Function at 0x180031790
Capabilities:
Delete file
Print debug messages
Read file on windows
Write file on windows

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1cc0
call fcn.180056f80
sub rsp, rax
mov rax, qword [0x1800a2de8]
xor rax, rsp
mov qword [rsp + 0x1cb0], rax
mov qword [rsp + 0x88], rsp
mov r15d, r9d
mov dword [rsp + 0x48], r9d
mov r14, r8
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x98], rdx
mov rsi, rcx
mov qword [rsp + 0x78], rcx
xor r12d, r12d
mov r13d, r12d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x44], r12d
mov qword [rsp + 0x138], r12
xor eax, eax
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x150], rax
mov dword [rsp + 0x158], eax
mov dword [rsp + 0x160], r12d
xor edx, edx
mov r8d, 0xfc
lea rcx, [rsp + 0x164]
call fcn.180056c20
mov qword [rsp + 0x60], r12
lea rax, str..css
mov qword [rsp + 0x260], rax
lea rax, str..gif
mov qword [rsp + 0x268], rax
lea rax, str..png
mov qword [rsp + 0x270], rax
lea rax, str..jpg
mov qword [rsp + 0x278], rax
lea rax, str..jpeg
mov qword [rsp + 0x280], rax
lea rax, str..bmp
mov qword [rsp + 0x288], rax
lea rax, str..ico
mov qword [rsp + 0x290], rax
lea rax, str..eot
mov qword [rsp + 0x298], rax
mov qword [rsp + 0xb0], r12
mov qword [rsp + 0x90], 0xffffffffffffffff
lea rcx, [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
movabs rax, 0x165a0bc00
sub qword [rsp + 0xa8], rax
mov r8, rsi
mov edx, 0x104
lea rcx, [rsp + 0x2a0]
call fcn.180054b48
lea edx, [r12 + 0x5c]
lea rcx, [rsp + 0x2a0]
call fcn.1800540e8
test rax, rax
jne 0x180031a69
mov qword [rsp + 0x98], r12
mov ecx, 0x1000a
call fcn.180053ad4
mov rdi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rdi, rdi
je 0x180031a0a
test rax, rax
je 0x180031a0a
mov r9, rsi
lea r8, [0x18008890c]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x1800319f0
mov word [rbx + 0x1fffe], r12w
lea rdx, [r12 - 2]
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rdi
lea rcx, [rsp + 0x98]
call fcn.180054798
test eax, eax
je 0x1800319c3
lea r8d, [r12 + 3]
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rdi
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x488
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x180031a23
mov edx, 3
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180031a1d
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rdi, rdi
je 0x180031a30
mov rcx, rdi
call fcn.180053a94
test rbx, rbx
je 0x180031a3d
mov rcx, rbx
call fcn.180053a94
mov dword [rsp + 0x128], 3
lea rdx, [0x180031a5f]
mov rcx, qword [rsp + 0x88]
call fcn.180057580
nop
nop
nop
mov eax, 3
jmp 0x1800332e0
mov word [rax + 2], r12w
mov ebx, 0x2000
mov qword [rsp + 0xe8], rbx
mov edx, r12d
mov dword [rsp + 0x70], edx
nop dword [rax]
nop word [rax + rax]
movsxd rax, r15d
imul rdi, rax, 0x2008
cmp edx, dword [rdi + r14 + 0x18]
jge 0x180033212
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rdi + r14]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x180031c18
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r14d, [rax + 0x1e]
mov dword [rsp + 0x40], r14d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0x80], r12
mov ecx, 0x1000a
call fcn.180053ad4
mov rdi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rdi, rdi
je 0x180031bbd
test rax, rax
je 0x180031bbd
mov r9d, r15d
lea r8, [0x180088b38]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x180031ba6
mov word [rbx + 0x1fffe], r12w
mov rdx, 0xfffffffffffffffe
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rdi
lea rcx, [rsp + 0x80]
call fcn.180054798
test eax, eax
je 0x180031b7d
mov r8d, esi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x492
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x180031bd6
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180031bd0
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rdi, rdi
je 0x180031be3
mov rcx, rdi
call fcn.180053a94
test rbx, rbx
je 0x180031bf0
mov rcx, rbx
call fcn.180053a94
mov dword [rsp + 0xd8], r14d
lea rdx, [0x180031c0f]
mov rcx, qword [rsp + 0x88]
call fcn.180057580
nop
nop
nop
mov eax, dword [rsp + 0x40]
jmp 0x1800332e0
