Function at 0x14006e5f0
Capabilities:
Delete file
Move file

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x438]
sub rsp, 0x538
mov qword [rbp + 0x240], 0xfffffffffffffffe
mov rdi, r8
mov r14, rdx
mov edx, 0x65
lea rcx, [rbp + 0x250]
call fcn.1400160a0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14006e647
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140005e54
mov edx, dword [r14 + 8]
mov rcx, rax
call fcn.140075bb0
nop
mov rax, qword [rbp + 0x268]
cmp rax, 0x10
jb 0x14006e6bf
inc rax
mov rcx, qword [rbp + 0x250]
cmp rax, 0x1000
jb 0x14006e6ba
test cl, 0x1f
je 0x14006e68d
call fcn.140128ff4
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14006e69c
call fcn.140128ff4
int3
sub rcx, rax
cmp rcx, 8
jae 0x14006e6ab
call fcn.140128ff4
int3
cmp rcx, 0x27
jbe 0x14006e6b7
call fcn.140128ff4
int3
mov rcx, rax
call fcn.1400eb7f4
lea rcx, [rbp + 0x88]
call fcn.140075c30
nop
mov rbx, qword [rax]
call fcn.14000b6b4
mov rcx, rax
test rax, rax
jne 0x14006e6e7
mov ecx, 0x80004005
call fcn.14000b9ec
int3
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x78], rax
test rbx, rbx
je 0x14006e727
test rbx, 0xffffffffffff0000
jne 0x14006e727
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b0cc
test rax, rax
je 0x14006e735
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.1400080f4
jmp 0x14006e735
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.140070930
nop
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
or r12, 0xffffffffffffffff
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006e75a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
lea rdx, [rbp - 0x18]
mov rcx, rdi
call fcn.140020860
nop
mov qword [rbp + 0x138], reloc.WS2_32.dll_ntohs
xor r13d, r13d
mov qword [rbp + 0x130], r13
mov byte [rbp + 0x120], r13b
mov r9, r12
xor r8d, r8d
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x120]
call fcn.14000ca10
lea rdx, [rbp + 0x120]
mov rcx, rdi
call fcn.140020300
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.140008548
mov r15, rax
mov qword [rbp - 0x80], rax
mov r14, qword [r14]
mov rsi, qword [r14]
cmp rsi, r14
je 0x14006ff27
or r15, 0xffffffffffffffff
nop dword [rax + rax]
mov edx, 9
lea rcx, [rbp + 0xa0]
call fcn.1400160a0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14006e7fe
mov rbx, qword [rax]
call fcn.14000b6b4
test rax, rax
je 0x14006ff1c
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x70], rax
test rbx, rbx
je 0x14006e85b
test rbx, 0xffffffffffff0000
jne 0x14006e84d
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b0cc
test rax, rax
je 0x14006e86e
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400080f4
jmp 0x14006e86e
mov rax, r15
inc rax
cmp byte [rbx + rax], 0
jne 0x14006e850
jmp 0x14006e85e
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x70]
call fcn.140007a14
nop
lea r8, [0x1403f4d58]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x58]
call fcn.140005b44
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006e8a2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rbp + 0xb8]
cmp rax, 0x10
jb 0x14006e8f6
inc rax
mov rcx, qword [rbp + 0xa0]
cmp rax, 0x1000
jb 0x14006e8f1
test cl, 0x1f
jne 0x14006fdff
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14006fdf9
sub rcx, rax
cmp rcx, 8
jb 0x14006fdf3
cmp rcx, 0x27
ja 0x14006fded
mov rcx, rax
call fcn.1400eb7f4
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xb0], r13
mov byte [rbp + 0xa0], 0
mov edx, 9
lea rcx, [rbp + 0xc0]
call fcn.1400160a0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14006e92d
mov rbx, qword [rax]
call fcn.14000b6b4
test rax, rax
je 0x14006ff11
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x68], rax
test rbx, rbx
je 0x14006e98b
test rbx, 0xffffffffffff0000
jne 0x14006e97c
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b0cc
test rax, rax
je 0x14006e99e
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400080f4
jmp 0x14006e99e
mov rax, r15
nop
inc rax
cmp byte [rbx + rax], 0
jne 0x14006e980
jmp 0x14006e98e
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.140007a14
nop
lea r8, [0x1403f4d5c]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x20]
call fcn.140005b44
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006e9d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rbp + 0xd8]
cmp rax, 0x10
jb 0x14006ea26
inc rax
mov rcx, qword [rbp + 0xc0]
cmp rax, 0x1000
jb 0x14006ea21
test cl, 0x1f
jne 0x14006fe17
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14006fe11
sub rcx, rax
cmp rcx, 8
jb 0x14006fe0b
cmp rcx, 0x27
ja 0x14006fe05
mov rcx, rax
call fcn.1400eb7f4
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xd0], r13
mov byte [rbp + 0xc0], 0
mov edx, 0x7a
lea rcx, [rbp + 0xe0]
call fcn.1400160a0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14006ea5d
mov rbx, qword [rax]
call fcn.14000b6b4
test rax, rax
je 0x14006ff06
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x58], rax
test rbx, rbx
je 0x14006eabc
test rbx, 0xffffffffffff0000
jne 0x14006eaae
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b0cc
test rax, rax
je 0x14006ead0
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400080f4
jmp 0x14006ead0
mov rax, r15
inc rax
cmp byte [rbx + rax], 0
jne 0x14006eab1
jmp 0x14006eabf
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140007a14
nop
mov rax, qword [rbp + 0xf8]
cmp rax, 0x10
jb 0x14006eb24
inc rax
mov rcx, qword [rbp + 0xe0]
cmp rax, 0x1000
jb 0x14006eb1f
test cl, 0x1f
jne 0x14006fe2f
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14006fe29
sub rcx, rax
cmp rcx, 8
jb 0x14006fe23
cmp rcx, 0x27
ja 0x14006fe1d
mov rcx, rax
call fcn.1400eb7f4
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov qword [rbp + 0xf0], r13
mov byte [rbp + 0xe0], 0
mov edx, 0xef
lea rcx, [rbp + 0x100]
call fcn.1400160a0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14006eb5b
mov rbx, qword [rax]
call fcn.14000b6b4
test rax, rax
je 0x14006fefb
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x70], rax
test rbx, rbx
je 0x14006ebbb
test rbx, 0xffffffffffff0000
jne 0x14006ebac
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b0cc
test rax, rax
je 0x14006ebcf
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400080f4
jmp 0x14006ebcf
mov rax, r15
nop
inc rax
cmp byte [rbx + rax], 0
jne 0x14006ebb0
jmp 0x14006ebbe
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.140007a14
nop
mov rax, qword [rbp + 0x118]
cmp rax, 0x10
jb 0x14006ec23
inc rax
mov rcx, qword [rbp + 0x100]
cmp rax, 0x1000
jb 0x14006ec1e
test cl, 0x1f
jne 0x14006fe47
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14006fe41
sub rcx, rax
cmp rcx, 8
jb 0x14006fe3b
cmp rcx, 0x27
ja 0x14006fe35
mov rcx, rax
call fcn.1400eb7f4
mov qword [rbp + 0x118], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x110], r13
mov byte [rbp + 0x100], 0
call fcn.14000b6b4
test rax, rax
je 0x14006fef0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x28], rax
lea r12, [rsi + 0x18]
mov qword [rbp - 0x40], r12
call fcn.14000b6b4
test rax, rax
je 0x14006fee5
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x20], rbx
test r12, r12
je 0x14006eccc
test r12, 0xffffffffffff0000
jne 0x14006ecb6
movzx edi, r12w
xor edx, edx
mov ecx, edi
call fcn.14000b0cc
test rax, rax
je 0x14006ece4
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.1400080f4
jmp 0x14006ecdf
mov rax, r15
nop dword [rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x14006ecc0
jmp 0x14006eccf
mov eax, r13d
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.140007a14
mov rbx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x58]
mov r9d, dword [rax - 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x20]
call fcn.140005c0c
nop
mov r13, qword [rax]
lea rcx, [r13 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x14006ee80
cmp dword [rdi + 0x10], 0
jl 0x14006ed54
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x14006ed54
call fcn.140007924
mov rbx, rax
mov ecx, r15d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x14006ed46
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x14006ee80
movsxd r15, dword [r13 - 0x10]
test r15d, r15d
jne 0x14006edb9
mov r15, qword [rdi]
cmp dword [rdi + 8], 0
je 0x14006ee7c
cmp dword [rdi + 0x10], 0
jge 0x14006ed89
cmp dword [rbx - 0xc], 0
jl 0x14006fe4d
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x14006ee7c
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x14006eda2
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x20], rax
jmp 0x14006ee7c
test r13, r13
je 0x14006fe6e
mov eax, dword [rbx - 0x10]
mov dword [rbp + 0x488], eax
mov r12, r13
sub r12, rbx
test r15d, r15d
js 0x14006fe63
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, r15d
or eax, ecx
jge 0x14006edfe
mov edx, r15d
lea rcx, [rsp + 0x20]
call fcn.14000799c
mov rbx, qword [rsp + 0x20]
mov eax, dword [rbp + 0x488]
mov rdi, r15
cmp r12, rax
ja 0x14006ee54
lea rdx, [r12 + rbx]
test r15d, r15d
je 0x14006ee66
test rdx, rdx
jne 0x14006ee2c
call fcn.140129180
mov dword [rax], reloc.WLDAP32.dll_Ordinal_22
call fcn.140128fd4
jmp 0x14006ee66
movsxd rax, dword [rbx - 0xc]
cmp rax, r15
jae 0x14006ee47
call fcn.140129180
mov dword [rax], Ordinal_35
call fcn.140128fd4
jmp 0x14006ee66
mov r8, r15
mov rcx, rbx
call fcn.14011c9b0
jmp 0x14006ee66
movsxd rdx, dword [rbx - 0xc]
mov r9, r15
mov r8, r13
mov rcx, rbx
call fcn.140072d10
cmp r15d, dword [rbx - 0xc]
jg 0x14006fe58
mov dword [rbx - 0x10], r15d
mov byte [rdi + rbx], 0
mov r12, qword [rbp - 0x40]
or r15, 0xffffffffffffffff
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006eea1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x20]
call fcn.140158628
xor cl, cl
movzx ecx, cl
test eax, eax
mov edi, 1
cmove ecx, edi
mov dword [rbp + 0x488], ecx
xor r13b, r13b
test r12, r12
jne 0x14006eed1
xor eax, eax
jmp 0x14006eede
mov rax, r15
inc rax
cmp byte [r12 + rax], 0
jne 0x14006eed4
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.140007a14
mov rax, qword [rsp + 0x70]
mov r9d, dword [rax - 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x98]
lea rcx, [rsp + 0x20]
call fcn.140005c0c
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x20]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14006ef70
cmp dword [rbx + 0x10], 0
jl 0x14006ef61
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14006ef61
call fcn.140007924
mov rdi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14006ef51
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
mov edi, 1
jmp 0x14006ef70
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140007a14
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006ef91
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x20]
call fcn.140158628
movzx ecx, r13b
test eax, eax
cmove ecx, edi
mov dword [rbp - 0x40], ecx
test r12, r12
jne 0x14006efb5
xor eax, eax
jmp 0x14006efca
mov rax, r15
nop dword [rax + rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x14006efc0
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.140007a14
mov rax, qword [rbp - 0x58]
mov r9d, dword [rax - 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.140005c0c
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x20]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14006f053
cmp dword [rbx + 0x10], 0
jl 0x14006f044
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14006f044
call fcn.140007924
mov rdi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14006f039
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x14006f053
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140007a14
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f071
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rbp - 0x58]
test rdx, rdx
je 0x14006feda
mov rbx, qword [rsp + 0x20]
mov rcx, rbx
call fcn.140158628
test eax, eax
jne 0x14006f095
mov rdx, qword [rbp - 0x58]
jmp 0x14006f0b2
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x14006fecf
mov rcx, rbx
call fcn.140158628
test eax, eax
jne 0x14006f10d
mov rdx, qword [rbp - 0x20]
mov rbx, qword [rsp + 0x28]
add rbx, 0xffffffffffffffe8
lea rcx, [rdx - 0x18]
cmp rcx, rbx
je 0x14006f10d
cmp dword [rbx + 0x10], 0
jl 0x14006f0ff
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14006f0ff
call fcn.140007924
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
mov rdi, rax
jg 0x14006f0f4
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x14006f10d
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140007a14
mov rax, qword [rsp + 0x28]
cmp dword [rax - 0x10], 0
je 0x14006f7bf
lea r12, [rsi + 0x10]
lea rdx, [r12 + 0x108]
lea rcx, [rbp - 0x28]
call fcn.140005e54
nop
mov dl, reloc.WLDAP32.dll_Ordinal_46
lea rcx, [rbp - 0x28]
call fcn.14002e710
mov edx, reloc.OLEAUT32.dll_SafeArrayDestroyData
lea rcx, [rbp + 0x270]
call fcn.1400160a0
mov rbx, rax
lea r8, [0x1403f4d60]
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x38]
call fcn.140005b44
nop
lea r8, [rbp - 0x28]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.14000e0f4
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14006f182
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140005b44
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f1b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f1d0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x270]
call fcn.14000c7e0
mov rdi, qword [rsp + 0x78]
lea r13, [rdi - 0x18]
mov rcx, r13
call fcn.140007924
lea rbx, [rax + 0x18]
mov qword [rbp - 0x38], rbx
mov r15, qword [rbp - 0x30]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x14006f21f
mov edx, 0x800
lea rcx, [rbp - 0x38]
call fcn.14000799c
mov rbx, qword [rbp - 0x38]
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.140156670
test eax, eax
js 0x14006fe9a
cmp eax, dword [rbx - 0xc]
jg 0x14006fe9a
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.140008548
mov qword [rbp - 0x50], rax
mov edx, reloc.OLEAUT32.dll_SafeArrayDestroyData
lea rcx, [rbp + 0x2f0]
call fcn.1400160a0
mov r15, rax
mov qword [rbp + 0x198], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x190], 0
mov byte [rbp + 0x180], 0
mov rdx, qword [rsp + 0x28]
cmp byte [rdx], 0
jne 0x14006f2ad
xor r8d, r8d
jmp 0x14006f2bb
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14006f2b1
lea rcx, [rbp + 0x180]
call fcn.14000d058
nop
mov qword [rbp + 0x178], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x170], 0
mov byte [rbp + 0x160], 0
mov r8d, 1
lea rdx, [0x1402470a0]
lea rcx, [rbp + 0x160]
call fcn.14000d058
nop
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x2d0]
call fcn.14001cd50
nop
lea r8, [0x1403f4bf0]
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.140053510
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x290]
call fcn.14001cd50
mov r15, rax
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x150], 0
mov byte [rbp + 0x140], 0
cmp byte [rdi], 0
jne 0x14006f36d
xor r8d, r8d
jmp 0x14006f37b
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x14006f371
mov rdx, rdi
lea rcx, [rbp + 0x140]
call fcn.14000d058
nop
lea r8, [rbp - 0x50]
mov rdx, r15
lea rcx, [rbp + 0x140]
call fcn.14006b090
nop
lea rcx, [rbp + 0x140]
call fcn.14000c7e0
nop
lea rcx, [rbp + 0x290]
call fcn.14000c7e0
nop
lea rcx, [rbp + 0x2b0]
call fcn.14000c7e0
nop
lea rcx, [rbp + 0x2d0]
call fcn.14000c7e0
nop
lea rcx, [rbp + 0x160]
call fcn.14000c7e0
nop
lea rcx, [rbp + 0x180]
call fcn.14000c7e0
nop
lea rcx, [rbp + 0x2f0]
call fcn.14000c7e0
mov rax, qword [rbp - 0x50]
mov rdi, qword [rax]
cmp rdi, rax
je 0x14006f5bf
nop dword [rax]
lea r15, [rdi + 0x10]
mov rcx, r13
call fcn.140007924
lea rbx, [rax + 0x18]
mov qword [rbp + 8], rbx
cmp qword [r15 + 0x18], 0x10
jb 0x14006f430
mov r12, qword [r15]
jmp 0x14006f433
mov r12, r15
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x14006f459
mov edx, 0x800
lea rcx, [rbp + 8]
call fcn.14000799c
mov rbx, qword [rbp + 8]
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.140156670
test eax, eax
js 0x14006fe84
cmp eax, dword [rbx - 0xc]
jg 0x14006fe84
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
lea rcx, [rbx - 0x18]
call fcn.140007924
add rax, 0x18
mov qword [rbp + 0x10], rax
mov dl, 1
lea rcx, [rbp + 0x10]
call fcn.14006df30
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x14006f4ce
xor edx, edx
lea r8d, [rax + 4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rdx, qword [rbp - 0x18]
lea rcx, [rsp + 0x30]
call fcn.140005e54
nop
cmp qword [r15 + 0x18], 0x10
jb 0x14006f4f1
mov r15, qword [r15]
mov rcx, qword [rsp + 0x30]
mov r8d, 1
sub r8d, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, 0x104
or eax, r8d
jge 0x14006f521
mov edx, 0x104
lea rcx, [rsp + 0x30]
call fcn.14000799c
mov rcx, qword [rsp + 0x30]
mov rdx, r15
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rsp + 0x30]
movsxd rdx, dword [rcx - 0xc]
call fcn.140156670
test eax, eax
js 0x14006fe79
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx - 0xc]
jg 0x14006fe79
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x30]
mov byte [rcx + rax], 0
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
or r15, 0xffffffffffffffff
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f58d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov eax, r15d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14006f5a8
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdi, qword [rdi]
cmp rdi, qword [rbp - 0x50]
jne 0x14006f410
mov rbx, qword [rbp - 0x38]
lea r12, [rsi + 0x10]
jmp 0x14006f5c3
or r15, 0xffffffffffffffff
lea rdx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rdx, qword [rbp - 0x18]
lea rcx, [rsp + 0x38]
call fcn.140005e54
nop
mov rdi, qword [rbp - 0x30]
mov rcx, qword [rsp + 0x38]
mov r8d, 1
sub r8d, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, 0x104
or eax, r8d
jge 0x14006f610
mov edx, 0x104
lea rcx, [rsp + 0x38]
call fcn.14000799c
mov rcx, qword [rsp + 0x38]
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rsp + 0x38]
movsxd rdx, dword [rcx - 0xc]
call fcn.140156670
test eax, eax
js 0x14006fe8f
mov rcx, qword [rsp + 0x38]
cmp eax, dword [rcx - 0xc]
jg 0x14006fe8f
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x38]
mov byte [rcx + rax], 0
mov qword [rbp + reloc.OLEAUT32.dll_VarUI8FromDec], reloc.WS2_32.dll_ntohs
xor edi, edi
mov qword [rbp + 0x1b0], rdi
mov byte [rbp + 0x1a0], dil
mov rdx, qword [rsp + 0x38]
cmp byte [rdx], dil
jne 0x14006f676
mov r8d, edi
jmp 0x14006f689
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rdx + r8], dil
jne 0x14006f680
lea rcx, [rbp + 0x1a0]
call fcn.14000d058
lea r8, [rbp + 0x1a0]
mov rdx, r12
mov r13, qword [rbp + 0x480]
mov rcx, r13
call fcn.14001c320
mov rax, qword [rbp + 0x498]
mov byte [rax], 1
mov qword [rbp + 0x1d8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1d0], rdi
mov byte [rbp + 0x1c0], dil
cmp byte [rbx], dil
jne 0x14006f6db
mov r8, rdi
jmp 0x14006f6e9
mov r8, r15
nop
inc r8
cmp byte [rbx + r8], dil
jne 0x14006f6e0
mov rdx, rbx
lea rcx, [rbp + 0x1c0]
call fcn.14000d058
lea r8, [rbp + 0x1c0]
mov rdx, r12
mov rcx, r13
call fcn.14001c320
lea rcx, [rbx - 0x18]
call fcn.140007924
add rax, 0x18
mov qword [rbp + 0x18], rax
xor edx, edx
lea rcx, [rbp + 0x18]
call fcn.14006df30
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f747
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp - 0x50]
call fcn.140007610
mov edx, 1
lea r8d, [rdx + 0x2f]
mov rcx, qword [rbp - 0x50]
call fcn.14000ce04
nop
mov eax, r15d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14006f77f
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f79e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fd1c
mov rcx, qword [rdx]
jmp 0x14006fd15
mov rcx, qword [rsp + 0x78]
add rcx, 0xffffffffffffffe8
call fcn.140007924
lea rbx, [rax + 0x18]
mov qword [rsp + 0x60], rbx
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x14006f7fe
mov edx, 0x800
lea rcx, [rsp + 0x60]
call fcn.14000799c
mov rbx, qword [rsp + 0x60]
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.140156670
test eax, eax
js 0x14006fec4
cmp eax, dword [rbx - 0xc]
jg 0x14006fec4
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
lea r13, [rbx - 0x18]
mov rcx, r13
call fcn.140007924
add rax, 0x18
mov qword [rsp + 0x68], rax
mov rcx, r13
call fcn.140007924
add rax, 0x18
mov qword [rbp + 0x20], rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x60]
call fcn.14001cad0
nop
mov edx, Ordinal_41
lea rcx, [rbp + 0x330]
call fcn.1400160a0
mov rbx, rax
lea r8, [rbp - 0x60]
lea rdx, [0x1403f4d64]
lea rcx, [rbp + 0x48]
call fcn.140005a78
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14006f896
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140005b44
mov rbx, rax
mov edx, Ordinal_41
lea rcx, [rbp + 0x310]
call fcn.1400160a0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14006f8c4
mov rax, qword [rax]
mov r8, qword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14001d080
nop
lea rcx, [rbp + 0x310]
call fcn.14000c7e0
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f901
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f920
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x330]
call fcn.14000c7e0
mov edx, reloc.OLEAUT32.dll_SafeArrayDestroyData
lea rcx, [rbp + 0x370]
call fcn.1400160a0
mov rbx, rax
lea r8, [rbp - 0x60]
lea rdx, [0x1403f4d64]
lea rcx, [rbp + 0x58]
call fcn.140005a78
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14006f95f
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140005b44
mov rbx, rax
mov edx, reloc.OLEAUT32.dll_SafeArrayDestroyData
lea rcx, [rbp + 0x350]
call fcn.1400160a0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14006f98d
mov rax, qword [rax]
mov r8, qword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14001d080
nop
lea rcx, [rbp + 0x350]
call fcn.14000c7e0
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f9ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006f9e9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x370]
call fcn.14000c7e0
mov edx, Ordinal_41
lea rcx, [rbp + 0x3b0]
call fcn.1400160a0
mov rbx, rax
lea r8, [rbp - 0x60]
lea rdx, [0x1403f4d64]
lea rcx, [rbp + 0x68]
call fcn.140005a78
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14006fa28
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.140005b44
mov rbx, rax
mov edx, Ordinal_41
lea rcx, [rbp + 0x390]
call fcn.1400160a0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14006fa56
mov rax, qword [rax]
mov r8, qword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14001d080
mov r15d, eax
lea rcx, [rbp + 0x390]
call fcn.14000c7e0
nop
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov ecx, ebx
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14006fa98
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fab6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x3b0]
call fcn.14000c7e0
mov rdi, qword [rsp + 0x68]
mov rdx, rdi
mov rbx, qword [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileA]
cmp byte [rbp + 0x488], 0
jne 0x14006fc43
test r15d, r15d
jne 0x14006fc43
lea rdx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rdx, qword [rbp - 0x18]
lea rcx, [rsp + 0x40]
call fcn.140005e54
nop
mov rcx, qword [rsp + 0x40]
mov edx, 1
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, 0x104
or eax, edx
jge 0x14006fb34
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.14000799c
mov rcx, qword [rsp + 0x40]
mov rdx, r12
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rsp + 0x40]
movsxd rdx, dword [rcx - 0xc]
call fcn.140156670
test eax, eax
js 0x14006fea5
mov rcx, qword [rsp + 0x40]
cmp eax, dword [rcx - 0xc]
jg 0x14006fea5
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x40]
mov byte [rcx + rax], 0
mov rdx, qword [rsp + 0x40]
lea rcx, [rbp + 0x3d0]
call fcn.14000d194
mov r8, rax
lea r12, [rsi + 0x10]
mov rdx, r12
mov rcx, qword [rbp + 0x480]
call fcn.14001c320
cmp byte [rbp - 0x40], 0
jne 0x14006fc09
mov qword [rbp + 0x1f8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1f0], 0
mov byte [rbp + 0x1e0], 0
cmp byte [rdi], 0
jne 0x14006fbc4
xor r8d, r8d
jmp 0x14006fbda
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x14006fbd0
mov rdx, rdi
lea rcx, [rbp + 0x1e0]
call fcn.14000d058
nop
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x80]
call fcn.140005468
nop
lea rcx, [rbp + 0x1e0]
call fcn.14000c7e0
jmp 0x14006fc19
xor edx, edx
lea r8d, [rdx + 4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
or r15, 0xffffffffffffffff
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fc3c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rsp + 0x60]
jmp 0x14006fc5a
xor edx, edx
lea r8d, [rdx + 4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
or r15, 0xffffffffffffffff
lea r12, [rsi + 0x10]
mov rax, qword [rbp + 0x498]
mov byte [rax], 1
xor edi, edi
mov qword [rbp + 0x210], rdi
mov qword [rbp + 0x218], rdi
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x200]
call fcn.14000cea8
cmp byte [rbx], dil
jne 0x14006fc8f
mov r8d, edi
jmp 0x14006fc9b
mov r8, r15
inc r8
cmp byte [rbx + r8], dil
jne 0x14006fc92
mov rdx, rbx
lea rcx, [rbp + 0x200]
call fcn.14000d058
lea r8, [rbp + 0x200]
mov rdx, r12
mov rcx, qword [rbp + 0x480]
call fcn.14001c320
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fce0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fd00
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov eax, r15d
lock xadd dword [r13 + 0x10], eax
sub eax, 1
jg 0x14006fd1c
mov rcx, qword [r13]
mov rdx, r13
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fd3c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fd5c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fd7c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fd9c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fdbb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14006fdd9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rsi, qword [rsi]
cmp rsi, r14
je 0x14006feb0
xor r13d, r13d
jmp 0x14006e7e0
call fcn.140128ff4
int3
call fcn.140128ff4
int3
call fcn.140128ff4
int3
call fcn.140128ff4
nop
call fcn.140128ff4
int3
call fcn.140128ff4
int3
call fcn.140128ff4
int3
call fcn.140128ff4
nop
call fcn.140128ff4
int3
call fcn.140128ff4
int3
call fcn.140128ff4
int3
call fcn.140128ff4
nop
call fcn.140128ff4
int3
call fcn.140128ff4
int3
call fcn.140128ff4
int3
call fcn.140128ff4
nop
mov ecx, 0x80070057
call fcn.14000b9ec
int3
mov ecx, 0x80070057
call fcn.14000b9ec
int3
mov ecx, 0x80070057
call fcn.14000b9ec
int3
mov ecx, 0x80070057
call fcn.14000b9ec
nop
mov ecx, 0x80070057
call fcn.14000b9ec
nop
mov ecx, 0x80070057
call fcn.14000b9ec
nop
mov ecx, 0x80070057
call fcn.14000b9ec
nop
mov ecx, 0x80070057
call fcn.14000b9ec
nop
mov ecx, 0x80070057
call fcn.14000b9ec
nop
mov r15, qword [rbp - 0x80]
or r12, 0xffffffffffffffff
mov rdi, qword [rbp + 0x490]
xor r13d, r13d
jmp 0x14006ff27
mov ecx, 0x80070057
call fcn.14000b9ec
nop
mov ecx, 0x80004005
call fcn.14000b9ec
int3
mov ecx, 0x80004005
call fcn.14000b9ec
nop
mov ecx, 0x80004005
call fcn.14000b9ec
nop
mov ecx, 0x80004005
call fcn.14000b9ec
nop
mov ecx, 0x80004005
call fcn.14000b9ec
nop
mov ecx, 0x80004005
call fcn.14000b9ec
nop
mov ecx, 0x80004005
call fcn.14000b9ec
nop
mov ecx, 0x80004005
call fcn.14000b9ec
nop
mov rax, qword [rbp + 0x498]
cmp byte [rax], 0
je 0x14006ff7f
mov rcx, rdi
call fcn.14001fa50
mov qword [rbp + 0x230], r13
mov qword [rbp + 0x238], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x220]
call fcn.14000cea8
mov r9, r12
xor r8d, r8d
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x220]
call fcn.14000ca10
lea rdx, [rbp + 0x220]
mov rcx, rdi
call fcn.14001f100
mov edx, 0x66
lea rcx, [rbp + 0x3f0]
call fcn.1400160a0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14006ff9b
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.140005e54
mov rcx, rax
call fcn.140075b30
nop
lea rcx, [rbp + 0x3f0]
call fcn.14000c7e0
call fcn.140075990
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r14, r13
movabs r13, 0x555555555555554
nop dword [rax]
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.140008548
mov rdi, rax
mov qword [rsp + 0x48], rax
mov rbx, qword [r15]
cmp rbx, r15
je 0x140070075
nop dword [rax + rax]
cmp qword [rbx + 0x28], 0x10
jb 0x14007001d
mov rcx, qword [rbx + 0x10]
jmp 0x140070021
lea rcx, [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x14007006d
lea r9, [rbx + 0x10]
mov r8, qword [rdi + 8]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140009cb8
mov rcx, r13
mov rdx, qword [rsp + 0x50]
sub rcx, rdx
cmp rcx, 1
jb 0x1400700db
inc rdx
mov qword [rsp + 0x50], rdx
mov qword [rdi + 8], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rax
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rbx]
cmp rbx, r15
jne 0x140070010
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x140070099
nop dword [rax]
lea rdx, [rbx + 0x10]
lea rcx, [rbp - 0x80]
call fcn.140072bb0
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x140070080
mov r15, qword [rbp - 0x80]
cmp qword [rbp - 0x78], 0
je 0x1400700e8
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x48]
call fcn.140007610
mov edi, 1
mov r8d, edi
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x48]
call fcn.140008534
inc r14
cmp r14, 0x78
jae 0x140070109
jmp 0x14006ffe0
lea rcx, str.list_T__too_long
call fcn.1400bc800
nop
lea rcx, [rsp + 0x48]
call fcn.140007610
mov edi, 1
mov r8d, edi
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x48]
call fcn.140008534
mov rbx, qword [r15]
cmp rbx, r15
je 0x140070133
lea rcx, [rbx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x14007011f
mov rcx, qword [rcx]
xor edx, edx
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
mov rbx, qword [rbx]
cmp rbx, r15
jne 0x140070111
mov edx, 0x67
lea rcx, [rbp + 0x410]
call fcn.1400160a0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14007014f
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.140005e54
mov rcx, rax
call fcn.140075b30
nop
lea rcx, [rbp + 0x410]
call fcn.14000c7e0
call fcn.14006e210
nop
lea rcx, [rbp - 0x80]
call fcn.140007610
mov r8, rdi
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x80]
call fcn.140008534
nop
lea rcx, [rbp - 0x18]
call fcn.14000c7e0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x1400701b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
add rsp, 0x538
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret