Function at 0x100cb9440
Capabilities:
Delete file
Write file on windows

Disassembly:
push rbp
mov rbp, rsp
lea rsp, [rsp - 0x200]
mov qword [rbp - 0x1b8], rbx
mov qword [rbp - 0x1b0], rdi
mov qword [rbp - 0x1a8], rsi
mov qword [rbp - 0x1a0], r12
mov qword [rbp - 0x198], r13
mov qword [rbp - 0x190], r14
mov qword [rbp - 0x188], r15
mov qword [rbp - 0x180], rcx
mov r12d, edx
mov qword [rbp - 8], 0
mov qword [rbp - 0x10], 0
mov qword [rbp - 0x18], 0
mov qword [rbp - 0x20], 0
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x128], 0
mov qword [rbp - 0x120], 0
mov qword [rbp - 0x118], 0
mov qword [rbp - 0x110], 0
mov qword [rbp - 0x108], 0
mov qword [rbp - 0x100], 0
mov qword [rbp - 0xf8], 0
mov qword [rbp - 0xb0], 0
mov qword [rbp - 0xa8], 0
mov qword [rbp - 0xa0], 0
mov qword [rbp - 0x98], 0
mov qword [rbp - 0x90], 0
mov qword [rbp - 0x88], 0
mov qword [rbp - 0x80], 0
mov qword [rbp - 0x78], 0
mov qword [rbp - 0x70], 0
mov qword [rbp - 0x68], 0
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
mov qword [rbp - 0x50], 0
nop
mov byte [rbp - 0x168], 0
mov eax, 0
mov qword [rbp - 0x158], rax
mov eax, 0
mov qword [rbp - 0x170], rax
lea rcx, [rbp - 0x10]
call fcn.100cad9e0
lea rdx, [0x100002eb0]
mov ecx, 1
call sub.kernel32.dll_AddVectoredExceptionHandler
mov qword [rbp - 0x178], rax
test r12d, r12d
jne 0x100cb95c9
mov sil, 0
jmp 0x100cb95f1
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
mov sil, al
mov qword [rsp + 0x20], 0
movzx eax, sil
lea rdx, [rax + 0x7e1]
lea rcx, [rbp - 0x58]
call fcn.100ce14a0
mov r8, qword [rbp - 0x58]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea r9, str.SWSECWRAP
lea rdx, [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov r10, qword [rax + 0x970]
mov rax, qword [r10]
call qword [rax + 0xd8]
mov rcx, qword [rbp - 0x50]
call fcn.100ce1890
mov ecx, eax
call fcn.100cadba0
mov rdi, rax
mov dword [rsp + 0x20], 0x10
lea rcx, [rbp - 0x60]
call fcn.100c8f1b0
lea r8, str.swsecwrap.dll
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x60]
call fcn.100c8f590
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x58]
call fcn.100c8fe50
mov r8, qword [rbp - 0x58]
lea rcx, [0x100e89ac8]
mov r9d, 0xff00
movabs rdx, 1
call fcn.100d13120
mov rbx, rax
mov rcx, rdi
mov rax, rdi
mov rax, qword [rax]
call qword [rax + 0xe0]
mov r8, rax
mov rdx, rdi
mov rcx, rbx
call fcn.100ccc6a0
mov rcx, rbx
call fcn.100c92140
mov qword [rsp + 0x20], 0
movzx eax, sil
lea rdx, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov r10, qword [rax + 0x970]
lea r9, str.SWSECWRAPFNP
lea rdx, [rbp - 0x58]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
mov rax, qword [rcx]
mov rcx, r10
call qword [rax + 0xd8]
mov rcx, qword [rbp - 0x58]
call fcn.100ce1890
mov ecx, eax
call fcn.100cadba0
mov rdi, rax
mov dword [rsp + 0x20], 0x10
lea rcx, [rbp - 0x60]
call fcn.100c8f1b0
lea r8, [0x100e7251c]
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x60]
call fcn.100c8f590
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x58]
call fcn.100c8fe50
mov r8, qword [rbp - 0x58]
lea rcx, [0x100e89ac8]
mov r9d, 0xff00
movabs rdx, 1
call fcn.100d13120
mov rbx, rax
mov rcx, rdi
mov rax, rdi
mov rax, qword [rax]
call qword [rax + 0xe0]
mov r8, rax
mov rdx, rdi
mov rcx, rbx
call fcn.100ccc6a0
mov rcx, rbx
call fcn.100c92140
lea rcx, [rbp - 0x60]
call fcn.100c8f1b0
lea r8, [0x100e7251c]
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x60]
call fcn.100c8f590
mov rcx, qword [rbp - 0x60]
test rcx, rcx
jne 0x100cb97dd
lea rcx, [0x100f45460]
call sub.kernel32.dll_LoadLibraryW
mov qword [rbp - 0x160], rax
lea rcx, [rbp - 0x68]
call fcn.100c8f1b0
lea r8, str.swsecwrap.dll
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x68]
call fcn.100c8f590
mov rcx, qword [rbp - 0x68]
test rcx, rcx
jne 0x100cb9816
lea rcx, [0x100f45460]
call sub.kernel32.dll_LoadLibraryW
mov qword [rbp - 0x150], rax
test rax, rax
je 0x100cb9837
mov rax, qword [rbp - 0x160]
test rax, rax
jne 0x100cb98c0
mov rcx, qword [rbp - 0x178]
call sub.kernel32.dll_RemoveVectoredExceptionHandler
lea rcx, [rbp - 0x70]
call fcn.100c8f1b0
lea r8, str.swsecwrap.dll
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x70]
call fcn.100c8f590
mov rcx, qword [rbp - 0x70]
test rcx, rcx
jne 0x100cb9870
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
lea rcx, [rbp - 0x78]
call fcn.100c8f1b0
lea r8, [0x100e7251c]
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x78]
call fcn.100c8f590
mov rcx, qword [rbp - 0x78]
test rcx, rcx
jne 0x100cb98a2
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
lea rdx, str.Cannot_load_DLL
mov rcx, qword [rbp - 0x180]
mov r8d, 1
call fcn.100cb52e0
test r12d, r12d
jne 0x100cb9a61
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea r9, [0x100e72588]
lea r8, str.2017
lea rdx, [rbp - 0x58]
mov rax, qword [rbp - 0x180]
mov r10, qword [rax + 0x970]
mov rax, qword [r10]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0x58]
test rax, rax
jne 0x100cb9919
lea rax, [0x100f45460]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
mov r9, qword [rbp - 0x150]
movabs r8, 0
movabs rdx, 0
mov ecx, 0
call fcn.10000a410
and eax, 0xff
mov edx, eax
mov qword [rbp - 0x148], rdx
mov rcx, qword [rbp - 0x150]
call sub.kernel32.dll_FreeLibrary
mov rcx, qword [rbp - 0x160]
call sub.kernel32.dll_FreeLibrary
lea rcx, [rbp - 0x80]
call fcn.100c8f1b0
lea r8, str.swsecwrap.dll
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x80]
call fcn.100c8f590
mov rcx, qword [rbp - 0x80]
test rcx, rcx
jne 0x100cb999f
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
lea rcx, [rbp - 0x88]
call fcn.100c8f1b0
lea r8, [0x100e7251c]
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x88]
call fcn.100c8f590
mov rcx, qword [rbp - 0x88]
test rcx, rcx
jne 0x100cb99da
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
mov rcx, qword [rbp - 0x178]
call sub.kernel32.dll_RemoveVectoredExceptionHandler
mov eax, dword [rbp - 0x148]
test eax, eax
je 0x100cbb102
lea rcx, [rbp - 0x50]
call fcn.100c8d4f0
mov eax, dword [rbp - 0x148]
mov edx, eax
lea rcx, [rbp - 0x98]
call fcn.100ce13e0
mov r8, qword [rbp - 0x98]
lea rdx, [0x100e725c8]
lea rcx, [rbp - 0x50]
mov r9d, 0
call fcn.100c8d680
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp - 0x90]
call fcn.100c8f3e0
mov rdx, qword [rbp - 0x90]
mov rcx, qword [rbp - 0x180]
mov r8d, 1
call fcn.100cb52e0
jmp 0x100cbb102
lea rcx, [0x100e75f80]
movabs rdx, 1
call fcn.100c92060
mov qword [rbp - 0x140], rax
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rdx, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea rax, [0x100e72588]
mov r9, rax
lea rdx, [rbp - 0x98]
mov rax, qword [rbp - 0x180]
mov r10, qword [rax + 0x970]
mov rax, qword [r10]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0x98]
test rax, rax
jne 0x100cb9b0c
lea rax, [0x100f45460]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
lea rax, [rbp - 0x40]
mov r8, rax
lea rax, [rbp - 0x38]
mov r9, qword [rbp - 0x150]
mov ecx, 1
mov rdx, rax
call fcn.10000a410
and eax, 0xff
mov edx, eax
mov qword [rbp - 0x148], rdx
mov eax, dword [rbp - 0x148]
test eax, eax
je 0x100cb9c55
mov rcx, qword [rbp - 0x150]
call sub.kernel32.dll_FreeLibrary
mov rcx, qword [rbp - 0x160]
call sub.kernel32.dll_FreeLibrary
lea rcx, [rbp - 0x90]
call fcn.100c8f1b0
lea r8, str.swsecwrap.dll
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x90]
call fcn.100c8f590
mov rcx, qword [rbp - 0x90]
