Function at 0x180031780
Capabilities:
Create directory
Enumerate files on windows
Get disk information
Get hostname
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xba8
mov qword [rsp + 0xb70], 0xfffffffffffffffe
xor ecx, ecx
call fcn.180001c50
mov qword [rsp + 0x58], rax
mov edx, 0x7530
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004da90
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x98]
mov rdx, rax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x2b8]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
cmp dword [rax + 0x180], 0
je 0x180031983
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc0]
call qword [rax + 0x20]
test eax, eax
jne 0x1800318a1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0xa8]
movzx edx, ax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x80]
jmp 0x1800357a1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc0]
call qword [rax + 0x28]
test eax, eax
jne 0x180031911
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0xa8]
movzx edx, ax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x80]
jmp 0x1800357a1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc0]
call qword [rax + 0x68]
test eax, eax
jne 0x180031981
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0xa8]
movzx edx, ax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x80]
jmp 0x1800357a1
jmp 0x1800319fd
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 8], 8
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0xc], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0xa8]
movzx edx, ax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x18]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x98]
mov rdx, rax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x2c0]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x348]
mov edx, eax
imul edx, edx, 0x3e8
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004da90
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
lea rdx, [rsp + 0xa08]
mov rcx, qword [rcx + 0x28]
call fcn.18002eba0
lea rdi, [rsp + 0xb60]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov rdi, qword [rsp + 0xbc0]
mov rdi, qword [rdi + 0xa8]
lea rsi, [rsp + 0xb60]
add rdi, 0x100
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x40], reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x180031b4c
mov qword [rsp + 0x60], 0
jmp 0x180031b1d
mov rax, qword [rsp + 0x60]
add rax, 1
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x48]
call fcn.18004f640
cmp qword [rsp + 0x60], rax
jae 0x180031b4a
mov rax, qword [rsp + 0x60]
movsx ecx, byte [rsp + rax + 0x48]
call fcn.180051034
mov edx, eax
mov rax, qword [rsp + 0x60]
mov byte [rsp + rax + 0x48], dl
jmp 0x180031b0f
jmp 0x180031b5d
lea rdx, [0x180065818]
lea rcx, [rsp + 0x48]
call fcn.180050bb0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
cmp dword [rax + 0x180], 0
je 0x180031ee2
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
lea rdx, [rsp + 0xa18]
mov rcx, qword [rcx + 0x28]
call fcn.180044d30
lea rdi, [rsp + 0xb50]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x7c]
lea rsi, [rsp + 0xb50]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
lea rdx, [rsp + 0xa28]
call qword [rax + 0x3b0]
lea rdi, [rsp + 0xb40]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x68]
lea rsi, [rsp + 0xb40]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x68]
mov edx, dword [rsp + 0x70]
sub edx, eax
and edx, 0xff
shl edx, 8
mov eax, dword [rsp + 0x68]
mov ecx, dword [rsp + 0x70]
sub ecx, eax
sar ecx, 8
and ecx, 0xff
mov eax, edx
or eax, ecx
mov word [rsp + 0x78], ax
mov eax, dword [rsp + 0x6c]
mov edx, dword [rsp + 0x74]
sub edx, eax
and edx, 0xff
shl edx, 8
mov eax, dword [rsp + 0x6c]
mov ecx, dword [rsp + 0x74]
sub ecx, eax
sar ecx, 8
and ecx, 0xff
mov eax, edx
or eax, ecx
mov word [rsp + 0x7a], ax
movzx eax, word [rsp + 0x80]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0x80]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0x80], ax
movzx eax, word [rsp + 0x82]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0x82]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0x82], ax
movzx eax, word [rsp + 0x84]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0x84]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0x84], ax
lea rcx, [rsp + 0x48]
call fcn.18004f640
mov rdi, rax
mov eax, 0xff000000
and rdi, rax
shr rdi, 0x18
lea rcx, [rsp + 0x48]
call fcn.18004f640
and rax, 0xff0000
shr rax, 8
or rdi, rax
lea rcx, [rsp + 0x48]
call fcn.18004f640
and rax, 0xff00
shl rax, 8
or rdi, rax
lea rcx, [rsp + 0x48]
call fcn.18004f640
mov rcx, rax
and rcx, 0xff
shl rcx, 0x18
mov rax, rdi
or rax, rcx
mov dword [rsp + 0x8c], eax
mov r8d, 0x18
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004db80
test eax, eax
jne 0x180031dd8
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0xa8]
movzx edx, ax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x80]
jmp 0x1800357a1
lea rcx, [rsp + 0x48]
call fcn.18004f640
mov r8d, eax
lea rdx, [rsp + 0x48]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004db80
test eax, eax
jne 0x180031e58
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0xa8]
movzx edx, ax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x80]
jmp 0x1800357a1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
cmp dword [rax + 0xc], 0
je 0x180031edd
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc0]
call qword [rax + 0x70]
test eax, eax
jne 0x180031edd
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0xa8]
movzx edx, ax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x80]
jmp 0x1800357a1
jmp 0x1800321fe
mov dword [rsp + 0xa0], 0
mov rdx, qword [rsp + 0xbc0]
mov rdx, qword [rdx + 0xb8]
add rdx, 0x18c
mov r8d, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x90]
call fcn.18004e6a0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
lea rdx, [rsp + 0x90]
mov rcx, qword [rcx + 0x28]
call fcn.18002ef90
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, dword [rax + 0x1a0]
mov rcx, qword [rcx + 0x28]
call fcn.18002f7c0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, dword [rax + 0x19c]
mov rcx, qword [rcx + 0x28]
call fcn.18002f750
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, dword [rax + 0x1b8]
mov rcx, qword [rcx + 0x28]
call fcn.18002f830
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, dword [rax + 0x1a8]
mov rcx, qword [rcx + 0x28]
call fcn.18002f890
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, dword [rax + 0x1b0]
mov rcx, qword [rcx + 0x28]
call fcn.18002f8f0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
cmp dword [rax + 0x1a8], 0
je 0x18003203a
mov dword [rsp + 0xa0], 1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov eax, dword [rax + 0x1b4]
mov dword [rcx + 0x118], eax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x11c], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x7c], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x80], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x84], 0
cmp dword [rsp + 0xa0], 0
je 0x180032124
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
cmp dword [rax + 0x1ac], 0
je 0x180032124
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x11c], 1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x58]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
cmp dword [rax + 0x184], 1
je 0x180032154
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
cmp dword [rax + 0x1a4], 0
je 0x18003216a
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x1c], 1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
cmp dword [rax + 0x184], 6
je 0x1800321b2
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
cmp dword [rax + 0x184], 7
je 0x1800321b2
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
cmp dword [rax + 0x184], 8
jne 0x1800321d1
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, 5
mov rcx, qword [rcx + 0x28]
call fcn.18002f010
jmp 0x1800321fe
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xb8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, dword [rax + 0x184]
mov rcx, qword [rcx + 0x28]
call fcn.18002f010
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0xb8
mov qword [rsp + 0xac0], rax
mov rax, qword [rsp + 0xac0]
mov qword [rsp + 0xa8], rax
mov rcx, qword [rsp + 0xa8]
call fcn.1800127d0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x58], 1
mov rcx, qword [rsp + 0xa8]
call fcn.1800127f0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x78]
test eax, eax
je 0x180032291
mov cl, setsockopt
call fcn.180031710
mov cl, 0x91
call fcn.180031710
mov dword [rsp + 0x44], 1
cmp dword [rsp + 0x44], 0
je 0x180035746
xor ecx, ecx
call fcn.180001c50
mov r8d, 1
lea rdx, [rsp + 0xb0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
jne 0x1800322de
mov dword [rsp + 0x44], 0
jmp 0x180035746
movzx eax, byte [rsp + 0xb0]
mov dword [rsp + 0xb78], eax
cmp dword [rsp + 0xb78], 0x88
ja case.0x18003231f.1
movsxd rax, dword [rsp + 0xb78]
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x357e4]
mov eax, dword [rcx + rax*4 + 0x357ac]
add rax, rcx
jmp rax
lea rdx, [rsp + 0xb1]
mov r8d, reloc.WS2_32.dll_send
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
jne 0x180032354
mov dword [rsp + 0x44], 0
jmp 0x180035741
movzx eax, word [rsp + 0xb8]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb8]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb8], ax
movzx eax, word [rsp + 0xba]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xba]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xba], ax
movzx eax, word [rsp + 0xbc]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xbc]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xbc], ax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0xb8
mov qword [rsp + 0xac8], rax
mov rax, qword [rsp + 0xac8]
mov qword [rsp + 0xc8], rax
mov rcx, qword [rsp + 0xc8]
call fcn.1800127d0
nop
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
lea rdx, [rsp + 0xb4]
mov rcx, qword [rcx + 0x28]
call fcn.18002ef90
test eax, eax
jne 0x18003243e
mov dword [rsp + 0x44], 0
jmp 0x180032465
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rsp + 0xb4]
mov edx, 0x92785926
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x110], 1
mov rcx, qword [rsp + 0xc8]
call fcn.1800127f0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 3
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
jne 0x1800324c3
mov dword [rsp + 0x44], 0
jmp 0x180035741
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, 0xffffffff
mov rcx, qword [rcx + 0x28]
call fcn.18002f7c0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, 6
mov rcx, qword [rcx + 0x28]
call fcn.18002f750
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
xor edx, edx
mov rcx, qword [rcx + 0x28]
call fcn.18002f830
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
xor edx, edx
mov rcx, qword [rcx + 0x28]
call fcn.18002f890
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
xor edx, edx
mov rcx, qword [rcx + 0x28]
call fcn.18002f8f0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x11c], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x118], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x7c], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x80], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x84], 0
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb2], ax
mov dword [rsp + 0xd8], 0
mov dword [rsp + 0xdc], 0
mov dword [rsp + 0xd0], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0xb8
mov qword [rsp + 0xad0], rax
mov rax, qword [rsp + 0xad0]
mov qword [rsp + 0xe0], rax
mov rcx, qword [rsp + 0xe0]
call fcn.1800127d0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x1c], 0
mov rcx, qword [rsp + 0xe0]
call fcn.1800127f0
mov dword [rsp + 0xd4], 0
jmp 0x18003268c
mov eax, dword [rsp + 0xd4]
add eax, 1
mov dword [rsp + 0xd4], eax
movzx eax, word [rsp + 0xb2]
cmp dword [rsp + 0xd4], eax
jge 0x180032eb2
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0xb8
mov qword [rsp + 0xad8], rax
mov rax, qword [rsp + 0xad8]
mov qword [rsp + 0xf0], rax
mov rcx, qword [rsp + 0xf0]
call fcn.1800127d0
nop
mov r8d, 4
lea rdx, [rsp + 0xe8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
jne 0x18003271c
mov dword [rsp + 0x44], 0
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x180032eb2
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 1
jne 0x1800327c1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x1c], 1
mov dword [rsp + 0xf8], 1
mov r9d, 4
lea r8, [rsp + 0xf8]
mov edx, 0x91748275
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
nop
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x18003267b
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 0xffffff10
jne 0x18003287a
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, 1
mov rcx, qword [rcx + 0x28]
call fcn.18002f830
mov dword [rsp + 0xdc], 1
mov dword [rsp + 0xfc], 1
mov r9d, 4
lea r8, [rsp + 0xfc]
mov edx, 0x81659265
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
nop
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x18003267b
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 0xffffff11
jne 0x180032933
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, 1
mov rcx, qword [rcx + 0x28]
call fcn.18002f890
mov dword [rsp + 0xdc], 1
mov dword [rsp + 0x100], 1
mov r9d, 4
lea r8, [rsp + 0x100]
mov edx, 0x39185037
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
nop
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x18003267b
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 0xffffff00
jb 0x180032a7d
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 0xffffff09
ja 0x180032a7d
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
sub eax, 0xffffff00
mov dword [rsp + 0x104], eax
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, dword [rsp + 0x104]
mov rcx, qword [rcx + 0x28]
call fcn.18002f750
mov r9d, 4
lea r8, [rsp + 0x104]
mov edx, 0x82658926
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
nop
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x18003267b
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 0xffffffe0
jb 0x180032bc1
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 0xffffffe9
ja 0x180032bc1
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
sub eax, 0xffffffe0
mov dword [rsp + 0x108], eax
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, dword [rsp + 0x108]
mov rcx, qword [rcx + 0x28]
call fcn.18002f7c0
mov r9d, 4
lea r8, [rsp + 0x108]
mov edx, 0x31857295
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
nop
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x18003267b
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 0xffffff18
jne 0x180032c5d
mov dword [rsp + 0xd0], 1
mov dword [rsp + 0x10c], 1
mov r9d, 4
lea r8, [rsp + 0x10c]
mov edx, 0x47295620
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
nop
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x18003267b
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 0xffffff20
jne 0x180032d0b
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov edx, 1
mov rcx, qword [rcx + 0x28]
call fcn.18002f8f0
mov dword [rsp + 0x110], 1
mov r9d, 4
lea r8, [rsp + 0x110]
mov edx, 0x11984659
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
nop
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x18003267b
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
cmp eax, 0xffffff21
jne 0x180032db5
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x118], 1
mov dword [rsp + 0x114], 1
mov r9d, 4
lea r8, [rsp + 0x114]
mov edx, 0x94856345
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
nop
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x18003267b
cmp dword [rsp + 0xd8], 0
jne 0x180032ea0
mov edx, dword [rsp + 0xe8]
and edx, 0xff000000
shr edx, 0x18
mov eax, dword [rsp + 0xe8]
and eax, 0xff0000
shr eax, 8
or edx, eax
mov eax, dword [rsp + 0xe8]
and eax, 0xff00
shl eax, 8
or edx, eax
mov eax, dword [rsp + 0xe8]
and eax, 0xff
shl eax, 0x18
or edx, eax
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rcx, qword [rcx + 0x28]
call fcn.18002f010
test eax, eax
je 0x180032ea0
mov eax, dword [rsp + 0xe8]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xe8]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
mov dword [rsp + 0x118], eax
mov r9d, 4
lea r8, [rsp + 0x118]
mov edx, 0x28471649
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
mov dword [rsp + 0xd8], 1
mov rcx, qword [rsp + 0xf0]
call fcn.1800127f0
jmp 0x18003267b
cmp dword [rsp + 0xdc], 0
je 0x180032f03
cmp dword [rsp + 0xd0], 0
je 0x180032f03
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x11c], 1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x58]
cmp dword [rsp + 0xd8], 0
jne 0x180032fb4
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0xb8
mov qword [rsp + 0xae0], rax
mov rax, qword [rsp + 0xae0]
mov qword [rsp + 0x120], rax
mov rcx, qword [rsp + 0x120]
call fcn.1800127d0
nop
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
xor edx, edx
mov rcx, qword [rcx + 0x28]
call fcn.18002f010
test eax, eax
jne 0x180032f74
mov dword [rsp + 0x44], 0
jmp 0x180032fa7
mov dword [rsp + 0x128], 0
mov r9d, 4
lea r8, [rsp + 0x128]
mov edx, 0x28471649
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xb8]
call fcn.180001950
nop
mov rcx, qword [rsp + 0x120]
call fcn.1800127f0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 9
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
jne 0x180032fec
mov dword [rsp + 0x44], 0
jmp 0x180035741
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0xb8
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0xae8]
mov qword [rsp + 0x150], rax
mov rcx, qword [rsp + 0x150]
call fcn.1800127d0
nop
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
lea rdx, [rsp + 0xa38]
call qword [rax + 0x3b0]
lea rdi, [rsp + 0xb30]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x130]
lea rsi, [rsp + 0xb30]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
movzx eax, ax
add eax, dword [rsp + 0x130]
mov dword [rsp + 0x140], eax
movzx eax, word [rsp + 0xb4]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb4]
sar ecx, 8
and ecx, 0xff
or eax, ecx
movzx eax, ax
add eax, dword [rsp + 0x134]
mov dword [rsp + 0x144], eax
movzx eax, word [rsp + 0xb6]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb6]
sar ecx, 8
and ecx, 0xff
or eax, ecx
movzx ecx, ax
mov eax, dword [rsp + 0x140]
add eax, ecx
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x138]
cmp dword [rsp + 0x148], eax
jle 0x18003313b
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x130]
cmp dword [rsp + 0x140], eax
jge 0x180033159
mov eax, dword [rsp + 0x130]
mov dword [rsp + 0x140], eax
movzx eax, word [rsp + 0xb8]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb8]
sar ecx, 8
and ecx, 0xff
or eax, ecx
movzx ecx, ax
mov eax, dword [rsp + 0x144]
add eax, ecx
mov dword [rsp + 0x14c], eax
mov eax, dword [rsp + 0x13c]
cmp dword [rsp + 0x14c], eax
jle 0x1800331ad
mov eax, dword [rsp + 0x13c]
mov dword [rsp + 0x14c], eax
mov eax, dword [rsp + 0x134]
cmp dword [rsp + 0x144], eax
jge 0x1800331cb
mov eax, dword [rsp + 0x134]
mov dword [rsp + 0x144], eax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0xfc], 1
lea r8, [rsp + 0x130]
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x140]
call qword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x180033273
movzx eax, byte [rsp + 0xb1]
test eax, eax
je 0x180033237
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
add rcx, 0xa8
lea rdx, [rsp + 0x140]
call fcn.1800438b0
jmp 0x180033273
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
add rcx, 0xb0
lea rdx, [rsp + 0x140]
call fcn.1800438b0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0xe0], 0
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0xb8]
nop
mov rcx, qword [rsp + 0x150]
call fcn.1800127f0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 7
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x1800333dc
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x78]
test eax, eax
je 0x1800333dc
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x90]
test eax, eax
jne 0x1800333dc
mov eax, dword [rsp + 0xb4]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
mov dword [rsp + 0xb4], eax
movzx eax, byte [rsp + 0xb1]
test eax, eax
je 0x180033394
mov byte [rsp + 0xb7c], 1
jmp 0x18003339c
mov byte [rsp + 0xb7c], 0
mov r8, qword [rsp + 0xbc0]
mov r8, qword [r8 + 0xa8]
mov r8, qword [r8 + 0x30]
movzx edx, byte [rsp + 0xb7c]
mov ecx, dword [rsp + 0xb4]
call fcn.18003ea90
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x114], 1
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 5
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x180033ac3
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x80]
test eax, eax
je 0x180033ac3
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x90]
test eax, eax
jne 0x180033ac3
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb2], ax
movzx eax, word [rsp + 0xb4]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb4]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb4], ax
movzx ecx, word [rsp + 0xb2]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x98], ecx
movzx ecx, word [rsp + 0xb4]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x9c], ecx
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0xb8
mov qword [rsp + 0xaf0], rax
mov rax, qword [rsp + 0xaf0]
mov qword [rsp + 0x188], rax
mov rcx, qword [rsp + 0x188]
call fcn.1800127d0
nop
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
lea rdx, [rsp + 0xa48]
call qword [rax + 0x3b0]
lea rdi, [rsp + 0xb20]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x178]
lea rsi, [rsp + 0xb20]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x188]
call fcn.1800127f0
movzx eax, word [rsp + 0xb2]
add eax, dword [rsp + 0x178]
mov word [rsp + 0xb2], ax
movzx eax, word [rsp + 0xb4]
add eax, dword [rsp + 0x17c]
mov word [rsp + 0xb4], ax
mov dword [rsp + 0x160], 0x8000
mov eax, dword [rsp + 0x160]
or eax, 1
mov dword [rsp + 0x160], eax
mov r8, qword [rsp + 0xbc0]
mov r8, qword [r8 + 0xa8]
add r8, 0x98
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
xor r9d, r9d
mov edx, 1
call qword [rax + 0x430]
movzx ecx, byte [rsp + 0xb1]
and ecx, 1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
movzx eax, byte [rax + 0x75]
and eax, 1
cmp ecx, eax
je 0x180033723
mov ecx, reloc.WS2_32.dll_socket
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x1800336a0
movzx eax, byte [rsp + 0xb1]
and eax, 1
test eax, eax
je 0x18003367c
mov dword [rsp + 0xb80], 8
jmp 0x180033687
mov dword [rsp + 0xb80], 0x10
mov ecx, dword [rsp + 0xb80]
mov eax, dword [rsp + 0x160]
or eax, ecx
mov dword [rsp + 0x160], eax
jmp 0x1800336de
movzx eax, byte [rsp + 0xb1]
and eax, 1
test eax, eax
je 0x1800336bc
mov dword [rsp + 0xb84], 2
jmp 0x1800336c7
mov dword [rsp + 0xb84], 4
mov ecx, dword [rsp + 0xb84]
mov eax, dword [rsp + 0x160]
or eax, ecx
mov dword [rsp + 0x160], eax
mov r8, qword [rsp + 0xbc0]
mov r8, qword [r8 + 0xa8]
add r8, 0x98
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
xor r9d, r9d
mov edx, 1
call qword [rax + 0x430]
movzx ecx, byte [rsp + 0xb1]
and ecx, 2
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
movzx eax, byte [rax + 0x75]
and eax, 2
cmp ecx, eax
je 0x1800337cf
movzx eax, byte [rsp + 0xb1]
and eax, 2
test eax, eax
je 0x180033768
mov dword [rsp + 0xb88], 0x20
jmp 0x180033773
mov dword [rsp + 0xb88], 0x40
mov ecx, dword [rsp + 0xb88]
mov eax, dword [rsp + 0x160]
or eax, ecx
mov dword [rsp + 0x160], eax
mov r8, qword [rsp + 0xbc0]
mov r8, qword [r8 + 0xa8]
add r8, 0x98
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
xor r9d, r9d
mov edx, 1
call qword [rax + 0x430]
movzx ecx, byte [rsp + 0xb1]
and ecx, 4
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
movzx eax, byte [rax + 0x75]
and eax, 4
cmp ecx, eax
je 0x1800338ca
mov ecx, reloc.WS2_32.dll_socket
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x180033847
movzx eax, byte [rsp + 0xb1]
and eax, 4
test eax, eax
je 0x180033823
mov dword [rsp + 0xb8c], 2
jmp 0x18003382e
mov dword [rsp + 0xb8c], 4
mov ecx, dword [rsp + 0xb8c]
mov eax, dword [rsp + 0x160]
or eax, ecx
mov dword [rsp + 0x160], eax
jmp 0x180033885
movzx eax, byte [rsp + 0xb1]
and eax, 4
test eax, eax
je 0x180033863
mov dword [rsp + 0xb90], 8
jmp 0x18003386e
mov dword [rsp + 0xb90], 0x10
mov ecx, dword [rsp + 0xb90]
mov eax, dword [rsp + 0x160]
or eax, ecx
mov dword [rsp + 0x160], eax
mov r8, qword [rsp + 0xbc0]
mov r8, qword [r8 + 0xa8]
add r8, 0x98
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
xor r9d, r9d
mov edx, 1
call qword [rax + 0x430]
mov dword [rsp + 0x170], 0
movzx eax, byte [rsp + 0xb1]
and eax, 8
test eax, eax
je 0x18003391e
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
movzx eax, byte [rax + 0x75]
and eax, 8
test eax, eax
jne 0x18003391e
mov eax, dword [rsp + 0x160]
or eax, 0x800
mov dword [rsp + 0x160], eax
mov dword [rsp + 0x170], 0x78
jmp 0x180033965
movzx eax, byte [rsp + 0xb1]
and eax, 0x10
test eax, eax
je 0x180033965
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
movzx eax, byte [rax + 0x75]
and eax, 0x10
test eax, eax
jne 0x180033965
mov eax, dword [rsp + 0x160]
or eax, 0x800
mov dword [rsp + 0x160], eax
mov dword [rsp + 0x170], 0xffffff88
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov qword [rsp + 0x168], rax
lea rdx, [rsp + 0x178]
mov rcx, qword [rsp + 0x168]
