Function at 0x18002dd0c
Capabilities:
Check if file exists
Initialize winsock library
Send data
Send data on socket

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x2c0
mov qword [rsp + 0xb0], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x180097090]
xor rax, rsp
mov qword [rsp + 0x2b0], rax
mov rsi, r8
mov rdi, rdx
xor ebx, ebx
cmp r8, rbx
je 0x18002dd6f
mov rcx, r8
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, ebx
je 0x18002dd6c
mov rcx, rsi
call fcn.180027738
cmp rax, 0xc800000
jbe 0x18002dd6f
mov rsi, rbx
jmp 0x18002dd6f
mov rsi, rbx
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.180034c68
nop
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, str.t_print_log
call fcn.18002d388
cmp eax, ebx
jne 0x18002dd9d
jmp 0x18002dfc7
cmp rsi, rbx
je 0x18002deb6
lea rax, [rsp + 0x30]
mov qword [rsp + 0x58], rax
mov byte [rsp + 0x38], 1
btr dword [rsp + 0x38], 8
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x30], rbx
lea rdx, str.__transferonwer
lea rcx, [rsp + 0x60]
call fcn.18003618c
mov rcx, rax
lea rdx, [rsp + 0x30]
call fcn.180034eac
lea rdx, [rsp + 0xb8]
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rbx
mov word [rsp + 0x38], bx
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rsi
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.18000d5e0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x88]
call fcn.180001500
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call fcn.180034c20
mov rdi, rax
lea rdx, str.__attachment
lea rcx, [rsp + 0x60]
call fcn.18003618c
mov rcx, rax
mov rdx, rdi
call fcn.180034eac
nop
cmp qword [rsp + 0xa8], 0x10
jb 0x18002de89
mov rcx, qword [rsp + 0x90]
call fcn.1800538dc
mov qword [rsp + 0xa8], socket
mov qword [rsp + 0xa0], rbx
mov byte [rsp + 0x90], bl
cmp qword [rsp + 0x50], 8
jb 0x18002deb6
mov rcx, qword [rsp + 0x38]
call fcn.1800538dc
mov edi, 2
cmp dword [0x18009a090], ebx
je 0x18002df11
xor edx, edx
mov r8d, 0x198
lea rcx, [rsp + 0xe0]
call fcn.1800575a0
mov ecx, 0x202
lea rdx, [rsp + 0xe0]
call sub.WS2_32.dll_WSAStartup
xor r8d, r8d
mov edx, edi
mov ecx, edi
call sub.WS2_32.dll_socket
mov qword [0x18009a098], rax
cmp rax, 0xffffffffffffffff
jne 0x18002df0b
lea ebx, [rdi - 1]
jmp 0x18002dfc7
mov dword [0x18009a090], ebx
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x60]
call fcn.180036800
mov word [rsp + 0x278], di
mov dword [rsp + 0x27c], 0x100007f
mov eax, 0xe832
mov word [rsp + 0x27a], ax
lea rdx, [rsp + 0x290]
cmp qword [rsp + 0x2a8], 0x10
cmovae rdx, qword [rsp + 0x290]
mov dword [rsp + 0x28], socket
lea rax, [rsp + 0x278]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, dword [rsp + 0x2a0]
mov rcx, qword [0x18009a098]
call sub.WS2_32.dll_sendto
mov edi, ebx
cmp eax, 0xffffffff
setne dil
cmp qword [rsp + 0x2a8], 0x10
jb 0x18002dfaa
mov rcx, qword [rsp + 0x290]
call fcn.1800538dc
mov qword [rsp + 0x2a8], socket
mov qword [rsp + 0x2a0], rbx
mov byte [rsp + 0x290], bl
mov ebx, edi
lea rcx, [rsp + 0x60]
call fcn.180034e14
mov eax, ebx
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.180052d60
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret