Function at 0x140088b30
Capabilities:
Authenticate hmac
Create process on windows
Delete file
Encode data using xor
Self delete

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x488]
sub rsp, 0x560
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x140118180]
xor rax, rsp
mov qword [rbp + 0x440], rax
xor r15d, r15d
mov dword [rsp + 0x40], r15d
lea rdx, [0x1401a31b0]
lea rcx, [rbp + 0x178]
call fcn.1400204f0
nop
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1401b0390], eax
jle 0x140088bd0
lea rcx, [0x1401b0390]
call fcn.1400e2470
cmp dword [0x1401b0390], 0xffffffff
jne 0x140088bd0
lea rcx, [0x1400e84d0]
call fcn.1400e2374
lea rcx, [0x1401b0390]
call fcn.1400e2404
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x120], xmm1
mov qword [rbp + 0x130], r15
mov rcx, qword [0x1401b0168]
mov rdx, qword [0x1401b0170]
cmp rcx, rdx
je 0x140088c0f
lea r8, [0x1401b0168]
call fcn.140020f70
mov rax, qword [0x1401b0168]
mov qword [0x1401b0170], rax
mov rdi, qword [rbp + 0x188]
lea rbx, [rbp + 0x178]
cmp qword [rbp + 0x190], 0xf
cmova rbx, qword [rbp + 0x178]
call fcn.1400e181c
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdi
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rbp + 0x138]
call fcn.140024de0
mov edi, 0x60000
mov dword [rsp + 0x40], edi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x100]
call fcn.14008ab20
test eax, eax
jne 0x14008a70b
mov rdx, qword [rbp + 0x150]
cmp rdx, 7
jbe 0x140088cc7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140088cc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140088cc2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2394
movdqa xmm0, xmmword [0x140103720]
movdqu xmmword [rbp + 0x148], xmm0
mov word [rbp + 0x138], r15w
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x140088d04
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x108]
mov edi, dword [rsp + 0x40]
movaps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x110], xmm0
test rcx, rcx
je 0x140088d27
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x108]
mov edi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d8], xmm1
mov r13, 0xffffffffffffffff
test rcx, rcx
je 0x140088d78
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140088d74
mov rbx, qword [rbp + 0x108]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140088d74
mov rcx, qword [rbp + 0x108]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov edi, dword [rsp + 0x40]
mov rsi, qword [rbp + 0x110]
lea r14, str..config
test rsi, rsi
je 0x1400892f8
lea rdx, [rbp + 0x70]
mov rcx, rsi
call fcn.1400885e0
mov rax, qword [rbp + 0x70]
mov edx, dword [rbp + 0x78]
test edx, edx
je 0x140088db5
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x14008a721
cmp eax, 2
jne 0x140088f18
call fcn.1400e181c
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], 7
lea r8, [rbp + 0xb0]
mov edx, eax
lea rcx, [rbp + 0x50]
call fcn.140024de0
or edi, 0x60
or edi, 1
mov dword [rsp + 0x40], edi
lea rcx, [rsi + 0x20]
cmp qword [rsi + 0x38], 7
jbe 0x140088e00
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x30]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.140087f10
cmp rax, rdx
je 0x140088e4e
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140088e24
cmp cx, 0x2f
jne 0x140088e2d
add rax, 2
cmp rax, rdx
jne 0x140088e15
cmp rax, rdx
je 0x140088e4e
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x140088e4e
cmp cx, 0x2f
je 0x140088e4e
mov rbx, r8
cmp rax, r8
jne 0x140088e32
mov r8d, Ordinal_60
mov rcx, rbx
call fcn.1400e2010
cmp rbx, rax
je 0x140088e9f
lea rdx, [rax - 2]
cmp rbx, rdx
je 0x140088e9f
cmp word [rdx], 0x2e
jne 0x140088e81
lea rcx, [rdx - 2]
cmp rbx, rcx
jne 0x140088ea2
cmp word [rcx], 0x2e
jne 0x140088ea2
jmp 0x140088e9f
sub rdx, 2
cmp rbx, rdx
je 0x140088e9f
nop word [rax + rax]
cmp word [rdx], 0x2e
je 0x140088ea2
sub rdx, 2
cmp rbx, rdx
jne 0x140088e90
mov rdx, rax
sub rax, rdx
sar rax, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], r15
mov r8, rax
lea rcx, [rbp + 0x10]
call fcn.1400323b0
or edi, 0x382
mov dword [rsp + 0x40], edi
lea rax, [rbp + 0x50]
mov rbx, qword [rbp + 0x68]
cmp rbx, 7
cmova rax, qword [rbp + 0x50]
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0xa8], rax
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x10]
call fcn.140088250
test eax, eax
jne 0x140088f1c
mov r14b, 1
jmp 0x140088f1f
