.Error:__s
call fcn.1400012d0
mov rcx, qword [rsp + 0x60]
call fcn.1400c98a0
mov rcx, qword [rsp + 0xc8]
call fcn.14011ab50
call qword [sym.imp.ole32.dll_CoUninitialize]
mov dword [rsp + 0x58], 0
jmp 0x14015d201
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov rax, qword [rax - 0x18]
mov ecx, 8
div rcx
cmp dword [rsp + 0x58], eax
jge 0x14015d22f
movsxd rax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + rax*8]
call fcn.140113b40
jmp 0x14015d1f7
mov rcx, qword [rsp + 0x50]
call fcn.140113b40
xor eax, eax
mov rcx, qword [rsp + 0x1620]
xor rcx, rsp
call fcn.14026d940
add rsp, 0x1638
pop rdi
pop rsi
ret