test rcx, rcx
jne 0x100cb9ba3
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
lea rcx, [rbp - 0xa0]
call fcn.100c8f1b0
lea r8, [0x100e7251c]
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0xa0]
call fcn.100c8f590
mov rcx, qword [rbp - 0xa0]
test rcx, rcx
jne 0x100cb9bde
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
mov rcx, qword [rbp - 0x178]
call sub.kernel32.dll_RemoveVectoredExceptionHandler
lea rcx, [rbp - 0x50]
call fcn.100c8d4f0
mov eax, dword [rbp - 0x148]
mov edx, eax
lea rcx, [rbp - 0xb0]
call fcn.100ce13e0
mov r8, qword [rbp - 0xb0]
lea rax, [0x100e725c8]
lea rcx, [rbp - 0x50]
mov r9d, 0
mov rdx, rax
call fcn.100c8d680
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp - 0xa8]
call fcn.100c8f3e0
mov rdx, qword [rbp - 0xa8]
mov rcx, qword [rbp - 0x180]
mov r8d, 1
call fcn.100cb52e0
movabs rcx, 0x100000
call fcn.100c94d80
mov qword [rbp - 0x138], rax
movabs rcx, 0x100000
call fcn.100c94d80
mov qword [rbp - 0x130], rax
movabs rcx, 0xc8
call fcn.100c94d80
mov r15, rax
lea rax, str.SERVER_this_host_ANY_25734_r_n
mov rdx, rax
mov rax, qword [rbp - 0x130]
mov r8d, 0x1d
mov rcx, rax
call fcn.100ccb3a0
mov rax, qword [rbp - 0x130]
lea rdx, [rax + 0x1c]
mov rcx, rdx
lea rax, str.VENDOR_SW_D_port25735_r_n
mov r8d, 0x18
mov rdx, rax
call fcn.100ccb3a0
mov r14b, 0
mov eax, 0x34
mov qword [rbp - 0x170], rax
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rax, [rax + 0x7e1]
lea rcx, [rbp - 0xb0]
mov rdx, rax
call fcn.100ce14a0
mov r8, qword [rbp - 0xb0]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea rax, [0x100e72658]
mov r9, rax
lea rdx, [rbp - 8]
mov rax, qword [rbp - 0x180]
mov r10, qword [rax + 0x970]
mov rax, qword [r10]
call qword [rax + 0xd8]
mov rax, qword [rbp - 8]
test rax, rax
je 0x100cb9d72
mov rax, qword [rax - 8]
mov r10d, eax
mov rax, qword [rbp - 8]
test rax, rax
jne 0x100cb9d85
lea rax, [0x100f45460]
mov rdx, rax
mov rax, r15
mov r9d, 0xc8
mov r8, rax
mov rcx, rdx
mov edx, r10d
call fcn.100020d00
mov r13d, eax
mov rcx, r15
mov edx, eax
call fcn.10002ab50
mov r13d, eax
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x978]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x978]
mov rax, qword [rdx]
call qword [rax + 0x100]
lea eax, [eax - 1]
mov r12d, eax
mov edi, 0
cmp r12d, edi
jl 0x100cbac90
sub edi, 1
nop
add edi, 1
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x978]
mov r8d, edi
lea rdx, [rbp - 8]
mov r9, qword [rbp - 0x180]
mov rax, qword [r9 + 0x978]
mov rax, qword [rax]
call qword [rax + 0xf0]
mov rax, qword [rbp - 8]
cmp byte [rax], 0x2d
je 0x100cbac87
mov rcx, qword [rbp - 0x140]
mov rax, qword [rbp - 0x140]
mov rax, qword [rax]
call qword [rax + 0x170]
mov rax, qword [rbp - 0x140]
mov edx, 0x2c
mov rcx, rax
call fcn.100cd0330
mov rax, qword [rbp - 8]
mov rcx, qword [rbp - 0x140]
mov rdx, rax
call fcn.100cd0c60
lea rdx, [rbp - 0x18]
mov rcx, qword [rbp - 0x140]
mov r8d, 1
mov rax, qword [rbp - 0x140]
mov rax, qword [rax]
call qword [rax + 0xf0]
lea rdx, [rbp - 0x20]
mov rcx, qword [rbp - 0x140]
mov r8d, 2
mov rax, qword [rbp - 0x140]
mov rax, qword [rax]
call qword [rax + 0xf0]
lea rdx, [rbp - 0x28]
mov rcx, qword [rbp - 0x140]
mov r8d, 3
mov rax, qword [rbp - 0x140]
mov rax, qword [rax]
call qword [rax + 0xf0]
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x140]
mov r8d, 4
mov rax, qword [rbp - 0x140]
mov rax, qword [rax]
call qword [rax + 0xf0]
mov rax, qword [rbp - 0x28]
cmp byte [rax], 0x30
je 0x100cb9f14
mov rax, qword [rbp - 0x18]
lea rcx, [0x100e70df8]
mov rdx, rax
call fcn.100c8e7c0
cmp rax, 1
jne 0x100cba0c4
mov r14b, 1
mov rcx, qword [rbp - 0x140]
mov rax, qword [rbp - 0x140]
mov rax, qword [rax]
call qword [rax + 0x100]
lea eax, [eax - 2]
