Function at 0x140027660
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x590]
sub rsp, 0x690
mov rax, qword [0x14006a0d0]
xor rax, rsp
mov qword [rbp + 0x580], rax
mov r13, rcx
mov qword [rsp + 0x40], rcx
lea r15, [rcx + 0x140]
mov rdx, qword [r15 + 0x18]
call fcn.140020240
mov rax, qword [r15 + 0x18]
mov qword [rax], rax
mov rax, qword [r15 + 0x18]
mov qword [rax + 8], rax
xor edi, edi
mov qword [r15 + 0x20], rdi
mov rdx, qword [r15 + 0x28]
call fcn.1400201a0
mov rax, qword [r15 + 0x28]
mov qword [rax], rax
mov rax, qword [r15 + 0x28]
mov qword [rax + 8], rax
mov qword [r15 + 0x30], rdi
mov rax, qword [r15]
cmp rax, qword [r15 + 8]
je 0x1400276ee
mov qword [r15 + 8], rax
lea rdi, [r13 + 0x100]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140027702
mov rdx, qword [rdi]
lea rcx, [rbp + 0xf0]
call fcn.14001f770
nop
cmp qword [rbp + 0x100], 0
je 0x1400286bb
lea r12, [r13 + 0x120]
mov edx, 0x104
mov rcx, r12
call fcn.140019820
mov rbx, qword [r13 + 0x130]
mov rsi, r12
cmp qword [r12 + 0x18], 8
jb 0x140027747
mov rsi, qword [r12]
mov rdx, rsi
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov r14, 0xffffffffffffffff
test eax, eax
je 0x1400277c4
mov eax, eax
cmp rax, rbx
ja 0x1400277c4
lea r9, [rbp + 0x370]
xor r8d, r8d
lea rdx, [0x140063438]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
je 0x1400277c4
test rbx, rbx
je 0x1400277c4
lea rcx, [rbp + 0x370]
mov rax, r14
inc rax
cmp word [rcx + rax*2], 0
jne 0x140027791
lea r8, [rbp + 0x370]
mov rdx, rbx
mov rcx, rsi
cmp rax, rbx
jae 0x1400277b4
call fcn.14003fe18
jmp 0x1400277c4
lea r9, [rbx - 1]
call fcn.14003f9e4
xor eax, eax
mov word [rsi + rbx*2 - 2], ax
xor esi, esi
mov qword [rbp + 0x170], rsi
mov rdx, r12
cmp qword [r12 + 0x18], 8
jb 0x1400277dc
mov rdx, qword [r12]
cmp qword [rdi + 0x18], 8
jb 0x1400277e6
mov rdi, qword [rdi]
lea r8, [rbp + 0x170]
mov rcx, rdi
call fcn.14001fc90
test al, al
je 0x1400286bb
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [0x140063740]
movdqu xmmword [rbp + 0x60], xmm1
mov byte [rbp + 0x50], sil
movups xmmword [rbp + 0x160], xmm0
mov r9d, 0x203
lea r8, str.0x_08X
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp + 0x160]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
movups xmmword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x210], xmm0
movups xmmword [rbp + 0x220], xmm0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov r9d, 0xc4015
lea r8, str.ATTR__08X__s__r_n
mov edx, 0x40
lea rcx, [rbp + 0x1f0]
call fcn.14000ccd0
lea rax, [rbp + 0x1f0]
mov rdi, r14
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140027890
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x1400278dc
lea rax, [rcx + rdi]
mov qword [rbp + 0x60], rax
lea rbx, [rbp + 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x50]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x1f0]
mov rcx, rbx
call fcn.14002fe20
mov byte [rbx + rdi], 0
jmp 0x1400278f7
lfence
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x1f0]
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.1400202e0
call qword [sym.imp.KERNEL32.dll_GetVersion]
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov r9d, eax
lea r8, str.0x_08X
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp + 0x160]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
movups xmmword [rbp + 0x260], xmm0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov r9d, 0xc4009
lea r8, str.ATTR__08X__s__r_n
mov edx, 0x40
lea rcx, [rbp + 0x230]
call fcn.14000ccd0
lea rax, [rbp + 0x230]
mov rdi, r14
inc rdi
cmp byte [rax + rdi], 0
jne 0x140027975
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x1400279c1
lea rax, [rcx + rdi]
mov qword [rbp + 0x60], rax