mov rbx, qword [rbp + 0x68]
xor r14b, r14b
test dil, 2
je 0x140088f81
and edi, 0xfffffffd
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x28]
cmp rdx, 7
jbe 0x140088f70
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140088f67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400892dc
call fcn.1400e2394
mov rbx, qword [rbp + 0x68]
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], r15w
test dil, 1
je 0x140088fca
and edi, 0xfffffffe
mov dword [rsp + 0x40], edi
cmp rbx, 7
jbe 0x140088fca
lea rdx, [rbx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140088fc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400892e3
call fcn.1400e2394
test r14b, r14b
je 0x140089220
lea rcx, [rsi + 0x20]
cmp qword [rsi + 0x38], 7
jbe 0x140088fe2
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x30]
lea rdx, [rcx + rax*2]
mov r10, rdx
call fcn.140087f10
cmp rax, rdx
je 0x14008903c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140089006
cmp cx, 0x2f
jne 0x14008900f
add rax, 2
cmp rax, rdx
jne 0x140088ff7
cmp rax, rdx
je 0x14008903c
nop dword [rax]
nop dword [rax + rax]
lea r8, [r10 - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14008903c
cmp cx, 0x2f
je 0x14008903c
mov r10, r8
cmp rax, r8
jne 0x140089020
sub rdx, r10
sar rdx, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], r15
mov r8, rdx
mov rdx, r10
lea rcx, [rbp + 0x30]
call fcn.1400323b0
or edi, 0x1c000
lea r15, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova r15, qword [rbp + 0x30]
mov r14, qword [rbp + 0x40]
call fcn.1400e181c
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], al
bts edi, 0xd
mov dword [rsp + 0x40], edi
test r14, r14
je 0x14008911b
cmp r14, 0x7fffffff
ja 0x14008a746
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call fcn.1400e188c
mov rbx, rax
mov qword [rsp + 0x68], rax
shr rax, 0x20
test eax, eax
jne 0x14008a73c
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp - 0x60]
call fcn.1400316e0
lea r9, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova r9, qword [rbp - 0x60]
mov dword [rsp + 0x20], ebx
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call fcn.1400e188c
mov qword [rsp + 0x68], rax
shr rax, 0x20
test eax, eax
jne 0x14008a732
btr edi, 0xd
or edi, 0x1c00
mov dword [rsp + 0x40], edi
mov rdx, qword [0x1401b0170]
cmp rdx, qword [0x1401b0178]
je 0x140089174
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
xor r15d, r15d
mov qword [rdx + 0x10], r15
mov qword [rdx + 0x18], r15
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x50], r15
mov edx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x48], rdx
mov byte [rbp - 0x60], r15b
add qword [0x1401b0170], 0x20
jmp 0x14008918b
lea r8, [rbp - 0x60]
lea rcx, [0x1401b0168]
call fcn.14008aeb0
mov rdx, qword [rbp - 0x48]
xor r15d, r15d
cmp rdx, 0xf
jbe 0x1400891c2
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400891bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400892ea
call fcn.1400e2394
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x140089220
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008920d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400892f1
call fcn.1400e2394
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1f0]
mov rcx, qword [rsi + 0x40]
call fcn.1400e1af4
cmp eax, 0x12
je 0x140089277
test eax, eax
jne 0x14008a751
cmp word [rbp + 0x21c], 0x2e
jne 0x140089263
movzx eax, word [rbp + 0x21e]
test ax, ax
je 0x140089220
cmp ax, 0x2e
jne 0x140089263
cmp word [rbp + 0x220], 0
je 0x140089220
lea rdx, [rbp + 0x1f0]
mov rcx, rsi
call fcn.1400888f0
jmp 0x140088d7f
mov rsi, r15
mov qword [rbp + 0x110], r15
mov rbx, qword [rbp + 0x118]
mov qword [rbp + 0x118], r15
test rbx, rbx
lea r14, str..config
je 0x140088d86
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400892c1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
je 0x1400892ca
mov edi, dword [rsp + 0x40]
jmp 0x140088d78
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov edi, dword [rsp + 0x40]
jmp 0x140088d78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x118]
test rcx, rcx
je 0x14008933b
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14008933b
mov rbx, qword [rbp + 0x118]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14008933b
mov rcx, qword [rbp + 0x118]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x14008937d
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14008937d
mov rbx, qword [rbp + 0x108]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14008937d
mov rcx, qword [rbp + 0x108]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdi, qword [0x1401b0170]
mov rbx, qword [0x1401b0168]
cmp rbx, rdi
je 0x1400893f1
mov rdx, qword [rbp + 0x128]
nop word [rax + rax]
mov rax, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400893ad
mov rax, qword [rbx]
mov qword [rbp - 0x40], rax
cmp rdx, qword [rbp + 0x130]
je 0x1400893d1
mov qword [rdx], rax
mov rdx, qword [rbp + 0x128]
add rdx, 8
mov qword [rbp + 0x128], rdx
jmp 0x1400893e8
lea r8, [rbp - 0x40]
lea rcx, [rbp + 0x120]
call fcn.14008ad10
mov rdx, qword [rbp + 0x128]
add rbx, 0x20
cmp rbx, rdi
jne 0x1400893a0
mov rcx, qword [0x1401ae248]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
xorps xmm7, xmm7
cmp byte [rax + 0xbb], 0
jne 0x140089456
lea rdx, str.Configurations
mov r8, rdx
cmp rdx, 0xffffffffffffffff
jae 0x14008944e
nop dword [rax]
movzx ecx, byte [r8]
test cl, cl
je 0x14008944e
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x140089445
cmp byte [rax], cl
je 0x14008944e
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x140089430
movaps xmm3, xmm7
call fcn.14006e170
mov dword [rbp - 0x38], 0x42fa0000
mov dword [rbp - 0x34], 0x41c80000
lea rdx, [rbp - 0x38]
lea rcx, str.Load_Selected
call fcn.14006bb10
test al, al
je 0x140089564
movsxd rcx, dword [0x1401a3140]
test ecx, ecx
js 0x140089564
mov rax, qword [0x1401b0170]
mov r8, qword [0x1401b0168]
sub rax, r8
sar rax, 5
mov rdx, rcx
cmp rcx, rax
jae 0x140089564
shl rdx, 5
add rdx, r8
lea rcx, [rbp + 0x158]
call fcn.1400204f0
nop
lea rdx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rdx, qword [rbp + 0x158]
mov r8, qword [rbp + 0x168]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, [0x140020e30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x158]
call fcn.14008cf70
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x14008954b
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140089546
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140089546
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2394
mov qword [rbp + 0x168], r15
mov qword [rbp + 0x170], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x158], 0
mov rax, qword [0x1401ae248]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400895c6
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov dword [rbp - 0x30], 0x42fa0000
mov dword [rbp - 0x2c], 0x41c80000
lea rdx, [rbp - 0x30]
lea rcx, str.Save_Selected
call fcn.14006bb10
test al, al
je 0x140089694
movsxd rcx, dword [0x1401a3140]
test ecx, ecx
js 0x140089694
mov rax, qword [0x1401b0170]
mov r8, qword [0x1401b0168]
sub rax, r8
sar rax, 5
mov rdx, rcx
cmp rcx, rax
jae 0x140089694
shl rdx, 5
add rdx, r8
lea rcx, [rbp + 0x1b8]
call fcn.1400204f0
nop
lea rcx, [rbp + 0x1b8]
call fcn.14008b1c0
nop
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 0xf
jbe 0x14008967d
inc rdx
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140089678
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140089678
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2394
movdqa xmm0, xmmword [0x140103740]
movdqu xmmword [rbp + 0x1c8], xmm0
mov byte [rbp + 0x1b8], 0
mov rax, qword [0x1401ae248]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400896f6
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov dword [rbp - 0x28], 0x42fa0000
mov dword [rbp - 0x24], 0x41c80000
lea rdx, [rbp - 0x28]
lea rcx, str.Delete_Selected
call fcn.14006bb10
test al, al
je 0x1400897b9
movsxd rax, dword [0x1401a3140]
test eax, eax
js 0x1400897b9
mov rcx, qword [0x1401b0170]
sub rcx, qword [0x1401b0168]
sar rcx, 5
cmp rax, rcx
jae 0x1400897b9
mov rsi, qword [0x1401ae248]
mov rbx, qword [rsi + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.140035610
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140089791
lea r8, str.reallyDelete
mov edx, ntohl
mov ecx, eax
call fcn.14004eeb0
test byte [rsi + 0x5ce4], 4
je 0x1400897b0
mov r8d, edi
lea rdx, str.reallyDelete
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14004eae0
xor edx, edx
mov ecx, edi
call fcn.140047950
mov rbx, qword [0x1401ae248]
mov eax, dword [rbx + 0x48b0]
cmp dword [rbx + 0x48a0], eax
jg 0x1400897da
mov dword [rbx + 0x47d0], r15d
jmp 0x140089c4a
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.140035610
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140089822
lea r8, str.reallyDelete
mov edx, ntohl
mov ecx, eax
call fcn.14004eeb0
mov ecx, edi
call fcn.140047f90
test al, al
je 0x140089c4a
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, str.Sure_ah_
call fcn.14006a980
mov qword [rbp - 0x20], 0x42b40000
lea rdx, [rbp - 0x20]
lea rcx, [0x140101858]
call fcn.14006bb10
test al, al
je 0x140089864
call fcn.140047eb0
mov rax, qword [0x1401ae248]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400898c6
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov qword [rbp - 0x18], 0x42b40000
lea rdx, [rbp - 0x18]
lea rcx, [0x140102620]
call fcn.14006bb10
test al, al
je 0x140089bf3
movsxd rdx, dword [0x1401a3140]
shl rdx, 5
add rdx, qword [0x1401b0168]
lea rcx, [rbp + 0x158]
call fcn.1400204f0
nop
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x188]
sub rax, rcx
cmp rax, 1
jb 0x14008a705
lea r9, [rbp + 0x178]
cmp qword [rbp + 0x190], 0xf
cmova r9, qword [rbp + 0x178]
mov qword [rsp + 0x30], 1
lea rax, [0x140102648]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x178]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0xc0]
call fcn.1400049b0
nop
lea rdx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rdx, qword [rbp + 0x158]
mov r8, qword [rbp + 0x168]
lea rcx, [rbp + 0xc0]
call fcn.1400061f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x138], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x148], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140089a14
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140089a0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140089a0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2394
movdqa xmm0, xmmword [0x140103740]
movdqu xmmword [rbp + 0xd0], xmm0
mov byte [rbp + 0xc0], 0
lea rcx, [rbp + 0x138]
cmp qword [rbp + 0x150], 0xf
cmova rcx, qword [rbp + 0x138]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x140089b47
movsxd rbx, dword [0x1401a3140]
shl rbx, 5
add rbx, qword [0x1401b0168]
mov rsi, qword [0x1401b0170]
lea rdi, [rbx + 0x20]
cmp rdi, rsi
je 0x140089af1
cmp rbx, rdi
je 0x140089add
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140089ab1
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140089aac
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140089b8c
mov rcx, r8
call fcn.1400e2394
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
movups xmm0, xmmword [rdi]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
add rbx, 0x20
add rdi, 0x20
cmp rdi, rsi
jne 0x140089a72
mov rsi, qword [0x1401b0170]
mov rdx, qword [rsi - 8]
cmp rdx, 0xf
jbe 0x140089b28
mov rcx, qword [rsi - 0x20]
inc rdx
cmp rdx, 0x1000
jb 0x140089b23
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140089b8c
mov rcx, r8
call fcn.1400e2394
mov qword [rsi - 0x10], r15
mov qword [rsi - 8], 0xf
mov byte [rsi - 0x20], 0
sub qword [0x1401b0170], 0x20
mov dword [0x1401a3140], r13d
call fcn.140047eb0
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x140089b98
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140089b93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140089b93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400e2394
movdqa xmm0, xmmword [0x140103740]
movdqu xmmword [rbp + 0x148], xmm0
mov byte [rbp + 0x138], 0
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x140089bf3
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140089bee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140089bee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2394
mov rbx, qword [0x1401ae248]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x140089c2e
cmp byte [rbx + 0x4951], 0
je 0x140089c2e
cmp dword [rbx + 0x4910], 0
jne 0x140089c2e
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x140089c3e
mov byte [rbx + 0x3e5e], 1
call fcn.140042f50
mov byte [rbx + 0x3e5e], 0
mov rax, qword [0x1401ae248]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x140089cac
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov eax, dword [0x140102698]
mov dword [rbp - 0x78], eax
movzx eax, byte [0x14010269c]
movsd xmm0, qword [str._VGPB]
mov byte [rbp - 0x74], al
movsd qword [rbp - 0x80], xmm0
mov dword [rbp - 0x6c], 0x41c80000
mov dword [rbp - 0x70], 0x42fa0000
mov r8d, r15d