mov ebx, eax
mov esi, 5
cmp ebx, esi
jl 0x100cbac87
sub esi, 1
nop
add esi, 1
mov r8d, esi
lea rdx, [rbp - 8]
mov rcx, qword [rbp - 0x140]
mov rax, qword [rbp - 0x140]
mov rax, qword [rax]
call qword [rax + 0xf0]
mov rax, qword [rbp - 8]
cmp byte [rax], 0x2d
je 0x100cba0b7
mov rdx, qword [rbp - 8]
lea rcx, [rbp - 0xb0]
movabs rax, 0x20
movabs r8, 2
mov r9, rax
call fcn.100c8e670
mov rax, qword [rbp - 0xb0]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.100c8d560
cmp esi, 5
jl 0x100cba0b7
mov qword [rsp + 0x28], 3
mov rax, qword [rbp - 8]
mov qword [rbp - 0xe8], rax
mov qword [rbp - 0xf0], 0xb
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0xd8], rax
mov qword [rbp - 0xe0], 0xb
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0xc8], rax
mov qword [rbp - 0xd0], 0xb
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0xb8], rax
mov qword [rbp - 0xc0], 0xb
lea rax, [rbp - 0xf0]
mov qword [rsp + 0x20], rax
movsxd rax, dword [rbp - 0x170]
mov rdx, qword [rbp - 0x130]
lea rax, [rax + rdx]
mov rcx, r15
mov edx, 0x100000
mov r8d, edx
mov edx, dword [rbp - 0x170]
sub r8d, edx
mov edx, r8d
mov r9d, r13d
mov r8, rcx
mov rcx, rax
call fcn.100ce33c0
mov edx, eax
mov qword [rbp - 0x148], rdx
mov eax, dword [rbp - 0x170]
mov edx, dword [rbp - 0x148]
lea ecx, [eax + edx]
mov eax, ecx
mov qword [rbp - 0x170], rax
movsxd rax, dword [rbp - 0x170]
mov rdx, qword [rbp - 0x130]
mov byte [rdx + rax], 0xd
movsxd rax, dword [rbp - 0x170]
mov rdx, qword [rbp - 0x130]
mov byte [rdx + rax + 1], 0xa
mov eax, dword [rbp - 0x170]
lea edx, [eax + 2]
mov eax, edx
mov qword [rbp - 0x170], rax
cmp ebx, esi
jg 0x100cb9f48
jmp 0x100cbac87
mov rax, qword [rbp - 0x138]
mov edx, 0x100000
mov rcx, rax
call fcn.100ccb3d0
mov eax, 0
mov qword [rbp - 0x158], rax
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rax, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
mov rdx, rax
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea rax, [0x100e72678]
mov r9, rax
lea rdx, [rbp - 0xb0]
mov r10, qword [rbp - 0x180]
mov rax, qword [r10 + 0x970]
mov rax, qword [rax]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0xb0]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.100c8d560
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov r8, rax
mov rax, qword [rbp - 8]
test rax, rax
je 0x100cba197
mov rax, qword [rax - 8]
mov edx, 0x100000
mov ecx, dword [rbp - 0x158]
sub edx, ecx
mov rcx, qword [rbp - 8]
test rcx, rcx
jne 0x100cba1b4
lea rcx, [0x100f45460]
mov r9d, edx
mov edx, eax
call fcn.100020d00
mov edx, eax
mov qword [rbp - 0x148], rdx
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov rcx, rax
mov eax, dword [rbp - 0x148]
mov edx, eax
call fcn.10002ab50
mov edx, eax
mov qword [rbp - 0x148], rdx
mov eax, dword [rbp - 0x158]
mov edx, dword [rbp - 0x148]
lea ecx, [eax + edx]
mov eax, ecx
mov qword [rbp - 0x158], rax
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rax, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
mov rdx, rax
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea rax, [0x100e72698]
mov r9, rax
lea rdx, [rbp - 0xb0]
mov r10, qword [rbp - 0x180]
mov rax, qword [r10 + 0x970]
mov rax, qword [rax]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0xb0]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.100c8d560
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov r8, rax
mov rax, qword [rbp - 8]
test rax, rax
je 0x100cba2be
mov rax, qword [rax - 8]
mov edx, eax
mov eax, 0x100000
mov ecx, eax
mov eax, dword [rbp - 0x158]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rbp - 8]
test rcx, rcx
jne 0x100cba2e1
lea rcx, [0x100f45460]
mov r9d, eax
call fcn.100020d00
mov edx, eax
mov qword [rbp - 0x148], rdx
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov rcx, rax
mov eax, dword [rbp - 0x148]
mov edx, eax
call fcn.10002ab50
mov edx, eax
mov qword [rbp - 0x148], rdx
mov edx, dword [rbp - 0x158]
mov eax, dword [rbp - 0x148]
lea ecx, [edx + eax]
mov eax, ecx
mov qword [rbp - 0x158], rax
mov qword [rsp + 0x28], 0
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0xb8], rax
mov qword [rbp - 0xc0], 0xb
lea rax, [rbp - 0xc0]
mov qword [rsp + 0x20], rax
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov rcx, rax
mov eax, 0x100000
mov edx, eax
mov eax, dword [rbp - 0x158]
sub edx, eax
mov eax, edx
lea rax, [0x100e726a0]
mov r9d, 2
mov r8, rax
call fcn.100ce33c0
mov edx, eax
mov qword [rbp - 0x148], rdx
mov edx, dword [rbp - 0x158]
mov eax, dword [rbp - 0x148]
lea ecx, [edx + eax]
mov eax, ecx
mov qword [rbp - 0x158], rax
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rax, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
mov rdx, rax
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea rax, [0x100e726c0]
mov r9, rax
lea rdx, [rbp - 0xb0]
mov r10, qword [rbp - 0x180]
mov rax, qword [r10 + 0x970]
mov rax, qword [rax]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0xb0]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.100c8d560
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov r8, rax
mov rax, qword [rbp - 8]
test rax, rax
je 0x100cba471
mov rax, qword [rax - 8]
mov edx, eax
mov eax, 0x100000
mov ecx, dword [rbp - 0x158]
sub eax, ecx
mov rcx, qword [rbp - 8]
test rcx, rcx
jne 0x100cba490
lea rcx, [0x100f45460]
mov r9d, eax
call fcn.100020d00
mov edx, eax
mov qword [rbp - 0x148], rdx
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov rcx, rax
mov eax, dword [rbp - 0x148]
mov edx, eax
call fcn.10002ab50
mov edx, eax
mov qword [rbp - 0x148], rdx
mov eax, dword [rbp - 0x158]
mov edx, dword [rbp - 0x148]
lea ecx, [eax + edx]
mov eax, ecx
mov qword [rbp - 0x158], rax
mov qword [rsp + 0x28], 0
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0xb8], rax
mov qword [rbp - 0xc0], 0xb
lea rax, [rbp - 0xc0]
mov qword [rsp + 0x20], rax
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov rcx, rax
mov eax, 0x100000
mov edx, eax
mov eax, dword [rbp - 0x158]
sub edx, eax
mov eax, edx
lea rax, [0x100e726a0]
mov r9d, 2
mov r8, rax
call fcn.100ce33c0
mov edx, eax
mov qword [rbp - 0x148], rdx
mov edx, dword [rbp - 0x158]
mov eax, dword [rbp - 0x148]
lea ecx, [edx + eax]
mov eax, ecx
mov qword [rbp - 0x158], rax
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rax, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
mov rdx, rax
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea rax, [0x100e726e0]
mov r9, rax
lea rdx, [rbp - 0xb0]
mov r10, qword [rbp - 0x180]
mov rax, qword [r10 + 0x970]
mov rax, qword [rax]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0xb0]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.100c8d560
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov r8, rax
mov rax, qword [rbp - 8]
test rax, rax
je 0x100cba620
mov rax, qword [rax - 8]
mov edx, eax
mov eax, 0x100000
mov ecx, eax
mov eax, dword [rbp - 0x158]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rbp - 8]
test rcx, rcx
jne 0x100cba643
lea rcx, [0x100f45460]
mov r9d, eax
call fcn.100020d00
mov edx, eax
mov qword [rbp - 0x148], rdx
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov rcx, rax
mov eax, dword [rbp - 0x148]
mov edx, eax
call fcn.10002ab50
mov edx, eax
mov qword [rbp - 0x148], rdx
mov edx, dword [rbp - 0x158]
mov eax, dword [rbp - 0x148]
lea ecx, [edx + eax]
mov eax, ecx
mov qword [rbp - 0x158], rax
mov rcx, qword [rbp - 0x140]
mov rax, qword [rbp - 0x140]
mov rax, qword [rax]
call qword [rax + 0x100]
lea eax, [eax - 2]
mov ebx, eax
mov esi, 5
cmp ebx, esi
jl 0x100cba840
sub esi, 1
nop
add esi, 1
mov r8d, esi
lea rdx, [rbp - 0xb0]
mov rcx, qword [rbp - 0x140]
mov rax, qword [rbp - 0x140]
mov rax, qword [rax]
call qword [rax + 0xf0]
mov rax, qword [rbp - 0xb0]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.100c8d560
mov rax, qword [rbp - 8]
cmp byte [rax], 0x2d
je 0x100cba838
mov rdx, qword [rbp - 8]
lea rcx, [rbp - 0xb0]
movabs rax, 0x20
movabs r8, 2
mov r9, rax
call fcn.100c8e670
mov rax, qword [rbp - 0xb0]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.100c8d560
cmp esi, 5
jl 0x100cba838
mov qword [rsp + 0x28], 3
mov rax, qword [rbp - 8]
mov qword [rbp - 0xe8], rax
mov qword [rbp - 0xf0], 0xb
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0xd8], rax
mov qword [rbp - 0xe0], 0xb
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0xc8], rax
mov qword [rbp - 0xd0], 0xb
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0xb8], rax
mov qword [rbp - 0xc0], 0xb
lea rax, [rbp - 0xf0]
mov qword [rsp + 0x20], rax
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov rcx, r15
mov edx, 0x100000
mov r8d, dword [rbp - 0x158]
sub edx, r8d
mov r9d, r13d
mov r8, rcx
mov rcx, rax
call fcn.100ce33c0
mov edx, eax
mov qword [rbp - 0x148], rdx
mov eax, dword [rbp - 0x158]
mov edx, dword [rbp - 0x148]
lea ecx, [eax + edx]
mov eax, ecx
mov qword [rbp - 0x158], rax
movsxd rax, dword [rbp - 0x158]
mov rdx, rax
mov rax, qword [rbp - 0x138]
mov byte [rax + rdx], 0xa
mov eax, dword [rbp - 0x158]
lea edx, [eax + 1]
mov eax, edx
mov qword [rbp - 0x158], rax
cmp ebx, esi
jg 0x100cba6c8
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rax, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
mov rdx, rax
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea rax, [0x100e72700]
mov r9, rax
lea rdx, [rbp - 0xb0]
mov r10, qword [rbp - 0x180]
mov rax, qword [r10 + 0x970]
mov rax, qword [rax]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0xb0]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.100c8d560
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov r8, rax
mov rax, qword [rbp - 8]
test rax, rax
je 0x100cba8f3
mov rax, qword [rax - 8]
mov edx, eax
mov eax, 0x100000
mov ecx, eax
mov eax, dword [rbp - 0x158]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rbp - 8]
test rcx, rcx
jne 0x100cba916
lea rcx, [0x100f45460]
mov r9d, eax
call fcn.100020d00
mov edx, eax
mov qword [rbp - 0x148], rdx
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov rcx, rax
mov eax, dword [rbp - 0x148]
mov edx, eax
call fcn.10002ab50
mov edx, eax
mov qword [rbp - 0x148], rdx
mov eax, dword [rbp - 0x158]
mov edx, dword [rbp - 0x148]
lea ecx, [eax + edx]
mov eax, ecx
mov qword [rbp - 0x158], rax
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rax, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
mov rdx, rax
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea rax, [0x100e72720]
mov r9, rax
lea rdx, [rbp - 0xb0]
mov r10, qword [rbp - 0x180]
mov rax, qword [r10 + 0x970]
mov rax, qword [rax]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0xb0]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.100c8d560
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov r8, rax
mov rax, qword [rbp - 8]
test rax, rax
je 0x100cbaa1e
mov rax, qword [rax - 8]
mov edx, eax
mov eax, 0x100000
mov ecx, dword [rbp - 0x158]
sub eax, ecx
mov rcx, qword [rbp - 8]
test rcx, rcx
jne 0x100cbaa3d
lea rcx, [0x100f45460]
mov r9d, eax
call fcn.100020d00
mov edx, eax
mov qword [rbp - 0x148], rdx
movsxd rax, dword [rbp - 0x158]
mov rdx, qword [rbp - 0x138]
lea rax, [rax + rdx]
mov rcx, rax
mov eax, dword [rbp - 0x148]
mov edx, eax
call fcn.10002ab50
mov edx, eax
mov qword [rbp - 0x148], rdx
mov edx, dword [rbp - 0x158]
mov eax, dword [rbp - 0x148]
lea ecx, [edx + eax]
mov eax, ecx
mov qword [rbp - 0x158], rax
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rax, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
mov rdx, rax
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea rax, [0x100e72588]
mov r9, rax
lea rdx, [rbp - 0xb0]
mov r10, qword [rbp - 0x180]
mov rax, qword [r10 + 0x970]
mov rax, qword [rax]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0xb0]
test rax, rax
jne 0x100cbab23
lea rax, [0x100f45460]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp - 0x138]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x40]
mov r8, rax
lea rax, [rbp - 0x38]
mov rdx, rax
mov rax, qword [rbp - 0x150]
mov ecx, 2
mov r9, rax
call fcn.10000a410
and eax, 0xff
mov edx, eax
mov qword [rbp - 0x148], rdx
mov eax, dword [rbp - 0x148]
test eax, eax
je 0x100cbac87
mov rcx, qword [rbp - 0x150]
call sub.kernel32.dll_FreeLibrary
mov rcx, qword [rbp - 0x160]
call sub.kernel32.dll_FreeLibrary
lea rcx, [rbp - 0xa8]
call fcn.100c8f1b0
lea rax, str.swsecwrap.dll
mov r8, rax
mov rax, qword [rbp - 0x10]
lea rcx, [rbp - 0xa8]
mov rdx, rax
call fcn.100c8f590
mov rcx, qword [rbp - 0xa8]
test rcx, rcx
jne 0x100cbabc6
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
lea rcx, [rbp - 0xf8]
call fcn.100c8f1b0
lea rax, [0x100e7251c]
mov r8, rax
mov rax, qword [rbp - 0x10]
lea rcx, [rbp - 0xf8]
mov rdx, rax
call fcn.100c8f590
mov rcx, qword [rbp - 0xf8]
test rcx, rcx
jne 0x100cbac07
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
mov rcx, qword [rbp - 0x178]
call sub.kernel32.dll_RemoveVectoredExceptionHandler
lea rcx, [rbp - 0x50]
call fcn.100c8d4f0
mov eax, dword [rbp - 0x148]
mov edx, eax
lea rcx, [rbp - 0x108]
call fcn.100ce13e0
mov r8, qword [rbp - 0x108]
lea rax, [0x100e725c8]
mov rdx, rax
lea rax, [rbp - 0x50]
mov r9d, 0
mov rcx, rax
call fcn.100c8d680
mov rax, qword [rbp - 0x50]
lea rcx, [rbp - 0x100]
mov rdx, rax
call fcn.100c8f3e0
mov rdx, qword [rbp - 0x100]
mov rax, qword [rbp - 0x180]
mov r8d, 1
mov rcx, rax
call fcn.100cb52e0
cmp r12d, edi
jg 0x100cb9df0
test r14b, r14b
je 0x100cbae6d
mov rax, qword [rbp - 0x180]
cmp byte [rax + 0xa34], 0
je 0x100cbacc1
mov rax, qword [rbp - 0x180]
cmp qword [rax + 0x9c8], 0
setne byte [rbp - 0x168]
jmp 0x100cbacf9
mov qword [rsp + 0x20], 0
mov r9d, 3
lea rax, str.Some_or_all_serial_numbers_on_this_system_require_Network_Floating_license._Do_you_want_to_generate_the_license_file_for_SNL__It_can_be_later_used_on_current_or_different_computer.
mov rdx, rax
lea rax, str.Network_Serial_Numbers_Found
mov r8d, 3
mov rcx, rax
call fcn.100dd0660
cmp eax, 6
sete byte [rbp - 0x168]
mov al, byte [rbp - 0x168]
test al, al
je 0x100cbae6d
mov rax, qword [rbp - 0x180]
cmp byte [rax + 0xa34], 0
jne 0x100cbadd3
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x7e0]
lea rcx, [rdx + 0xb0]
lea rdx, str.Save_license_file
call fcn.100c8d560
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x7e0]
lea rdx, [0x100e70f78]
call fcn.100dcedc0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x7e0]
lea rdx, str.sw_d.lic
mov rax, qword [rbp - 0x180]
mov r8, qword [rax + 0x7e0]
mov rax, qword [r8]
call qword [rax + 0x228]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x7e0]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x7e0]
mov rax, qword [rdx]
call qword [rax + 0x1f8]
test al, al
je 0x100cbadd3
mov rdx, qword [rbp - 0x180]
mov rax, qword [rdx + 0x7e0]
mov rdx, qword [rax + 0xd8]
mov rax, qword [rbp - 0x180]
lea rcx, [rax + 0x9c8]
call fcn.100c8d560
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x9c8]
test rdx, rdx
jne 0x100cbae06
lea rdx, [0x100f45460]
mov r10, rdx
movabs rcx, 0
mov eax, 0
mov edx, 0x40000000
mov r8d, eax
mov r9, rcx
mov rcx, r10
call sub.kernel32.dll_CreateFileA
mov rbx, rax
mov dword [rbp - 0x48], 0
cmp rbx, 0xffffffffffffffff
je 0x100cbae6d
mov qword [rsp + 0x20], 0
mov r10, qword [rbp - 0x130]
lea r9, [rbp - 0x48]
mov eax, dword [rbp - 0x170]
mov edx, eax
mov rcx, rbx
mov r8d, eax
mov rdx, r10
call sub.kernel32.dll_WriteFile
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
mov rcx, qword [rbp - 0x140]
call fcn.100c92140
mov rcx, r15
call fcn.100c94d60
mov rcx, qword [rbp - 0x138]
call fcn.100c94d60
mov rcx, qword [rbp - 0x130]
call fcn.100c94d60
mov rcx, qword [rbp - 0x178]
call sub.kernel32.dll_RemoveVectoredExceptionHandler
mov qword [rsp + 0x20], 0
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x798]
mov rax, qword [rbp - 0x180]
mov rdx, qword [rax + 0x798]
mov rax, qword [rdx]
call qword [rax + 0x920]
movsxd rax, eax
lea rdx, [rax + 0x7e1]
lea rcx, [rbp - 0x50]
call fcn.100ce14a0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x180]
mov rcx, qword [rax + 0x970]
lea r9, [0x100e72588]
lea rdx, [rbp - 0x108]
mov rax, qword [rbp - 0x180]
mov r10, qword [rax + 0x970]
mov rax, qword [r10]
call qword [rax + 0xd8]
mov rax, qword [rbp - 0x108]
test rax, rax
jne 0x100cbaf30
lea rax, [0x100f45460]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp - 0x138]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x38]
mov r9, qword [rbp - 0x150]
mov ecx, 3
call fcn.10000a410
and eax, 0xff
mov edx, eax
mov qword [rbp - 0x148], rdx
mov eax, dword [rbp - 0x148]
test eax, eax
je 0x100cbb073
mov rcx, qword [rbp - 0x150]
call sub.kernel32.dll_FreeLibrary
mov rcx, qword [rbp - 0x160]
call sub.kernel32.dll_FreeLibrary
lea rcx, [rbp - 0x100]
call fcn.100c8f1b0
lea r8, str.swsecwrap.dll
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x100]
call fcn.100c8f590
mov rcx, qword [rbp - 0x100]
test rcx, rcx
jne 0x100cbafc4
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
lea rcx, [rbp - 0x110]
call fcn.100c8f1b0
lea r8, [0x100e7251c]
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x110]
call fcn.100c8f590
mov rcx, qword [rbp - 0x110]
test rcx, rcx
jne 0x100cbafff
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
mov rcx, qword [rbp - 0x178]
call sub.kernel32.dll_RemoveVectoredExceptionHandler
lea rcx, [rbp - 0x50]
call fcn.100c8d4f0
mov eax, dword [rbp - 0x148]
mov edx, eax
lea rcx, [rbp - 0x120]
call fcn.100ce13e0
mov r8, qword [rbp - 0x120]
lea rdx, [0x100e725c8]
lea rcx, [rbp - 0x50]
mov r9d, 0
call fcn.100c8d680
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp - 0x118]
call fcn.100c8f3e0
mov rdx, qword [rbp - 0x118]
mov rcx, qword [rbp - 0x180]
mov r8d, 1
call fcn.100cb52e0
mov rcx, qword [rbp - 0x150]
call sub.kernel32.dll_FreeLibrary
mov rcx, qword [rbp - 0x160]
call sub.kernel32.dll_FreeLibrary
lea rcx, [rbp - 0x118]
call fcn.100c8f1b0
lea r8, str.swsecwrap.dll
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x118]
call fcn.100c8f590
mov rcx, qword [rbp - 0x118]
test rcx, rcx
jne 0x100cbb0c1
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
lea rcx, [rbp - 0x128]
call fcn.100c8f1b0
lea r8, [0x100e7251c]
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x128]
call fcn.100c8f590
mov rcx, qword [rbp - 0x128]
test rcx, rcx
jne 0x100cbb0fc
lea rcx, [0x100f45460]
call sub.kernel32.dll_DeleteFileW
nop
mov rcx, rbp
call fcn.100cb9310
mov rbx, qword [rbp - 0x1b8]
mov rdi, qword [rbp - 0x1b0]
mov rsi, qword [rbp - 0x1a8]
mov r12, qword [rbp - 0x1a0]
mov r13, qword [rbp - 0x198]
mov r14, qword [rbp - 0x190]
mov r15, qword [rbp - 0x188]
lea rsp, [rbp]
pop rbp
ret