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x44]
mov r8d, 0x24
lea rdx, [rsp + 0x138]
mov rcx, qword [rdi + r14]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1800330c0
cmp dword [rsp + 0x44], 0x24
jne 0x1800330c0
add rbx, 0x24
mov qword [rsp + 0xe8], rbx
mov rax, qword [rsp + 0x138]
test rax, rax
je 0x1800330ac
mov ecx, dword [rsp + 0x150]
test ecx, ecx
jns 0x1800330ac
lea r12, [rax + rax*4]
add r12, r12
cmp r12, qword [rsp + 0xa8]
jae 0x180031c92
xor r12d, r12d
jmp 0x1800330ac
mov rax, qword [rsp + 0x140]
lea rsi, [rax + rax*4]
add rsi, rsi
mov qword [rsp + 0x80], rsi
shr ecx, 0x10
movzx r15d, cl
movzx edx, word [rsp + 0x150]
imul rdi, r15, 0x2008
movsxd rax, dword [rdi + r14 + 0x14]
imul rdx, rax
mov qword [rsp + 0x68], rdx
add rdx, 0x2000
mov qword [rsp + 0x68], rdx
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rdi + r14]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x180031e44
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r14d, [rax + 0x1e]
mov dword [rsp + 0x40], r14d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
xor r12d, r12d
mov qword [rsp + 0x78], r12
mov ecx, 0x1000a
call fcn.180053ad4
mov rdi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rdi, rdi
je 0x180031de9
test rax, rax
je 0x180031de9
mov r9d, r15d
lea r8, [0x180088b38]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x180031dd2
mov word [rbx + 0x1fffe], r12w
lea rdx, [r12 - 2]
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.180054798
test eax, eax
je 0x180031da9
mov r8d, esi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x4b4
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x180031e02
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180031dfc
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rdi, rdi
je 0x180031e0f
mov rcx, rdi
call fcn.180053a94
test rbx, rbx
je 0x180031e1c
mov rcx, rbx
call fcn.180053a94
mov dword [rsp + 0xc8], r14d
lea rdx, [0x180031e3b]
mov rcx, qword [rsp + 0x88]
call fcn.180057580
nop
nop
nop
mov eax, dword [rsp + 0x40]
jmp 0x1800332e0
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
mov r8d, 0x100
lea rdx, [rsp + 0x160]
mov rcx, qword [rdi + r14]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180032f59
cmp dword [rsp + 0x44], 0x100
jne 0x180032f59
test dword [rsp + 0x19c], 0x80000000
je 0x180031f47
cmp dword [rsp + 0x184], 0
jne 0x180031f47
or r9, 0xffffffffffffffff
lea r8, [rsp + 0x1c0]
mov edx, 0x800
lea rcx, [rsp + 0x4b0]
call fcn.1800559d0
movsxd rax, dword [rsp + 0x180]
cmp rax, 0x800
jae 0x180032f54
mov byte [rsp + rax + 0x4b0], 0
mov edx, 0x2e
lea rcx, [rsp + 0x4b0]
call fcn.180054988
mov r10, rax
xor edi, edi
test rax, rax
je 0x180031f54
mov r9d, edi
mov dword [rsp + 0x58], edi
nop word [rax + rax]
cmp r9d, 8
jge 0x180031f54
movsxd rax, r9d
mov rcx, r10
mov r8, qword [rsp + rax*8 + 0x260]
sub r8, r10
nop word [rax + rax]
movzx edx, byte [rcx]
movzx eax, byte [rcx + r8]
sub edx, eax
jne 0x180031f33
inc rcx
test eax, eax
jne 0x180031f20
test edx, edx
je 0x180031f41
inc r9d
mov dword [rsp + 0x58], r9d
jmp 0x180031f00
cmp r9d, 8
jge 0x180031f54
mov r15d, dword [rsp + 0x48]
xor r12d, r12d
jmp 0x1800330ac
mov r15, qword [rsp + 0x98]
mov eax, dword [r15 + 0x20c]
cmp eax, 0x28
jae 0x180031f7b
mov r13d, eax
mov dword [rsp + 0x40], eax
mov dword [rsp + 0xa0], eax
jmp 0x180032139
mov r8d, 1
mov dword [rsp + 0x58], r8d
movsxd rax, r13d
cmp r8d, 0x28
jge 0x180031fc6
imul rdx, rax, 0x3228
movsxd rax, r8d
imul rcx, rax, 0x3228
mov rax, qword [rdx + r15 + 0x1420]
cmp qword [rcx + r15 + 0x1420], rax
cmovb r13d, r8d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0xa0], r13d
inc r8d
jmp 0x180031f81
imul rcx, rax, 0x3228
cmp r12, qword [rcx + r15 + 0x1420]
jae 0x180031fe4
mov r15d, dword [rsp + 0x48]
xor r12d, r12d
jmp 0x1800330ac
cmp dword [rcx + r15 + 0x3430], 0
je 0x180032139
add rcx, 0x1210
add rcx, r15
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x180032139
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0x110], rdi
mov ecx, 0x1000a
call fcn.180053ad4
mov r14, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rdi, rax