lea rbx, [rbp + 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x50]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x230]
mov rcx, rbx
call fcn.14002fe20
mov byte [rbx + rdi], 0
jmp 0x1400279dc
lfence
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x230]
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.1400202e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xor r9d, r9d
lea r8, str.0x_08X
lea edx, [r9 + 0x10]
lea rcx, [rbp + 0x160]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
movups xmmword [rbp + 0x280], xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2a0], xmm0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov r9d, 0x84008
lea r8, str.ATTR__08X__s__r_n
mov edx, 0x40
lea rcx, [rbp + 0x270]
call fcn.14000ccd0
lea rax, [rbp + 0x270]
mov rdi, r14
inc rdi
cmp byte [rax + rdi], 0
jne 0x140027a53
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x140027a9f
lea rax, [rdi + rcx]
mov qword [rbp + 0x60], rax
lea rbx, [rbp + 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x50]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x270]
mov rcx, rbx
call fcn.14002fe20
mov byte [rbx + rdi], 0
jmp 0x140027aba
lfence
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x270]
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.1400202e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov r9d, dword [r13 + 0xb8]
lea r8, str.0x_08X
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp + 0x160]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
movups xmmword [rbp + 0x2c0], xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov r9d, 0xc401a
lea r8, str.ATTR__08X__s__r_n
mov edx, 0x40
lea rcx, [rbp + 0x2b0]
call fcn.14000ccd0
lea rax, [rbp + 0x2b0]
mov rdi, r14
inc rdi
cmp byte [rax + rdi], 0
jne 0x140027b36
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x140027b82
lea rax, [rdi + rcx]
mov qword [rbp + 0x60], rax
lea rbx, [rbp + 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x50]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x2b0]
mov rcx, rbx
call fcn.14002fe20
mov byte [rbx + rdi], 0
jmp 0x140027b9d
lfence
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x2b0]
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.1400202e0
lea r8, [r13 + 0xe0]
cmp qword [r8 + 0x18], 8
jb 0x140027bae
mov r8, qword [r8]
mov edx, 0x88019
lea rcx, [rbp + 0x50]
call fcn.14001f1a0
lea r8, [r13 + 0xc0]
cmp qword [r8 + 0x18], 8
jb 0x140027bcd
mov r8, qword [r8]
mov edx, 0x88034
lea rcx, [rbp + 0x50]
call fcn.14001f1a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov r9d, 2
lea r8, str.0x_08X
lea edx, [r9 + 0xe]
lea rcx, [rbp + 0x160]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
movups xmmword [rbp + 0x300], xmm0
movups xmmword [rbp + 0x310], xmm0
movups xmmword [rbp + 0x320], xmm0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov r9d, 0x8200e
lea r8, str.ATTR__08X__s__r_n
mov edx, 0x40
lea rcx, [rbp + 0x2f0]
call fcn.14000ccd0
lea rax, [rbp + 0x2f0]
mov rdi, r14
inc rdi
cmp byte [rax + rdi], 0
jne 0x140027c55
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x140027ca1
lea rax, [rcx + rdi]
mov qword [rbp + 0x60], rax
lea rbx, [rbp + 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x50]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x2f0]
mov rcx, rbx
call fcn.14002fe20
mov byte [rbx + rdi], 0
jmp 0x140027cbc
lfence
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x2f0]
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.1400202e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov r9d, dword [r13 + 0x178]
lea r8, str.0x_08X
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp + 0x160]
call fcn.14000ccd0
lea r8, [rbp + 0x160]
mov edx, 0x84030
lea rcx, [rbp + 0x50]
call fcn.14001f0c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov r9d, dword [rbp + 0x170]
lea r8, str.0x_08X
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp + 0x160]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov r9d, 0x8b03a
lea r8, str.ATTR__08X__s__r_n
mov edx, 0x40
lea rcx, [rbp + 0x330]
call fcn.14000ccd0
lea rax, [rbp + 0x330]
mov rdi, r14
inc rdi
cmp byte [rax + rdi], 0
jne 0x140027d76
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x140027dc2
lea rax, [rcx + rdi]
mov qword [rbp + 0x60], rax
lea rbx, [rbp + 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x50]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x330]
mov rcx, rbx
call fcn.14002fe20
mov byte [rbx + rdi], 0
jmp 0x140027ddd
lfence
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x330]
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.1400202e0
lea r8, str.ESET_Diagnostic_file
mov edx, 0x89001
lea rcx, [rbp + 0x50]
call fcn.14001f0c0
xor ecx, ecx
call fcn.1400328c0
mov r12, rax
xor eax, eax
mov qword [rbp + 0x170], rax
mov dword [rbp + 0x178], eax
lea r9d, [rax + 6]
lea r8, [0x1400604f4]
lea edx, [rax + 0xc]
lea rcx, [rbp + 0x170]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x88], rsi
lea rax, [rbp + 0x170]
mov rdi, r14
inc rdi
cmp byte [rax + rdi], 0
jne 0x140027e44
movabs r13, 0x7fffffffffffffff
cmp rdi, r13
ja 0x140028733
mov eax, socket
cmp rdi, 0x10
jae 0x140027e97
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov r8, rdi
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x70]
call fcn.14002fe20
mov byte [rbp + rdi + 0x70], 0
jmp 0x140027ee5
mov rsi, rdi
or rsi, 0xf
cmp rsi, r13
jbe 0x140027ea8
mov rsi, r13
jmp 0x140027eaf
cmp rsi, rax
cmovb rsi, rax
lea rdx, [rsi + 1]
call fcn.140002020
mov rbx, rax
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], rsi
mov r8, rdi
lea rdx, [rbp + 0x170]
mov rcx, rax
call fcn.14002fe20
mov byte [rbx + rdi], 0
xor esi, esi
lea rdx, [rbp + 0x70]
lea rbx, [r15 + 0x18]
mov rcx, rbx
call fcn.140020060
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140027f34
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027f2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028739
call fcn.14002a1e8
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x78], rsi
xorps xmm2, xmm2
movdqa xmmword [rbp - 0x80], xmm2
mov qword [rsp + 0x50], 0x40
lea rax, str.chc_pversion
mov qword [rsp + 0x60], rax
mov rax, qword [rbx]
mov rcx, qword [rax + 8]
add rcx, 0x10
cmp qword [rcx + 0x18], 0x10
jb 0x140027f7d
mov rcx, qword [rcx]
mov qword [rsp + 0x70], rcx
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x140027fb1
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rdx], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movups xmmword [rdx + 0x10], xmm1
movaps xmm0, xmmword [rsp + 0x70]
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm2
add qword [r15 + 8], 0x40
jmp 0x140027fbe
lea r8, [rsp + 0x50]
mov rcx, r15
call fcn.1400204a0
xor eax, eax
mov qword [rbp + 0x180], rax
mov dword [rbp + 0x188], eax
lea r9d, [rax + 0x40]
lea r8, [0x1400604f4]
lea edx, [rax + 0xc]
lea rcx, [rbp + 0x180]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xa8], rsi
lea rax, [rbp + 0x180]
mov rdi, r14
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140028010
cmp rdi, r13
ja 0x14002873f
cmp rdi, 0x10
jae 0x14002805a
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov r8, rdi
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x90]
call fcn.14002fe20
mov byte [rbp + rdi + 0x90], 0
jmp 0x1400280b5
mov rsi, rdi
or rsi, 0xf
cmp rsi, r13
jbe 0x14002806b
mov rsi, r13
jmp 0x140028078
cmp rsi, 0x16
mov eax, socket
cmovb rsi, rax
lea rdx, [rsi + 1]
call fcn.140002020
mov rbx, rax
mov qword [rbp + 0x90], rax
