Function at 0x11003c880
Capabilities:
Create directory
Delete file
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rsi
push rbp
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x110109588]
xor rax, rsp
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x170], rdi
xor edx, edx
mov rdi, rcx
mov r8d, 0x100
lea rcx, [rsp + 0x40]
call fcn.11009c5d0
xor edx, edx
lea rcx, [0x1100d3dc0]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3dd0]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3df0]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3e08]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3e20]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3e38]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3e50]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3e68]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3e88]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3ea8]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3ec0]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1100d3ee0]
call qword [sym.imp.kernel32.dll_CreateDirectoryA]
mov rcx, rdi
call fcn.11003c570
mov rax, qword [0x110207f98]
cmp byte [rax + 0x90], 0
jne 0x11003c9ad
mov r9b, 1
mov byte [rsp + 0x20], 0
mov r8d, 1
lea rdx, [0x1100d3ef8]
mov rcx, rax
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x124], 0
jne 0x11003c9de
lea rcx, [rax + 0x94]
mov byte [rsp + 0x20], 0
mov r9b, 1
lea rdx, [0x1100d3f10]
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x1b8], 0
jne 0x11003ca0d
xor r9d, r9d
mov byte [rsp + 0x20], 0
lea rcx, [rax + 0x128]
lea rdx, [0x1100d3f30]
lea r8d, [r9 + 1]
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x24c], 0
jne 0x11003ca3c
xor r9d, r9d
mov byte [rsp + 0x20], 0
lea rcx, [rax + 0x1bc]
lea rdx, [0x1100d3f50]
lea r8d, [r9 + 1]
call fcn.11003deb0
mov rax, qword [0x110207f98]
xor esi, esi
mov qword [rsp + 0x168], rbx
cmp byte [rax + 0x2e0], sil
jne 0x11003cb1f
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d3f70]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x250
test dl, dl
je 0x11003caab
lea rcx, [rsp + 0x40]
nop
cmp dl, 0x2f
je 0x11003ca9a
cmp dl, 0x3a
jne 0x11003ca9d
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003ca90
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003cac0
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x408], sil
jne 0x11003cbff
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d3f90]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x378
test dl, dl
je 0x11003cb83
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003cb72
cmp dl, 0x3a
jne 0x11003cb75
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003cb68
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003cba0
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x374], sil
jne 0x11003ccdf
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d3fb8]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x2e4
test dl, dl
je 0x11003cc63
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003cc52
cmp dl, 0x3a
jne 0x11003cc55
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003cc48
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003cc80
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x49c], sil
jne 0x11003cdbf
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d3fe0]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x40c
test dl, dl
je 0x11003cd43
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003cd32
cmp dl, 0x3a
jne 0x11003cd35
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003cd28
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003cd60
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0xddc], sil
jne 0x11003ce1e
cmp byte [rdi + 0x8c], sil
je 0x11003ce1e
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4008]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0xd4c
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0xe70], sil
jne 0x11003ce7d
cmp byte [rdi + 0x8e], sil
je 0x11003ce7d
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4030]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0xde0
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0xf04], sil
jne 0x11003cedc
cmp byte [rdi + 0x8d], sil
je 0x11003cedc
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4058]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0xe74
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0xf98], sil
jne 0x11003cf3b
cmp byte [rdi + 0x8f], sil
je 0x11003cf3b
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4080]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0xf08
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rdi + 0x8b], sil
je 0x11003d24e
cmp byte [rax + 0x530], sil
jne 0x11003cf9e
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d40a8]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x4a0
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x5c4], sil
jne 0x11003cff4
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d40d0]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x534
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x658], sil
jne 0x11003d04a
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d40f0]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x5c8
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x6ec], sil
jne 0x11003d0a0
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4118]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x65c
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x780], sil
jne 0x11003d0f6
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4140]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x6f0
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x814], sil
jne 0x11003d14c
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4160]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x784
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x8a8], sil
jne 0x11003d1a2
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4188]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x818
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x93c], sil
jne 0x11003d1f8
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d41a8]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x8ac
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0x9d0], sil
jne 0x11003d24e
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d41c8]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x940
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rdi + 0x8a], sil
mov rdi, qword [rsp + 0x170]
je 0x11003d411
cmp byte [rax + 0xa64], sil
jne 0x11003d2b9
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d41f0]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0x9d4
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0xaf8], sil
jne 0x11003d30f