test r14, r14
je 0x1800320fe
test rax, rax
je 0x1800320fe
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9d, [rax + 0x1e]
lea r8, [0x180088b38]
mov edx, 0xffff
mov rcx, rdi
call fcn.180053a4c
test eax, eax
jle 0x1800320e7
xor eax, eax
mov word [rdi + 0x1fffe], ax
lea rdx, [rax - 2]
mov rcx, rdi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rdi
mov rdx, r14
lea rcx, [rsp + 0x110]
call fcn.180054798
test eax, eax
je 0x1800320be
mov r8d, esi
mov rdx, rdi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x4e7
mov r8d, 3
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x180032117
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180032111
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test r14, r14
je 0x180032124
mov rcx, r14
call fcn.180053a94
test rdi, rdi
je 0x180032131
mov rcx, rdi
call fcn.180053a94
mov rsi, qword [rsp + 0x80]
movsxd rax, r13d
imul r14, rax, 0x3228
add r14, r15
lea rcx, [r14 + 0x210]
xor edx, edx
mov r8d, 0x3228
call fcn.180056c20
mov eax, dword [rsp + 0x198]
test eax, eax
jns 0x1800325f4
test eax, 0x70000000
jbe 0x1800325f4
movzx r13d, byte [rsp + 0x19a]
movzx edx, ax
imul rdi, r13, 0x2008
add rdi, qword [rsp + 0x50]
movsxd rax, dword [rdi + 0x14]
imul rdx, rax
mov qword [rsp + 0x68], rdx
add rdx, 0x2000
mov qword [rsp + 0x68], rdx
add rdx, 0x1c
mov qword [rsp + 0x68], rdx
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x180032311
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r15d, [rax + 0x1e]
xor eax, eax
mov qword [rsp + 0xb8], rax
mov ecx, 0x1000a
call fcn.180053ad4
mov r12, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rsi, rax
test r12, r12
je 0x1800322cc
test rax, rax
je 0x1800322cc
lea rdi, [r14 + 0x1210]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov r9d, r13d
lea r8, str._d____d____s
mov edx, 0xffff
mov rcx, rsi
call fcn.180053a4c
test eax, eax
jle 0x1800322b4
xor eax, eax
mov word [rsi + 0x1fffe], ax
lea rdx, [rax - 2]
mov rcx, rsi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rsi
mov rdx, r12
lea rcx, [rsp + 0xb8]
call fcn.180054798
test eax, eax
je 0x18003228a
mov r8d, r15d
mov rdx, rsi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edx, 0x4fd
mov dword [rsp + 0x28], r15d
lea r9, str.GetFilesFromChromeDataFile
mov qword [rsp + 0x20], r12
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x1800322e5
mov edx, r15d
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x1800322df
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test r12, r12
je 0x1800322f2
mov rcx, r12
call fcn.180053a94
test rsi, rsi
je 0x1800322ff
mov rcx, rsi
call fcn.180053a94
mov r15d, dword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
xor r12d, r12d
jmp 0x1800330ac
mov r8d, dword [rsp + 0x188]
mov eax, 0xfff
cmp r8d, eax
cmovg r8d, eax
mov dword [rsp + 0x188], r8d
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
lea rdx, [rsp + 0xcb0]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180032521
mov r8d, dword [rsp + 0x44]
cmp r8d, dword [rsp + 0x188]
jne 0x180032521
xor r13d, r13d
mov ecx, r13d
mov dword [rsp + 0x58], ecx
cmp ecx, r8d
jae 0x18003239c
movsxd rax, ecx
lea rdx, [rsp + 0xcb0]
add rdx, rax
movzx eax, byte [rdx]
sub al, 0x20
cmp al, 0x5d
jbe 0x180032398
test ecx, ecx
jle 0x180032395
cmp byte [rdx - 1], 0x2e
je 0x18003239c
mov byte [rdx], 0x2e
inc ecx
jmp 0x18003236b
movsxd rax, ecx
cmp rax, 0x1000
jae 0x18003251c
mov byte [rsp + rax + 0xcb0], r13b
movsxd rax, dword [rsp + 0x40]
imul r14, rax, 0x3228
add r14, r15
lea rdx, [r14 + 0x1430]
mov qword [rsp + 0x20], 0xffffffffffffffff
lea r9, [rsp + 0xcb0]
mov r8d, 0x1000
lea rcx, [rsp + 0xb0]
call fcn.1800559b0
test eax, eax
je 0x1800325f7
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0x120], r13
mov ecx, 0x1000a
call fcn.180053ad4
mov r14, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rdi, rax
test r14, r14
je 0x1800324e5
test rax, rax
je 0x1800324e5
mov r9, qword [rsp + 0x78]
lea r8, [0x18008890c]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x1800324ce
mov word [rdi + 0x1fffe], r13w
mov rdx, 0xfffffffffffffffe
mov rcx, rdi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rdi
mov rdx, r14
lea rcx, [rsp + 0x120]
call fcn.180054798
test eax, eax
je 0x1800324a5
mov r8d, esi
mov rdx, rdi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x51d
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x1800324fe
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x1800324f8
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test r14, r14
je 0x18003250b
mov rcx, r14
call fcn.180053a94
test rdi, rdi
je 0x1800322ff
mov rcx, rdi
jmp 0x1800322fa
call fcn.1800548d8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r15d, [rax + 0x1e]
xor eax, eax
mov qword [rsp + 0x108], rax
mov ecx, 0x1000a
call fcn.180053ad4
mov r12, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rsi, rax
test r12, r12
je 0x1800322cc
test rax, rax
je 0x1800322cc
lea rdi, [r14 + 0x1210]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov r9d, r13d
lea r8, str._d____d____s
mov edx, 0xffff
mov rcx, rsi
call fcn.180053a4c
test eax, eax
jle 0x1800322b4
xor eax, eax
mov word [rsi + 0x1fffe], ax
lea rdx, [rax - 2]
mov rcx, rsi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rsi
mov rdx, r12
lea rcx, [rsp + 0x108]
call fcn.180054798
test eax, eax
je 0x1800325ea
mov r8d, r15d
mov rdx, rsi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edx, 0x508
jmp 0x18003228f
xor r13d, r13d
mov edi, dword [rsp + 0x19c]
shr edi, 0x1c
and edi, 7
movsxd rax, dword [rsp + 0x18c]
mov qword [r14 + 0x1418], rax
mov qword [r14 + 0x1420], r12
mov qword [r14 + 0x1428], rsi
lea rdx, [r14 + 0x210]
mov qword [rsp + 0x20], 0xffffffffffffffff
lea r9, [rsp + 0x4b0]
mov r8d, 0x800
lea rcx, [rsp + 0xb0]
call fcn.1800559b0
test eax, eax
je 0x18003277b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0x130], r13
mov ecx, 0x1000a
call fcn.180053ad4
mov r14, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rdi, rax
test r14, r14
je 0x180032744
test rax, rax
je 0x180032744
mov r9, qword [rsp + 0x78]
lea r8, [0x18008890c]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x18003272d
mov word [rdi + 0x1fffe], r13w
mov rdx, 0xfffffffffffffffe
mov rcx, rdi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rdi
mov rdx, r14
lea rcx, [rsp + 0x130]
call fcn.180054798
test eax, eax
je 0x180032704
mov r8d, esi
mov rdx, rdi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x52a
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x18003275d
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180032757
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test r14, r14
je 0x18003276a
mov rcx, r14
call fcn.180053a94
test rdi, rdi
je 0x1800322ff
mov rcx, rdi
jmp 0x1800322fa
mov r9d, dword [rsp + 0x19c]
lea rdx, str._sf__06x
and r9d, 0xfffffff
test edi, edi
jne 0x1800327c4
lea r8, [rsp + 0x2a0]
lea rcx, [r14 + 0x1210]
call fcn.180003d50
xor edx, edx
lea rcx, [r14 + 0x1210]
call fcn.1800542d4
test eax, eax
je 0x180032cce
jmp 0x1800322ff
lea r15, [r14 + 0x1210]
lea r8, [0x1800a6d20]
mov rcx, r15
call fcn.180003d50
mov dword [r14 + 0x3430], 1
mov eax, dword [rsp + 0x18c]
add eax, 0xa
movsxd rcx, eax
call fcn.180053ad4
mov r14, rax
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x180032941
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0xc0], r13
mov ecx, 0x1000a
call fcn.180053ad4
mov r14, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rdi, rax
test r14, r14
je 0x18003290a
test rax, rax
je 0x18003290a
mov qword [rsp + 0x28], r15
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x18c]
lea r8, str.MBAERT_NOTENOUGHMEMORY___Size:__d____s
mov edx, 0xffff
mov rcx, rdi
call fcn.180053a4c
test eax, eax
jle 0x1800328f3
mov word [rdi + 0x1fffe], r13w
mov rdx, 0xfffffffffffffffe
mov rcx, rdi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rdi
mov rdx, r14
lea rcx, [rsp + 0xc0]
call fcn.180054798
test eax, eax
je 0x1800328ca
mov r8d, esi
mov rdx, rdi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x548
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x180032923
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x18003291d
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test r14, r14
