Function at 0x14007efd0
Capabilities:
Check if file exists
Create directory
Get file attributes
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7f8]
sub rsp, 0x8f8
mov rax, qword [0x1400c1008]
xor rax, rsp
mov qword [rbp + 0x7e0], rax
xor eax, eax
mov qword [rsp + 0x50], r8
mov rbx, r9
mov qword [rsp + 0x48], rcx
mov rsi, r8
mov qword [rsp + 0x58], rbx
mov r13d, edx
mov dword [rbp + 0x90], eax
mov rdi, rcx
mov word [rbp + 0x94], ax
xorps xmm0, xmm0
mov word [rsp + 0x68], 0xa0d
xor r14d, r14d
mov byte [rsp + 0x6a], 0
xor edx, edx
mov qword [rsp + 0x70], r14
mov r8d, 0x1fe
mov qword [rsp + 0x60], r14
lea rcx, [rbp + 0x5e0]
movups xmmword [rbp + 0x80], xmm0
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0xe0]
mov r8d, 0x1fe
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x3e0]
mov r8d, 0x1fe
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
lea rcx, [rbp + 0x2e0]
xor eax, eax
xor edx, edx
mov r8d, 0xff
mov qword [rbp + 0xd0], rax
movups xmmword [rbp + 0xb0], xmm0
mov dword [rbp + 0xd8], eax
movups xmmword [rbp + 0xc0], xmm0
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov qword [rsp + 0x40], r14
mov dword [rbp + 0xa8], eax
xorps xmm0, xmm0
mov word [rbp + 0xac], ax
mov r12d, r14d
mov dword [rsp + 0x6c], r14d
movups xmmword [rbp + 0x98], xmm0
test rsi, rsi
je 0x14007f152
test rbx, rbx
je 0x14007f152
cmp r13d, 0x200
ja 0x14007f152
lea r15, [0x140000000]
test rdi, rdi
je 0x14007f1e8
mov rax, rdi
mov ebx, r14d
nop word [rax + rax]
cmp byte [rax], r12b
je 0x14007f1ae
cmp byte [rax + 1], r12b
je 0x14007f1a2
cmp byte [rax + 2], r12b
je 0x14007f19c
cmp byte [rax + 3], r12b
je 0x14007f196
cmp byte [rax + 4], r12b
je 0x14007f190
add rax, 5
add rbx, 5
cmp rbx, 0xff
jb 0x14007f120
mov edi, 0x10000002
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, 0x10000000
mov rcx, qword [rbp + 0x7e0]
xor rcx, rsp
call fcn.140001ea0
add rsp, 0x8f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
add rbx, 4
jmp 0x14007f1a5
add rbx, 3
jmp 0x14007f1a5
add rbx, 2
jmp 0x14007f1a5
inc rbx
cmp rbx, 0xff
jae 0x14007f152
test rbx, rbx
je 0x14007f152
mov r8d, r14d
test ebx, ebx
jle 0x14007f1fd
mov rdx, rdi
nop dword [rax]
mov rcx, r14
cmp rcx, 0x46
jge 0x14007f152
movzx eax, byte [rcx + r15 + 0xb64a0]
cmp byte [rdx], al
je 0x14007f1db
inc rcx
jmp 0x14007f1c3
inc r8d
inc rdx
cmp r8d, ebx
jl 0x14007f1c0
jmp 0x14007f1fd
mov edx, reloc.WS2_32.dll_shutdown
lea rcx, str.anonymous_application
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov rbx, rax
mov edx, reloc.WS2_32.dll_setsockopt
lea rcx, str.C:productivity_link
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, 2
lea rcx, [0x1400f765c]
mov rdi, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, 2
lea rcx, [rax + rbx]
add rdi, rcx
lea rcx, [0x1400f764c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, 2
lea rcx, [0x1400f761c]
mov r14, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
add r14, 0x24
add r14, rax
add r14, rdi
cmp r14, 0xff
jae 0x14007f152
xor edi, edi
test r13d, r13d
je 0x14007f3c1
mov rdx, qword [rsi]
test rdx, rdx
je 0x14007f31e
mov rax, rdx
xor ebx, ebx
cmp byte [rax], r12b
je 0x14007f2da
cmp byte [rax + 1], r12b
je 0x14007f2ca
cmp byte [rax + 2], r12b
je 0x14007f2c4
cmp byte [rax + 3], r12b
je 0x14007f2be
cmp byte [rax + 4], r12b
je 0x14007f2b8
add rax, 5
add rbx, 5
cmp rbx, 0xff
jb 0x14007f285
jmp 0x14007f152
add rbx, 4
jmp 0x14007f2cd
add rbx, 3
jmp 0x14007f2cd
add rbx, 2
jmp 0x14007f2cd
inc rbx
cmp rbx, 0xff
jae 0x14007f152
test rbx, rbx
je 0x14007f152
xor r8d, r8d
test ebx, ebx
jle 0x14007f3a2
nop
xor eax, eax
cmp rax, 0x47
jge 0x14007f152
movzx ecx, byte [rax + r15 + 0xb64f0]
cmp byte [rdx], cl
je 0x14007f30e
inc rax
jmp 0x14007f2f2
inc r8d
inc rdx
cmp r8d, ebx
jl 0x14007f2f0
jmp 0x14007f3a2
mov edx, reloc.WS2_32.dll_send
lea rcx, str.anonymous_counter_
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, ntohs
lea rcx, str.4294967295
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, reloc.WS2_32.dll_shutdown
sub rdx, rax
je 0x14007f418
lfence
xor eax, eax
lea r8, [0x1400f75ec]
xorps xmm0, xmm0