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4218]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0xa68
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0xb8c], sil
jne 0x11003d365
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4240]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0xafc
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0xc20], sil
jne 0x11003d3bb
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4268]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0xb90
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0xcb4], sil
jne 0x11003d411
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4288]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rcx, qword [0x110207f98]
lea rdx, [rsp + 0x40]
add rcx, 0xc24
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8d, 1
call fcn.11003deb0
mov rax, qword [0x110207f98]
cmp byte [rax + 0xd48], sil
jne 0x11003d4ef
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d42b0]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0xcb8
test dl, dl
je 0x11003d47b
lea rcx, [rsp + 0x40]
nop word [rax + rax]
cmp dl, 0x2f
je 0x11003d46a
cmp dl, 0x3a
jne 0x11003d46d
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003d460
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003d490
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x102c], sil
jne 0x11003d5cf
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d42d0]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0xf9c
test dl, dl
je 0x11003d553
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003d542
cmp dl, 0x3a
jne 0x11003d545
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003d538
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003d570
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x10c0], sil
jne 0x11003d6af
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d42f8]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x1030
test dl, dl
je 0x11003d633
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003d622
cmp dl, 0x3a
jne 0x11003d625
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003d618
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003d650
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x127c], sil
jne 0x11003d78f
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4320]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x11ec
test dl, dl
je 0x11003d713
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003d702
cmp dl, 0x3a
jne 0x11003d705
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003d6f8
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003d730
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x1310], sil
jne 0x11003d86f
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4350]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x1280
test dl, dl
je 0x11003d7f3
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003d7e2
cmp dl, 0x3a
jne 0x11003d7e5
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003d7d8
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003d810
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x13a4], sil
jne 0x11003d94f
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4380]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x1314
test dl, dl
je 0x11003d8d3
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003d8c2
cmp dl, 0x3a
jne 0x11003d8c5
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003d8b8
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003d8f0
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x1438], sil
jne 0x11003da2f
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d43b0]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x13a8
test dl, dl
je 0x11003d9b3
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003d9a2
cmp dl, 0x3a
jne 0x11003d9a5
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003d998
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003d9d0
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x1154], sil
jne 0x11003db0f
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d43e0]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x10c4
test dl, dl
je 0x11003da93
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003da82
cmp dl, 0x3a
jne 0x11003da85
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003da78
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003dab0
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x11e8], sil
jne 0x11003dbef
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4408]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x1158
test dl, dl
je 0x11003db73
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003db62
cmp dl, 0x3a
jne 0x11003db65
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003db58
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003db90
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x14cc], sil
jne 0x11003dccf
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4438]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x143c
test dl, dl
je 0x11003dc53
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003dc42
cmp dl, 0x3a
jne 0x11003dc45
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003dc38
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003dc70
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x1560], sil
jne 0x11003ddaf
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4460]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x14d0
test dl, dl
je 0x11003dd33
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003dd22
cmp dl, 0x3a
jne 0x11003dd25
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003dd18
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003dd50
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rax, qword [0x110207f98]
cmp byte [rax + 0x15f4], sil
jne 0x11003de88
mov rcx, qword [0x110207df0]
call fcn.110038e10
mov r8d, eax
lea rdx, [0x1100d4488]
lea rcx, [rsp + 0x40]
call fcn.11003c4e0
mov rbx, qword [0x110207f98]
mov rdx, qword [rsp + 0x40]
add rbx, 0x1564
test dl, dl
je 0x11003de13
lea rcx, [rsp + 0x40]
cmp dl, 0x2f
je 0x11003de02
cmp dl, 0x3a
jne 0x11003de05
mov byte [rcx], 0x5f
movzx eax, byte [rcx + 1]
inc rcx
movzx edx, al
test al, al
jne 0x11003ddf8
xor eax, eax
mov byte [rbx], sil
mov byte [rsp + 0x32], al
mov edx, esi
mov word [rsp + 0x30], 0xa6f1
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x2c]
inc edx
xor byte [rcx], al
cmp edx, 2
jb 0x11003de30
lea r8, [rsp + 0x40]
mov byte [rsp + 0x32], sil
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.user32.dll_wsprintfA]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [rbx + 0x80], esi
mov byte [rbx + 0x90], 1
mov dword [rbx + 0x84], 1
mov word [rbx + 0x88], 0x100
mov rbx, qword [rsp + 0x168]
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.11009af60
mov rsi, qword [rsp + 0x178]
add rsp, 0x150
pop rbp
ret