je 0x180032930
mov rcx, r14
call fcn.180053a94
test rdi, rdi
je 0x1800322ff
mov rcx, rdi
jmp 0x1800322fa
movzx r12d, byte [rsp + 0x19e]
movzx edx, word [rsp + 0x19c]
imul rdi, r12, 0x2008
add rdi, qword [rsp + 0x50]
movsxd rax, dword [rdi + 0x14]
imul rdx, rax
mov qword [rsp + 0x68], rdx
add rdx, 0x2000
mov qword [rsp + 0x68], rdx
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x180032ac2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0xd0], r13
mov ecx, 0x1000a
call fcn.180053ad4
mov r14, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rdi, rax
test r14, r14
je 0x180032a8b
test rax, rax
je 0x180032a8b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
mov r9d, r12d
lea r8, str._d____d____s
mov edx, 0xffff
mov rcx, rdi
call fcn.180053a4c
test eax, eax
jle 0x180032a74
mov word [rdi + 0x1fffe], r13w
mov rdx, 0xfffffffffffffffe
mov rcx, rdi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rdi
mov rdx, r14
lea rcx, [rsp + 0xd0]
call fcn.180054798
test eax, eax
je 0x180032a4b
mov r8d, esi
mov rdx, rdi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x556
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x180032aa4
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180032a9e
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test r14, r14
je 0x180032ab1
mov rcx, r14
call fcn.180053a94
test rdi, rdi
je 0x1800322ff
mov rcx, rdi
jmp 0x1800322fa
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x44]
mov r8d, dword [rsp + 0x18c]
mov rdx, r14
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180032e20
mov eax, dword [rsp + 0x18c]
cmp dword [rsp + 0x44], eax
jne 0x180032e20
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, rax
mov qword [rsp + 0x90], rax
cmp rax, 0xffffffffffffffff
jne 0x180032c6b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
xor r13d, r13d
mov qword [rsp + 0xe0], r13
mov ecx, 0x1000a
call fcn.180053ad4
mov r14, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rdi, rax
test r14, r14
je 0x180032c34
test rax, rax
je 0x180032c34
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
mov r9d, r12d
lea r8, str._d____d____s
mov edx, 0xffff
mov rcx, rdi
call fcn.180053a4c
test eax, eax
jle 0x180032c1d
mov word [rdi + 0x1fffe], r13w
lea rdx, [r13 - 2]
mov rcx, rdi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rdi
mov rdx, r14
lea rcx, [rsp + 0xe0]
call fcn.180054798
test eax, eax
je 0x180032bf4
mov r8d, esi
mov rdx, rdi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x569
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x180032c4d
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180032c47
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test r14, r14
je 0x180032c5a
mov rcx, r14
call fcn.180053a94
test rdi, rdi
je 0x1800322ff
mov rcx, rdi
jmp 0x1800322fa
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
mov r8d, dword [rsp + 0x18c]
mov rdx, r14
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x180032cec
mov eax, dword [rsp + 0x18c]
cmp dword [rsp + 0x44], eax
jne 0x180032cec
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or rsi, 0xffffffffffffffff
mov qword [rsp + 0x90], rsi
mov rcx, r14
call fcn.180053a94
xor r13d, r13d
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x60], r13
mov r15, qword [rsp + 0x98]
mov eax, dword [r15 + 0x20c]
cmp eax, 0x28
jae 0x1800322ff
inc eax
mov dword [r15 + 0x20c], eax
jmp 0x1800322ff
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
xor r13d, r13d
mov qword [rsp + 0xf0], r13
mov ecx, 0x1000a
call fcn.180053ad4
mov r14, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rdi, rax
test r14, r14
je 0x180032de9
test rax, rax
je 0x180032de9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
mov r9d, r12d
lea r8, str._d____d____s
mov edx, 0xffff
mov rcx, rdi
call fcn.180053a4c
test eax, eax
jle 0x180032dd2
mov word [rdi + 0x1fffe], r13w
lea rdx, [r13 - 2]
mov rcx, rdi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rdi
mov rdx, r14
lea rcx, [rsp + 0xf0]
call fcn.180054798
test eax, eax
je 0x180032da9
mov r8d, esi
mov rdx, rdi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x571
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x180032e02
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180032dfc
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test r14, r14
je 0x180032e0f
mov rcx, r14
call fcn.180053a94
test rdi, rdi
je 0x1800322ff
mov rcx, rdi
jmp 0x1800322fa
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0x100], r13
mov ecx, 0x1000a
call fcn.180053ad4
mov r14, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rdi, rax
test r14, r14
je 0x180032f1d
test rax, rax
je 0x180032f1d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
mov r9d, r12d
lea r8, str._d____d____s
mov edx, 0xffff
mov rcx, rdi
call fcn.180053a4c
test eax, eax
jle 0x180032f06
mov word [rdi + 0x1fffe], r13w
mov rdx, 0xfffffffffffffffe
mov rcx, rdi
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rdi
mov rdx, r14
lea rcx, [rsp + 0x100]
call fcn.180054798
test eax, eax
je 0x180032edd
mov r8d, esi
mov rdx, rdi
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x55f
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x180032f36
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180032f30
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test r14, r14
je 0x180032f43
mov rcx, r14
call fcn.180053a94
test rdi, rdi
je 0x1800322ff
mov rcx, rdi
jmp 0x1800322fa
call fcn.1800548d8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r14d, [rax + 0x1e]
mov dword [rsp + 0x40], r14d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
xor r12d, r12d
mov qword [rsp + 0x50], r12
mov ecx, 0x1000a
call fcn.180053ad4
mov rdi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rdi, rdi
je 0x180033051
test rax, rax
je 0x180033051
mov r9d, r15d
lea r8, [0x180088b38]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x18003303a
mov word [rbx + 0x1fffe], r12w
lea rdx, [r12 - 2]
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.180054798
test eax, eax
je 0x180033011
mov r8d, esi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x4b9
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x18003306a
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180033064
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rdi, rdi
je 0x180033077
mov rcx, rdi
call fcn.180053a94
test rbx, rbx
je 0x180033084
mov rcx, rbx
call fcn.180053a94
mov dword [rsp + 0x118], r14d
lea rdx, [0x1800330a3]
mov rcx, qword [rsp + 0x88]
call fcn.180057580
nop
nop
nop
mov eax, dword [rsp + 0x40]
jmp 0x1800332e0
mov edx, dword [rsp + 0x70]
inc edx
mov dword [rsp + 0x70], edx
mov r13d, dword [rsp + 0x40]
jmp 0x180031a90
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r14d, [rax + 0x1e]
mov dword [rsp + 0x40], r14d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0x48], r12
mov ecx, 0x1000a
call fcn.180053ad4
mov rdi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rdi, rdi
je 0x1800331b7
test rax, rax
je 0x1800331b7
mov r9d, r15d
lea r8, [0x180088b38]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x1800331a0
mov word [rbx + 0x1fffe], r12w
mov rdx, 0xfffffffffffffffe
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.180054798
test eax, eax
je 0x180033177
mov r8d, esi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9, str.GetFilesFromChromeDataFile
mov edx, 0x498
mov r8d, 1
lea rcx, str...StandAloneSvcExploitFiles.cpp
call fcn.180001b40
jmp 0x1800331d0
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x1800331ca
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rdi, rdi
je 0x1800331dd
mov rcx, rdi
call fcn.180053a94
test rbx, rbx
je 0x1800331ea
mov rcx, rbx
call fcn.180053a94
mov dword [rsp + 0xf8], r14d
lea rdx, [0x180033209]
mov rcx, qword [rsp + 0x88]
call fcn.180057580
nop
nop
nop
mov eax, dword [rsp + 0x40]
jmp 0x1800332e0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x60], rax
mov rsi, qword [rsp + 0x90]
cmp rsi, 0xffffffffffffffff
je 0x180033234
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
xor eax, eax
jmp 0x1800332e0
mov rcx, qword [rsp + 0x1cb0]
xor rcx, rsp
call fcn.180052be0
add rsp, 0x1cc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret