Function at 0x18007b9e0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3f0]
sub rsp, 0x4f0
mov rax, qword [0x180201ac0]
xor rax, rsp
mov qword [rbp + 0x3e8], rax
mov r14, r9
mov qword [rsp + 0x78], r9
movzx edi, dl
mov byte [rsp + 0x40], dl
mov r15, rcx
mov qword [rsp + 0x58], r8
lea rsi, [rcx + 8]
mov qword [rsp + 0x70], rsi
movzx eax, byte [rsi + 0x28]
test al, al
je 0x18007ba44
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
cmp byte [r15 + 0x38], 0
je 0x18007ba56
cmp qword [r15 + 0x50], 0
je 0x18007cd26
mov ecx, dword [0x180490f58]
lea eax, [rcx - 1]
mov edx, 1
cmp eax, 0xffe
cmovbe edx, ecx
mov eax, dword [r15 + 0xb4]
shr eax, 0x14
xor r12d, r12d
cmp eax, edx
jge 0x18007ba95
call fcn.18007de30
test al, al
jne 0x18007ba95
cmp qword [r15 + 0xa0], r12
jne 0x18007ca46
jmp 0x18007bac6
mov rcx, qword [r15 + 0xa0]
test rcx, rcx
je 0x18007baa6
call fcn.180142d40
mov qword [r15 + 0xa0], r12
mov qword [r15 + 0xac], r12
mov dword [r15 + 0xb4], r12d
mov dword [r15 + 0xb8], Ordinal_41
inc dword [r15 + 0xb8]
cmp dword [r15 + 0xb8], 0x20
jne 0x18007cd26
mov dword [r15 + 0xb8], r12d
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x58]
cmp byte [0x18049fe19], r12b
je 0x18007bafe
call fcn.18007da40
jmp 0x18007bb03
call fcn.18007da60
mov edx, 1
lea rcx, [rbp - 0x80]
call fcn.180076cc0
nop
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
mov byte [rbp + rcx - 0x28], gethostbyname
mov edx, 2
lea rcx, [rsp + 0x60]
call fcn.18013290c
mov rbx, rax
mov edx, dword [rbp + 0x1f4]
add edx, 0x76c
lea rcx, [rbp - 0x80]
call fcn.1800370e0
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rbx + 8]
call qword [rbx]
mov edx, 2
lea rcx, [rsp + 0x48]
call fcn.18013290c
mov rbx, rax
mov edx, dword [rbp + 0x1f0]
inc edx
mov rcx, rdi
call fcn.1800370e0
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rbx + 8]
call qword [rbx]
mov edx, 2
lea rcx, [rbp + 0x160]
call fcn.18013290c
mov rbx, rax
mov edx, dword [rbp + 0x1ec]
mov rcx, rdi
call fcn.1800370e0
mov rcx, rax
mov dl, reloc.WLDAP32.dll_Ordinal_45
call fcn.180076630
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rbx + 8]
call qword [rbx]
mov edx, 2
lea rcx, [rbp + 0x170]
call fcn.18013290c
mov rbx, rax
mov edx, dword [rbp + 0x1e8]
mov rcx, rdi
call fcn.1800370e0
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rbx + 8]
call qword [rbx]
mov edx, 2
lea rcx, [rbp + 0x180]
call fcn.18013290c
mov rbx, rax
mov edx, dword [rbp + 0x1e4]
mov rcx, rdi
call fcn.1800370e0
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rbx + 8]
call qword [rbx]
call fcn.18007dd00
mov ebx, eax
mov edx, dword [rbp + 0x1e0]
mov rcx, rdi
call fcn.1800370e0
mov rcx, rax
mov dl, reloc.WLDAP32.dll_Ordinal_46
call fcn.180076630
mov rcx, rax
mov edx, ebx
call fcn.1800370e0
lea rdx, [rbp + 0x228]
lea rcx, [rbp - 0x78]
call fcn.1800496b4
nop
cmp byte [r15 + 0x38], 0
je 0x18007bcd3
lea rdx, [rbp + 0x228]
mov rcx, r15
call fcn.180077700
test al, al
jne 0x18007c593
lea rcx, str.Could_not_create_log_file
call fcn.18014775c
lea rbx, [rbp + 0x228]
cmp qword [rbp + 0x240], 0x10
cmovae rbx, qword [rbp + 0x228]
mov ecx, 2
call fcn.180142bec
mov rcx, rax
mov r8, rbx
lea rdx, str.COULD_NOT_CREATE_LOGFILE__s__n
