Function at 0x18005acb0
Capabilities:
Execute command
Hash data with crc32
Self delete

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xf0
mov r10, qword [0x1803a0850]
lea rdx, [0x1801b2a65]
movaps xmmword [rsp + 0xc0], xmm7
lea r11, [0x1801aa650]
mov dword [rbp + 0x67], 0x43a00000
mov r8b, 0x43
mov dword [rbp + 0x6b], 0x43ee8000
mov rax, qword [r10 + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [r10 + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1801b6524]
addss xmm0, dword [0x1801b6484]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [r10 + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [r10 + 0x3ea0]
movsxd rcx, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r9d, dword [rax + rcx*4 - 4]
not r9d
mov ebx, r9d
nop dword [rax]
cmp r8b, 0x23
jne 0x18005ad83
cmp byte [rdx], r8b
jne 0x18005ad83
cmp byte [rdx + 1], r8b
cmove ebx, r9d
movzx ecx, bl
movzx eax, r8b
movzx r8d, byte [rdx]
xor rcx, rax
shr ebx, 8
inc rdx
xor ebx, dword [r11 + rcx*4]
test r8b, r8b
jne 0x18005ad70
not ebx
cmp dword [r10 + 0x3ed4], ebx
jne 0x18005adbe
lea r8, str.Config
mov edx, 0xb
mov ecx, ebx
call fcn.180080b30
lea r8, [rbp + 0x67]
mov edx, ebx
lea rcx, str.Config
call fcn.180055fe0
mov rcx, qword [0x1803a0850]
movss xmm7, dword [0x1801b6644]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0x9b], 0
jne 0x18005ae11
movaps xmm1, xmm7
mov qword [rbp + 0x67], 0
lea rcx, [rbp + 0x67]
call fcn.180079780
mov qword [rsp + 0x118], rsi
lea rdx, [rbp + 0x67]
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r13
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xe0], r15
mov dword [rbp + 0x67], 0x435f0000
mov dword [rbp + 0x6b], 0x42c80000
call fcn.180073420
mov eax, dword [0x1801b4040]
lea rdx, [rbp - 0x49]
xorps xmm0, xmm0
mov dword [rbp - 0x21], eax
movzx eax, word [0x1801b4044]
lea rcx, [rbp - 0x29]
movdqu xmmword [rbp - 0x49], xmm0
xor edi, edi
mov qword [rbp - 0x19], 0xe
movsd xmm0, qword [str.C:_BaffClient_]
movsd qword [rbp - 0x29], xmm0
mov qword [rbp - 0x39], rdi
mov word [rbp - 0x1b], di
mov qword [rbp - 0x11], 0xf
mov word [rbp - 0x1d], ax
call fcn.18004a510
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x18005aedb
mov rcx, qword [rbp - 0x29]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005aed6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b0f3
call fcn.1801122d0
lea rdx, [rbp - 0x69]
call fcn.18004a950
mov r15, qword [rbp - 0x69]
lea r12, [0x18039e4b0]
mov r13, qword [rbp - 0x61]
mov rsi, r15
cmp r15, r13
je 0x18005b069
cmp qword [rsi + 0x18], 0x10
xorps xmm0, xmm0
mov qword [rbp - 0x19], rdi
mov ecx, 0x16
mov qword [rbp - 0x11], rdi
movabs rax, 0x7fffffffffffffff
mov rdi, qword [rsi + 0x10]
mov r14, rsi
movups xmmword [rbp - 0x29], xmm0
jb 0x18005af2e
mov r14, qword [rsi]
cmp rdi, rax
ja 0x18005b8ee
cmp rdi, 0x10
jae 0x18005af54
mov ebx, 0xf
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], rbx
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x29], xmm0
jmp 0x18005afa1
mov rbx, rdi
mov qword [rbp - 0x11], 0xf
or rbx, 0xf
cmp rbx, rax
jbe 0x18005af6d
mov rbx, rax
jmp 0x18005af75
cmp rbx, 0x16
cmovb rbx, rcx
lea rdx, [rbx + 1]
call fcn.180007380
lea r8, [rdi + 1]
mov qword [rbp - 0x29], rax
mov rdx, r14
mov qword [rbp - 0x19], rdi
mov rcx, rax
mov qword [rbp - 0x11], rbx
call sub.VCRUNTIME140.dll_memcpy
mov rbx, qword [rbp - 0x11]
mov rdi, qword [rbp - 0x19]
cmp qword [0x18039e4c8], 0x10
lea rcx, [rbp - 0x29]
mov r14, qword [rbp - 0x29]
mov rdx, r12
cmovae rdx, qword [0x18039e4b0]
cmp rbx, 0x10
mov qword [rbp + 0x67], 0
cmovae rcx, r14
cmp rdi, qword [0x18039e4c0]
jne 0x18005afe5
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18005afe5
mov dl, 1
jmp 0x18005afe7
xor edx, edx
cmp rbx, 0x10
lea rcx, [rbp - 0x29]
lea r9, [rbp + 0x67]
cmovae rcx, r14
xor r8d, r8d
call fcn.18009ca70
test al, al
je 0x18005b01d
cmp qword [rbp - 0x11], 0x10
lea rdx, [rbp - 0x29]
mov r8, qword [rbp - 0x19]
mov rcx, r12
cmovae rdx, qword [rbp - 0x29]
call fcn.1800624d0
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x18005b054
mov rcx, qword [rbp - 0x29]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005b04f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b062
call fcn.1801122d0
add rsi, 0x20
xor edi, edi
cmp rsi, r13
jmp 0x18005aef9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test r15, r15
je 0x18005b0ad
mov rdx, r13
mov rcx, r15
call fcn.180064ed0
mov rdx, qword [rbp - 0x59]
mov rax, r15
sub rdx, r15
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x18005b0a5
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b0f3
mov rcx, r15
call fcn.1801122d0
call fcn.1800734c0
mov rbx, qword [rbp - 0x49]
test rbx, rbx
je 0x18005b102
mov rdx, qword [rbp - 0x41]
mov rcx, rbx
call fcn.180064ed0
mov rdx, qword [rbp - 0x39]
mov rax, rbx
sub rdx, rbx
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x18005b0fa
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005b0fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1801122d0
cmp byte [0x1803c1f4f], 0
lea rsi, [0x1801b4060]
movaps xmmword [rsp + 0xd0], xmm6
lea rbx, str.Apply
movss xmm6, dword [0x1801b5e10]
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x18005b167
cmp byte [0x1803a029e], 0
lea rax, [0x1801b4048]
lea rcx, str.Save
cmovne rcx, rax
call fcn.18008dab0
test al, al
je 0x18005b26b
mov byte [0x1803c1f4f], 1
jmp 0x18005b26b
cmp byte [0x1803a029e], 0
mov rcx, rbx
cmovne rcx, rsi
call fcn.18008dab0
test al, al
je 0x18005b26b
mov rdx, r12
lea rcx, [rbp - 9]
call fcn.180061db0
mov rcx, rax
call fcn.18001dc70
mov eax, dword [str.Saved]
lea r9, [rbp - 0x49]
movdqa xmm1, xmmword [0x1801b6760]
lea r8, [rbp - 0x69]
movd xmm3, dword [0x18039f500]
lea rdx, [rbp - 0x29]
movd xmm4, dword [0x18039f504]
lea rcx, [rbp - 9]
movd xmm5, dword [0x18039f508]
xorps xmm0, xmm0
movaps xmm2, xmmword [0x1801b6e60]
movups xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x29], eax
movzx eax, byte [0x1801b2a60]
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 0x5d], 0x3f800000
movups xmm0, xmmword [rbp - 0x69]
mov byte [rbp - 0x25], al
mov eax, dword [str.Config]
cvtdq2ps xmm3, xmm3
mov dword [rbp - 9], eax
movzx eax, word [0x1801b2a68]
mov byte [rbp - 0x24], 0
mov word [rbp - 5], ax
cvtdq2ps xmm4, xmm4
mov byte [rbp - 3], 0
mulss xmm3, xmm6
cvtdq2ps xmm5, xmm5
movss xmm0, xmm3
mulss xmm4, xmm6
shufps xmm0, xmm0, 0xe1
mulss xmm5, xmm6
movss xmm0, xmm4
movdqa xmmword [rbp - 0x49], xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movdqu xmmword [rbp - 0x19], xmm1
movdqa xmm1, xmmword [0x1801b6770]
movups xmmword [rbp - 0x69], xmm0
movdqa xmmword [rbp - 0x69], xmm0
movdqu xmmword [rbp + 7], xmm1
call fcn.180026ee0
mov byte [0x1803c1f4f], 0
mov rax, qword [0x1803a0850]
mov rcx, qword [rax + 0x3ea0]
cmp byte [rcx + 0x9b], 0
jne 0x18005b2cd
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0xec]
addss xmm1, dword [rcx + 0xe8]
movss dword [rcx + 0xe0], xmm1
movss dword [rcx + 0xe4], xmm0
movsd xmm0, qword [rcx + 0x110]
mov eax, dword [rcx + 0x11c]
movsd qword [rcx + 0x108], xmm0
mov dword [rcx + 0x118], eax
mov byte [rcx + 0x120], 1
cmp byte [0x1803d63fd], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x18005b314
cmp byte [0x1803a029e], 0
lea rax, [0x1801b4078]
lea rcx, str.Load
cmovne rcx, rax
call fcn.18008dab0
test al, al
je 0x18005b411
mov byte [0x1803d63fd], 1
jmp 0x18005b411
cmp byte [0x1803a029e], 0
mov rcx, rbx
cmovne rcx, rsi
call fcn.18008dab0
test al, al
je 0x18005b411
mov rdx, r12
lea rcx, [rbp - 9]
call fcn.180061db0
mov rcx, rax
call fcn.1800235e0
mov eax, dword [str.Loaded]
lea r9, [rbp - 0x49]
movdqa xmm1, xmmword [0x1801b6770]
lea r8, [rbp - 0x69]
movd xmm3, dword [0x18039f500]
lea rdx, [rbp - 9]
movd xmm4, dword [0x18039f504]
lea rcx, [rbp - 0x29]
movd xmm5, dword [0x18039f508]
xorps xmm0, xmm0
movaps xmm2, xmmword [0x1801b6e60]
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 9], eax
movzx eax, word [0x1801b2a78]
movups xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x5d], 0x3f800000
movups xmm0, xmmword [rbp - 0x69]
mov word [rbp - 5], ax
mov eax, dword [str.Config]
cvtdq2ps xmm3, xmm3
mov dword [rbp - 0x29], eax
movzx eax, word [0x1801b2a68]
mov byte [rbp - 3], 0
mov word [rbp - 0x25], ax
cvtdq2ps xmm4, xmm4
mov byte [rbp - 0x23], 0
mulss xmm3, xmm6
cvtdq2ps xmm5, xmm5
movss xmm0, xmm3
mulss xmm4, xmm6
shufps xmm0, xmm0, 0xe1
mulss xmm5, xmm6
movss xmm0, xmm4
movdqa xmmword [rbp - 0x49], xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x69], xmm0
movdqa xmmword [rbp - 0x69], xmm0
movdqu xmmword [rbp + 7], xmm1
movdqu xmmword [rbp - 0x19], xmm1
call fcn.180026ee0
mov byte [0x1803d63fd], 0
mov rcx, qword [0x1803a0850]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0x9b], 0
jne 0x18005b44a
movaps xmm1, xmm7
mov qword [rbp + 0x67], 0
lea rcx, [rbp + 0x67]
call fcn.180079780
cmp byte [0x1803a0769], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x18005b491
cmp byte [0x1803a029e], 0
lea rax, [0x1801b4090]
lea rcx, str.Delete
cmovne rcx, rax
call fcn.18008dab0
test al, al
je 0x18005b5a9
mov byte [0x1803a0769], 1
jmp 0x18005b5a9
cmp byte [0x1803a029e], 0
cmovne rbx, rsi
mov rcx, rbx
call fcn.18008dab0
test al, al
je 0x18005b5a9
cmp qword [0x18039e4c8], 0x10
cmovae r12, qword [0x18039e4b0]
mov rdx, r12
call fcn.18004b350
mov rax, qword [str.Removed]
lea r9, [rbp - 0x49]
movdqa xmm0, xmmword [0x1801b6700]
lea r8, [rbp - 0x69]
movd xmm3, dword [0x18039f500]
lea rdx, [rbp - 0x29]
movd xmm4, dword [0x18039f504]
lea rcx, [rbp - 9]
movd xmm5, dword [0x18039f508]
movaps xmm2, xmmword [0x1801b6e60]
movdqa xmm1, xmmword [0x1801b6770]
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 0x29], eax
movzx eax, word [0x1801b2a84]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov word [rbp - 0x25], ax
movzx eax, byte [0x1801b2a86]
mov dword [rbp - 0x5d], 0x3f800000
movups xmm0, xmmword [rbp - 0x69]
mov byte [rbp - 0x23], al
mov eax, dword [str.Config]
cvtdq2ps xmm3, xmm3
mov dword [rbp - 9], eax
movzx eax, word [0x1801b2a68]
mov qword [rbp - 0x11], 0xf
mov byte [rbp - 0x22], 0
cvtdq2ps xmm4, xmm4
mov word [rbp - 5], ax
mov byte [rbp - 3], 0
mulss xmm3, xmm6
cvtdq2ps xmm5, xmm5
movss xmm0, xmm3
mulss xmm4, xmm6
shufps xmm0, xmm0, 0xe1
mulss xmm5, xmm6
movss xmm0, xmm4
movdqa xmmword [rbp - 0x49], xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x69], xmm0
movdqa xmmword [rbp - 0x69], xmm0
movdqu xmmword [rbp + 7], xmm1
call fcn.180026ee0
mov byte [0x1803a0769], 0
mov rax, qword [0x1803a0850]
mov rcx, qword [rax + 0x3ea0]
cmp byte [rcx + 0x9b], 0
jne 0x18005b60b
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0xec]
addss xmm1, dword [rcx + 0xe8]
movss dword [rcx + 0xe0], xmm1
movss dword [rcx + 0xe4], xmm0
movsd xmm0, qword [rcx + 0x110]
mov eax, dword [rcx + 0x11c]
movsd qword [rcx + 0x108], xmm0
mov dword [rcx + 0x118], eax
mov byte [rcx + 0x120], 1
cmp byte [0x1803a029e], 0
lea rax, [0x1801b40a8]
lea rcx, str.Create
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.18008dab0
test al, al
je 0x18005b642
mov byte [0x1803a029f], 1
jmp 0x18005b64f
cmp byte [0x1803a029f], 0
je 0x18005b7d4
mov qword [rsp + 0x38], rdi
lea rax, [rbp + 0x67]
mov qword [rsp + 0x30], rdi
lea rbx, [0x180275e10]
mov dword [rsp + 0x28], edi
lea rcx, [0x1801aeef7]
mov r8, rbx
mov qword [rsp + 0x20], rax
mov r9d, 0x100
mov qword [rbp + 0x67], 0
xor edx, edx
call fcn.1800945d0
cmp byte [0x1803a029e], 0
lea rcx, str.Accept
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
cmovne rcx, rsi
call fcn.18008dab0
test al, al
je 0x18005b7d4
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 9], xmm0
mov r8, 0xffffffffffffffff
movdqu xmmword [rbp + 7], xmm1
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x18005b6d0
mov rdx, rbx
lea rcx, [rbp - 9]
call fcn.180007190
lea rcx, [rbp - 9]
call fcn.1800208e0
mov rax, qword [str.Created]
lea r9, [rbp - 0x49]
movdqa xmm0, xmmword [0x1801b6700]
lea r8, [rbp - 0x69]
movd xmm3, dword [0x18039f500]
lea rdx, [rbp - 0x29]
movd xmm4, dword [0x18039f504]
lea rcx, [rbp - 9]
movd xmm5, dword [0x18039f508]
movaps xmm2, xmmword [0x1801b6e60]
movdqa xmm1, xmmword [0x1801b6770]
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 0x29], eax
movzx eax, word [0x1801b2a9c]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov word [rbp - 0x25], ax
movzx eax, byte [0x1801b2a9e]
mov dword [rbp - 0x5d], 0x3f800000
movups xmm0, xmmword [rbp - 0x69]
mov byte [rbp - 0x23], al
mov eax, dword [str.Config]
cvtdq2ps xmm3, xmm3
mov dword [rbp - 9], eax
movzx eax, word [0x1801b2a68]
mov qword [rbp - 0x11], 0xf
mov byte [rbp - 0x22], 0
cvtdq2ps xmm4, xmm4
mov word [rbp - 5], ax
mov byte [rbp - 3], 0
mulss xmm3, xmm6
cvtdq2ps xmm5, xmm5
movss xmm0, xmm3
mulss xmm4, xmm6
shufps xmm0, xmm0, 0xe1
mulss xmm5, xmm6
movss xmm0, xmm4
movdqa xmmword [rbp - 0x49], xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x69], xmm0
movdqa xmmword [rbp - 0x69], xmm0
movdqu xmmword [rbp + 7], xmm1
call fcn.180026ee0
mov byte [0x1803a029f], 0
cmp byte [0x1803a029e], 0
lea rax, [0x1801b40b8]
lea rcx, str.Open_Folder
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.18008dab0
movaps xmm6, xmmword [rsp + 0xd0]
test al, al
je 0x18005b817
lea rcx, str.start_C:BaffClient
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
lea rcx, str.baffclient_zagryjen
call fcn.18008dab0
test al, al
je 0x18005b846
xor edx, edx
lea rcx, str.RIFF
lea r8d, [rdx + 5]
call qword [sym.imp.WINMM.dll_PlaySoundA]
cmp byte [0x1803a029e], 0
lea rax, [0x1801b4108]
lea rcx, str.Unload_Cheat
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.18008dab0
test al, al
je 0x18005b8af
mov ecx, 0x12c
mov byte [0x1803a06e2], 0
mov byte [0x1803a06de], 0
mov dword [0x180275f1c], 0
mov dword [0x180275d9c], 0x3f800000
mov byte [0x1803a06b9], 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1803a060e], 1
mov r15, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xe8]
mov r13, qword [rsp + 0x128]
mov r12, qword [rsp + 0x120]
mov rsi, qword [rsp + 0x118]
movaps xmm7, xmmword [rsp + 0xc0]
add rsp, 0xf0
pop rdi
pop rbx
pop rbp
jmp fcn.1800734c0
call fcn.180006ca0
int3