call qword [sym.imp.USER32.dll_GetWindowRect]
movzx edx, word [rsp + 0xb2]
imul edx, edx, 0xffff
mov eax, dword [rsp + 0x178]
mov ecx, dword [rsp + 0x180]
sub ecx, eax
sub ecx, 1
mov eax, edx
cdq
idiv ecx
mov dword [rsp + 0x15c], eax
movzx edx, word [rsp + 0xb4]
imul edx, edx, 0xffff
mov eax, dword [rsp + 0x17c]
mov ecx, dword [rsp + 0x184]
sub ecx, eax
sub ecx, 1
mov eax, edx
cdq
idiv ecx
mov dword [rsp + 0x158], eax
mov qword [rsp + 0x20], 0
mov r9d, dword [rsp + 0x170]
mov r8d, dword [rsp + 0x158]
mov edx, dword [rsp + 0x15c]
mov ecx, dword [rsp + 0x160]
call qword [sym.imp.USER32.dll_mouse_event]
mov rdi, qword [rsp + 0xbc0]
mov rdi, qword [rdi + 0xa8]
lea rsi, [rsp + 0xb0]
add rdi, 0x74
mov ecx, 6
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x114], 1
xor ecx, ecx
call fcn.18004f92c
mov qword [rsp + 0xaf8], rax
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rsp + 0xaf8]
mov qword [rcx + 0x88], rax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x20]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0xb8]
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 7
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x180033c73
mov eax, dword [rsp + 0xb4]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x198]
add eax, 1
mov ecx, eax
call fcn.18004e420
mov qword [rsp + 0xa58], rax
mov rax, qword [rsp + 0xa58]
mov qword [rsp + 0x190], rax
cmp qword [rsp + 0x190], 0
jne 0x180033b77
jmp 0x180035741
mov ecx, dword [rsp + 0x198]
mov rax, qword [rsp + 0x190]
mov byte [rax + rcx], 0
mov r8d, dword [rsp + 0x198]
mov rdx, qword [rsp + 0x190]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
jne 0x180033bd4
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0xa60], rax
mov rcx, qword [rsp + 0xa60]
call fcn.18004f9e8
jmp 0x180035741
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x78]
test eax, eax
je 0x180033c56
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x80]
test eax, eax
je 0x180033c56
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
mov rdx, qword [rsp + 0x190]
call qword [rax + 0x178]
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0xa68], rax
mov rcx, qword [rsp + 0xa68]
call fcn.18004f9e8
jmp 0x180035741
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x378]
test eax, eax
je 0x180033cce
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x88]
test eax, eax
jne 0x180033cdb
mov dword [rsp + 0x44], 0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 3
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x180034623
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb2], ax
movzx eax, word [rsp + 0xb2]
cmp eax, 0xff
jle 0x180033d44
jmp 0x180035741
movzx r8d, word [rsp + 0xb2]
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
movzx edx, word [rsp + 0xb2]
mov byte [rsp + rdx + 0x1e0], 0
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0xbc0]
call fcn.180037df0
call fcn.18004d2d0
movzx eax, al
test eax, eax
jne 0x180033e48
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0x120
mov qword [rsp + 0xb00], rax
mov rax, qword [rsp + 0xb00]
mov qword [rsp + 0x300], rax
mov rcx, qword [rsp + 0x300]
call fcn.1800127d0
nop
mov byte [rsp + 0x2f8], 0x82
xor eax, eax
mov word [rsp + 0x2fa], ax
xor eax, eax
mov word [rsp + 0x2fc], ax
xor eax, eax
mov word [rsp + 0x2fe], ax
movzx eax, byte [rsp + 0xb1]
or eax, 0x80
mov byte [rsp + 0x2f9], al
mov r8d, 8
lea rdx, [rsp + 0x2f8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004db80
nop
mov rcx, qword [rsp + 0x300]
call fcn.1800127f0
jmp 0x180035741
lea rcx, [rsp + 0x2e0]
call fcn.18002a300
nop
lea rcx, [rsp + 0x1e0]
call fcn.18004f640
test rax, rax
jne 0x18003401e
lea rdx, [rsp + 0x310]
mov ecx, 0xff
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
test eax, eax
jne 0x180033f44
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0x120
mov qword [rsp + 0xb08], rax
mov rax, qword [rsp + 0xb08]
mov qword [rsp + 0x420], rax
mov rcx, qword [rsp + 0x420]
call fcn.1800127d0
nop
mov byte [rsp + 0x418], 0x82
xor eax, eax
mov word [rsp + 0x41a], ax
xor eax, eax
mov word [rsp + 0x41c], ax
xor eax, eax
mov word [rsp + 0x41e], ax
movzx eax, byte [rsp + 0xb1]
or eax, 0x80
mov byte [rsp + 0x419], al
mov r8d, 8
lea rdx, [rsp + 0x418]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004db80
call fcn.18004d320
nop
mov rcx, qword [rsp + 0x420]
call fcn.1800127f0
nop
lea rcx, [rsp + 0x2e0]
call fcn.18002a380
jmp 0x180035741
mov qword [rsp + 0x410], 0
mov rax, qword [rsp + 0x410]
movsx eax, byte [rsp + rax + 0x310]
test eax, eax
je 0x180034019
mov rax, qword [rsp + 0x410]
lea rcx, [rsp + rax + 0x310]
call fcn.18005f824
mov qword [rsp + 0x430], rax
mov edx, 0x5c
mov rcx, qword [rsp + 0x430]
call fcn.180050e9c
mov qword [rsp + 0x428], rax
cmp qword [rsp + 0x428], 0
je 0x180033fb5
mov rax, qword [rsp + 0x428]
mov byte [rax], 0
xor r9d, r9d
mov r8d, 0xffffffff
mov rdx, qword [rsp + 0x430]
lea rcx, [rsp + 0x2e0]
call fcn.18002a3b0
mov rcx, qword [rsp + 0x430]
call fcn.18004e594
mov rdx, qword [rsp + 0x410]
lea rcx, [rsp + rdx + 0x310]
lea rdx, [0x180066318]
call fcn.180050e08
mov rdx, rax
mov rax, qword [rsp + 0x410]
lea rax, [rax + rdx + 1]
mov qword [rsp + 0x410], rax
jmp 0x180033f50
jmp 0x180034272
lea rdx, [0x1800668dc]
lea rcx, [rsp + 0x1e0]
call fcn.180050b10
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [rsp + 0x438], eax
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x588], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x580], eax
mov ecx, dword [rsp + 0x438]
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
cmp qword [rsp + 0x588], 0xffffffffffffffff
je 0x180034199
lea rdx, [0x1800668d8]
lea rcx, [rsp + 0x46c]
call fcn.180050c80
test eax, eax
je 0x180034168
lea rdx, [0x1800668d4]
lea rcx, [rsp + 0x46c]
call fcn.180050c80
test eax, eax
je 0x180034168
mov eax, dword [rsp + 0x454]
mov dword [rsp + 0x590], eax
mov eax, dword [rsp + 0x458]
mov dword [rsp + 0x594], eax
movabs rcx, 0x1028f05161da8000
mov rax, qword [rsp + 0x590]
sub rax, rcx
cqo
mov ecx, 0x989680
idiv rcx
mov qword [rsp + 0x590], rax
mov eax, dword [rsp + 0x440]
and eax, 0x10
test eax, eax
je 0x180034134
xor r9d, r9d
mov r8d, 0xffffffff
lea rdx, [rsp + 0x46c]
lea rcx, [rsp + 0x2e0]
call fcn.18002a3b0
jmp 0x180034168
movzx eax, byte [rsp + 0xb1]
and eax, 0x10
test eax, eax
jne 0x180034168
mov r9d, dword [rsp + 0x594]
mov r8d, dword [rsp + 0x460]
lea rdx, [rsp + 0x46c]
lea rcx, [rsp + 0x2e0]
call fcn.18002a3b0
lea rdx, [rsp + 0x440]
mov rcx, qword [rsp + 0x588]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x18003408b
mov rcx, qword [rsp + 0x588]
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x180034272
cmp dword [rsp + 0x580], 0
je 0x180034272
cmp dword [rsp + 0x580], 2
je 0x180034272
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0x120
mov qword [rsp + 0xb10], rax
mov rax, qword [rsp + 0xb10]
mov qword [rsp + 0x5a0], rax
mov rcx, qword [rsp + 0x5a0]
call fcn.1800127d0
nop
mov byte [rsp + 0x598], 0x82
xor eax, eax
mov word [rsp + 0x59a], ax
xor eax, eax
mov word [rsp + 0x59c], ax
xor eax, eax
mov word [rsp + 0x59e], ax
movzx eax, byte [rsp + 0xb1]
or eax, 0x80
mov byte [rsp + 0x599], al
mov r8d, 8
lea rdx, [rsp + 0x598]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004db80
call fcn.18004d320
nop
mov rcx, qword [rsp + 0x5a0]
call fcn.1800127f0
nop
lea rcx, [rsp + 0x2e0]
call fcn.18002a380
jmp 0x180035741
lea rcx, [rsp + 0x2e0]
call fcn.18002a600
shl eax, 3
mov dword [rsp + 0x1b0], eax
lea rcx, [rsp + 0x2e0]
call fcn.18002a610
mov edx, eax
mov eax, dword [rsp + 0x1b0]
lea edi, [rax + rdx + 8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a600
mov edx, eax
mov eax, edi
add eax, edx
mov dword [rsp + 0x1d0], eax
movsxd rcx, dword [rsp + 0x1d0]
call fcn.18004e420
mov qword [rsp + 0xa70], rax
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0x1c8]
add rax, 8
mov qword [rsp + 0x1c0], rax
mov eax, dword [rsp + 0x1b0]
add eax, 8
movsxd rcx, eax
mov rax, qword [rsp + 0x1c8]
add rax, rcx
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1a8]
mov byte [rax], 0x82
movzx ecx, byte [rsp + 0xb1]
and ecx, 0xf0
mov rax, qword [rsp + 0x1a8]
mov byte [rax + 1], cl
lea rcx, [rsp + 0x2e0]
call fcn.18002a600
mov edi, eax
and edi, 0xff
shl edi, 8
lea rcx, [rsp + 0x2e0]
call fcn.18002a600
sar eax, 8
and eax, 0xff
mov ecx, edi
or ecx, eax
mov rax, qword [rsp + 0x1a8]
mov word [rax + 2], cx
lea rcx, [rsp + 0x2e0]
call fcn.18002a610
mov esi, eax
lea rcx, [rsp + 0x2e0]
call fcn.18002a600
add esi, eax
and esi, 0xff
shl esi, 8
lea rcx, [rsp + 0x2e0]
call fcn.18002a610
mov edi, eax
lea rcx, [rsp + 0x2e0]
call fcn.18002a600
mov edx, eax
mov eax, edi
add eax, edx
sar eax, 8
and eax, 0xff
mov ecx, esi
or ecx, eax
mov rax, qword [rsp + 0x1a8]
mov word [rax + 4], cx
mov rcx, qword [rsp + 0x1a8]
mov rax, qword [rsp + 0x1a8]
movzx eax, word [rax + 4]
mov word [rcx + 6], ax
mov dword [rsp + 0x5a8], 0
jmp 0x18003441e
mov eax, dword [rsp + 0x5a8]
add eax, 1
mov dword [rsp + 0x5a8], eax
lea rcx, [rsp + 0x2e0]
call fcn.18002a600
cmp dword [rsp + 0x5a8], eax
jge 0x1800345a3
mov edx, dword [rsp + 0x5a8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a580
mov edi, eax
and edi, 0xff000000
shr edi, 0x18
mov edx, dword [rsp + 0x5a8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a580
and eax, 0xff0000
shr eax, 8
or edi, eax
mov edx, dword [rsp + 0x5a8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a580
and eax, 0xff00
shl eax, 8
or edi, eax
mov edx, dword [rsp + 0x5a8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a580
and eax, 0xff
shl eax, 0x18
mov edx, edi
or edx, eax
movsxd rcx, dword [rsp + 0x5a8]
mov rax, qword [rsp + 0x1c0]
mov dword [rax + rcx*8], edx
mov edx, dword [rsp + 0x5a8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a5c0
mov edi, eax
and edi, 0xff000000
shr edi, 0x18
mov edx, dword [rsp + 0x5a8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a5c0
and eax, 0xff0000
shr eax, 8
or edi, eax
mov edx, dword [rsp + 0x5a8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a5c0
and eax, 0xff00
shl eax, 8
or edi, eax
mov edx, dword [rsp + 0x5a8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a5c0
and eax, 0xff
shl eax, 0x18
mov edx, edi
or edx, eax
movsxd rcx, dword [rsp + 0x5a8]
mov rax, qword [rsp + 0x1c0]
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rsp + 0x5a8]
lea rcx, [rsp + 0x2e0]
call fcn.18002a540
mov rdx, rax
mov rcx, qword [rsp + 0x1a0]
call fcn.180050bb0
mov rcx, qword [rsp + 0x1a0]
call fcn.18004f640
mov rdx, rax
mov rax, qword [rsp + 0x1a0]
lea rax, [rax + rdx + 1]
mov qword [rsp + 0x1a0], rax
jmp 0x18003440d
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
add rax, 0x120
mov qword [rsp + 0xb18], rax
mov rax, qword [rsp + 0xb18]
mov qword [rsp + 0x1b8], rax
mov rcx, qword [rsp + 0x1b8]
call fcn.1800127d0
nop
mov r8d, dword [rsp + 0x1d0]
mov rdx, qword [rsp + 0x1c8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004db80
call fcn.18004d320
nop
mov rcx, qword [rsp + 0x1b8]
call fcn.1800127f0
nop
lea rcx, [rsp + 0x2e0]
call fcn.18002a380
jmp 0x180035741
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x378]
test eax, eax
je 0x18003467e
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x88]
test eax, eax
jne 0x18003468b
mov dword [rsp + 0x44], 0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 7
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x180034af3
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb2], ax
mov eax, dword [rsp + 0xb4]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
mov dword [rsp + 0xb4], eax
call fcn.18004d2d0
movzx eax, al
test eax, eax
jne 0x1800347ab
movzx r8d, word [rsp + 0xb2]
xor edx, edx
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
lea rdi, [rsp + 0x820]
lea rsi, str.Cannot_impersonate_logged_on_user
mov ecx, 0x22
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x820]
call fcn.18004f640
mov qword [rsp + 0x818], rax
lea r8, [rsp + 0x820]
movzx edx, word [rsp + 0x818]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038030
jmp 0x180035741
movzx eax, word [rsp + 0xb2]
cmp eax, 0xff
jle 0x180034832
movzx r8d, word [rsp + 0xb2]
xor edx, edx
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
lea rdi, [rsp + 0x850]
lea rsi, str.Path_length_exceeds_255_bytes
mov ecx, 0x1e
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x850]
call fcn.18004f640
mov qword [rsp + 0x848], rax
lea r8, [rsp + 0x850]
movzx edx, word [rsp + 0x848]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038030
call fcn.18004d320
jmp 0x180035741
movzx r8d, word [rsp + 0xb2]
lea rdx, [rsp + 0x700]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
movzx edx, word [rsp + 0xb2]
mov byte [rsp + rdx + 0x700], 0
lea rdx, [rsp + 0x700]
mov rcx, qword [rsp + 0xbc0]
call fcn.180037df0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
add rcx, 0x264
lea rdx, [rsp + 0x700]
call fcn.180050bb0
mov dword [rsp + 0x810], 0x2000
mov dword [rsp + 0x800], 0
mov dword [rsp + 0x814], 0
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [rsp + 0x5ac], eax
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x700]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x808], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x804], eax
mov ecx, dword [rsp + 0x5ac]
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov eax, dword [rsp + 0x5b0]
and eax, 0x10
test eax, eax
jne 0x18003492f
cmp qword [rsp + 0x808], 0xffffffffffffffff
je 0x18003492f
movsx eax, byte [rsp + 0x700]
test eax, eax
jne 0x180034996
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_FindClose]
lea rdi, [rsp + 0x878]
lea rsi, str.Cannot_open_file__perhaps_it_is_absent_or_is_a_directory
mov ecx, 0x39
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x878]
call fcn.18004f640
mov qword [rsp + 0x870], rax
lea r8, [rsp + 0x878]
movzx edx, word [rsp + 0x870]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038030
call fcn.18004d320
jmp 0x180035741
mov eax, dword [rsp + 0x5d0]
mov dword [rsp + 0x6f0], eax
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdx, qword [rsp + 0x5c4]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038220
mov edx, eax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x368], edx
cmp dword [rsp + 0x6f0], 0
jne 0x180034a1d
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov edx, dword [rax + 0x368]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038130
jmp 0x180034aee
mov eax, dword [rsp + 0x810]
cmp dword [rsp + 0x6f0], eax
ja 0x180034a3b
mov eax, dword [rsp + 0x6f0]
mov dword [rsp + 0x810], eax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [rsp + 0x8b8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, [rsp + 0x700]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdx, rax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov qword [rax + 0x150], rdx
mov ecx, dword [rsp + 0x8b8]
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
cmp qword [rax + 0x150], 0xffffffffffffffff
je 0x180034aee
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x14c], 1
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.1800385e0
call fcn.18004d320
jmp 0x180035741
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x378]
test eax, eax
je 0x180034b4e
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x88]
test eax, eax
jne 0x180034b5b
mov dword [rsp + 0x44], 0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 7
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x180034e63
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb2], ax
mov eax, dword [rsp + 0xb4]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0xb4]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
mov dword [rsp + 0xb4], eax
call fcn.18004d2d0
movzx eax, al
test eax, eax
jne 0x180034c7b
movzx r8d, word [rsp + 0xb2]
xor edx, edx
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
lea rdi, [rsp + 0x8c8]
lea rsi, str.Cannot_impersonate_logged_on_user
mov ecx, 0x22
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x8c8]
call fcn.18004f640
mov qword [rsp + 0x8c0], rax
lea r8, [rsp + 0x8c8]
movzx edx, word [rsp + 0x8c0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180037ee0
jmp 0x180035741
movzx eax, word [rsp + 0xb2]
cmp eax, 0x104
jle 0x180034d02
movzx r8d, word [rsp + 0xb2]
xor edx, edx
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
lea rdi, [rsp + 0x8f8]
lea rsi, str.Path_length_exceeds_MAX_PATH_value
mov ecx, 0x23
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x8f8]
call fcn.18004f640
mov qword [rsp + 0x8f0], rax
lea r8, [rsp + 0x8f8]
movzx edx, word [rsp + 0x8f0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180037ee0
call fcn.18004d320
jmp 0x180035741
movzx r8d, word [rsp + 0xb2]
mov rdx, qword [rsp + 0xbc0]
mov rdx, qword [rdx + 0xa8]
add rdx, 0x160
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
movzx eax, word [rsp + 0xb2]
mov byte [rcx + rax + 0x160], 0
mov rdx, qword [rsp + 0xbc0]
mov rdx, qword [rdx + 0xa8]
add rdx, 0x160
mov rcx, qword [rsp + 0xbc0]
call fcn.180037df0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
add rcx, 0x160
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 3
mov edx, 0x40000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdx, rax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov qword [rax + 0x158], rdx
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x148], 1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
cmp qword [rax + 0x158], 0xffffffffffffffff
jne 0x180034e5e
lea rdi, [rsp + 0x928]
lea rsi, str.Could_not_create_file
mov ecx, socket
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x928]
call fcn.18004f640
mov qword [rsp + 0x920], rax
lea r8, [rsp + 0x928]
movzx edx, word [rsp + 0x920]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180037ee0
call fcn.18004d320
jmp 0x180035741
call fcn.18004d320
jmp 0x180035741
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x378]
test eax, eax
je 0x180034ebe
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x88]
test eax, eax
jne 0x180034ecb
mov dword [rsp + 0x44], 0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 5
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x18003530a
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb2], ax
movzx eax, word [rsp + 0xb4]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb4]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb4], ax
call fcn.18004d2d0
movzx eax, al
test eax, eax
jne 0x180035018
movzx eax, word [rsp + 0xb2]
test eax, eax
jne 0x180034f91
movzx eax, word [rsp + 0xb4]
test eax, eax
jne 0x180034f91
mov r8d, 4
xor edx, edx
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
jmp 0x180034fb0
movzx r8d, word [rsp + 0xb4]
xor edx, edx
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
lea rdi, [rsp + 0x958]
lea rsi, str.Cannot_impersonate_logged_on_user
mov ecx, 0x22
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x958]
call fcn.18004f640
mov qword [rsp + 0x950], rax
lea r8, [rsp + 0x958]
movzx edx, word [rsp + 0x950]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180037ee0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038270
jmp 0x180035741
movzx eax, word [rsp + 0xb2]
test eax, eax
jne 0x18003513c
movzx eax, word [rsp + 0xb4]
test eax, eax
jne 0x18003513c
mov r8d, 4
lea rdx, [rsp + 0x980]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
mov eax, dword [rsp + 0x980]
and eax, 0xff000000
shr eax, 0x18
mov ecx, dword [rsp + 0x980]
and ecx, 0xff0000
shr ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0x980]
and ecx, 0xff00
shl ecx, 8
or eax, ecx
mov ecx, dword [rsp + 0x980]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
mov dword [rsp + 0x980], eax
lea r8, [rsp + 0x988]
mov edx, dword [rsp + 0x980]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180037fe0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
lea r9, [rsp + 0x988]
lea r8, [rsp + 0x988]
lea rdx, [rsp + 0x988]
mov rcx, qword [rcx + 0x158]
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rcx, qword [rcx + 0x158]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov dword [rax + 0x148], 0
call fcn.18004d320
jmp 0x180035741
movzx ecx, word [rsp + 0xb4]
call fcn.18004e420
mov qword [rsp + 0xa78], rax
mov rax, qword [rsp + 0xa78]
mov qword [rsp + 0x940], rax
movzx r8d, word [rsp + 0xb4]
mov rdx, qword [rsp + 0x940]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
movzx eax, byte [rsp + 0xb1]
test eax, eax
je 0x180035220
mov rax, qword [rsp + 0x940]
mov qword [rsp + 0xa80], rax
mov rcx, qword [rsp + 0xa80]
call fcn.18004f9e8
lea rdi, [rsp + 0x998]
lea rsi, str.Server_does_not_support_data_compression_on_upload
mov ecx, 0x33
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x998]
call fcn.18004f640
mov qword [rsp + 0x990], rax
lea r8, [rsp + 0x998]
movzx edx, word [rsp + 0x990]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180037ee0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038270
call fcn.18004d320
jmp 0x180035741
movzx r8d, word [rsp + 0xb4]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x948]
mov rdx, qword [rsp + 0x940]
mov rcx, qword [rcx + 0x158]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rsp + 0x94c], eax
mov rax, qword [rsp + 0x940]
mov qword [rsp + 0xa88], rax
mov rcx, qword [rsp + 0xa88]
call fcn.18004f9e8
movzx eax, word [rsp + 0xb4]
cmp dword [rsp + 0x948], eax
jne 0x18003529d
cmp dword [rsp + 0x94c], 0
jne 0x18003530a
lea rdi, [rsp + 0x9d8]
lea rsi, str.Error_writing_file_data
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x9d8]
call fcn.18004f640
mov qword [rsp + 0x9d0], rax
lea r8, [rsp + 0x9d8]
movzx edx, word [rsp + 0x9d0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180037ee0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038270
call fcn.18004d320
jmp 0x180035741
jmp 0x180035741
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x378]
test eax, eax
je 0x180035365
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x88]
test eax, eax
jne 0x180035372
mov dword [rsp + 0x44], 0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 3
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x180035466
call fcn.18004d2d0
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb2], ax
movzx eax, word [rsp + 0xb2]
add eax, 1
movsxd rcx, eax
call fcn.18004e420
mov qword [rsp + 0xa90], rax
mov rax, qword [rsp + 0xa90]
mov qword [rsp + 0x9f0], rax
movzx r8d, word [rsp + 0xb2]
mov rdx, qword [rsp + 0x9f0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
movzx edx, word [rsp + 0xb2]
mov rax, qword [rsp + 0x9f0]
mov byte [rax + rdx], 0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038270
mov rdx, qword [rsp + 0x9f0]
mov qword [rsp + 0xa98], rdx
mov rcx, qword [rsp + 0xa98]
call fcn.18004f9e8
call fcn.18004d320
jmp 0x180035741
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x378]
test eax, eax
je 0x1800354c1
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x88]
test eax, eax
jne 0x1800354ce
mov dword [rsp + 0x44], 0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 3
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x1800355c2
call fcn.18004d2d0
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb2], ax
movzx eax, word [rsp + 0xb2]
add eax, 1
movsxd rcx, eax
call fcn.18004e420
mov qword [rsp + 0xaa0], rax
mov rax, qword [rsp + 0xaa0]
mov qword [rsp + 0x9f8], rax
movzx r8d, word [rsp + 0xb2]
mov rdx, qword [rsp + 0x9f8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
movzx edx, word [rsp + 0xb2]
mov rax, qword [rsp + 0x9f8]
mov byte [rax + rdx], 0
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
call fcn.180038270
mov rdx, qword [rsp + 0x9f8]
mov qword [rsp + 0xaa8], rdx
mov rcx, qword [rsp + 0xaa8]
call fcn.18004f9e8
call fcn.18004d320
jmp 0x180035741
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x378]
test eax, eax
je 0x18003561d
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0x88]
test eax, eax
jne 0x18003562a
mov dword [rsp + 0x44], 0
jmp 0x180035741
lea rdx, [rsp + 0xb1]
mov r8d, 3
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
test eax, eax
je 0x180035737
call fcn.18004d2d0
movzx eax, word [rsp + 0xb2]
and eax, 0xff
shl eax, 8
movzx ecx, word [rsp + 0xb2]
sar ecx, 8
and ecx, 0xff
or eax, ecx
mov word [rsp + 0xb2], ax
movzx eax, word [rsp + 0xb2]
add eax, 1
movsxd rcx, eax
call fcn.18004e420
mov qword [rsp + 0xab0], rax
mov rax, qword [rsp + 0xab0]
mov qword [rsp + 0xa00], rax
movzx r8d, word [rsp + 0xb2]
mov rdx, qword [rsp + 0xa00]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0x98]
call fcn.18004e150
movzx edx, word [rsp + 0xb2]
mov rax, qword [rsp + 0xa00]
mov byte [rax + rdx], 0
mov rdx, qword [rsp + 0xa00]
mov rcx, qword [rsp + 0xbc0]
call fcn.180037df0
mov qword [rsp + 0xa00], rax
xor edx, edx
mov rcx, qword [rsp + 0xa00]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov rdx, qword [rsp + 0xa00]
mov qword [rsp + 0xab8], rdx
mov rcx, qword [rsp + 0xab8]
call fcn.18004f9e8
call fcn.18004d320
jmp 0x180035741
mov dword [rsp + 0x44], 0
jmp 0x180032299
mov rcx, qword [rsp + 0x58]
call fcn.18004d010
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa8]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa8]
mov rax, qword [rax]
call qword [rax + 0xa8]
movzx edx, ax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 0xa0]
mov rcx, qword [rsp + 0xbc0]
mov rcx, qword [rcx + 0xa0]
mov rax, qword [rax]
call qword [rax + 0x80]
add rsp, 0xba8
pop rdi
pop rsi
ret