mov ebx, dword [reloc.WS2_32.dll_accept]
cmp ebx, 2
jl 0x140089ded
movdqa xmm4, xmmword [0x140103b70]
movdqa xmm2, xmmword [0x1401037a0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140103800]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140103a00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140103a20]
movd xmm0, dword [str._VGPB]
xorps xmm2, xmm0
movd dword [rbp - 0x80], xmm2
movdqa xmm3, xmmword [0x1401037c0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140103800]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140103a00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140103a20]
movd xmm0, dword [rbp - 0x7c]
xorps xmm2, xmm0
movd dword [rbp - 0x7c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140089e00
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x80]
call fcn.14006bb10
test al, al
je 0x140089fef
movsd xmm0, qword [0x1401026a8]
movsd qword [rbp + 0x100], xmm0
mov eax, dword [0x1401026b0]
mov dword [rbp + 0x108], eax
movzx eax, word [0x1401026b4]
mov word [rbp + 0x10c], ax
cmp byte [0x1401026b5], 0
je 0x140089fe3
mov r8d, r15d
cmp ebx, 2
jl 0x140089f9b
movdqa xmm4, xmmword [0x140103b70]
movdqa xmm2, xmmword [0x1401037a0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140103800]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140103a00]
packuswb xmm2, xmm2
mov eax, dword [0x140103a20]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1401026a8]
xorps xmm2, xmm0
movd dword [rbp + 0x100], xmm2
movdqa xmm3, xmmword [0x1401037c0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140103800]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140103a00]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x104]
xorps xmm2, xmm1
movd dword [rbp + 0x104], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x100]
add r9, rax
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x140089fb0
lea rcx, [rbp + 0x100]
call fcn.1400478b0
movsd xmm0, qword [0x1401026a8]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x1401026b0]
mov dword [rsp + 0x78], eax
movzx eax, word [0x1401026b4]
mov word [rsp + 0x7c], ax
cmp byte [0x1401026b5], 0
je 0x14008a183
mov r8d, r15d
cmp ebx, 2
jl 0x14008a136
movdqa xmm4, xmmword [0x140103b70]
movdqa xmm2, xmmword [0x1401037a0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140103800]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140103a00]
packuswb xmm2, xmm2
mov eax, dword [0x140103a20]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1401026a8]
xorps xmm2, xmm0
movd dword [rsp + 0x70], xmm2
movdqa xmm3, xmmword [0x1401037c0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140103800]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140103a00]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x74]
xorps xmm2, xmm1
movd dword [rsp + 0x74], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x14008a150
mov rbx, qword [0x1401ae248]
mov eax, dword [rbx + 0x48b0]
cmp dword [rbx + 0x48a0], eax
jg 0x14008a1a4
mov dword [rbx + 0x47d0], r15d
jmp 0x14008a38c
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.140035610
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x14008a1e8
lea r8, [rsp + 0x70]
mov edx, ntohl
mov ecx, eax
call fcn.14004eeb0
mov ecx, edi
call fcn.140047f90
test al, al
je 0x14008a38c
movsd xmm0, qword [str.aFFP]
movsd qword [rsp + 0x50], xmm0
movzx eax, byte [0x1401026c0]
mov byte [rsp + 0x50], 0x53
xor byte [rsp + 0x51], 0x33
xor byte [rsp + 0x52], 0x34
xor byte [rsp + 0x53], 0x35
xor byte [rsp + 0x54], 0x36
xor byte [rsp + 0x55], 0x37
xor byte [rsp + 0x56], 0x38
xor byte [rsp + 0x57], 0x39
xor al, 0x3a
mov byte [rsp + 0x58], al
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [rsp + 0x50]
call fcn.14006a980
mov qword [rbp - 0x10], 0x42b40000
movzx eax, word [0x1401026a0]
mov word [rsp + 0x48], ax
movzx eax, byte [0x1401026a2]
mov byte [rsp + 0x48], Ordinal_79
xor byte [rsp + 0x49], 0x33
xor al, 0x34
mov byte [rsp + 0x4a], al
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x48]
call fcn.14006bb10
test al, al
je 0x14008a28c
call fcn.140047eb0
mov rax, qword [0x1401ae248]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x14008a2ee
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
movzx eax, word [0x1401026f0]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1401026f2]
mov qword [rbp - 0x68], 0x42b40000
mov byte [rsp + 0x44], 0x59
xor byte [rsp + 0x45], 0x33
xor al, 0x34
mov byte [rsp + 0x46], al
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x44]
call fcn.14006bb10
test al, al
je 0x14008a335
call fcn.14008a760
call fcn.140047eb0
mov rbx, qword [0x1401ae248]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x14008a370
cmp byte [rbx + 0x4951], 0
je 0x14008a370
cmp dword [rbx + 0x4910], 0
jne 0x14008a370
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x14008a380
mov byte [rbx + 0x3e5e], 1
call fcn.140042f50
mov byte [rbx + 0x3e5e], 0
mov rax, qword [rbp + 0x128]
mov r9, qword [rbp + 0x120]
sub rax, r9
sar rax, 3
mov dword [rsp + 0x20], eax
call fcn.14007c320
mov rcx, qword [0x1401ae248]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
cmp byte [rax + 0xbb], 0
jne 0x14008a406
lea rdx, str.Create__Save_New_Config
mov r8, rdx
cmp rdx, 0xffffffffffffffff
jae 0x14008a3fe
nop
movzx ecx, byte [r8]
test cl, cl
je 0x14008a3fe
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x14008a3f5
cmp byte [rax], cl
je 0x14008a3fe
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x14008a3e0
movaps xmm3, xmm7
call fcn.14006e170
mov qword [rbp - 8], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea rbx, [0x1401a3040]
mov r8, rbx
xor edx, edx
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140073830
mov dword [rbp], 0x42fa0000
mov dword [rbp + 4], 0x41c80000
lea rdx, [rbp]
lea rcx, str.Create_Config
call fcn.14006bb10
test al, al
je 0x14008a597
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
nop
inc r13
cmp byte [rbx + r13], 0
jne 0x14008a480
mov r8, r13
mov rdx, rbx
lea rcx, [rbp + 0x80]
call fcn.140004b50
nop
mov r8d, 7
mov rdx, r14
lea rcx, [rbp + 0x80]
call fcn.1400061f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x198], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1a8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x198], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1a8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14008a52f
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008a52a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008a52a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2394
movdqa xmm0, xmmword [0x140103740]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
lea rcx, [rbp + 0x198]
call fcn.14008b1c0
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x14008a597
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008a592
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008a592
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2394
mov dword [rbp + 8], 0x42fa0000
mov dword [rbp + 0xc], 0x41c80000
lea rdx, [rbp + 8]
lea rcx, str.Open_Folder
call fcn.14006bb10
test al, al
je 0x14008a5ef
lea r8, [rbp + 0x178]
cmp qword [rbp + 0x190], 0xf
cmova r8, qword [rbp + 0x178]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, [0x140102428]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8, qword [0x1401ae248]
mov rdx, qword [r8 + 0x3ef8]
cmp byte [rdx + 0xbb], 0
jne 0x14008a62b
mov r8, qword [r8 + 0x4bc0]
test r8, r8
je 0x14008a62b
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
add rcx, qword [r8 + 8]
test byte [rcx + 4], 8
jne 0x14008a62b
dec dword [rdx + 0xf0]
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x14008a68c
mov rax, qword [rbp + 0x130]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008a675
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008a675
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2394
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r15
mov rdx, qword [rbp + 0x190]
cmp rdx, 0xf
jbe 0x14008a6d0
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008a6cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008a6cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2394
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.1400e20f0
lea r11, [rsp + 0x560]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400048b0
nop
lea r8, [rbp + 0x138]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140025680
nop
lea r8, [rsi + 0x20]
lea rcx, str.directory_entry::status
call fcn.140025680
nop
mov ecx, dword [rsp + 0x6c]
call fcn.1400246e0
int3
mov ecx, dword [rsp + 0x6c]
call fcn.1400246e0
int3
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.140024410
nop
mov edx, eax
lea rcx, str.directory_iterator::operator
call fcn.140088580
int3