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], rsi
mov r8, rdi
lea rdx, [rbp + 0x180]
mov rcx, rax
call fcn.14002fe20
mov byte [rbx + rdi], 0
lea rbx, [r15 + 0x18]
xor esi, esi
lea rdx, [rbp + 0x90]
mov rcx, rbx
call fcn.140020060
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x140028106
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028101
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028745
call fcn.14002a1e8
mov qword [rbp - 0x68], 0
mov qword [rbp - 0x58], 0
mov qword [rbp - 0x48], rsi
xorps xmm2, xmm2
movdqa xmmword [rbp - 0x40], xmm2
mov qword [rbp - 0x70], 0x40
lea rax, str.chc_sversion
mov qword [rbp - 0x60], rax
mov rax, qword [rbx]
mov rcx, qword [rax + 8]
add rcx, 0x10
cmp qword [rcx + 0x18], 0x10
jb 0x14002814a
mov rcx, qword [rcx]
mov qword [rbp - 0x50], rcx
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x14002817a
movaps xmm0, xmmword [rbp - 0x70]
movups xmmword [rdx], xmm0
movaps xmm1, xmmword [rbp - 0x60]
movups xmmword [rdx + 0x10], xmm1
movaps xmm0, xmmword [rbp - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm2
add qword [r15 + 8], 0x40
jmp 0x140028186
lea r8, [rbp - 0x70]
mov rcx, r15
call fcn.1400204a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rsp + 0x30], r12
movabs rbx, 0x700000000
cmp r12, rbx
jg 0x1400281fb
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x110]
call fcn.14003dbf4
test eax, eax
jne 0x1400281fb
lea r9, [rbp + 0x110]
lea r8, str._Y__m__d__H:_M:_S
lea edx, [rax + 0x20]
lea rcx, [rbp + 0x1b0]
call fcn.14003e000
test rax, rax
je 0x1400281fb
xor r9d, r9d
lea r8, [rbp + 0x1b0]
lea rdx, str.chc_gmdatetime
mov rcx, r15
call fcn.14001f260
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rsp + 0x38], r12
cmp r12, rbx
jg 0x140028266
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x138]
call fcn.14003d908
test eax, eax
jne 0x140028266
lea r9, [rbp + 0x138]
lea r8, str._Y__m__d__H:_M:_S
lea edx, [rax + 0x20]
lea rcx, [rbp + 0x1d0]
call fcn.14003e000
test rax, rax
je 0x140028266
xor r9d, r9d
lea r8, [rbp + 0x1d0]
lea rdx, str.chc_datetime
mov rcx, r15
call fcn.14001f260
lea r8, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0x10
cmovae r8, qword [rbp + 0xf0]
mov r9b, 1
lea rdx, [0x1400635c0]
mov rcx, r15
call fcn.14001f260
mov r15, rax
xor eax, eax
mov qword [rbp + 0x190], rax
mov dword [rbp + 0x198], eax
xor r9d, r9d
lea r8, [0x1400604f4]
lea edx, [rax + 0xc]
lea rcx, [rbp + 0x190]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], rsi
lea rax, [rbp + 0x190]
mov rdi, r14
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400282e0
cmp rdi, r13
ja 0x14002874b
cmp rdi, 0x10
jae 0x14002832a
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], reloc.WS2_32.dll_ntohs
mov r8, rdi
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0xb0]
call fcn.14002fe20
mov byte [rbp + rdi + 0xb0], 0
jmp 0x140028381
mov rsi, rdi
or rsi, 0xf
cmp rsi, r13
jbe 0x14002833b
mov rsi, r13
jmp 0x140028348
cmp rsi, 0x16
mov eax, socket
cmovb rsi, rax
lea rdx, [rsi + 1]
call fcn.140002020
mov rbx, rax
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], rsi
mov r8, rdi
lea rdx, [rbp + 0x190]
mov rcx, rax
call fcn.14002fe20
mov byte [rbx + rdi], 0
xor esi, esi
lea rdx, [rbp + 0xb0]
lea rcx, [r15 + 0x18]
call fcn.140020060
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x1400283d3
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400283ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028751
call fcn.14002a1e8
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x18], 1
mov qword [rbp - 8], rsi
xorps xmm2, xmm2
movdqa xmmword [rbp], xmm2
mov qword [rbp - 0x30], 0x40
lea rax, str.sessionid
mov qword [rbp - 0x20], rax
mov rax, qword [r15 + 0x18]
mov rcx, qword [rax + 8]
add rcx, 0x10
cmp qword [rcx + 0x18], 0x10
jb 0x140028418
mov rcx, qword [rcx]
mov qword [rbp - 0x10], rcx
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x140028448
movaps xmm0, xmmword [rbp - 0x30]
movups xmmword [rdx], xmm0
movaps xmm1, xmmword [rbp - 0x20]
movups xmmword [rdx + 0x10], xmm1
movaps xmm0, xmmword [rbp - 0x10]
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm2
add qword [r15 + 8], 0x40
jmp 0x140028454
lea r8, [rbp - 0x30]
mov rcx, r15
call fcn.1400204a0
xor eax, eax
mov qword [rbp + 0x1a0], rax
mov dword [rbp + 0x1a8], eax
lea r9d, [rax + 1]
lea r8, [0x1400604f4]
lea edx, [rax + 0xc]
lea rcx, [rbp + 0x1a0]
call fcn.14000ccd0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], rsi
lea rax, [rbp + 0x1a0]
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1400284a0
cmp r14, r13
ja 0x140028757
cmp r14, 0x10
jae 0x1400284ec
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov r8, r14
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14002fe20
mov byte [rbp + r14 + 0xd0], 0
jmp 0x140028540
mov rax, r14
or rax, 0xf
cmp rax, r13
ja 0x140028508
mov r13, rax
cmp rax, 0x16
mov eax, socket
cmovb r13, rax
lea rdx, [r13 + 1]
call fcn.140002020
mov rbx, rax
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], r13
mov r8, r14
lea rdx, [rbp + 0x1a0]
mov rcx, rax
call fcn.14002fe20
mov byte [rbx + r14], 0
lea rdx, [rbp + 0xd0]
lea rcx, [r15 + 0x18]
call fcn.140020060
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x140028592
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002858d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002875d
call fcn.14002a1e8
mov qword [rbp + 0x18], 0
mov qword [rbp + 0x28], 1
mov qword [rbp + 0x38], rsi
xorps xmm2, xmm2
movdqa xmmword [rbp + 0x40], xmm2
mov qword [rbp + 0x10], 0x40
lea rax, str.clientcount
mov qword [rbp + 0x20], rax
mov rax, qword [r15 + 0x18]
mov rcx, qword [rax + 8]
add rcx, 0x10
cmp qword [rcx + 0x18], 0x10
jb 0x1400285d7
mov rcx, qword [rcx]
mov qword [rbp + 0x30], rcx
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x140028607
movaps xmm0, xmmword [rbp + 0x10]
movups xmmword [rdx], xmm0
movaps xmm1, xmmword [rbp + 0x20]
movups xmmword [rdx + 0x10], xmm1
movaps xmm0, xmmword [rbp + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm2
add qword [r15 + 8], 0x40
jmp 0x140028613
lea r8, [rbp + 0x10]
mov rcx, r15
call fcn.1400204a0
lea r8, [rbp + 0x50]
cmp qword [rbp + 0x68], 0x10
cmovae r8, qword [rbp + 0x50]
mov r9b, 1
lea rdx, str.attributes
mov rcx, r15
call fcn.14001f260
mov rdi, qword [rsp + 0x40]
lea rdx, [rdi + 0x140]
mov rcx, rdi
call fcn.140020700
lea rdx, [rdi + 0x120]
cmp qword [rdx + 0x18], 8
jb 0x140028658
mov rdx, qword [rdx]
lea r8, str.ESET_Diagnostic_file
lea rcx, [rdi + 0x140]
call fcn.14001f3b0
mov bl, 1
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x1400286a8
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400286a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028763
call fcn.14002a1e8
movdqa xmm0, xmmword [0x140063740]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
jmp 0x1400286bd
xor bl, bl
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x1400286fa
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400286f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002872d
call fcn.14002a1e8
movzx eax, bl
mov rcx, qword [rbp + 0x580]
xor rcx, rsp
call fcn.140029f00
lea r11, [rsp + 0x690]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140032848
nop
call fcn.140003f30
nop
call fcn.140032848
int3
call fcn.140003f30
int3
call fcn.140032848
int3
call fcn.140003f30
int3
call fcn.140032848
int3
call fcn.140003f30
int3
call fcn.140032848
nop
call fcn.140032848
int3