call fcn.180068b60
jmp 0x18007cc65
call fcn.18007de60
mov qword [rbp + 0x208], r12
mov qword [rbp + 0x218], r12
mov qword [rbp + 0x220], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x208], 0
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x18007bd02
mov rdx, rax
lea rcx, [rbp + 0x208]
call fcn.18002c300
nop
mov qword [rbp + 0x268], r12
mov qword [rbp + 0x278], r12
mov qword [rbp + 0x280], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x268], 0
lea rcx, [rbp + 0x268]
call fcn.180077eb0
call fcn.18007de20
mov rdx, rax
lea rcx, [rbp + 0x2a8]
call fcn.18002e470
nop
cmp qword [rbp + 0x2b8], 0
jne 0x18007bd80
mov r8d, listen
lea rdx, str.invalid_user
lea rcx, [rbp + 0x2a8]
call fcn.18002c300
movabs rcx, 0x7fffffffffffffff
mov r12, qword [rbp + 0x218]
cmp r12, rcx
je 0x18007cd6f
lea r9, [rbp + 0x208]
mov r14, qword [rbp + 0x208]
mov r13, qword [rbp + 0x220]
cmp r13, 0x10
cmovae r9, r14
mov qword [rsp + 0x60], r9
xor r8d, r8d
mov qword [rbp + 0x2c8], r8
mov qword [rbp + 0x2d8], r8
mov qword [rbp + 0x2e0], r8
lea rdx, [r12 + 1]
mov ebx, reloc.WS2_32.dll_ntohs
lea rax, [rbp + 0x2c8]
mov qword [rsp + 0x48], rax
cmp rdx, rbx
jbe 0x18007be85
mov rbx, rdx
or rbx, 0xf
cmp rbx, rcx
jbe 0x18007be38
mov rbx, rcx
movabs rax, 0x8000000000000027
mov rcx, rax
call fcn.1801338e8
mov rcx, rax
test rax, rax
je 0x18007cd99
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
lea rdx, [r12 + 1]
mov r9, qword [rsp + 0x60]
jmp 0x18007be79
mov eax, reloc.WS2_32.dll_shutdown
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18007be60
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18007cd69
jmp 0x18007be0c
test rcx, rcx
je 0x18007be76
call fcn.1801338e8
lea rdx, [r12 + 1]
mov r9, qword [rsp + 0x60]
jmp 0x18007be79
mov rax, r8
mov qword [rsp + 0x48], rax
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x2d8], rdx
mov qword [rbp + 0x2e0], rbx
mov r8, r12
mov rdx, r9
mov rcx, rax
call fcn.180135a90
mov rax, qword [rsp + 0x48]
mov word [rax + r12], reloc.WLDAP32.dll_Ordinal_46
lea rdx, [rbp + 0x268]
cmp qword [rbp + 0x280], 0x10
cmovae rdx, qword [rbp + 0x268]
mov r8, qword [rbp + 0x278]
lea rcx, [rbp + 0x2c8]
call fcn.18002e580
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x368], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x378], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], bl
mov r8b, reloc.WLDAP32.dll_Ordinal_46
lea rdx, [rbp + 0x368]
lea rcx, [rbp + 0x328]
call fcn.1800768c0
nop
lea rdx, [rbp + 0x2a8]
cmp qword [rbp + 0x2c0], 0x10
cmovae rdx, qword [rbp + 0x2a8]
mov r8, qword [rbp + 0x2b8]
mov rcx, rax
call fcn.18002e580
mov qword [rbp + 0x248], rbx
mov qword [rbp + 0x258], rbx
mov qword [rbp + 0x260], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x248], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x258], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], bl
mov rcx, qword [rbp + 0x258]
mov rdx, qword [rbp + 0x260]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x18007bfd0
lea rax, [rcx + 5]
mov qword [rbp + 0x258], rax
lea rbx, [rbp + 0x248]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x248]
add rbx, rcx
mov r8d, 5
lea rdx, str..log.
mov rcx, rbx
call fcn.180135a90
mov byte [rbx + 5], 0
lea rax, [rbp + 0x248]
xor ebx, ebx
jmp 0x18007bff3
mov qword [rsp + 0x20], 5
lea r9, str..log.
xor r8d, r8d
lea edx, [r8 + 5]
lea rcx, [rbp + 0x248]
call fcn.18002eef0
mov qword [rbp + 0x288], rbx
mov qword [rbp + 0x298], rbx
mov qword [rbp + 0x2a0], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x288], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x298], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
movsxd rax, dword [r15 + 0xa8]
lea rdx, str.INFO
mov rdx, qword [rdx + rax*8]
nop
inc rdi
cmp byte [rdx + rdi], 0
jne 0x18007c040
mov r8, rdi
lea rcx, [rbp + 0x288]
call fcn.18002e580
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x348], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x358], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8b, reloc.WLDAP32.dll_Ordinal_46
lea rdx, [rbp + 0x348]
lea rcx, [rbp + 0x308]
call fcn.1800768c0
mov rbx, rax
lea rax, [rbp + 0x208]
cmp rax, rbx
je 0x18007c115
cmp r13, 0x10
jb 0x18007c0d8
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18007c0d0
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd75
mov rcx, r14
call fcn.180133ca4
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x208], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x218], xmm1
xor edi, edi
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], dil
mov r13, qword [rbp + 0x220]
mov r12, qword [rbp + 0x218]
mov r14, qword [rbp + 0x208]
jmp 0x18007c117
xor edi, edi
mov rdx, qword [rbp + 0x320]
cmp rdx, 0x10
jb 0x18007c158
inc rdx
mov rcx, qword [rbp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c153
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd75
call fcn.180133ca4
mov qword [rbp + 0x318], rdi
mov qword [rbp + 0x320], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x308], 0
mov rdx, qword [rbp + 0x360]
cmp rdx, 0x10
jb 0x18007c1b3
inc rdx
mov rcx, qword [rbp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c1ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd7b
call fcn.180133ca4
nop
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 0x10
jb 0x18007c1f4
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c1ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd81
call fcn.180133ca4
mov qword [rbp + 0x298], rdi
mov qword [rbp + 0x2a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x288], 0
mov rdx, qword [rbp + 0x260]
cmp rdx, 0x10
jb 0x18007c24e
inc rdx
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c249
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd87
call fcn.180133ca4
mov qword [rbp + 0x258], rdi
mov qword [rbp + 0x260], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x248], 0
mov rdx, qword [rbp + 0x340]
cmp rdx, 0x10
jb 0x18007c2a8
inc rdx
mov rcx, qword [rbp + 0x328]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c2a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd8d
call fcn.180133ca4
mov qword [rbp + 0x338], rdi
mov qword [rbp + 0x340], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x328], 0
mov rdx, qword [rbp + 0x380]
cmp rdx, 0x10
jb 0x18007c303
inc rdx
mov rcx, qword [rbp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c2fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd93
call fcn.180133ca4
nop
mov rdx, qword [rbp + 0x2e0]
cmp rdx, 0x10
jb 0x18007c344
inc rdx
mov rcx, qword [rbp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c33f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd99
call fcn.180133ca4
call fcn.180077f50
mov qword [rsp + 0x60], rax
mov rbx, qword [rax]
cmp rbx, qword [rax + 8]
je 0x18007cb66
movzx edi, byte [rsp + 0x40]
lea r8, [0x1801df94c]
mov rdx, qword [rbx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, 1
jb 0x18007cdb7
mov r9, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x18007c38f
mov r9, qword [rbx]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
mov r8, rbx
movzx edx, dil
lea rcx, [rbp + 0x3a8]
call fcn.180054dc0
nop
lea rdx, [rbp + 0x208]
cmp r13, 0x10
cmovae rdx, r14
mov r8, r12
lea rcx, [rbp + 0x3a8]
call fcn.18002e580
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x388], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x398], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r12b
lea rcx, [r15 + 0x40]
lea rdx, [rbp + 0x388]
call fcn.180031c90
mov rdx, qword [rbp + 0x3a0]
cmp rdx, 0x10
jb 0x18007c44d
inc rdx
mov rcx, qword [rbp + 0x388]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c447
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd9f
call fcn.180133ca4
nop
mov rdx, qword [rbp + 0x3c0]
cmp rdx, 0x10
jb 0x18007c48e
inc rdx
mov rcx, qword [rbp + 0x3a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c489
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cda5
call fcn.180133ca4
lea rdx, [rbp + 0x228]
mov rcx, r15
call fcn.180077700
test al, al
jne 0x18007c4ce
add rbx, 0x20
mov rax, qword [rsp + 0x60]
mov r13, qword [rbp + 0x220]
mov r14, qword [rbp + 0x208]
cmp rbx, qword [rax + 8]
je 0x18007cb69
mov r12, qword [rbp + 0x218]
jmp 0x18007c360
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0x10
jb 0x18007c510
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c50a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cdbd
call fcn.180133ca4
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x18007c552
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c54c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cdc3
call fcn.180133ca4
nop
mov rdx, qword [rbp + 0x220]
cmp rdx, 0x10
jb 0x18007c593
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c58e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cdc9
call fcn.180133ca4
mov edx, 1
lea rcx, [rbp + 0x70]
call fcn.180076cc0
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov byte [rbp + rcx + 0xc8], gethostbyname
mov edx, 2
lea rcx, [rbp + 0x190]
call fcn.18013290c
mov rdi, rax
mov ebx, dword [rbp + 0x1f4]
lea rdx, str.Log_file_created_at:
lea rcx, [rbp + 0x70]
call fcn.18002e990
mov rcx, rax
lea edx, [rbx + 0x76c]
call fcn.1800370e0
mov rcx, rax
mov dl, 0x2f
call fcn.180076630
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov edx, 2
lea rcx, [rbp + 0x1a0]
call fcn.18013290c
mov rdi, rax
mov edx, dword [rbp + 0x1f0]
inc edx
mov rcx, rbx
call fcn.1800370e0
mov rcx, rax
mov dl, 0x2f
call fcn.180076630
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov edx, 2
lea rcx, [rbp + 0x1b0]
call fcn.18013290c
mov rdi, rax
mov edx, dword [rbp + 0x1ec]
mov rcx, rbx
call fcn.1800370e0
mov rcx, rax
mov dl, reloc.WLDAP32.dll_Ordinal_32
call fcn.180076630
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov edx, 2
lea rcx, [rbp + 0x1c0]
call fcn.18013290c
mov rdi, rax
mov edx, dword [rbp + 0x1e8]
mov rcx, rbx
call fcn.1800370e0
mov rcx, rax
mov dl, 0x3a
call fcn.180076630
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov edx, 2
lea rcx, [rbp + 0x1d0]
call fcn.18013290c
mov rdi, rax
mov edx, dword [rbp + 0x1e4]
mov rcx, rbx
call fcn.1800370e0
mov rcx, rax
mov dl, 0x3a
call fcn.180076630
mov r14, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
call fcn.18007cdd0
mov rdi, rax
lea rax, str._UTC_n
lea rbx, reloc.WS2_32.dll_ioctlsocket
cmp byte [0x18049fe19], 0
cmovne rbx, rax
mov edx, dword [rbp + 0x1e0]
mov rcx, r14
call fcn.1800370e0
mov rcx, rax
mov rdx, rbx
call fcn.18002e990
mov rcx, rax
lea rdx, str.Running_on_machine:
call fcn.18002e990
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x18007c75b
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.18002ff30
mov rcx, rax
mov dl, 0xa
call fcn.180076630
cmp qword [0x1802016a8], 0
je 0x18007c7bb
lea rdx, str.Application_fingerprint:
lea rcx, [rbp + 0x70]
call fcn.18002e990
lea rdx, [0x180201698]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdx, qword [0x180201698]
mov r8, qword [0x1802016a8]
mov rcx, rax
call fcn.18002ff30
mov rcx, rax
mov dl, 0xa
call fcn.180076630
call fcn.18007df20
subsd xmm0, qword [r15 + 0xc8]
cvttsd2si edx, xmm0
lea rcx, [rbp + 0x3c8]
call fcn.180079d90
mov rbx, rax
lea rdx, str.Running_duration__h:mm:ss_:
lea rcx, [rbp + 0x70]
call fcn.18002e990
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x18007c7f9
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.18002ff30
mov dl, 0xa
mov rcx, rax
call fcn.180076630
mov rcx, rax
lea rdx, str.Log_line_format:__IWEF_yyyymmdd_hh:mm:ss.uuuuuu
call fcn.18002e990
mov rcx, rax
lea rdx, str.threadid_file:line__msg
call fcn.18002e990
mov rcx, rax
mov dl, 0xa
call fcn.180076630
nop
mov rdx, qword [rbp + 0x3e0]
cmp rdx, 0x10
jb 0x18007c879
inc rdx
mov rcx, qword [rbp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c874
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cdab
call fcn.180133ca4
lea rdx, [rbp + 0x2e8]
lea rcx, [rbp + 0x78]
call fcn.1800496b4
movsxd rbx, dword [rbp + 0x2f8]
lea rcx, [rbp + 0x2e8]
cmp qword [rbp + 0x300], 0x10
cmovae rcx, qword [rbp + 0x2e8]
mov r8, rbx
mov r9, qword [r15 + 0xa0]
mov edx, 1
call fcn.180143b9c
add dword [r15 + 0xb4], ebx
add dword [r15 + 0xac], ebx
mov rdx, qword [rbp + 0x300]
cmp rdx, 0x10
jb 0x18007c90a
inc rdx
mov rcx, qword [rbp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c905
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cdb1
call fcn.180133ca4
mov qword [rbp + 0x2f8], r12
mov qword [rbp + 0x300], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2e8], 0
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x70], rdi
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x78]
call fcn.180048390
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x70], r14
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x6c], edx
lea rbx, vtable.std::ios_base.0
mov qword [rbp + 0xf8], rbx
lea rcx, [rbp + 0xf8]
call fcn.1801326fc
nop
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x18007c9d1
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007c9cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd63
call fcn.180133ca4
mov qword [rbp + 0x238], r12
mov qword [rbp + 0x240], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x228], 0
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x80], rdi
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rbp - 0x78]
call fcn.180048390
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x80], r14
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x7c], edx
mov qword [rbp + 8], rbx
lea rcx, [rbp + 8]
call fcn.1801326fc
nop
movzx edi, byte [rsp + 0x40]
mov r14, qword [rsp + 0x78]
cmp byte [0x18049fe1b], 0
jne 0x18007cb48
call fcn.18013e3b4
mov dword [rax], r12d
movsxd rbx, dword [rbp + 0x450]
mov r8, rbx
mov r9, qword [r15 + 0xa0]
mov edx, 1
mov rcx, r14
call fcn.180143b9c
cmp byte [0x18049862f], 0
je 0x18007ca98
call fcn.18013e3b4
cmp dword [rax], 0x1c
jne 0x18007ca98
mov byte [0x18049fe1b], 1
jmp 0x18007cd26
add dword [r15 + 0xb4], ebx
mov ecx, dword [r15 + 0xac]
add ecx, ebx
mov dword [r15 + 0xac], ecx
test dil, dil
jne 0x18007cace
cmp ecx, 0xf4240
jae 0x18007cace
call fcn.18007da80
cmp rax, qword [r15 + 0xc0]
jl 0x18007cd26
mov rcx, qword [r15 + 0xa0]
test rcx, rcx
je 0x18007cae6
call fcn.180143090
mov dword [r15 + 0xac], r12d
movsxd rax, dword [0x180498628]
imul rcx, rax, 0xf4240
call fcn.1800471b0
mov rbx, rax
call fcn.18007da80
add rbx, rax
mov qword [r15 + 0xc0], rbx
cmp byte [0x180201648], 0
je 0x18007cd26
movzx edx, byte [r15 + 0x38]
test dl, dl
je 0x18007cb2c
cmp qword [r15 + 0x50], 0
je 0x18007cd26
lea r9, [r15 + 0x80]
lea r8, [r15 + 0x40]
lea rcx, vtable.LogCleaner.0
call fcn.18007a030
jmp 0x18007cd26
call fcn.18007da80
cmp rax, qword [r15 + 0xc0]
jl 0x18007cd26
mov byte [0x18049fe1b], 0
jmp 0x18007cd26
xor r12d, r12d
lea rcx, str.Could_not_create_logging_file
call fcn.18014775c
lea rbx, [rbp + 0x228]
cmp qword [rbp + 0x240], 0x10
cmovae rbx, qword [rbp + 0x228]
mov ecx, 2
call fcn.180142bec
mov rcx, rax
mov r8, rbx
lea rdx, str.COULD_NOT_CREATE_A_LOGGINGFILE__s_
call fcn.180068b60
nop
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0x10
jb 0x18007cbeb
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007cbe5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cdbd
call fcn.180133ca4
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x18007cc2d
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007cc27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cdc3
call fcn.180133ca4
nop
cmp r13, 0x10
jb 0x18007cc65
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18007cc5c
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cdc9
mov rcx, r14
call fcn.180133ca4
nop
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x18007cca6
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007cca1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007cd63
call fcn.180133ca4
mov qword [rbp + 0x238], r12
mov qword [rbp + 0x240], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x228], 0
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x80], rdi
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rbp - 0x78]
call fcn.180048390
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x80], r14
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x7c], edx
lea rbx, vtable.std::ios_base.0
mov qword [rbp + 8], rbx
lea rcx, [rbp + 8]
call fcn.1801326fc
nop
movzx eax, byte [rsi + 0x28]
test al, al
je 0x18007cd39
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rbp + 0x3e8]
xor rcx, rsp
call fcn.180133630
mov rbx, qword [rsp + 0x538]
add rsp, 0x4f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18013a40c
nop
call fcn.18002b550
int3
call fcn.18002b5f0
nop
call fcn.18013a40c
nop
call fcn.18013a40c
nop
call fcn.18013a40c
nop
call fcn.18013a40c
nop
call fcn.18013a40c
nop
call fcn.18013a40c
nop
call fcn.18013a40c
nop
call fcn.18013a40c
nop
call fcn.18013a40c
nop
call fcn.18013a40c
int3
call fcn.18013a40c
nop
call fcn.18002b5f0
nop
call fcn.18013a40c
nop
call fcn.18013a40c
nop
call fcn.18013a40c
int3