Function at 0x180064930
Capabilities:
Execute command
Hash data with crc32
Self delete

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xf0
mov r10, qword [0x1803ad9e0]
lea rdx, [0x1801bf271]
movaps xmmword [rsp + 0xc0], xmm7
lea r11, [0x1801b5620]
mov dword [rbp + 0x67], 0x43a00000
mov r8b, 0x43
mov dword [rbp + 0x6b], 0x43ee8000
mov rax, qword [r10 + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [r10 + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1801c1960]
addss xmm0, dword [0x1801c18b0]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [r10 + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [r10 + 0x3ea0]
movsxd rcx, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r9d, dword [rax + rcx*4 - 4]
not r9d
mov ebx, r9d
nop dword [rax]
cmp r8b, 0x23
jne 0x180064a03
cmp byte [rdx], r8b
jne 0x180064a03
cmp byte [rdx + 1], r8b
cmove ebx, r9d
movzx ecx, bl
movzx eax, r8b
movzx r8d, byte [rdx]
xor rcx, rax
shr ebx, 8
inc rdx
xor ebx, dword [r11 + rcx*4]
test r8b, r8b
jne 0x1800649f0
not ebx
cmp dword [r10 + 0x3ed4], ebx
jne 0x180064a3e
lea r8, str.Config
mov edx, 0xb
mov ecx, ebx
call fcn.18008af30
lea r8, [rbp + 0x67]
mov edx, ebx
lea rcx, str.Config
call fcn.18005edc0
mov rcx, qword [0x1803ad9e0]
movss xmm7, dword [0x1801c1a8c]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0x9b], 0
jne 0x180064a91
movaps xmm1, xmm7
mov qword [rbp + 0x67], 0
lea rcx, [rbp + 0x67]
call fcn.180083b80
mov qword [rsp + 0x118], rsi
lea rdx, [rbp + 0x67]
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r13
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xe0], r15
mov dword [rbp + 0x67], 0x435f0000
mov dword [rbp + 0x6b], 0x42c80000
call fcn.18007d820
mov eax, dword [0x1801bf288]
lea rdx, [rbp - 0x49]
xorps xmm0, xmm0
mov dword [rbp - 0x21], eax
movzx eax, word [0x1801bf28c]
lea rcx, [rbp - 0x29]
movdqu xmmword [rbp - 0x49], xmm0
xor edi, edi
mov qword [rbp - 0x19], 0xe
movsd xmm0, qword [str.C:_BaffClient_]
movsd qword [rbp - 0x29], xmm0
mov qword [rbp - 0x39], rdi
mov word [rbp - 0x1b], di
mov qword [rbp - 0x11], 0xf
mov word [rbp - 0x1d], ax
call fcn.180052be0
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x180064b5b
mov rcx, qword [rbp - 0x29]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064b56
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180064d73
call fcn.18011c650
lea rdx, [rbp - 0x69]
call fcn.180053020
mov r15, qword [rbp - 0x69]
lea r12, [0x1803ab850]
mov r13, qword [rbp - 0x61]
mov rsi, r15
cmp r15, r13
je 0x180064ce9
cmp qword [rsi + 0x18], 0x10
xorps xmm0, xmm0
mov qword [rbp - 0x19], rdi
mov ecx, 0x16
mov qword [rbp - 0x11], rdi
movabs rax, 0x7fffffffffffffff
mov rdi, qword [rsi + 0x10]
mov r14, rsi
movups xmmword [rbp - 0x29], xmm0
jb 0x180064bae
mov r14, qword [rsi]
cmp rdi, rax
ja 0x18006558b
cmp rdi, 0x10
jae 0x180064bd4
mov ebx, 0xf
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], rbx
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x29], xmm0
jmp 0x180064c21
mov rbx, rdi
mov qword [rbp - 0x11], 0xf
or rbx, 0xf
cmp rbx, rax
jbe 0x180064bed
mov rbx, rax
jmp 0x180064bf5
cmp rbx, 0x16
cmovb rbx, rcx
lea rdx, [rbx + 1]
call fcn.1800073b0
lea r8, [rdi + 1]
mov qword [rbp - 0x29], rax
mov rdx, r14
mov qword [rbp - 0x19], rdi
mov rcx, rax
mov qword [rbp - 0x11], rbx
call sub.VCRUNTIME140.dll_memcpy
mov rbx, qword [rbp - 0x11]
mov rdi, qword [rbp - 0x19]
cmp qword [0x1803ab868], 0x10
lea rcx, [rbp - 0x29]
mov r14, qword [rbp - 0x29]
mov rdx, r12
cmovae rdx, qword [0x1803ab850]
cmp rbx, 0x10
mov qword [rbp + 0x67], 0
cmovae rcx, r14
cmp rdi, qword [0x1803ab860]
jne 0x180064c65
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180064c65
mov dl, 1
jmp 0x180064c67
xor edx, edx
cmp rbx, 0x10
lea rcx, [rbp - 0x29]
lea r9, [rbp + 0x67]
cmovae rcx, r14
xor r8d, r8d
call fcn.1800a6df0
test al, al
je 0x180064c9d
cmp qword [rbp - 0x11], 0x10
lea rdx, [rbp - 0x29]
mov r8, qword [rbp - 0x19]
mov rcx, r12
cmovae rdx, qword [rbp - 0x29]
call fcn.18006c120
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x180064cd4
mov rcx, qword [rbp - 0x29]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064ccf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180064ce2
call fcn.18011c650
add rsi, 0x20
xor edi, edi
cmp rsi, r13
jmp 0x180064b79
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test r15, r15
je 0x180064d2d
mov rdx, r13
mov rcx, r15
call fcn.18006ed60
mov rdx, qword [rbp - 0x59]
mov rax, r15
sub rdx, r15
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x180064d25
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180064d73
mov rcx, r15
call fcn.18011c650
call fcn.18007d8c0
mov rbx, qword [rbp - 0x49]
test rbx, rbx
je 0x180064d82
mov rdx, qword [rbp - 0x41]
mov rcx, rbx
call fcn.18006ed60
mov rdx, qword [rbp - 0x39]
mov rax, rbx
sub rdx, rbx
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x180064d7a
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180064d7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18011c650
cmp byte [0x1803cf0df], 0
lea rsi, [0x1801bf2b0]
movaps xmmword [rsp + 0xd0], xmm6
lea rbx, str.Apply
movss xmm6, dword [0x1801c1230]
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x180064de7
cmp byte [0x1803ad3fb], 0
lea rax, [0x1801bf290]
lea rcx, str.Save
cmovne rcx, rax
call fcn.180097e30
test al, al
je 0x180064ef3
mov byte [0x1803cf0df], 1
jmp 0x180064ef3
cmp byte [0x1803ad3fb], 0
mov rcx, rbx
cmovne rcx, rsi
call fcn.180097e30
test al, al
je 0x180064ef3
mov rdx, r12
lea rcx, [rbp - 9]
call fcn.18006bac0
mov rcx, rax
call fcn.18001e3b0
mov eax, dword [str.Saved]
lea r9, [rbp - 0x49]
movdqa xmm1, xmmword [0x1801c1bb0]
lea r8, [rbp - 0x69]
movd xmm3, dword [0x1801d9058]
lea rdx, [rbp - 0x29]
movd xmm4, dword [0x1801d905c]
lea rcx, [rbp - 9]
movd xmm5, dword [0x1801d9060]
xorps xmm0, xmm0
movaps xmm2, xmmword [0x1801c2360]
movups xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x29], eax
movzx eax, byte [0x1801bf2d0]
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 0x5d], 0x3f800000
movups xmm0, xmmword [rbp - 0x69]
mov byte [rbp - 0x25], al
mov eax, dword [str.Config]
cvtdq2ps xmm3, xmm3
mov dword [rbp - 9], eax
movzx eax, word [0x1801bf274]
mov byte [rbp - 0x24], 0
mov word [rbp - 5], ax
cvtdq2ps xmm4, xmm4
mov byte [rbp - 3], 0
mov dword [rsp + 0x20], 0x125c
mulss xmm3, xmm6
cvtdq2ps xmm5, xmm5
movss xmm0, xmm3
mulss xmm4, xmm6
shufps xmm0, xmm0, 0xe1
mulss xmm5, xmm6
movss xmm0, xmm4
movdqa xmmword [rbp - 0x49], xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movdqu xmmword [rbp - 0x19], xmm1
movdqa xmm1, xmmword [0x1801c1bc0]
movups xmmword [rbp - 0x69], xmm0
movdqa xmmword [rbp - 0x69], xmm0
movdqu xmmword [rbp + 7], xmm1
call fcn.1800278d0
mov byte [0x1803cf0df], 0
mov rax, qword [0x1803ad9e0]
mov rcx, qword [rax + 0x3ea0]
cmp byte [rcx + 0x9b], 0
jne 0x180064f55
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0xec]
addss xmm1, dword [rcx + 0xe8]
movss dword [rcx + 0xe0], xmm1
movss dword [rcx + 0xe4], xmm0
movsd xmm0, qword [rcx + 0x110]
mov eax, dword [rcx + 0x11c]
movsd qword [rcx + 0x108], xmm0
mov dword [rcx + 0x118], eax
mov byte [rcx + 0x120], 1
cmp byte [0x1803e358d], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x180064f9c
cmp byte [0x1803ad3fb], 0
lea rax, [0x1801bf2d8]
lea rcx, str.Load
cmovne rcx, rax
call fcn.180097e30
test al, al
je 0x1800650a1
mov byte [0x1803e358d], 1
jmp 0x1800650a1
cmp byte [0x1803ad3fb], 0
mov rcx, rbx
cmovne rcx, rsi
call fcn.180097e30
test al, al
je 0x1800650a1
mov rdx, r12
lea rcx, [rbp - 9]
call fcn.18006bac0
mov rcx, rax
call fcn.180023d20
mov eax, dword [str.Loaded]
lea r9, [rbp - 0x49]
movdqa xmm1, xmmword [0x1801c1bc0]
lea r8, [rbp - 0x69]
movd xmm3, dword [0x1801d9058]
lea rdx, [rbp - 9]
movd xmm4, dword [0x1801d905c]
lea rcx, [rbp - 0x29]
movd xmm5, dword [0x1801d9060]
xorps xmm0, xmm0
movaps xmm2, xmmword [0x1801c2360]
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 9], eax
movzx eax, word [0x1801bf2f8]
movups xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x5d], 0x3f800000
movups xmm0, xmmword [rbp - 0x69]
mov word [rbp - 5], ax
mov eax, dword [str.Config]
cvtdq2ps xmm3, xmm3
mov dword [rbp - 0x29], eax
movzx eax, word [0x1801bf274]
mov byte [rbp - 3], 0
mov word [rbp - 0x25], ax
cvtdq2ps xmm4, xmm4
mov byte [rbp - 0x23], 0
mov dword [rsp + 0x20], 0x125c
mulss xmm3, xmm6
cvtdq2ps xmm5, xmm5
movss xmm0, xmm3
mulss xmm4, xmm6
shufps xmm0, xmm0, 0xe1
mulss xmm5, xmm6
movss xmm0, xmm4
movdqa xmmword [rbp - 0x49], xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x69], xmm0
movdqa xmmword [rbp - 0x69], xmm0
movdqu xmmword [rbp + 7], xmm1
movdqu xmmword [rbp - 0x19], xmm1
call fcn.1800278d0
mov byte [0x1803e358d], 0
mov rcx, qword [0x1803ad9e0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0x9b], 0
jne 0x1800650da
movaps xmm1, xmm7
mov qword [rbp + 0x67], 0
lea rcx, [rbp + 0x67]
call fcn.180083b80
cmp byte [0x1803ad932], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x180065121
cmp byte [0x1803ad3fb], 0
lea rax, [0x1801bf300]
lea rcx, str.Delete
cmovne rcx, rax
call fcn.180097e30
test al, al
je 0x180065241
mov byte [0x1803ad932], 1
jmp 0x180065241
cmp byte [0x1803ad3fb], 0
cmovne rbx, rsi
mov rcx, rbx
call fcn.180097e30
test al, al
je 0x180065241
cmp qword [0x1803ab868], 0x10
cmovae r12, qword [0x1803ab850]
mov rdx, r12
call fcn.180053a20
mov rax, qword [str.Removed]
lea r9, [rbp - 0x49]
movdqa xmm0, xmmword [0x1801c1b50]
lea r8, [rbp - 0x69]
movd xmm3, dword [0x1801d9058]
lea rdx, [rbp - 0x29]
movd xmm4, dword [0x1801d905c]
lea rcx, [rbp - 9]
movd xmm5, dword [0x1801d9060]
movaps xmm2, xmmword [0x1801c2360]
movdqa xmm1, xmmword [0x1801c1bc0]
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 0x29], eax
movzx eax, word [0x1801bf31c]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov word [rbp - 0x25], ax
movzx eax, byte [0x1801bf31e]
mov dword [rbp - 0x5d], 0x3f800000
movups xmm0, xmmword [rbp - 0x69]
mov byte [rbp - 0x23], al
mov eax, dword [str.Config]
cvtdq2ps xmm3, xmm3
mov dword [rbp - 9], eax
movzx eax, word [0x1801bf274]
mov qword [rbp - 0x11], 0xf
mov byte [rbp - 0x22], 0
cvtdq2ps xmm4, xmm4
mov word [rbp - 5], ax
mov byte [rbp - 3], 0
mov dword [rsp + 0x20], 0x125c
mulss xmm3, xmm6
cvtdq2ps xmm5, xmm5
movss xmm0, xmm3
mulss xmm4, xmm6
shufps xmm0, xmm0, 0xe1
mulss xmm5, xmm6
movss xmm0, xmm4
movdqa xmmword [rbp - 0x49], xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x69], xmm0
movdqa xmmword [rbp - 0x69], xmm0
movdqu xmmword [rbp + 7], xmm1
call fcn.1800278d0
mov byte [0x1803ad932], 0
mov rax, qword [0x1803ad9e0]
mov rcx, qword [rax + 0x3ea0]
cmp byte [rcx + 0x9b], 0
jne 0x1800652a3
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0xec]
addss xmm1, dword [rcx + 0xe8]
movss dword [rcx + 0xe0], xmm1
movss dword [rcx + 0xe4], xmm0
movsd xmm0, qword [rcx + 0x110]
mov eax, dword [rcx + 0x11c]
movsd qword [rcx + 0x108], xmm0
mov dword [rcx + 0x118], eax
mov byte [rcx + 0x120], 1
cmp byte [0x1803ad3fb], 0
lea rax, [0x1801bf320]
lea rcx, str.Create
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.180097e30
test al, al
je 0x1800652da
mov byte [0x1803ad6c4], 1
jmp 0x1800652e7
cmp byte [0x1803ad6c4], 0
je 0x180065471
mov qword [rsp + 0x38], rdi
lea rax, [rbp + 0x67]
mov qword [rsp + 0x30], rdi
lea rbx, [0x1802a8b60]
mov dword [rsp + 0x28], edi
lea rcx, [0x1801b9ee7]
mov r8, rbx
mov qword [rsp + 0x20], rax
mov r9d, 0x100
mov qword [rbp + 0x67], 0
xor edx, edx
call fcn.18009e950
cmp byte [0x1803ad3fb], 0
lea rcx, str.Accept
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
cmovne rcx, rsi
call fcn.180097e30
test al, al
je 0x180065471
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 9], xmm0
mov r8, 0xffffffffffffffff
movdqu xmmword [rbp + 7], xmm1
inc r8
cmp byte [rbx + r8], 0
jne 0x180065365
mov rdx, rbx
lea rcx, [rbp - 9]
call fcn.1800071c0
lea rcx, [rbp - 9]
call fcn.180021020
mov rax, qword [str.Created]
lea r9, [rbp - 0x49]
movdqa xmm0, xmmword [0x1801c1b50]
lea r8, [rbp - 0x69]
movd xmm3, dword [0x1801d9058]
lea rdx, [rbp - 0x29]
movd xmm4, dword [0x1801d905c]
lea rcx, [rbp - 9]
movd xmm5, dword [0x1801d9060]
movaps xmm2, xmmword [0x1801c2360]
movdqa xmm1, xmmword [0x1801c1bc0]
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 0x29], eax
movzx eax, word [0x1801bf344]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov word [rbp - 0x25], ax
movzx eax, byte [0x1801bf346]
mov dword [rbp - 0x5d], 0x3f800000
movups xmm0, xmmword [rbp - 0x69]
mov byte [rbp - 0x23], al
mov eax, dword [str.Config]
cvtdq2ps xmm3, xmm3
mov dword [rbp - 9], eax
movzx eax, word [0x1801bf274]
mov qword [rbp - 0x11], 0xf
mov byte [rbp - 0x22], 0
cvtdq2ps xmm4, xmm4
mov word [rbp - 5], ax
mov byte [rbp - 3], 0
mov dword [rsp + 0x20], 0x125c
mulss xmm3, xmm6
cvtdq2ps xmm5, xmm5
movss xmm0, xmm3
mulss xmm4, xmm6
shufps xmm0, xmm0, 0xe1
mulss xmm5, xmm6
movss xmm0, xmm4
movdqa xmmword [rbp - 0x49], xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x69], xmm0
movdqa xmmword [rbp - 0x69], xmm0
movdqu xmmword [rbp + 7], xmm1
call fcn.1800278d0
mov byte [0x1803ad6c4], 0
cmp byte [0x1803ad3fb], 0
lea rax, [0x1801bf348]
lea rcx, str.Open_Folder
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.180097e30
movaps xmm6, xmmword [rsp + 0xd0]
test al, al
je 0x1800654b4
lea rcx, str.start_C:BaffClient
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
lea rcx, str.baffclient_zagryjen
call fcn.180097e30
test al, al
je 0x1800654e3
xor edx, edx
lea rcx, str.RIFF
lea r8d, [rdx + 5]
call qword [sym.imp.WINMM.dll_PlaySoundA]
cmp byte [0x1803ad3fb], 0
lea rax, [0x1801bf3a8]
lea rcx, str.Unload_Cheat
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.180097e30
test al, al
je 0x18006554c
mov ecx, 0x12c
mov byte [0x1803ad89d], 0
mov byte [0x1803ad898], 0
mov dword [0x1802a8c64], 0
mov dword [0x1802a8acc], 0x3f800000
mov byte [0x1803ad871], 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1803ad7d6], 1
mov r15, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xe8]
mov r13, qword [rsp + 0x128]
mov r12, qword [rsp + 0x120]
mov rsi, qword [rsp + 0x118]
movaps xmm7, xmmword [rsp + 0xc0]
add rsp, 0xf0
pop rdi
pop rbx
pop rbp
jmp fcn.18007d8c0
call fcn.180006cd0
int3