Function at 0x140066780
Capabilities:
Check if file exists
Create directory
Get file attributes
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7f8]
sub rsp, 0x8f8
mov rax, qword [0x1400b1008]
xor rax, rsp
mov qword [rbp + 0x7e0], rax
xor eax, eax
mov qword [rsp + 0x50], r8
mov rbx, r9
mov qword [rsp + 0x48], rcx
mov rsi, r8
mov qword [rsp + 0x58], rbx
mov r13d, edx
mov dword [rbp + 0x90], eax
mov rdi, rcx
mov word [rbp + 0x94], ax
xorps xmm0, xmm0
mov word [rsp + 0x68], 0xa0d
xor r14d, r14d
mov byte [rsp + 0x6a], 0
xor edx, edx
mov qword [rsp + 0x70], r14
mov r8d, 0x1fe
mov qword [rsp + 0x60], r14
lea rcx, [rbp + 0x5e0]
movups xmmword [rbp + 0x80], xmm0
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0xe0]
mov r8d, 0x1fe
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x3e0]
mov r8d, 0x1fe
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
lea rcx, [rbp + 0x2e0]
xor eax, eax
xor edx, edx
mov r8d, 0xff
mov qword [rbp + 0xd0], rax
movups xmmword [rbp + 0xb0], xmm0
mov dword [rbp + 0xd8], eax
movups xmmword [rbp + 0xc0], xmm0
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov qword [rsp + 0x40], r14
mov dword [rbp + 0xa8], eax
xorps xmm0, xmm0
mov word [rbp + 0xac], ax
mov r12d, r14d
mov dword [rsp + 0x6c], r14d
movups xmmword [rbp + 0x98], xmm0
test rsi, rsi
je 0x140066902
test rbx, rbx
je 0x140066902
cmp r13d, 0x200
ja 0x140066902
lea r15, [0x140000000]
test rdi, rdi
je 0x140066998
mov rax, rdi
mov ebx, r14d
nop word [rax + rax]
cmp byte [rax], r12b
je 0x14006695e
cmp byte [rax + 1], r12b
je 0x140066952
cmp byte [rax + 2], r12b
je 0x14006694c
cmp byte [rax + 3], r12b
je 0x140066946
cmp byte [rax + 4], r12b
je 0x140066940
add rax, 5
add rbx, 5
cmp rbx, 0xff
jb 0x1400668d0
mov edi, 0x10000002
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, 0x10000000
mov rcx, qword [rbp + 0x7e0]
xor rcx, rsp
call fcn.140001ea0
add rsp, 0x8f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
add rbx, 4
jmp 0x140066955
add rbx, 3
jmp 0x140066955
add rbx, 2
jmp 0x140066955
inc rbx
cmp rbx, 0xff
jae 0x140066902
test rbx, rbx
je 0x140066902
mov r8d, r14d
test ebx, ebx
jle 0x1400669ad
mov rdx, rdi
nop dword [rax]
mov rcx, r14
cmp rcx, 0x46
jge 0x140066902
movzx eax, byte [rcx + r15 + 0xa64c0]
cmp byte [rdx], al
je 0x14006698b
inc rcx
jmp 0x140066973
inc r8d
inc rdx
cmp r8d, ebx
jl 0x140066970
jmp 0x1400669ad
mov edx, reloc.WS2_32.dll_shutdown
lea rcx, str.anonymous_application
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov rbx, rax
mov edx, reloc.WS2_32.dll_setsockopt
lea rcx, str.C:productivity_link
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, 2
lea rcx, [0x1400ea7ac]
mov rdi, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, 2
lea rcx, [rax + rbx]
add rdi, rcx
lea rcx, [0x1400ea794]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, 2
lea rcx, [0x1400ea784]
mov r14, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
add r14, 0x24
add r14, rax
add r14, rdi
cmp r14, 0xff
jae 0x140066902
xor edi, edi
test r13d, r13d
je 0x140066b71
mov rdx, qword [rsi]
test rdx, rdx
je 0x140066ace
mov rax, rdx
xor ebx, ebx
cmp byte [rax], r12b
je 0x140066a8a
cmp byte [rax + 1], r12b
je 0x140066a7a
cmp byte [rax + 2], r12b
je 0x140066a74
cmp byte [rax + 3], r12b
je 0x140066a6e
cmp byte [rax + 4], r12b
je 0x140066a68
add rax, 5
add rbx, 5
cmp rbx, 0xff
jb 0x140066a35
jmp 0x140066902
add rbx, 4
jmp 0x140066a7d
add rbx, 3
jmp 0x140066a7d
add rbx, 2
jmp 0x140066a7d
inc rbx
cmp rbx, 0xff
jae 0x140066902
test rbx, rbx
je 0x140066902
xor r8d, r8d
test ebx, ebx
jle 0x140066b52
nop
xor eax, eax
cmp rax, 0x47
jge 0x140066902
movzx ecx, byte [rax + r15 + 0xa6510]
cmp byte [rdx], cl
je 0x140066abe
inc rax
jmp 0x140066aa2
inc r8d
inc rdx
cmp r8d, ebx
jl 0x140066aa0
jmp 0x140066b52
mov edx, reloc.WS2_32.dll_send
lea rcx, str.anonymous_counter_
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, ntohs
lea rcx, str.4294967295
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, reloc.WS2_32.dll_shutdown
sub rdx, rax
je 0x140066bc8
lfence
xor eax, eax
lea r8, [0x1400ea754]
xorps xmm0, xmm0
mov dword [rbp + 0x90], eax
mov r9d, edi
mov word [rbp + 0x94], ax
lea rcx, [rbp + 0x80]
movups xmmword [rbp + 0x80], xmm0
call fcn.140001220
test eax, eax
js 0x140066bbe
mov edx, reloc.WS2_32.dll_shutdown
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
add rbx, rax
lea rax, [rbx + r14]
cmp rax, 0xff
jae 0x140066902
inc edi
add rsi, 8
cmp edi, r13d
jb 0x140066a24
cmp dword [0x14019b5e8], r12d
lea r14, [0x14019f2c0]
jne 0x140066c26
xor edx, edx
mov r8d, 0x1e148
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
mov edx, 1
xor r9d, r9d
mov r8d, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov qword [0x14019f2c0], rax
test rax, rax
jne 0x140066bd2
mov edi, 0x10000003
jmp 0x140066907
mov edi, 0x10000016
jmp 0x140066907
mov edi, 0x1000001f
jmp 0x140066907
lea rcx, [0x1400ea758]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x140066c0e
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x140066bf9
mov edi, 0x10000004
jmp 0x140066907
cmp eax, 5
mov edi, 0x10000010
mov ecx, 0x10000006
cmove edi, ecx
jmp 0x140066907
test al, 0x10
jne 0x140066c1c
mov edi, 0x10000005
jmp 0x140066907
mov dword [0x14019b5e8], 1
mov rcx, qword [0x14019f2c0]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x140066bb4
xor esi, esi
lea rax, [0x14019f2cc]
nop dword [rax]
mov r15d, 0x10000010
cmp dword [rax], r12d
je 0x140066c74
inc esi
add rax, 0x3020
cmp esi, 0xa
jb 0x140066c50
lea ebx, [r15 - 6]
xor r14d, r14d
jmp 0x140067c01
mov rbx, qword [rsp + 0x58]
mov eax, esi
mov rcx, rbx
imul r12, rax, 0x3020
mov dword [r12 + r14 + 0xc], 1
call qword [sym.imp.RPCRT4.dll_UuidCreate]
test eax, eax
je 0x140066cca
xor r14d, r14d
cmp eax, 0x720
jne 0x140066cb1
mov r12, qword [rsp + 0x40]
mov ebx, 0x1000000c
jmp 0x140067c01
cmp eax, 0x6cb
mov ebx, r14d
mov r12, r14
setne bl
add ebx, 0x1000000d
jmp 0x140067c01
lea rax, [r14 + 0x1010]
add rax, r12
jne 0x140066cea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], reloc.WS2_32.dll_shutdown
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
jmp 0x140066cf0
movups xmm0, xmmword [rbx]
movups xmmword [rax], xmm0
lea rdx, [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.RPCRT4.dll_UuidToStringW]
test eax, eax
je 0x140066d1c
xor r14d, r14d
cmp eax, 0xe
mov ebx, r14d
mov r12d, r14d
setne bl
add ebx, 0x1000000e
jmp 0x140067c01
cmp qword [rsp + 0x60], 0
jne 0x140066d34
mov r12, qword [rsp + 0x40]
mov ebx, r15d
xor r14d, r14d
jmp 0x140067c01
mov r9d, reloc.WS2_32.dll_setsockopt
lea r8, [0x1400ea728]
mov edx, 0xff
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov r9d, 4
lea r8, [0x1400ea724]
mov edx, 0xff
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x140066da9
mov r9, rbx
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r8d, 0xff
lea rdx, [rbp + 0x3e0]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
lea r8, [rbp + 0x3e0]
jmp 0x140066db0
lea r8, [0x1400ea6f8]
mov r9, 0xffffffffffffffff
lea rcx, [rbp + 0xe0]
mov edx, 0xff
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov r9d, 4
lea r8, [0x1400ea6a4]
mov edx, 0xff
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov rcx, qword [rsp + 0x60]
mov edx, 0x24
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r8, qword [rsp + 0x60]
lea rcx, [rbp + 0xe0]
mov r9, rax
mov edx, 0xff
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov edx, 0xff
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0xe0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov r9d, 4
lea r8, [0x1400ea684]
mov edx, 0xff
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
xor edx, edx
lea rcx, [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x140066ea9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12, qword [rsp + 0x40]
cmp eax, 0xb7
jne 0x140066e91
mov ebx, 0x10000008
xor r14d, r14d
jmp 0x140067c01
cmp eax, 3
mov ebx, 0x10000007
mov ecx, 0x10000009
cmove ebx, ecx
xor r14d, r14d
jmp 0x140067c01
xor edi, edi
test r13d, r13d
je 0x14006709e
lea rbx, [r14 + 0x1028]
mov r14, qword [rsp + 0x50]
sub r14, r12
lea rax, [0x1401a02e8]
add rbx, r12
sub r14, rax
xor edx, edx
lea rcx, [rbp + 0xe0]
mov r8d, 0x1fe
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x3e0]
mov r8d, 0x1fe
call sub.VCRUNTIME140.dll_memset
mov r9, qword [r14 + rbx]
test r9, r9
je 0x140066f27
mov r8d, 0xff
mov qword [rsp + 0x20], 0xffffffffffffffff