mov dword [rbp + 0x90], eax
mov r9d, edi
mov word [rbp + 0x94], ax
lea rcx, [rbp + 0x80]
movups xmmword [rbp + 0x80], xmm0
call fcn.140001220
test eax, eax
js 0x14007f40e
mov edx, reloc.WS2_32.dll_shutdown
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
add rbx, rax
lea rax, [rbx + r14]
cmp rax, 0xff
jae 0x14007f152
inc edi
add rsi, 8
cmp edi, r13d
jb 0x14007f274
cmp dword [0x140199e04], r12d
lea r14, [0x14019e2e0]
jne 0x14007f476
xor edx, edx
mov r8d, 0x1e148
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
mov edx, 1
xor r9d, r9d
mov r8d, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov qword [0x14019e2e0], rax
test rax, rax
jne 0x14007f422
mov edi, 0x10000003
jmp 0x14007f157
mov edi, 0x10000016
jmp 0x14007f157
mov edi, 0x1000001f
jmp 0x14007f157
lea rcx, [0x1400f7620]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x14007f45e
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x14007f449
mov edi, 0x10000004
jmp 0x14007f157
cmp eax, 5
mov edi, 0x10000010
mov ecx, 0x10000006
cmove edi, ecx
jmp 0x14007f157
test al, 0x10
jne 0x14007f46c
mov edi, 0x10000005
jmp 0x14007f157
mov dword [0x140199e04], 1
mov rcx, qword [0x14019e2e0]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x14007f404
xor esi, esi
lea rax, [0x14019e2ec]
nop dword [rax]
mov r15d, 0x10000010
cmp dword [rax], r12d
je 0x14007f4c4
inc esi
add rax, 0x3020
cmp esi, 0xa
jb 0x14007f4a0
lea ebx, [r15 - 6]
xor r14d, r14d
jmp 0x140080451
mov rbx, qword [rsp + 0x58]
mov eax, esi
mov rcx, rbx
imul r12, rax, 0x3020
mov dword [r12 + r14 + 0xc], 1
call qword [sym.imp.RPCRT4.dll_UuidCreate]
test eax, eax
je 0x14007f51a
xor r14d, r14d
cmp eax, 0x720
jne 0x14007f501
mov r12, qword [rsp + 0x40]
mov ebx, 0x1000000c
jmp 0x140080451
cmp eax, 0x6cb
mov ebx, r14d
mov r12, r14
setne bl
add ebx, 0x1000000d
jmp 0x140080451
lea rax, [r14 + 0x1010]
add rax, r12
jne 0x14007f53a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], reloc.WS2_32.dll_shutdown
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
jmp 0x14007f540
movups xmm0, xmmword [rbx]
movups xmmword [rax], xmm0
lea rdx, [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.RPCRT4.dll_UuidToStringW]
test eax, eax
je 0x14007f56c
xor r14d, r14d
cmp eax, 0xe
mov ebx, r14d
mov r12d, r14d
setne bl
add ebx, 0x1000000e
jmp 0x140080451
cmp qword [rsp + 0x60], 0
jne 0x14007f584
mov r12, qword [rsp + 0x40]
mov ebx, r15d
xor r14d, r14d
jmp 0x140080451
mov r9d, reloc.WS2_32.dll_setsockopt
lea r8, [0x1400f75f0]
mov edx, 0xff
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov r9d, 4
lea r8, [0x1400f756c]
mov edx, 0xff
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x14007f5f9
mov r9, rbx
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r8d, 0xff
lea rdx, [rbp + 0x3e0]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
lea r8, [rbp + 0x3e0]
jmp 0x14007f600
lea r8, [0x1400f75c0]
mov r9, 0xffffffffffffffff
lea rcx, [rbp + 0xe0]
mov edx, 0xff
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov r9d, 4
lea r8, [0x1400f754c]
mov edx, 0xff
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov rcx, qword [rsp + 0x60]
mov edx, 0x24
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r8, qword [rsp + 0x60]
lea rcx, [rbp + 0xe0]
mov r9, rax
mov edx, 0xff
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov edx, 0xff
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0xe0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov r9d, 4
lea r8, [0x1400f7514]
mov edx, 0xff
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
xor edx, edx
lea rcx, [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14007f6f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12, qword [rsp + 0x40]
cmp eax, 0xb7
jne 0x14007f6e1
mov ebx, 0x10000008
xor r14d, r14d
jmp 0x140080451
cmp eax, 3
mov ebx, 0x10000007
mov ecx, 0x10000009
cmove ebx, ecx
xor r14d, r14d
jmp 0x140080451
xor edi, edi
test r13d, r13d
je 0x14007f8ee
lea rbx, [r14 + 0x1028]
mov r14, qword [rsp + 0x50]
sub r14, r12
lea rax, [0x14019f308]
add rbx, r12
sub r14, rax
xor edx, edx
lea rcx, [rbp + 0xe0]
mov r8d, 0x1fe
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x3e0]
mov r8d, 0x1fe
call sub.VCRUNTIME140.dll_memset
mov r9, qword [r14 + rbx]
test r9, r9
je 0x14007f777
mov r8d, 0xff
mov qword [rsp + 0x20], 0xffffffffffffffff
lea rdx, [rbp + 0x3e0]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
jmp 0x14007f80a
mov edx, reloc.WS2_32.dll_send
lea rcx, [0x1400f7598]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [0x1400f7570]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
xor eax, eax
lea rdx, [rbp + 0xb0]
xorps xmm0, xmm0
mov qword [rbp + 0xd0], rax
mov ecx, edi
mov dword [rbp + 0xd8], eax
movups xmmword [rbp + 0xb0], xmm0
lea r9d, [rax + 0xa]
lea r8d, [rax + 0x16]
movups xmmword [rbp + 0xc0], xmm0
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itow_s]
mov edx, reloc.WS2_32.dll_shutdown
lea rcx, [rbp + 0xb0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0xb0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov edx, 0xff
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0x5e0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov edx, 0xff
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0x3e0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
lea rcx, [rbp + 0xe0]
mov edx, 0xc0000000
mov dword [rsp + 0x20], 2
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbx + 0x1000], rax
cmp rax, 0xffffffffffffffff
je 0x14007f9b9
mov edx, 1
xor r9d, r9d
mov r8d, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov qword [rbx], rax
test rax, rax
je 0x14007f9a7
mov qword [rbx - 0x1018], 0xfffffffffffffffe
inc edi
add rbx, 8
cmp edi, r13d
jb 0x14007f720
mov rbx, qword [rsp + 0x48]
lea r14, [0x14019e2e0]
xor edx, edx
mov dword [r12 + r14 + 8], r13d
mov r8d, 0x1fe
lea rcx, [rbp + 0xe0]
call sub.VCRUNTIME140.dll_memset
mov edx, 0xff
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0x5e0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov edx, recv
lea rcx, [0x1400f7550]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, str.pl_config.ini
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
xor r14d, r14d
lea rcx, [rbp + 0xe0]
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0xc0000000
mov dword [rsp + 0x20], 2
lea r8d, [r14 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
jne 0x14007f9cb
mov ebx, 0x10000011
jmp 0x140080451
mov r12, qword [rsp + 0x40]
mov ebx, 0x10000014
xor r14d, r14d
jmp 0x140080451
mov r12, qword [rsp + 0x40]
mov ebx, 0x10000013
xor r14d, r14d
jmp 0x140080451
lea rcx, [rbp - 0x80]
mov edx, 0xff
test rbx, rbx
je 0x14007f9eb
mov r9, 0xffffffffffffffff
mov r8, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
jmp 0x14007fa0e
lea rax, [0x1400f7518]
mov r8, 0xffffffffffffffff
lea r9, [0x1400f74fc]
mov qword [rsp + 0x20], rax
call fcn.140001030
mov byte [rbp + 0x7e], r14b
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], r14b
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14007fa64
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, qword [rsp + 0x60]
lea rdx, [rbp - 0x80]
mov r8d, 0xff
mov qword [rsp + 0x20], 0xffffffffffffffff
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], r14b
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14007faee
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
lea r9, [rbp + 0x5e0]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r8d, 0xff
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], r14b
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14007fb7a
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9d, 0xa
lea rdx, [rbp - 0x80]
mov r8d, 0xff
mov ecx, r13d
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], r14b
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14007fbfa
mov ebx, 0x10000011
jmp 0x140080451
mov ebx, r14d
test r13d, r13d
je 0x14007fd93
mov rdi, qword [rsp + 0x50]
lea r14, [0x1400f7500]
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x2e0]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rdi]
lea rcx, [rbp - 0x80]
mov edx, 0xff
test r8, r8
je 0x14007fc57
mov r9, 0xffffffffffffffff
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
jmp 0x14007fcc0
lea r9, [0x1400f74f8]
mov qword [rsp + 0x20], r14
mov r8, 0xffffffffffffffff
call fcn.140001030
xor eax, eax
mov byte [rbp + 0x7e], 0
xorps xmm0, xmm0
mov dword [rbp + 0xa8], eax
lea rdx, [rbp + 0x98]
mov word [rbp + 0xac], ax
mov ecx, ebx
lea r9d, [rax + 0xa]
lea r8d, [rax + 0x16]
movups xmmword [rbp + 0x98], xmm0
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa_s]
mov r9, 0xffffffffffffffff
lea r8, [rbp + 0x98]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
lea r9, [rbp + 0x5e0]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r8d, 0xff
lea rdx, [rbp + 0x2e0]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
add rax, qword [rsp + 0x70]
cmp rax, 0xff
jae 0x14007fd21
mov r9, 0xffffffffffffffff
lea r8, [rbp - 0x80]
mov edx, 0xff
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x3dc], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], 0
mov r8d, eax
lea rdx, [rbp + 0x2e0]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14007fe22
inc ebx
add rdi, 8
cmp ebx, r13d
jb 0x14007fc12
xor r14d, r14d
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
lea rax, str.2011.01.01._W_
mov edx, 0xff
lea r9, [0x1400f74d4]
mov qword [rsp + 0x20], rax
mov r8, 0xffffffffffffffff
lea rcx, [rbp - 0x80]
call fcn.140001030
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7e], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14007fe2f
mov ebx, 0x10000011
jmp 0x140080451
mov ebx, 0x10000011
xor r14d, r14d
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str._UNICODE
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14007feb3
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.UNICODE
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14007ff37
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_EXTRA_INPUT_CHECKS__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14007ffbb
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_AGENT__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14008003f
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_WINDOWS__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400800c3
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_GENERATE_INI__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140080147
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_GENERATE_INI_VERSION_TAGGING__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400801cb
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_GENERATE_INI_BUILD_TAGGING__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14008024f
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_GENERATE_INI_DATE_AND_TIME_TAGGING__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400802d3
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_BLOCKING_COUNTER_FILE_LOCK__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140080357
mov ebx, 0x10000011
jmp 0x140080451
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
lea rax, str.PL_created_on
mov edx, 0xff
lea r9, [0x1400f74d0]
mov qword [rsp + 0x20], rax
mov r8, 0xffffffffffffffff
lea rcx, [rbp - 0x80]
call fcn.140001030
mov edx, 0xff
mov byte [rbp + 0x7e], 0
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea rcx, [rsp + 0x78]
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1400f74c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, 0xfe
lea rcx, [rbp - 0x80]
sub rdx, rax
lea r8, [rsp + 0x78]
mov eax, ebx
add rcx, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ctime64_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov r9, 0xffffffffffffffff
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14008043d
mov ebx, 0x10000011
jmp 0x140080451
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
mov ebx, 0x10000032
cmove ebx, r15d
mov rcx, qword [0x14019e2e0]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
mov edi, 0x10000003
cmove ebx, edi
cmp qword [rsp + 0x60], 0
mov edi, ebx
je 0x14008048f
lea rcx, [rsp + 0x60]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeW]
test eax, eax
mov qword [rsp + 0x60], r14
cmovne edi, r15d
cmp edi, 0x10000032
jne 0x14007f157
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, esi
jmp 0x14007f16d