Function at 0x14002dc90
Capabilities:
Delete file
Move file

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x438]
sub rsp, 0x538
mov qword [rbp + 0x240], 0xfffffffffffffffe
mov rdi, r8
mov r14, rdx
mov edx, 0x62
lea rcx, [rbp + 0x250]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002dce7
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.14000b200
mov edx, dword [r14 + 8]
mov rcx, rax
call fcn.140035d50
nop
mov rax, qword [rbp + 0x268]
cmp rax, 0x10
jb 0x14002dd5f
inc rax
mov rcx, qword [rbp + 0x250]
cmp rax, 0x1000
jb 0x14002dd5a
test cl, 0x1f
je 0x14002dd2d
call fcn.1400e462c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14002dd3c
call fcn.1400e462c
int3
sub rcx, rax
cmp rcx, 8
jae 0x14002dd4b
call fcn.1400e462c
int3
cmp rcx, 0x27
jbe 0x14002dd57
call fcn.1400e462c
int3
mov rcx, rax
call fcn.14007b800
lea rcx, [rbp + 0x88]
call fcn.140035dd0
nop
mov rbx, qword [rax]
call fcn.14000bcc0
mov rcx, rax
test rax, rax
jne 0x14002dd87
mov ecx, 0x80004005
call fcn.14000b790
int3
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x78], rax
test rbx, rbx
je 0x14002ddc5
test rbx, 0xffffffffffff0000
jne 0x14002ddc5
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002ddd2
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14000bdc0
jmp 0x14002ddd2
mov rdx, rbx
lea rcx, [rbp - 0x78]
call fcn.1400302a0
nop
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002ddf3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
lea rdx, [rbp + 8]
mov rcx, rdi
call fcn.140010370
nop
mov qword [rbp + 0x138], reloc.WS2_32.dll_ntohs
xor r13d, r13d
mov qword [rbp + 0x130], r13
mov byte [rbp + 0x120], r13b
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x120]
call fcn.1400075c0
lea rdx, [rbp + 0x120]
mov rcx, rdi
call fcn.14000fe10
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.14000c720
mov r15, rax
mov qword [rbp - 0x50], rax
mov r14, qword [r14]
mov rsi, qword [r14]
cmp rsi, r14
je 0x14002f5ab
nop
lea r15, [rsi + 0x10]
mov edx, 9
lea rcx, [rbp + 0xa0]
call fcn.140024260
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002de92
mov rbx, qword [rax]
call fcn.14000bcc0
test rax, rax
je 0x14002f5a0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x78], rax
test rbx, rbx
je 0x14002def2
test rbx, 0xffffffffffff0000
jne 0x14002dee3
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002df06
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14000bdc0
jmp 0x14002df06
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x14002dee7
jmp 0x14002def5
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.14000c510
nop
lea r8, [0x14012fdc8]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x68]
call fcn.1400303e0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002df3c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rbp + 0xb8]
cmp rax, 0x10
jb 0x14002df90
inc rax
mov rcx, qword [rbp + 0xa0]
cmp rax, 0x1000
jb 0x14002df8b
test cl, 0x1f
jne 0x14002f48a
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14002f484
sub rcx, rax
cmp rcx, 8
jb 0x14002f47e
cmp rcx, 0x27
ja 0x14002f478
mov rcx, rax
call fcn.14007b800
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xb0], r13
mov byte [rbp + 0xa0], 0
mov edx, 9
lea rcx, [rbp + 0xc0]
call fcn.140024260
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002dfc7
mov rbx, qword [rax]
call fcn.14000bcc0
test rax, rax
je 0x14002f595
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x80], rax
test rbx, rbx
je 0x14002e02b
test rbx, 0xffffffffffff0000
jne 0x14002e016
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002e03e
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000bdc0
jmp 0x14002e03e
or rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x14002e020
jmp 0x14002e02e
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.14000c510
nop
lea r8, [0x14012fdcc]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400303e0
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e072
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rbp + 0xd8]
cmp rax, 0x10
jb 0x14002e0c6
inc rax
mov rcx, qword [rbp + 0xc0]
cmp rax, 0x1000
jb 0x14002e0c1