lea rdx, [rbp + 0x3e0]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
jmp 0x140066fba
mov edx, reloc.WS2_32.dll_send
lea rcx, [0x1400ea6d0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [0x1400ea6a8]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
xor eax, eax
lea rdx, [rbp + 0xb0]
xorps xmm0, xmm0
mov qword [rbp + 0xd0], rax
mov ecx, edi
mov dword [rbp + 0xd8], eax
movups xmmword [rbp + 0xb0], xmm0
lea r9d, [rax + 0xa]
lea r8d, [rax + 0x16]
movups xmmword [rbp + 0xc0], xmm0
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itow_s]
mov edx, reloc.WS2_32.dll_shutdown
lea rcx, [rbp + 0xb0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0xb0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
mov edx, 0xff
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0x5e0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov edx, 0xff
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0x3e0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
lea rcx, [rbp + 0xe0]
mov edx, 0xc0000000
mov dword [rsp + 0x20], 2
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbx + 0x1000], rax
cmp rax, 0xffffffffffffffff
je 0x140067169
mov edx, 1
xor r9d, r9d
mov r8d, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov qword [rbx], rax
test rax, rax
je 0x140067157
mov qword [rbx - 0x1018], 0xfffffffffffffffe
inc edi
add rbx, 8
cmp edi, r13d
jb 0x140066ed0
mov rbx, qword [rsp + 0x48]
lea r14, [0x14019f2c0]
xor edx, edx
mov dword [r12 + r14 + 8], r13d
mov r8d, 0x1fe
lea rcx, [rbp + 0xe0]
call sub.VCRUNTIME140.dll_memset
mov edx, 0xff
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, [rbp + 0x5e0]
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov edx, ntohs
lea rcx, [0x1400ea688]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
lea r8, str.pl_config.ini
mov edx, 0xff
mov r9, rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
xor r14d, r14d
lea rcx, [rbp + 0xe0]
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0xc0000000
mov dword [rsp + 0x20], 2
lea r8d, [r14 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
jne 0x14006717b
mov ebx, 0x10000011
jmp 0x140067c01
mov r12, qword [rsp + 0x40]
mov ebx, 0x10000014
xor r14d, r14d
jmp 0x140067c01
mov r12, qword [rsp + 0x40]
mov ebx, 0x10000013
xor r14d, r14d
jmp 0x140067c01
lea rcx, [rbp - 0x80]
mov edx, 0xff
test rbx, rbx
je 0x14006719b
mov r9, 0xffffffffffffffff
mov r8, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
jmp 0x1400671be
lea rax, [0x1400ea650]
mov r8, 0xffffffffffffffff
lea r9, [0x1400ea64c]
mov qword [rsp + 0x20], rax
call fcn.140001030
mov byte [rbp + 0x7e], r14b
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], r14b
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140067214
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, qword [rsp + 0x60]
lea rdx, [rbp - 0x80]
mov r8d, 0xff
mov qword [rsp + 0x20], 0xffffffffffffffff
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], r14b
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14006729e
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
lea r9, [rbp + 0x5e0]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r8d, 0xff
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], r14b
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14006732a
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9d, 0xa
lea rdx, [rbp - 0x80]
mov r8d, 0xff
mov ecx, r13d
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], r14b
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400673aa
mov ebx, 0x10000011
jmp 0x140067c01
mov ebx, r14d
test r13d, r13d
je 0x140067543
mov rdi, qword [rsp + 0x50]
lea r14, [0x1400ea638]
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x2e0]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rdi]
lea rcx, [rbp - 0x80]
mov edx, 0xff
test r8, r8
je 0x140067407
mov r9, 0xffffffffffffffff
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
jmp 0x140067470
lea r9, [0x1400ea624]
mov qword [rsp + 0x20], r14
mov r8, 0xffffffffffffffff
call fcn.140001030
xor eax, eax
mov byte [rbp + 0x7e], 0
xorps xmm0, xmm0
mov dword [rbp + 0xa8], eax
lea rdx, [rbp + 0x98]
mov word [rbp + 0xac], ax
mov ecx, ebx
lea r9d, [rax + 0xa]
lea r8d, [rax + 0x16]
movups xmmword [rbp + 0x98], xmm0
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa_s]
mov r9, 0xffffffffffffffff
lea r8, [rbp + 0x98]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
lea r9, [rbp + 0x5e0]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r8d, 0xff
lea rdx, [rbp + 0x2e0]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
add rax, qword [rsp + 0x70]
cmp rax, 0xff
jae 0x1400674d1
mov r9, 0xffffffffffffffff
lea r8, [rbp - 0x80]
mov edx, 0xff
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x3dc], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], 0
mov r8d, eax
lea rdx, [rbp + 0x2e0]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400675d2
inc ebx
add rdi, 8
cmp ebx, r13d
jb 0x1400673c2
xor r14d, r14d
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
lea rax, str.2011.01.01._W_
mov edx, 0xff
lea r9, [0x1400ea620]
mov qword [rsp + 0x20], rax
mov r8, 0xffffffffffffffff
lea rcx, [rbp - 0x80]
call fcn.140001030
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7e], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400675df
mov ebx, 0x10000011
jmp 0x140067c01
mov ebx, 0x10000011
xor r14d, r14d
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str._UNICODE
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140067663
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.UNICODE
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400676e7
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_EXTRA_INPUT_CHECKS__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14006776b
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_AGENT__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400677ef
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_WINDOWS__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140067873
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_GENERATE_INI__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400678f7
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_GENERATE_INI_VERSION_TAGGING__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14006797b
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_GENERATE_INI_BUILD_TAGGING__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400679ff
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_GENERATE_INI_DATE_AND_TIME_TAGGING__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140067a83
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, str.__PL_BLOCKING_COUNTER_FILE_LOCK__
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov r9, 0xffffffffffffffff
mov byte [rbp + 0x7c], 0
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140067b07
mov ebx, 0x10000011
jmp 0x140067c01
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
lea rax, str.PL_created_on
mov edx, 0xff
lea r9, [0x1400ea5fc]
mov qword [rsp + 0x20], rax
mov r8, 0xffffffffffffffff
lea rcx, [rbp - 0x80]
call fcn.140001030
mov edx, 0xff
mov byte [rbp + 0x7e], 0
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea rcx, [rsp + 0x78]
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1400ea600]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov edx, 0xfe
lea rcx, [rbp - 0x80]
sub rdx, rax
lea r8, [rsp + 0x78]
mov eax, ebx
add rcx, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ctime64_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
mov r9, 0xffffffffffffffff
lea r8, [rsp + 0x68]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
mov edx, 0xff
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
lea r9, [rsp + 0x6c]
mov qword [rsp + 0x20], r14
mov r8d, eax
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140067bed
mov ebx, 0x10000011
jmp 0x140067c01
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
mov ebx, 0x10000032
cmove ebx, r15d
mov rcx, qword [0x14019f2c0]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
mov edi, 0x10000003
cmove ebx, edi
cmp qword [rsp + 0x60], 0
mov edi, ebx
je 0x140067c3f
lea rcx, [rsp + 0x60]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeW]
test eax, eax
mov qword [rsp + 0x60], r14
cmovne edi, r15d
cmp edi, 0x10000032
jne 0x140066907
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, esi
jmp 0x14006691d