Function at 0x14002dca0
Capabilities:
Delete file
Move file

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x438]
sub rsp, 0x538
mov qword [rbp + 0x240], 0xfffffffffffffffe
mov rdi, r8
mov r14, rdx
mov edx, 0x62
lea rcx, [rbp + 0x250]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002dcf7
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.14000b200
mov edx, dword [r14 + 8]
mov rcx, rax
call fcn.140035d60
nop
mov rax, qword [rbp + 0x268]
cmp rax, 0x10
jb 0x14002dd6f
inc rax
mov rcx, qword [rbp + 0x250]
cmp rax, 0x1000
jb 0x14002dd6a
test cl, 0x1f
je 0x14002dd3d
call fcn.1400e463c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14002dd4c
call fcn.1400e463c
int3
sub rcx, rax
cmp rcx, 8
jae 0x14002dd5b
call fcn.1400e463c
int3
cmp rcx, 0x27
jbe 0x14002dd67
call fcn.1400e463c
int3
mov rcx, rax
call fcn.14007b810
lea rcx, [rbp + 0x88]
call fcn.140035de0
nop
mov rbx, qword [rax]
call fcn.14000bcc0
mov rcx, rax
test rax, rax
jne 0x14002dd97
mov ecx, 0x80004005
call fcn.14000b790
int3
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x78], rax
test rbx, rbx
je 0x14002ddd5
test rbx, 0xffffffffffff0000
jne 0x14002ddd5
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002dde2
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14000bdc0
jmp 0x14002dde2
mov rdx, rbx
lea rcx, [rbp - 0x78]
call fcn.1400302b0
nop
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002de03
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
lea rdx, [rbp + 8]
mov rcx, rdi
call fcn.140010370
nop
mov qword [rbp + 0x138], reloc.WS2_32.dll_ntohs
xor r13d, r13d
mov qword [rbp + 0x130], r13
mov byte [rbp + 0x120], r13b
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x120]
call fcn.1400075c0
lea rdx, [rbp + 0x120]
mov rcx, rdi
call fcn.14000fe10
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.14000c720
mov r15, rax
mov qword [rbp - 0x50], rax
mov r14, qword [r14]
mov rsi, qword [r14]
cmp rsi, r14
je 0x14002f5bb
nop
lea r15, [rsi + 0x10]
mov edx, 9
lea rcx, [rbp + 0xa0]
call fcn.140024260
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002dea2
mov rbx, qword [rax]
call fcn.14000bcc0
test rax, rax
je 0x14002f5b0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x78], rax
test rbx, rbx
je 0x14002df02
test rbx, 0xffffffffffff0000
jne 0x14002def3
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002df16
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14000bdc0
jmp 0x14002df16
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x14002def7
jmp 0x14002df05
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.14000c510
nop
lea r8, [0x14012fdc8]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x68]
call fcn.1400303f0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002df4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rbp + 0xb8]
cmp rax, 0x10
jb 0x14002dfa0
inc rax
mov rcx, qword [rbp + 0xa0]
cmp rax, 0x1000
jb 0x14002df9b
test cl, 0x1f
jne 0x14002f49a
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14002f494
sub rcx, rax
cmp rcx, 8
jb 0x14002f48e
cmp rcx, 0x27
ja 0x14002f488
mov rcx, rax
call fcn.14007b810
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xb0], r13
mov byte [rbp + 0xa0], 0
mov edx, 9
lea rcx, [rbp + 0xc0]
call fcn.140024260
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002dfd7
mov rbx, qword [rax]
call fcn.14000bcc0
test rax, rax
je 0x14002f5a5
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x80], rax
test rbx, rbx
je 0x14002e03b
test rbx, 0xffffffffffff0000
jne 0x14002e026
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002e04e
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000bdc0
jmp 0x14002e04e
or rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x14002e030
jmp 0x14002e03e
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.14000c510
nop
lea r8, [0x14012fdcc]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400303f0
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e082
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rbp + 0xd8]
cmp rax, 0x10
jb 0x14002e0d6
inc rax
mov rcx, qword [rbp + 0xc0]
cmp rax, 0x1000
jb 0x14002e0d1
test cl, 0x1f
jne 0x14002f4b2
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14002f4ac
sub rcx, rax
cmp rcx, 8
jb 0x14002f4a6
cmp rcx, 0x27
ja 0x14002f4a0
mov rcx, rax
call fcn.14007b810
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xd0], r13
mov byte [rbp + 0xc0], 0
mov edx, 0x76
lea rcx, [rbp + 0xe0]
call fcn.140024260
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002e10d
mov rbx, qword [rax]
call fcn.14000bcc0
test rax, rax
je 0x14002f59a
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x58], rax
test rbx, rbx
je 0x14002e16d
test rbx, 0xffffffffffff0000
jne 0x14002e15e
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002e181
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.14000bdc0
jmp 0x14002e181
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x14002e162
jmp 0x14002e170
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.14000c510
nop
mov rax, qword [rbp + 0xf8]
cmp rax, 0x10
jb 0x14002e1d5
inc rax
mov rcx, qword [rbp + 0xe0]
cmp rax, 0x1000
jb 0x14002e1d0
test cl, 0x1f
jne 0x14002f4ca
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14002f4c4
sub rcx, rax
cmp rcx, 8
jb 0x14002f4be
cmp rcx, 0x27
ja 0x14002f4b8
mov rcx, rax
call fcn.14007b810
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov qword [rbp + 0xf0], r13
mov byte [rbp + 0xe0], 0
mov edx, 0xe9
lea rcx, [rbp + 0x100]
call fcn.140024260
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002e20c
mov rbx, qword [rax]
call fcn.14000bcc0
test rax, rax
je 0x14002f58f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x70], rax
test rbx, rbx
je 0x14002e26c
test rbx, 0xffffffffffff0000
jne 0x14002e25d
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002e280
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14000bdc0
jmp 0x14002e280
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x14002e261
jmp 0x14002e26f
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.14000c510
nop
mov rax, qword [rbp + 0x118]
cmp rax, 0x10
jb 0x14002e2d4
inc rax
mov rcx, qword [rbp + 0x100]
cmp rax, 0x1000
jb 0x14002e2cf
test cl, 0x1f
jne 0x14002f4e2
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14002f4dc
sub rcx, rax
cmp rcx, 8
jb 0x14002f4d6
cmp rcx, 0x27
ja 0x14002f4d0
mov rcx, rax
call fcn.14007b810
mov qword [rbp + 0x118], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x110], r13
mov byte [rbp + 0x100], 0
call fcn.14000bcc0
test rax, rax
je 0x14002f584
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x28], rax
lea r12, [r15 + 8]
mov qword [rbp - 0x40], r12
call fcn.14000bcc0
test rax, rax
je 0x14002f579
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x20], rbx
test r12, r12
je 0x14002e37c
test r12, 0xffffffffffff0000
jne 0x14002e367
movzx edi, r12w
xor edx, edx
mov ecx, edi
call fcn.14000b6e0
test rax, rax
je 0x14002e394
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14000bdc0
jmp 0x14002e38f
or rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x14002e370
jmp 0x14002e37f
mov eax, r13d
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.14000c510
mov rbx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x58]
mov r9d, dword [rax - 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x20]
call fcn.1400311d0
nop
mov r13, qword [rax]
lea rcx, [r13 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x14002e530
cmp dword [rdi + 0x10], 0
jl 0x14002e404
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x14002e404
call fcn.14000b7c0
mov rbx, rax
or ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x14002e3f6
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x14002e530
movsxd r15, dword [r13 - 0x10]
test r15d, r15d
jne 0x14002e469
mov r15, qword [rdi]
cmp dword [rdi + 8], 0
je 0x14002e52c
cmp dword [rdi + 0x10], 0
jge 0x14002e439
cmp dword [rbx - 0xc], 0
jl 0x14002f4e8
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x14002e52c
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x14002e452
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x20], rax
jmp 0x14002e52c
test r13, r13
je 0x14002f509
mov eax, dword [rbx - 0x10]
mov dword [rbp + 0x488], eax
mov r12, r13
sub r12, rbx
test r15d, r15d
js 0x14002f4fe
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, r15d
or eax, ecx
jge 0x14002e4ae
mov edx, r15d
lea rcx, [rsp + 0x20]
call fcn.14000bfd0
mov rbx, qword [rsp + 0x20]
mov eax, dword [rbp + 0x488]
mov rdi, r15
cmp r12, rax
ja 0x14002e504
lea rdx, [r12 + rbx]
test r15d, r15d
je 0x14002e516
test rdx, rdx
jne 0x14002e4dc
call fcn.1400e49f8
mov dword [rax], reloc.WLDAP32.dll_Ordinal_22
call fcn.1400e461c
jmp 0x14002e516
movsxd rax, dword [rbx - 0xc]
cmp rax, r15
jae 0x14002e4f7
call fcn.1400e49f8
mov dword [rax], Ordinal_35
call fcn.1400e461c
jmp 0x14002e516
mov r8, r15
mov rcx, rbx
call fcn.1400ac280
jmp 0x14002e516
movsxd rdx, dword [rbx - 0xc]
mov r9, r15
mov r8, r13
mov rcx, rbx
call fcn.140032900
cmp r15d, dword [rbx - 0xc]
jg 0x14002f4f3
mov dword [rbx - 0x10], r15d
mov byte [rdi + rbx], 0
mov r12, qword [rbp - 0x40]
lea r15, [rsi + 0x10]
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e551
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x20]
call fcn.1400e7250
xor cl, cl
movzx ecx, cl
test eax, eax
mov edi, 1
cmove ecx, edi
mov dword [rbp + 0x488], ecx
xor r13b, r13b
test r12, r12
jne 0x14002e581
xor eax, eax
jmp 0x14002e58f
or rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], 0
jne 0x14002e585
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.14000c510
mov rax, qword [rsp + 0x70]
mov r9d, dword [rax - 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x98]
lea rcx, [rsp + 0x20]
call fcn.1400311d0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x20]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e621
cmp dword [rbx + 0x10], 0
jl 0x14002e612
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e612
call fcn.14000b7c0
mov rdi, rax
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14002e602
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
mov edi, 1
jmp 0x14002e621
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.14000c510
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e642
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x20]
call fcn.1400e7250
movzx ecx, r13b
test eax, eax
cmove ecx, edi
mov dword [rbp - 0x40], ecx
test r12, r12
jne 0x14002e666
xor eax, eax
jmp 0x14002e67a
or rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x14002e670
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.14000c510
mov rax, qword [rbp - 0x68]
mov r9d, dword [rax - 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.1400311d0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x20]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e703
cmp dword [rbx + 0x10], 0
jl 0x14002e6f4
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e6f4
call fcn.14000b7c0
mov rdi, rax
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14002e6e9
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x14002e703
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.14000c510
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e721
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rbp - 0x68]
test rdx, rdx
je 0x14002f56e
mov rbx, qword [rsp + 0x20]
mov rcx, rbx
call fcn.1400e7250
test eax, eax
jne 0x14002e745
mov rdx, qword [rbp - 0x68]
jmp 0x14002e762
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x14002f563
mov rcx, rbx
call fcn.1400e7250
test eax, eax
jne 0x14002e7bd
mov rdx, qword [rbp - 0x20]
mov rbx, qword [rsp + 0x28]
add rbx, 0xffffffffffffffe8
lea rcx, [rdx - 0x18]
cmp rcx, rbx
je 0x14002e7bd
cmp dword [rbx + 0x10], 0
jl 0x14002e7af
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e7af
call fcn.14000b7c0
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
mov rdi, rax
jg 0x14002e7a4
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x14002e7bd
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.14000c510
mov rax, qword [rsp + 0x28]
cmp dword [rax - 0x10], 0
je 0x14002ee66
lea rdx, [r15 + 0x108]
lea rcx, [rbp - 0x28]
call fcn.14000b200
nop
mov dl, reloc.WLDAP32.dll_Ordinal_46
lea rcx, [rbp - 0x28]
call fcn.14001c180
mov edx, SafeArrayDestroyData
lea rcx, [rbp + 0x270]
call fcn.140024260
mov rbx, rax
lea r8, [0x14012fdd0]
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x38]
call fcn.1400303f0
nop
lea r8, [rbp - 0x28]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.14001b7e0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14002e82d
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400303f0
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e85c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e87b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x270]
call fcn.140007010
mov rdi, qword [rbp - 0x78]
lea r13, [rdi - 0x18]
mov rcx, r13
call fcn.14000b7c0
lea rbx, [rax + 0x18]
mov qword [rbp - 0x38], rbx
mov r15, qword [rbp - 0x30]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x14002e8c9
mov edx, 0x800
lea rcx, [rbp - 0x38]
call fcn.14000bfd0
mov rbx, qword [rbp - 0x38]
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400e521c
test eax, eax
js 0x14002f535
cmp eax, dword [rbx - 0xc]
jg 0x14002f535
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
xor r12d, r12d
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000c720
mov qword [rbp - 0x60], rax
lea edx, [r12 + 0x24]
lea rcx, [rbp + 0x2f0]
call fcn.140024260
mov r15, rax
mov qword [rbp + 0x198], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x190], r12
mov byte [rbp + 0x180], r12b
mov rdx, qword [rsp + 0x28]
cmp byte [rdx], r12b
jne 0x14002e954
mov r8d, r12d
jmp 0x14002e96a
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002e960
lea rcx, [rbp + 0x180]
call fcn.1400080d0
nop
mov qword [rbp + 0x178], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x170], r12
mov byte [rbp + 0x160], 0
mov r8d, 1
lea rdx, [0x14012d6b0]
lea rcx, [rbp + 0x160]
call fcn.1400080d0
nop
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x2d0]
call fcn.14000af20
nop
lea r8, [0x14012fc78]
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.14002f820
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x290]
call fcn.14000af20
mov r15, rax
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x150], r12
mov byte [rbp + 0x140], 0
cmp byte [rdi], 0
jne 0x14002ea14
mov r8, r12
jmp 0x14002ea2a
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x14002ea20
mov rdx, rdi
lea rcx, [rbp + 0x140]
call fcn.1400080d0
nop
lea r8, [rbp - 0x60]
mov rdx, r15
lea rcx, [rbp + 0x140]
call fcn.14002ac60
nop
lea rcx, [rbp + 0x140]
call fcn.140007010
nop
lea rcx, [rbp + 0x290]
call fcn.140007010
nop
lea rcx, [rbp + 0x2b0]
call fcn.140007010
nop
lea rcx, [rbp + 0x2d0]
call fcn.140007010
nop
lea rcx, [rbp + 0x160]
call fcn.140007010
nop
lea rcx, [rbp + 0x180]
call fcn.140007010
nop
lea rcx, [rbp + 0x2f0]
call fcn.140007010
mov rax, qword [rbp - 0x60]
mov rdi, qword [rax]
cmp rdi, rax
je 0x14002ec65
nop dword [rax + rax]
lea r15, [rdi + 0x10]
mov rcx, r13
call fcn.14000b7c0
lea rbx, [rax + 0x18]
mov qword [rbp - 0x18], rbx
cmp qword [r15 + 0x18], 0x10
jb 0x14002eae0
mov r12, qword [r15]
jmp 0x14002eae3
mov r12, r15
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x14002eb09
mov edx, 0x800
lea rcx, [rbp - 0x18]
call fcn.14000bfd0
mov rbx, qword [rbp - 0x18]
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400e521c
test eax, eax
js 0x14002f51f
cmp eax, dword [rbx - 0xc]
jg 0x14002f51f
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
lea rcx, [rbx - 0x18]
call fcn.14000b7c0
add rax, 0x18
mov qword [rbp - 0x10], rax
mov dl, 1
lea rcx, [rbp - 0x10]
call fcn.14002d9f0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x14002eb7e
xor edx, edx
lea r8d, [rax + 4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.14000b200
nop
cmp qword [r15 + 0x18], 0x10
jb 0x14002eba1
mov r15, qword [r15]
mov rcx, qword [rsp + 0x30]
mov r8d, 1
sub r8d, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, 0x104
or eax, r8d
jge 0x14002ebd1
mov edx, 0x104
lea rcx, [rsp + 0x30]
call fcn.14000bfd0
mov rcx, qword [rsp + 0x30]
mov rdx, r15
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rsp + 0x30]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400e521c
test eax, eax
js 0x14002f514
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx - 0xc]
jg 0x14002f514
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x30]
mov byte [rcx + rax], 0
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002ec39
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
or eax, 0xffffffff
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14002ec54
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdi, qword [rdi]
cmp rdi, qword [rbp - 0x60]
jne 0x14002eac0
mov rbx, qword [rbp - 0x38]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x38]
call fcn.14000b200
nop
mov rdi, qword [rbp - 0x30]
mov rcx, qword [rsp + 0x38]
mov r8d, 1
sub r8d, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, 0x104
or eax, r8d
jge 0x14002ecb2
mov edx, 0x104
lea rcx, [rsp + 0x38]
call fcn.14000bfd0
mov rcx, qword [rsp + 0x38]
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rsp + 0x38]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400e521c
test eax, eax
js 0x14002f52a
mov rcx, qword [rsp + 0x38]
cmp eax, dword [rcx - 0xc]
jg 0x14002f52a
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x38]
mov byte [rcx + rax], 0
mov qword [rbp + reloc.OLEAUT32.dll_VarUI8FromDec], reloc.WS2_32.dll_ntohs
xor r13d, r13d
mov qword [rbp + 0x1b0], r13
mov byte [rbp + 0x1a0], r13b
mov rdx, qword [rsp + 0x38]
cmp byte [rdx], r13b
jne 0x14002ed19
mov r8d, r13d
jmp 0x14002ed29
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], r13b
jne 0x14002ed20
lea rcx, [rbp + 0x1a0]
call fcn.1400080d0
lea r8, [rbp + 0x1a0]
lea rdx, [rsi + 0x10]
mov r12, qword [rbp + 0x480]
mov rcx, r12
call fcn.14000a4f0
mov rax, qword [rbp + 0x498]
mov byte [rax], 1
mov qword [rbp + 0x1d8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1d0], r13
mov byte [rbp + 0x1c0], r13b
cmp byte [rbx], r13b
jne 0x14002ed7c
mov r8, r13
jmp 0x14002ed89
or r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], r13b
jne 0x14002ed80
mov rdx, rbx
lea rcx, [rbp + 0x1c0]
call fcn.1400080d0
lea r8, [rbp + 0x1c0]
lea rdx, [rsi + 0x10]
mov rcx, r12
call fcn.14000a4f0
lea rcx, [rbx - 0x18]
call fcn.14000b7c0
add rax, 0x18
mov qword [rbp - 8], rax
xor edx, edx
lea rcx, [rbp - 8]
call fcn.14002d9f0
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002ede8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp - 0x60]
call fcn.14000cbf0
mov edx, 1
lea r8d, [rdx + 0x2f]
mov rcx, qword [rbp - 0x60]
call fcn.14000c780
nop
or eax, 0xffffffff
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14002ee20
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002ee3f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f3ba
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x14002f3ba
mov rcx, qword [rbp - 0x78]
add rcx, 0xffffffffffffffe8
call fcn.14000b7c0
lea rbx, [rax + 0x18]
mov qword [rsp + 0x60], rbx
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x14002eea4
mov edx, 0x800
lea rcx, [rsp + 0x60]
call fcn.14000bfd0
mov rbx, qword [rsp + 0x60]
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400e521c
test eax, eax
js 0x14002f558
cmp eax, dword [rbx - 0xc]
jg 0x14002f558
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
lea r13, [rbx - 0x18]
mov rcx, r13
call fcn.14000b7c0
add rax, 0x18
mov qword [rsp + 0x68], rax
mov rcx, r13
call fcn.14000b7c0
add rax, 0x18
mov qword [rbp], rax
lea rdx, [rbp]
lea rcx, [rbp - 0x70]
call fcn.14000aca0
nop
mov edx, reloc.WLDAP32.dll_Ordinal_35
lea rcx, [rbp + 0x330]
call fcn.140024260
mov rbx, rax
lea r8, [rbp - 0x70]
lea rdx, [0x14012fdd4]
lea rcx, [rbp + 0x48]
call fcn.1400304c0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14002ef3c
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.1400303f0
mov rbx, rax
mov edx, reloc.WLDAP32.dll_Ordinal_35
lea rcx, [rbp + 0x310]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002ef6a
mov rax, qword [rax]
mov r8, qword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000c200
nop
lea rcx, [rbp + 0x310]
call fcn.140007010
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002efa7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002efc6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x330]
call fcn.140007010
mov edx, SafeArrayDestroyData
lea rcx, [rbp + 0x370]
call fcn.140024260
mov rbx, rax
lea r8, [rbp - 0x70]
lea rdx, [0x14012fdd4]
lea rcx, [rbp + 0x58]
call fcn.1400304c0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14002f005
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400303f0
mov rbx, rax
mov edx, SafeArrayDestroyData
lea rcx, [rbp + 0x350]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002f033
mov rax, qword [rax]
mov r8, qword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000c200
nop
lea rcx, [rbp + 0x350]
call fcn.140007010
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f070
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f08f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x370]
call fcn.140007010
mov edx, Ordinal_41
lea rcx, [rbp + 0x3b0]
call fcn.140024260
mov rbx, rax
lea r8, [rbp - 0x70]
lea rdx, [0x14012fdd4]
lea rcx, [rbp + 0x68]
call fcn.1400304c0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14002f0ce
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.1400303f0
mov rbx, rax
mov edx, Ordinal_41
lea rcx, [rbp + 0x390]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002f0fc
mov rax, qword [rax]
mov r8, qword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000c200
mov r15d, eax
lea rcx, [rbp + 0x390]
call fcn.140007010
nop
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
or ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14002f13b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f15a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x3b0]
call fcn.140007010
mov rdi, qword [rsp + 0x68]
mov rdx, rdi
mov rbx, qword [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileA]
cmp byte [rbp + 0x488], 0
jne 0x14002f2df
test r15d, r15d
jne 0x14002f2df
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x40]
call fcn.14000b200
nop
mov rcx, qword [rsp + 0x40]
mov edx, 1
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, 0x104
or eax, edx
jge 0x14002f1d8
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.14000bfd0
mov rcx, qword [rsp + 0x40]
mov rdx, r12
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rsp + 0x40]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400e521c
test eax, eax
js 0x14002f540
mov rcx, qword [rsp + 0x40]
cmp eax, dword [rcx - 0xc]
jg 0x14002f540
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x40]
mov byte [rcx + rax], 0
mov rdx, qword [rsp + 0x40]
lea rcx, [rbp + 0x3d0]
call fcn.14002fe20
mov r8, rax
lea r15, [rsi + 0x10]
mov rdx, r15
mov r12, qword [rbp + 0x480]
mov rcx, r12
call fcn.14000a4f0
cmp byte [rbp - 0x40], 0
jne 0x14002f2a9
mov qword [rbp + 0x1f8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1f0], 0
mov byte [rbp + 0x1e0], 0
cmp byte [rdi], 0
jne 0x14002f26b
xor r8d, r8d
jmp 0x14002f27a
or r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdi + r8], 0
jne 0x14002f270
mov rdx, rdi
lea rcx, [rbp + 0x1e0]
call fcn.1400080d0
nop
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x50]
call fcn.140032700
nop
lea rcx, [rbp + 0x1e0]
call fcn.140007010
jmp 0x14002f2b9
xor edx, edx
lea r8d, [rdx + 4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f2d8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rsp + 0x60]
jmp 0x14002f2f9
xor edx, edx
lea r8d, [rdx + 4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
lea r15, [rsi + 0x10]
mov r12, qword [rbp + 0x480]
mov rax, qword [rbp + 0x498]
mov byte [rax], 1
xor edi, edi
mov qword [rbp + 0x210], rdi
mov qword [rbp + 0x218], rdi
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x200]
call fcn.14000c900
cmp byte [rbx], dil
jne 0x14002f32e
mov r8d, edi
jmp 0x14002f33b
or r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], dil
jne 0x14002f332
mov rdx, rbx
lea rcx, [rbp + 0x200]
call fcn.1400080d0
lea r8, [rbp + 0x200]
mov rdx, r15
mov rcx, r12
call fcn.14000a4f0
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f37c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f39c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
or eax, 0xffffffff
lock xadd dword [r13 + 0x10], eax
sub eax, 1
jg 0x14002f3b7
mov rcx, qword [r13]
mov rax, qword [rcx]
mov rdx, r13
call qword [rax + reloc.WS2_32.dll_htonl]
xor r13d, r13d
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f3da
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f3fa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f41a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f43a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f459
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f477
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rsi, qword [rsi]
cmp rsi, r14
je 0x14002f54b
jmp 0x14002de80
call fcn.1400e463c
int3
call fcn.1400e463c
int3
call fcn.1400e463c
int3
call fcn.1400e463c
nop
call fcn.1400e463c
int3
call fcn.1400e463c
int3
call fcn.1400e463c
int3
call fcn.1400e463c
nop
call fcn.1400e463c
int3
call fcn.1400e463c
int3
call fcn.1400e463c
int3
call fcn.1400e463c
nop
call fcn.1400e463c
int3
call fcn.1400e463c
int3
call fcn.1400e463c
int3
call fcn.1400e463c
nop
mov ecx, 0x80070057
call fcn.14000b790
int3
mov ecx, 0x80070057
call fcn.14000b790
int3
mov ecx, 0x80070057
call fcn.14000b790
int3
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov r15, qword [rbp - 0x50]
mov rdi, qword [rbp + 0x490]
jmp 0x14002f5bb
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
int3
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov rax, qword [rbp + 0x498]
cmp byte [rax], 0
je 0x14002f614
mov rcx, rdi
call fcn.14000f560
mov qword [rbp + 0x230], r13
mov qword [rbp + 0x238], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x220]
call fcn.14000c900
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x220]
call fcn.1400075c0
lea rdx, [rbp + 0x220]
mov rcx, rdi
call fcn.14000ec10
mov edx, 0x63
lea rcx, [rbp + 0x3f0]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002f630
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.14000b200
mov rcx, rax
call fcn.140035ce0
nop
lea rcx, [rbp + 0x3f0]
call fcn.140007010
call fcn.140035b40
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r14, r13
movabs r12, 0x555555555555554
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.14000c720
mov rdi, rax
mov qword [rsp + 0x48], rax
mov rbx, qword [r15]
cmp rbx, r15
je 0x14002f705
nop dword [rax]
cmp qword [rbx + 0x28], 0x10
jb 0x14002f6ad
mov rcx, qword [rbx + 0x10]
jmp 0x14002f6b1
lea rcx, [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x14002f6fd
lea r9, [rbx + 0x10]
mov r8, qword [rdi + 8]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140021370
mov rcx, r12
mov rdx, qword [rsp + 0x50]
sub rcx, rdx
cmp rcx, 1
jb 0x14002f769
inc rdx
mov qword [rsp + 0x50], rdx
mov qword [rdi + 8], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rax
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rbx]
cmp rbx, r15
jne 0x14002f6a0
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x14002f729
nop dword [rax]
lea rdx, [rbx + 0x10]
lea rcx, [rbp - 0x50]
call fcn.1400327e0
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x14002f710
mov r15, qword [rbp - 0x50]
cmp qword [rbp - 0x48], 0
je 0x14002f776
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x48]
call fcn.14000cbf0
mov r8d, 1
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x48]
call fcn.140023a10
inc r14
cmp r14, 0x78
jae 0x14002f795
jmp 0x14002f670
lea rcx, str.list_T__too_long
call fcn.14007e084
nop
lea rcx, [rsp + 0x48]
call fcn.14000cbf0
mov r8d, 1
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x48]
call fcn.140023a10
mov rbx, qword [r15]
cmp rbx, r15
je 0x14002f7c2
nop dword [rax]
lea rcx, [rbx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x14002f7ae
mov rcx, qword [rcx]
xor edx, edx
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
mov rbx, qword [rbx]
cmp rbx, r15
jne 0x14002f7a0
mov edx, 0x64
lea rcx, [rbp + 0x410]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002f7de
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.14000b200
mov rcx, rax
call fcn.140035ce0
nop
lea rcx, [rbp + 0x410]
call fcn.140007010
call fcn.14002dc20
int3