test cl, 0x1f
jne 0x14002f4a2
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14002f49c
sub rcx, rax
cmp rcx, 8
jb 0x14002f496
cmp rcx, 0x27
ja 0x14002f490
mov rcx, rax
call fcn.14007b800
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xd0], r13
mov byte [rbp + 0xc0], 0
mov edx, 0x76
lea rcx, [rbp + 0xe0]
call fcn.140024260
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002e0fd
mov rbx, qword [rax]
call fcn.14000bcc0
test rax, rax
je 0x14002f58a
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x58], rax
test rbx, rbx
je 0x14002e15d
test rbx, 0xffffffffffff0000
jne 0x14002e14e
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002e171
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.14000bdc0
jmp 0x14002e171
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x14002e152
jmp 0x14002e160
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.14000c510
nop
mov rax, qword [rbp + 0xf8]
cmp rax, 0x10
jb 0x14002e1c5
inc rax
mov rcx, qword [rbp + 0xe0]
cmp rax, 0x1000
jb 0x14002e1c0
test cl, 0x1f
jne 0x14002f4ba
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14002f4b4
sub rcx, rax
cmp rcx, 8
jb 0x14002f4ae
cmp rcx, 0x27
ja 0x14002f4a8
mov rcx, rax
call fcn.14007b800
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov qword [rbp + 0xf0], r13
mov byte [rbp + 0xe0], 0
mov edx, 0xe9
lea rcx, [rbp + 0x100]
call fcn.140024260
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002e1fc
mov rbx, qword [rax]
call fcn.14000bcc0
test rax, rax
je 0x14002f57f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x70], rax
test rbx, rbx
je 0x14002e25c
test rbx, 0xffffffffffff0000
jne 0x14002e24d
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b6e0
test rax, rax
je 0x14002e270
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14000bdc0
jmp 0x14002e270
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x14002e251
jmp 0x14002e25f
mov eax, r13d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.14000c510
nop
mov rax, qword [rbp + 0x118]
cmp rax, 0x10
jb 0x14002e2c4
inc rax
mov rcx, qword [rbp + 0x100]
cmp rax, 0x1000
jb 0x14002e2bf
test cl, 0x1f
jne 0x14002f4d2
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14002f4cc
sub rcx, rax
cmp rcx, 8
jb 0x14002f4c6
cmp rcx, 0x27
ja 0x14002f4c0
mov rcx, rax
call fcn.14007b800
mov qword [rbp + 0x118], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x110], r13
mov byte [rbp + 0x100], 0
call fcn.14000bcc0
test rax, rax
je 0x14002f574
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x28], rax
lea r12, [r15 + 8]
mov qword [rbp - 0x40], r12
call fcn.14000bcc0
test rax, rax
je 0x14002f569
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x20], rbx
test r12, r12
je 0x14002e36c
test r12, 0xffffffffffff0000
jne 0x14002e357
movzx edi, r12w
xor edx, edx
mov ecx, edi
call fcn.14000b6e0
test rax, rax
je 0x14002e384
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14000bdc0
jmp 0x14002e37f
or rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x14002e360
jmp 0x14002e36f
mov eax, r13d
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.14000c510
mov rbx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x58]
mov r9d, dword [rax - 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x20]
call fcn.1400311c0
nop
mov r13, qword [rax]
lea rcx, [r13 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x14002e520
cmp dword [rdi + 0x10], 0
jl 0x14002e3f4
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x14002e3f4
call fcn.14000b7c0
mov rbx, rax
or ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x14002e3e6
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x14002e520
movsxd r15, dword [r13 - 0x10]
test r15d, r15d
jne 0x14002e459
mov r15, qword [rdi]
cmp dword [rdi + 8], 0
je 0x14002e51c
cmp dword [rdi + 0x10], 0
jge 0x14002e429
cmp dword [rbx - 0xc], 0
jl 0x14002f4d8
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x14002e51c
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x14002e442
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x20], rax
jmp 0x14002e51c
test r13, r13
je 0x14002f4f9
mov eax, dword [rbx - 0x10]
mov dword [rbp + 0x488], eax
mov r12, r13
sub r12, rbx
test r15d, r15d
js 0x14002f4ee
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, r15d
or eax, ecx
jge 0x14002e49e
mov edx, r15d
lea rcx, [rsp + 0x20]
call fcn.14000bfd0
mov rbx, qword [rsp + 0x20]
mov eax, dword [rbp + 0x488]
mov rdi, r15
cmp r12, rax
ja 0x14002e4f4
lea rdx, [r12 + rbx]
test r15d, r15d
je 0x14002e506
test rdx, rdx
jne 0x14002e4cc
call fcn.1400e49e8
mov dword [rax], reloc.WLDAP32.dll_Ordinal_22
call fcn.1400e460c
jmp 0x14002e506
movsxd rax, dword [rbx - 0xc]
cmp rax, r15
jae 0x14002e4e7
call fcn.1400e49e8
mov dword [rax], Ordinal_35
call fcn.1400e460c
jmp 0x14002e506
mov r8, r15
mov rcx, rbx
call fcn.1400ac270
jmp 0x14002e506
movsxd rdx, dword [rbx - 0xc]
mov r9, r15
mov r8, r13
mov rcx, rbx
call fcn.1400328f0
cmp r15d, dword [rbx - 0xc]
jg 0x14002f4e3
mov dword [rbx - 0x10], r15d
mov byte [rdi + rbx], 0
mov r12, qword [rbp - 0x40]
lea r15, [rsi + 0x10]
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e541
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x20]
call fcn.1400e7240
xor cl, cl
movzx ecx, cl
test eax, eax
mov edi, 1
cmove ecx, edi
mov dword [rbp + 0x488], ecx
xor r13b, r13b
test r12, r12
jne 0x14002e571
xor eax, eax
jmp 0x14002e57f
or rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], 0
jne 0x14002e575
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.14000c510
mov rax, qword [rsp + 0x70]
mov r9d, dword [rax - 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x98]
lea rcx, [rsp + 0x20]
call fcn.1400311c0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x20]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e611
cmp dword [rbx + 0x10], 0
jl 0x14002e602
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e602
call fcn.14000b7c0
mov rdi, rax
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14002e5f2
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
mov edi, 1
jmp 0x14002e611
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.14000c510
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e632
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x20]
call fcn.1400e7240
movzx ecx, r13b
test eax, eax
cmove ecx, edi
mov dword [rbp - 0x40], ecx
test r12, r12
jne 0x14002e656
xor eax, eax
jmp 0x14002e66a
or rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x14002e660
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.14000c510
mov rax, qword [rbp - 0x68]
mov r9d, dword [rax - 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.1400311c0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x20]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e6f3
cmp dword [rbx + 0x10], 0
jl 0x14002e6e4
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e6e4
call fcn.14000b7c0
mov rdi, rax
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14002e6d9
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x14002e6f3
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.14000c510
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e711
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rbp - 0x68]
test rdx, rdx
je 0x14002f55e
mov rbx, qword [rsp + 0x20]
mov rcx, rbx
call fcn.1400e7240
test eax, eax
jne 0x14002e735
mov rdx, qword [rbp - 0x68]
jmp 0x14002e752
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x14002f553
mov rcx, rbx
call fcn.1400e7240
test eax, eax
jne 0x14002e7ad
mov rdx, qword [rbp - 0x20]
mov rbx, qword [rsp + 0x28]
add rbx, 0xffffffffffffffe8
lea rcx, [rdx - 0x18]
cmp rcx, rbx
je 0x14002e7ad
cmp dword [rbx + 0x10], 0
jl 0x14002e79f
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e79f
call fcn.14000b7c0
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
mov rdi, rax
jg 0x14002e794
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x14002e7ad
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.14000c510
mov rax, qword [rsp + 0x28]
cmp dword [rax - 0x10], 0
je 0x14002ee56
lea rdx, [r15 + 0x108]
lea rcx, [rbp - 0x28]
call fcn.14000b200
nop
mov dl, reloc.WLDAP32.dll_Ordinal_46
lea rcx, [rbp - 0x28]
call fcn.14001c180
mov edx, SafeArrayDestroyData
lea rcx, [rbp + 0x270]
call fcn.140024260
mov rbx, rax
lea r8, [0x14012fdd0]
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x38]
call fcn.1400303e0
nop
lea r8, [rbp - 0x28]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.14001b7e0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14002e81d
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400303e0
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e84c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002e86b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x270]
call fcn.140007010
mov rdi, qword [rbp - 0x78]
lea r13, [rdi - 0x18]
mov rcx, r13
call fcn.14000b7c0
lea rbx, [rax + 0x18]
mov qword [rbp - 0x38], rbx
mov r15, qword [rbp - 0x30]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x14002e8b9
mov edx, 0x800
lea rcx, [rbp - 0x38]
call fcn.14000bfd0
mov rbx, qword [rbp - 0x38]
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400e520c
test eax, eax
js 0x14002f525
cmp eax, dword [rbx - 0xc]
jg 0x14002f525
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
xor r12d, r12d
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000c720
mov qword [rbp - 0x60], rax
lea edx, [r12 + 0x24]
lea rcx, [rbp + 0x2f0]
call fcn.140024260
mov r15, rax
mov qword [rbp + 0x198], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x190], r12
mov byte [rbp + 0x180], r12b
mov rdx, qword [rsp + 0x28]
cmp byte [rdx], r12b
jne 0x14002e944
mov r8d, r12d
jmp 0x14002e95a
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002e950
lea rcx, [rbp + 0x180]
call fcn.1400080d0
nop
mov qword [rbp + 0x178], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x170], r12
mov byte [rbp + 0x160], 0
mov r8d, 1
lea rdx, [0x14012d6b0]
lea rcx, [rbp + 0x160]
call fcn.1400080d0
nop
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x2d0]
call fcn.14000af20
nop
lea r8, [0x14012fc78]
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.14002f810
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x290]
call fcn.14000af20
mov r15, rax
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x150], r12
mov byte [rbp + 0x140], 0
cmp byte [rdi], 0
jne 0x14002ea04
mov r8, r12
jmp 0x14002ea1a
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x14002ea10
mov rdx, rdi
lea rcx, [rbp + 0x140]
call fcn.1400080d0
nop
lea r8, [rbp - 0x60]
mov rdx, r15
lea rcx, [rbp + 0x140]
call fcn.14002ac50
nop
lea rcx, [rbp + 0x140]
call fcn.140007010
nop
lea rcx, [rbp + 0x290]
call fcn.140007010
nop
lea rcx, [rbp + 0x2b0]
call fcn.140007010
nop
lea rcx, [rbp + 0x2d0]
call fcn.140007010
nop
lea rcx, [rbp + 0x160]
call fcn.140007010
nop
lea rcx, [rbp + 0x180]
call fcn.140007010
nop
lea rcx, [rbp + 0x2f0]
call fcn.140007010
mov rax, qword [rbp - 0x60]
mov rdi, qword [rax]
cmp rdi, rax
je 0x14002ec55
nop dword [rax + rax]
lea r15, [rdi + 0x10]
mov rcx, r13
call fcn.14000b7c0
lea rbx, [rax + 0x18]
mov qword [rbp - 0x18], rbx
cmp qword [r15 + 0x18], 0x10
jb 0x14002ead0
mov r12, qword [r15]
jmp 0x14002ead3
mov r12, r15
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x14002eaf9
mov edx, 0x800
lea rcx, [rbp - 0x18]
call fcn.14000bfd0
mov rbx, qword [rbp - 0x18]
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400e520c
test eax, eax
js 0x14002f50f
cmp eax, dword [rbx - 0xc]
jg 0x14002f50f
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
lea rcx, [rbx - 0x18]
call fcn.14000b7c0
add rax, 0x18
mov qword [rbp - 0x10], rax
mov dl, 1
lea rcx, [rbp - 0x10]
call fcn.14002d9e0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x14002eb6e
xor edx, edx
lea r8d, [rax + 4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.14000b200
nop
cmp qword [r15 + 0x18], 0x10
jb 0x14002eb91
mov r15, qword [r15]
mov rcx, qword [rsp + 0x30]
mov r8d, 1
sub r8d, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, 0x104
or eax, r8d
jge 0x14002ebc1
mov edx, 0x104
lea rcx, [rsp + 0x30]
call fcn.14000bfd0
mov rcx, qword [rsp + 0x30]
mov rdx, r15
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rsp + 0x30]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400e520c
test eax, eax
js 0x14002f504
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx - 0xc]
jg 0x14002f504
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x30]
mov byte [rcx + rax], 0
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002ec29
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
or eax, 0xffffffff
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14002ec44
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdi, qword [rdi]
cmp rdi, qword [rbp - 0x60]
jne 0x14002eab0
mov rbx, qword [rbp - 0x38]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x38]
call fcn.14000b200
nop
mov rdi, qword [rbp - 0x30]
mov rcx, qword [rsp + 0x38]
mov r8d, 1
sub r8d, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, 0x104
or eax, r8d
jge 0x14002eca2
mov edx, 0x104
lea rcx, [rsp + 0x38]
call fcn.14000bfd0
mov rcx, qword [rsp + 0x38]
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rsp + 0x38]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400e520c
test eax, eax
js 0x14002f51a
mov rcx, qword [rsp + 0x38]
cmp eax, dword [rcx - 0xc]
jg 0x14002f51a
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x38]
mov byte [rcx + rax], 0
mov qword [rbp + reloc.OLEAUT32.dll_VarUI8FromDec], reloc.WS2_32.dll_ntohs
xor r13d, r13d
mov qword [rbp + 0x1b0], r13
mov byte [rbp + 0x1a0], r13b
mov rdx, qword [rsp + 0x38]
cmp byte [rdx], r13b
jne 0x14002ed09
mov r8d, r13d
jmp 0x14002ed19
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], r13b
jne 0x14002ed10
lea rcx, [rbp + 0x1a0]
call fcn.1400080d0
lea r8, [rbp + 0x1a0]
lea rdx, [rsi + 0x10]
mov r12, qword [rbp + 0x480]
mov rcx, r12
call fcn.14000a4f0
mov rax, qword [rbp + 0x498]
mov byte [rax], 1
mov qword [rbp + 0x1d8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1d0], r13
mov byte [rbp + 0x1c0], r13b
cmp byte [rbx], r13b
jne 0x14002ed6c
mov r8, r13
jmp 0x14002ed79
or r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], r13b
jne 0x14002ed70
mov rdx, rbx
lea rcx, [rbp + 0x1c0]
call fcn.1400080d0
lea r8, [rbp + 0x1c0]
lea rdx, [rsi + 0x10]
mov rcx, r12
call fcn.14000a4f0
lea rcx, [rbx - 0x18]
call fcn.14000b7c0
add rax, 0x18
mov qword [rbp - 8], rax
xor edx, edx
lea rcx, [rbp - 8]
call fcn.14002d9e0
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002edd8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp - 0x60]
call fcn.14000cbf0
mov edx, 1
lea r8d, [rdx + 0x2f]
mov rcx, qword [rbp - 0x60]
call fcn.14000c780
nop
or eax, 0xffffffff
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14002ee10
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002ee2f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f3aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x14002f3aa
mov rcx, qword [rbp - 0x78]
add rcx, 0xffffffffffffffe8
call fcn.14000b7c0
lea rbx, [rax + 0x18]
mov qword [rsp + 0x60], rbx
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x14002ee94
mov edx, 0x800
lea rcx, [rsp + 0x60]
call fcn.14000bfd0
mov rbx, qword [rsp + 0x60]
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400e520c
test eax, eax
js 0x14002f548
cmp eax, dword [rbx - 0xc]
jg 0x14002f548
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
lea r13, [rbx - 0x18]
mov rcx, r13
call fcn.14000b7c0
add rax, 0x18
mov qword [rsp + 0x68], rax
mov rcx, r13
call fcn.14000b7c0
add rax, 0x18
mov qword [rbp], rax
lea rdx, [rbp]
lea rcx, [rbp - 0x70]
call fcn.14000aca0
nop
mov edx, reloc.WLDAP32.dll_Ordinal_35
lea rcx, [rbp + 0x330]
call fcn.140024260
mov rbx, rax
lea r8, [rbp - 0x70]
lea rdx, [0x14012fdd4]
lea rcx, [rbp + 0x48]
call fcn.1400304b0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14002ef2c
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.1400303e0
mov rbx, rax
mov edx, reloc.WLDAP32.dll_Ordinal_35
lea rcx, [rbp + 0x310]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002ef5a
mov rax, qword [rax]
mov r8, qword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000c200
nop
lea rcx, [rbp + 0x310]
call fcn.140007010
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002ef97
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002efb6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x330]
call fcn.140007010
mov edx, SafeArrayDestroyData
lea rcx, [rbp + 0x370]
call fcn.140024260
mov rbx, rax
lea r8, [rbp - 0x70]
lea rdx, [0x14012fdd4]
lea rcx, [rbp + 0x58]
call fcn.1400304b0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14002eff5
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400303e0
mov rbx, rax
mov edx, SafeArrayDestroyData
lea rcx, [rbp + 0x350]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002f023
mov rax, qword [rax]
mov r8, qword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000c200
nop
lea rcx, [rbp + 0x350]
call fcn.140007010
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f060
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f07f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x370]
call fcn.140007010
mov edx, Ordinal_41
lea rcx, [rbp + 0x3b0]
call fcn.140024260
mov rbx, rax
lea r8, [rbp - 0x70]
lea rdx, [0x14012fdd4]
lea rcx, [rbp + 0x68]
call fcn.1400304b0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14002f0be
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.1400303e0
mov rbx, rax
mov edx, Ordinal_41
lea rcx, [rbp + 0x390]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002f0ec
mov rax, qword [rax]
mov r8, qword [rbx]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000c200
mov r15d, eax
lea rcx, [rbp + 0x390]
call fcn.140007010
nop
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
or ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14002f12b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f14a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x3b0]
call fcn.140007010
mov rdi, qword [rsp + 0x68]
mov rdx, rdi
mov rbx, qword [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileA]
cmp byte [rbp + 0x488], 0
jne 0x14002f2cf
test r15d, r15d
jne 0x14002f2cf
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x40]
call fcn.14000b200
nop
mov rcx, qword [rsp + 0x40]
mov edx, 1
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
sub eax, 0x104
or eax, edx
jge 0x14002f1c8
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.14000bfd0
mov rcx, qword [rsp + 0x40]
mov rdx, r12
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov rcx, qword [rsp + 0x40]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400e520c
test eax, eax
js 0x14002f530
mov rcx, qword [rsp + 0x40]
cmp eax, dword [rcx - 0xc]
jg 0x14002f530
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x40]
mov byte [rcx + rax], 0
mov rdx, qword [rsp + 0x40]
lea rcx, [rbp + 0x3d0]
call fcn.14002fe10
mov r8, rax
lea r15, [rsi + 0x10]
mov rdx, r15
mov r12, qword [rbp + 0x480]
mov rcx, r12
call fcn.14000a4f0
cmp byte [rbp - 0x40], 0
jne 0x14002f299
mov qword [rbp + 0x1f8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1f0], 0
mov byte [rbp + 0x1e0], 0
cmp byte [rdi], 0
jne 0x14002f25b
xor r8d, r8d
jmp 0x14002f26a
or r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdi + r8], 0
jne 0x14002f260
mov rdx, rdi
lea rcx, [rbp + 0x1e0]
call fcn.1400080d0
nop
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x50]
call fcn.1400326f0
nop
lea rcx, [rbp + 0x1e0]
call fcn.140007010
jmp 0x14002f2a9
xor edx, edx
lea r8d, [rdx + 4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f2c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rsp + 0x60]
jmp 0x14002f2e9
xor edx, edx
lea r8d, [rdx + 4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
lea r15, [rsi + 0x10]
mov r12, qword [rbp + 0x480]
mov rax, qword [rbp + 0x498]
mov byte [rax], 1
xor edi, edi
mov qword [rbp + 0x210], rdi
mov qword [rbp + 0x218], rdi
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x200]
call fcn.14000c900
cmp byte [rbx], dil
jne 0x14002f31e
mov r8d, edi
jmp 0x14002f32b
or r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], dil
jne 0x14002f322
mov rdx, rbx
lea rcx, [rbp + 0x200]
call fcn.1400080d0
lea r8, [rbp + 0x200]
mov rdx, r15
mov rcx, r12
call fcn.14000a4f0
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f36c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f38c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
or eax, 0xffffffff
lock xadd dword [r13 + 0x10], eax
sub eax, 1
jg 0x14002f3a7
mov rcx, qword [r13]
mov rax, qword [rcx]
mov rdx, r13
call qword [rax + reloc.WS2_32.dll_htonl]
xor r13d, r13d
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f3ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f3ea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f40a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f42a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f449
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002f467
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rsi, qword [rsi]
cmp rsi, r14
je 0x14002f53b
jmp 0x14002de70
call fcn.1400e462c
int3
call fcn.1400e462c
int3
call fcn.1400e462c
int3
call fcn.1400e462c
nop
call fcn.1400e462c
int3
call fcn.1400e462c
int3
call fcn.1400e462c
int3
call fcn.1400e462c
nop
call fcn.1400e462c
int3
call fcn.1400e462c
int3
call fcn.1400e462c
int3
call fcn.1400e462c
nop
call fcn.1400e462c
int3
call fcn.1400e462c
int3
call fcn.1400e462c
int3
call fcn.1400e462c
nop
mov ecx, 0x80070057
call fcn.14000b790
int3
mov ecx, 0x80070057
call fcn.14000b790
int3
mov ecx, 0x80070057
call fcn.14000b790
int3
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80070057
call fcn.14000b790
nop
mov r15, qword [rbp - 0x50]
mov rdi, qword [rbp + 0x490]
jmp 0x14002f5ab
mov ecx, 0x80070057
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
int3
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov ecx, 0x80004005
call fcn.14000b790
nop
mov rax, qword [rbp + 0x498]
cmp byte [rax], 0
je 0x14002f604
mov rcx, rdi
call fcn.14000f560
mov qword [rbp + 0x230], r13
mov qword [rbp + 0x238], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x220]
call fcn.14000c900
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x220]
call fcn.1400075c0
lea rdx, [rbp + 0x220]
mov rcx, rdi
call fcn.14000ec10
mov edx, 0x63
lea rcx, [rbp + 0x3f0]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002f620
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.14000b200
mov rcx, rax
call fcn.140035cd0
nop
lea rcx, [rbp + 0x3f0]
call fcn.140007010
call fcn.140035b30
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r14, r13
movabs r12, 0x555555555555554
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.14000c720
mov rdi, rax
mov qword [rsp + 0x48], rax
mov rbx, qword [r15]
cmp rbx, r15
je 0x14002f6f5
nop dword [rax]
cmp qword [rbx + 0x28], 0x10
jb 0x14002f69d
mov rcx, qword [rbx + 0x10]
jmp 0x14002f6a1
lea rcx, [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x14002f6ed
lea r9, [rbx + 0x10]
mov r8, qword [rdi + 8]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140021370
mov rcx, r12
mov rdx, qword [rsp + 0x50]
sub rcx, rdx
cmp rcx, 1
jb 0x14002f759
inc rdx
mov qword [rsp + 0x50], rdx
mov qword [rdi + 8], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rax
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rbx]
cmp rbx, r15
jne 0x14002f690
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x14002f719
nop dword [rax]
lea rdx, [rbx + 0x10]
lea rcx, [rbp - 0x50]
call fcn.1400327d0
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x14002f700
mov r15, qword [rbp - 0x50]
cmp qword [rbp - 0x48], 0
je 0x14002f766
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x48]
call fcn.14000cbf0
mov r8d, 1
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x48]
call fcn.140023a10
inc r14
cmp r14, 0x78
jae 0x14002f785
jmp 0x14002f660
lea rcx, str.list_T__too_long
call fcn.14007e074
nop
lea rcx, [rsp + 0x48]
call fcn.14000cbf0
mov r8d, 1
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x48]
call fcn.140023a10
mov rbx, qword [r15]
cmp rbx, r15
je 0x14002f7b2
nop dword [rax]
lea rcx, [rbx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x14002f79e
mov rcx, qword [rcx]
xor edx, edx
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
mov rbx, qword [rbx]
cmp rbx, r15
jne 0x14002f790
mov edx, 0x64
lea rcx, [rbp + 0x410]
call fcn.140024260
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002f7ce
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.14000b200
mov rcx, rax
call fcn.140035cd0
nop
lea rcx, [rbp + 0x410]
call fcn.140007010
call fcn.14002dc10
int3