Function at 0x180018a30
Capabilities:
Check if file exists
Delete registry key
Get file attributes
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2a0
mov qword [rsp + 0x1b0], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x180101090]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov r13, rcx
xor r15d, r15d
mov ebp, r15d
mov dword [rsp + 0x58], r15d
cmp qword [rcx + 0x30], 8
jb 0x180018a88
mov r8, qword [rcx + 0x18]
jmp 0x180018a8c
lea r8, [rcx + 0x18]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x170]
call fcn.1800187c0
nop
mov qword [rsp + 0x1e8], 7
mov qword [rsp + 0x1e0], r15
mov word [rsp + 0x1d0], r15w
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax]
mov qword [rsp + 0x68], rcx
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x60], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
or r12, 0xffffffffffffffff
mov r14, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
nop word [rax + rax]
mov rdi, qword [rsp + 0x1a0]
test r14, r14
je 0x180018b17
cmp r14, qword [rsp + 0x170]
je 0x180018b1c
call fcn.18009a80c
cmp rsi, rdi
je 0x180019e8f
test r14, r14
jne 0x180018b34
call fcn.18009a80c
mov rdx, r15
jmp 0x180018b37
mov rdx, qword [r14]
cmp rsi, qword [rdx + 0x30]
jne 0x180018b42
call fcn.18009a80c
cmp qword [rsi + 0x38], 8
jb 0x180018b4f
mov r9, qword [rsi + 0x20]
jmp 0x180018b53
lea r9, [rsi + 0x20]
cmp qword [r13 + 0x30], 8
jb 0x180018b60
mov r8, qword [r13 + 0x18]
jmp 0x180018b64
lea r8, [r13 + 0x18]
lea rdx, [0x1800cf400]
lea rcx, [rsp + 0x70]
call fcn.180053a60
mov rdi, rax
mov rbx, qword [rax + 0x18]
cmp rbx, 0xffffffffffffffff
cmova rbx, r12
lea rax, [rsp + 0x1c8]
cmp rax, rdi
jne 0x180018bbb
mov r8, r12
mov rdx, rbx
lea rcx, [rsp + 0x1c8]
call fcn.18000f620
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x1c8]
call fcn.18000f620
jmp 0x180018c89
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
jbe 0x180018bcf
call fcn.180099ecc
cmp qword [rsp + 0x1e8], rbx
jae 0x180018bf3
mov r8, qword [rsp + 0x1e0]
mov rdx, rbx
lea rcx, [rsp + 0x1c8]
call fcn.180011850
jmp 0x180018c20
test rbx, rbx
jne 0x180018c20
mov qword [rsp + 0x1e0], r15
lea rax, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rax, qword [rsp + 0x1d0]
mov word [rax], r15w
jmp 0x180018c89
test rbx, rbx
je 0x180018c89
cmp qword [rdi + 0x20], 8
jb 0x180018c32
mov r8, qword [rdi + 8]
jmp 0x180018c36
lea r8, [rdi + 8]
lea rcx, [rsp + 0x1d0]
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x1d0]
lea rdi, [rbx + rbx]
add rdx, rdx
mov r9, rdi
call fcn.18009a86c
mov qword [rsp + 0x1e0], rbx
lea rax, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rax, qword [rsp + 0x1d0]
mov word [rax + rdi], r15w
cmp qword [rsp + 0x90], 8
jb 0x180018c9e
mov rcx, qword [rsp + 0x78]
call fcn.18009a864
lea r8, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae r8, qword [rsp + 0x1d0]
lea r9, str.filePath
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x1f0]
call fcn.180053c64
nop
lea r8, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae r8, qword [rsp + 0x1d0]
lea r9, [0x1800cf2d8]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x268]
call fcn.180053c64
nop
lea r8, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae r8, qword [rsp + 0x1d0]
lea r9, str.approach
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x218]
call fcn.180053c64
nop
lea r8, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae r8, qword [rsp + 0x1d0]
lea r9, [0x1800cf308]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x240]
call fcn.180053c64
nop
lea rdx, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rdx, qword [rsp + 0x1d0]
mov dword [rsp + 0x60], 4
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xfc]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xf8]
lea r8, str.transferType
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x180018de2
cmp dword [rsp + 0xf8], 4
jne 0x180018de2
mov ebx, dword [rsp + 0xfc]
jmp 0x180018de5
mov ebx, r15d
and dword [rsp + 0x108], 0xfffffe00
mov qword [rsp + 0x110], r15
mov qword [rsp + 0x118], r15
mov qword [rsp + 0x120], r15
lea rax, [rsp + 0x30]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x1f8]
cmp qword [rsp + 0x210], 8
cmovae rcx, qword [rsp + 0x1f8]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rdx, rax
mov qword [rsp + 0xb8], 7
mov qword [rsp + 0xb0], r15
mov word [rsp + 0xa0], r15w
xor eax, eax
mov rcx, r12
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x98]
call fcn.18000f510
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call fcn.180001590
nop
mov byte [rsp + 0x38], 4
bts dword [rsp + 0x38], 8
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov rdx, qword [rax + 0x18]
cmp qword [rax + 0x20], 0x10
jb 0x180018eb3
mov rcx, qword [rax + 8]
jmp 0x180018eb7
lea rcx, [rax + 8]
call fcn.18006587c
mov qword [rsp + 0x30], rax
lea r8, [0x1800cf417]
lea rdx, str.ft_name
lea rcx, [rsp + 0x100]
call fcn.1800671b4
mov rdi, rax
movsx edx, byte [rax + 8]
movzx ecx, byte [rsp + 0x38]
mov byte [rax + 8], cl
mov byte [rsp + 0x38], dl
lea rax, [rsp + 0x30]
cmp rdi, rax
je 0x180018f09
mov rcx, qword [rdi]
mov rdx, qword [rsp + 0x30]
mov qword [rdi], rdx
mov qword [rsp + 0x30], rcx
mov ecx, dword [rdi + 8]
mov edx, ecx
shr edx, 8
and edx, 1
mov eax, dword [rsp + 0x38]
xor eax, ecx
and eax, 0x100
xor eax, ecx
mov dword [rdi + 8], eax
shl edx, 8
mov eax, dword [rsp + 0x38]
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [rsp + 0x38], eax
lea rdx, [rdi + 0x10]
lea rax, [rsp + 0x40]
cmp rdx, rax
je 0x180018f57
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x40]
mov qword [rdx], rax
mov qword [rsp + 0x40], rcx
lea rdx, [rdi + 0x18]
lea rax, [rsp + 0x48]
cmp rdx, rax
je 0x180018f75
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov qword [rdx], rax
mov qword [rsp + 0x48], rcx
add rdi, 0x20
lea rax, [rsp + 0x50]
cmp rdi, rax
je 0x180018f93
mov rcx, qword [rdi]
mov rax, qword [rsp + 0x50]
mov qword [rdi], rax
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x30]
call fcn.180066210
nop
cmp qword [rsp + 0xe0], 0x10
jb 0x180018fb6
mov rcx, qword [rsp + 0xc8]
call fcn.18009a864
mov qword [rsp + 0xe0], socket
mov qword [rsp + 0xd8], r15
mov byte [rsp + 0xc8], 0
cmp qword [rsp + 0xb8], 8
jb 0x180018fea
mov rcx, qword [rsp + 0xa0]
call fcn.18009a864
lea rax, [rsp + 0x30]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x70]
call fcn.180001590
nop
mov byte [rsp + 0x38], 4
bts dword [rsp + 0x38], 8
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov rdx, qword [rax + 0x18]
cmp qword [rax + 0x20], 0x10
jb 0x180019032
mov rcx, qword [rax + 8]
jmp 0x180019036
lea rcx, [rax + 8]
call fcn.18006587c
mov qword [rsp + 0x30], rax
lea r8, [0x1800cf421]
lea rdx, str.__ft_path
lea rcx, [rsp + 0x100]
call fcn.1800671b4
mov rdi, rax
movsx edx, byte [rax + 8]
movzx ecx, byte [rsp + 0x38]
mov byte [rax + 8], cl
mov byte [rsp + 0x38], dl
lea rax, [rsp + 0x30]
cmp rdi, rax
je 0x180019088
mov rcx, qword [rdi]
mov rdx, qword [rsp + 0x30]
mov qword [rdi], rdx
mov qword [rsp + 0x30], rcx
mov ecx, dword [rdi + 8]
mov edx, ecx
shr edx, 8
and edx, 1
mov eax, dword [rsp + 0x38]
xor eax, ecx
and eax, 0x100
xor eax, ecx
mov dword [rdi + 8], eax
shl edx, 8
mov eax, dword [rsp + 0x38]
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [rsp + 0x38], eax
lea rdx, [rdi + 0x10]
lea rax, [rsp + 0x40]
cmp rdx, rax
je 0x1800190d6
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x40]
mov qword [rdx], rax
mov qword [rsp + 0x40], rcx
lea rdx, [rdi + 0x18]
lea rax, [rsp + 0x48]
cmp rdx, rax
je 0x1800190f4
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov qword [rdx], rax
mov qword [rsp + 0x48], rcx
add rdi, 0x20
lea rax, [rsp + 0x50]
cmp rdi, rax
je 0x180019112
mov rcx, qword [rdi]
mov rax, qword [rsp + 0x50]
mov qword [rdi], rax
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x30]
call fcn.180066210
nop
cmp qword [rsp + 0x90], 0x10
jb 0x180019132
mov rcx, qword [rsp + 0x78]
call fcn.18009a864
mov r12, r15
mov rax, qword [rsp + 0x1f8]
mov rdx, qword [rsp + 0x210]
cmp rdx, 8
jb 0x180019159
mov rcx, rax
test rax, rax
je 0x1800192c3
jmp 0x180019161
lea rcx, [rsp + 0x1f8]
cmp word [rcx], r12w
je 0x1800192c3
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1800192b3
and eax, 0x10
je 0x1800192b3
lea rdx, [rsp + 0x1f8]
cmp qword [rsp + 0x210], 8
cmovae rdx, qword [rsp + 0x1f8]
lea rcx, str.reporter_dir:_ls
call fcn.18005c8d8
lea rax, [rsp + 0x30]
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x38], 1
btr dword [rsp + 0x38], 8
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x30], r15
lea r8, [0x1800cf42f]
lea rdx, str.ft_size
lea rcx, [rsp + 0x100]
call fcn.1800671b4
mov rdi, rax
movsx edx, byte [rax + 8]
movzx ecx, byte [rsp + 0x38]
mov byte [rax + 8], cl
mov byte [rsp + 0x38], dl
lea rax, [rsp + 0x30]
cmp rdi, rax
je 0x18001921a
mov rcx, qword [rdi]
mov rdx, qword [rsp + 0x30]
mov qword [rdi], rdx
mov qword [rsp + 0x30], rcx
mov ecx, dword [rdi + 8]
mov edx, ecx
shr edx, 8
and edx, 1
mov eax, ecx
xor eax, dword [rsp + 0x38]
and eax, 0x100
xor eax, ecx
mov dword [rdi + 8], eax
shl edx, 8
mov eax, dword [rsp + 0x38]
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [rsp + 0x38], eax
lea rdx, [rdi + 0x10]
lea rax, [rsp + 0x40]
cmp rdx, rax
je 0x180019268
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x40]
mov qword [rdx], rax
mov qword [rsp + 0x40], rcx
lea rdx, [rdi + 0x18]
lea rax, [rsp + 0x48]
cmp rdx, rax
je 0x180019286
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov qword [rdx], rax
mov qword [rsp + 0x48], rcx
add rdi, 0x20
lea rax, [rsp + 0x50]
cmp rdi, rax
je 0x1800192a4
mov rcx, qword [rdi]
mov rax, qword [rsp + 0x50]
mov qword [rdi], rax
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x30]
call fcn.180066210
jmp 0x180019587
mov rdx, qword [rsp + 0x210]
mov rax, qword [rsp + 0x1f8]
lea rcx, [rsp + 0x1f8]
cmp rdx, 8
cmovae rcx, rax
mov dword [rsp + 0x30], r15d
xor eax, eax
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x18001931c
mov ecx, dword [rsp + 0x4c]
shl rcx, 0x20
mov eax, dword [rsp + 0x50]
add rcx, rax
jmp 0x18001931f
mov rcx, r15
lea rax, [rsp + 0x30]
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x38], 2
btr dword [rsp + 0x38], 8
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x30], rcx
lea r8, [0x1800cf42f]
lea rdx, str.ft_size
lea rcx, [rsp + 0x100]
call fcn.1800671b4
mov rdi, rax
movsx edx, byte [rax + 8]
movzx ecx, byte [rsp + 0x38]
mov byte [rax + 8], cl
mov byte [rsp + 0x38], dl
lea rax, [rsp + 0x30]
cmp rdi, rax
je 0x180019390
mov rcx, qword [rdi]
mov rdx, qword [rsp + 0x30]
mov qword [rdi], rdx
mov qword [rsp + 0x30], rcx
mov ecx, dword [rdi + 8]
mov edx, ecx
shr edx, 8
and edx, 1
mov eax, ecx
xor eax, dword [rsp + 0x38]
and eax, 0x100
xor eax, ecx
mov dword [rdi + 8], eax
shl edx, 8
mov eax, dword [rsp + 0x38]
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [rsp + 0x38], eax
lea rdx, [rdi + 0x10]
lea rax, [rsp + 0x40]
cmp rdx, rax
je 0x1800193de
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x40]
mov qword [rdx], rax
mov qword [rsp + 0x40], rcx
lea rdx, [rdi + 0x18]
lea rax, [rsp + 0x48]
cmp rdx, rax
je 0x1800193fc
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov qword [rdx], rax
mov qword [rsp + 0x48], rcx
add rdi, 0x20
lea rax, [rsp + 0x50]
cmp rdi, rax
je 0x18001941a
mov rcx, qword [rdi]
mov rax, qword [rsp + 0x50]
mov qword [rdi], rax
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x30]
call fcn.180066210
lea rcx, [rsp + 0x1f8]
cmp qword [rsp + 0x210], 8
cmovae rcx, qword [rsp + 0x1f8]
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov rdx, rax
test rax, rax
je 0x18001956d
cmp word [rax], 0
je 0x18001956d
add rdx, 2
lea rax, [rsp + 0x98]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r15
mov word [rsp + 0x38], r15w
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x30]
call fcn.18000f510
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xc0]
call fcn.180001590
nop
mov byte [rsp + 0xa0], 4
bts dword [rsp + 0xa0], 8
mov qword [rsp + 0xa8], r15
mov qword [rsp + 0xb0], r15
mov qword [rsp + 0xb8], r15
mov rdx, qword [rax + 0x18]
cmp qword [rax + 0x20], 0x10
jb 0x1800194ea
mov rcx, qword [rax + 8]
jmp 0x1800194ee
lea rcx, [rax + 8]
call fcn.18006587c
mov qword [rsp + 0x98], rax
lea r8, [0x1800cf436]
lea rdx, str.ft_ext
lea rcx, [rsp + 0x100]
call fcn.1800671b4
mov rcx, rax
lea rdx, [rsp + 0x98]
call fcn.1800662a8
nop
cmp qword [rsp + 0xe0], 0x10
jb 0x18001953f
mov rcx, qword [rsp + 0xc8]
call fcn.18009a864
mov qword [rsp + 0xe0], socket
mov qword [rsp + 0xd8], r15
mov byte [rsp + 0xc8], 0
cmp qword [rsp + 0x50], 8
jb 0x18001956d
mov rcx, qword [rsp + 0x38]
call fcn.18009a864
lea r12, [rsp + 0x1f8]
cmp qword [rsp + 0x210], 8
cmovae r12, qword [rsp + 0x1f8]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x60], rax
test ebx, ebx
jne 0x1800195ee
mov qword [rsp + 0xe0], 7
mov qword [rsp + 0xd8], r15
mov word [rsp + 0xc8], r15w
lea r8d, [rbx + 2]
lea rdx, str._nN_O
lea rcx, [rsp + 0xc0]
call fcn.18000f510
nop
or ebp, 1
mov dword [rsp + 0x58], ebp
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x70]
call fcn.180001590
nop
or ebp, 2
mov dword [rsp + 0x58], ebp
jmp 0x18001964a
mov qword [rsp + 0xb8], 7
mov qword [rsp + 0xb0], r15
mov word [rsp + 0xa0], r15w
mov r8d, 2
lea rdx, [0x1800cf470]
lea rcx, [rsp + 0x98]
call fcn.18000f510
nop
or ebp, 4
mov dword [rsp + 0x58], ebp
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x140]
call fcn.180001590
nop
or ebp, 8
mov dword [rsp + 0x58], ebp
mov byte [rsp + 0x38], 4
bts dword [rsp + 0x38], 8
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov rdx, qword [rax + 0x18]
cmp qword [rax + 0x20], 0x10
jb 0x180019675
mov rcx, qword [rax + 8]
jmp 0x180019679
lea rcx, [rax + 8]
call fcn.18006587c
mov qword [rsp + 0x30], rax
lea r8, [0x1800cf467]
lea rdx, str.ft_type
lea rcx, [rsp + 0x100]
call fcn.1800671b4
mov rdi, rax
movsx edx, byte [rax + 8]
movzx ecx, byte [rsp + 0x38]
mov byte [rax + 8], cl
mov byte [rsp + 0x38], dl
lea rax, [rsp + 0x30]
cmp rdi, rax
je 0x1800196cb
mov rcx, qword [rdi]
mov rdx, qword [rsp + 0x30]
mov qword [rdi], rdx
mov qword [rsp + 0x30], rcx
mov ecx, dword [rdi + 8]
mov edx, ecx
shr edx, 8
and edx, 1
mov eax, ecx
xor eax, dword [rsp + 0x38]
and eax, 0x100
xor eax, ecx
mov dword [rdi + 8], eax
shl edx, 8
mov eax, dword [rsp + 0x38]
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [rsp + 0x38], eax
lea rdx, [rdi + 0x10]
lea rax, [rsp + 0x40]
cmp rdx, rax
je 0x180019719
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x40]
mov qword [rdx], rax
mov qword [rsp + 0x40], rcx
lea rdx, [rdi + 0x18]
lea rax, [rsp + 0x48]
cmp rdx, rax
je 0x180019737
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov qword [rdx], rax
mov qword [rsp + 0x48], rcx
add rdi, 0x20
lea rax, [rsp + 0x50]
cmp rdi, rax
je 0x180019755
mov rcx, qword [rdi]
mov rax, qword [rsp + 0x50]
mov qword [rdi], rax
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x30]
call fcn.180066210
nop
test bpl, 8
je 0x1800197a1
and ebp, 0xfffffff7
mov dword [rsp + 0x58], ebp
cmp qword [rsp + 0x160], 0x10
jb 0x180019785
mov rcx, qword [rsp + 0x148]
call fcn.18009a864
mov qword [rsp + 0x160], socket
mov qword [rsp + 0x158], r15
mov byte [rsp + 0x148], 0
test bpl, 4
je 0x1800197e3
and ebp, 0xfffffffb
mov dword [rsp + 0x58], ebp
cmp qword [rsp + 0xb8], 8
jb 0x1800197c6
mov rcx, qword [rsp + 0xa0]
call fcn.18009a864
mov qword [rsp + 0xb8], 7
mov qword [rsp + 0xb0], r15
mov word [rsp + 0xa0], r15w
test bpl, 2
je 0x18001981e
and ebp, 0xfffffffd
mov dword [rsp + 0x58], ebp
cmp qword [rsp + 0x90], 0x10
jb 0x180019805
mov rcx, qword [rsp + 0x78]
call fcn.18009a864
mov qword [rsp + 0x90], socket
mov qword [rsp + 0x88], r15
mov byte [rsp + 0x78], 0
test bpl, 1
je 0x180019843
and ebp, 0xfffffffe
mov dword [rsp + 0x58], ebp
cmp qword [rsp + 0xe0], 8
jb 0x180019843
mov rcx, qword [rsp + 0xc8]
call fcn.18009a864
lea rax, [rsp + 0x30]
mov qword [rsp + 0x60], rax
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x70]
mov rcx, r13
call fcn.180019fb0
nop
mov byte [rsp + 0x38], 4
bts dword [rsp + 0x38], 8
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov rdx, qword [rax + 0x18]
cmp qword [rax + 0x20], 0x10
jb 0x18001988e
mov rcx, qword [rax + 8]
jmp 0x180019892
lea rcx, [rax + 8]
call fcn.18006587c
mov qword [rsp + 0x30], rax
lea r8, [0x1800cf483]
lea rdx, str.ft_approach
lea rcx, [rsp + 0x100]
call fcn.1800671b4
mov rdi, rax
movsx edx, byte [rax + 8]
movzx ecx, byte [rsp + 0x38]
mov byte [rax + 8], cl
mov byte [rsp + 0x38], dl
lea rax, [rsp + 0x30]
cmp rdi, rax
je 0x1800198e4
mov rcx, qword [rdi]
mov rdx, qword [rsp + 0x30]
mov qword [rdi], rdx
mov qword [rsp + 0x30], rcx
mov ecx, dword [rdi + 8]
mov edx, ecx
shr edx, 8
and edx, 1
mov eax, dword [rsp + 0x38]
xor eax, ecx
and eax, 0x100
xor eax, ecx
mov dword [rdi + 8], eax
shl edx, 8
mov eax, dword [rsp + 0x38]
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [rsp + 0x38], eax
lea rdx, [rdi + 0x10]
lea rax, [rsp + 0x40]
cmp rdx, rax
je 0x180019932
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x40]
mov qword [rdx], rax
mov qword [rsp + 0x40], rcx
lea rdx, [rdi + 0x18]
lea rax, [rsp + 0x48]
cmp rdx, rax
je 0x180019950
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov qword [rdx], rax
mov qword [rsp + 0x48], rcx
add rdi, 0x20
lea rax, [rsp + 0x50]
cmp rdi, rax
je 0x18001996e
mov rcx, qword [rdi]
mov rax, qword [rsp + 0x50]
mov qword [rdi], rax
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x30]
call fcn.180066210
nop
cmp qword [rsp + 0x90], 0x10
jb 0x18001998e
mov rcx, qword [rsp + 0x78]
call fcn.18009a864
lea rax, [rsp + 0x30]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x70]
call fcn.180001590
nop
mov byte [rsp + 0x38], 4
bts dword [rsp + 0x38], 8
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov rdx, qword [rax + 0x18]
cmp qword [rax + 0x20], 0x10
jb 0x1800199d6
mov rcx, qword [rax + 8]
jmp 0x1800199da
lea rcx, [rax + 8]
call fcn.18006587c
mov qword [rsp + 0x30], rax
lea r8, [0x1800cf492]
lea rdx, str.ft_details
lea rcx, [rsp + 0x100]
call fcn.1800671b4
mov rdi, rax
movsx edx, byte [rax + 8]
movzx ecx, byte [rsp + 0x38]
mov byte [rax + 8], cl
mov byte [rsp + 0x38], dl
lea rax, [rsp + 0x30]
cmp rdi, rax
je 0x180019a2c
mov rcx, qword [rdi]
mov rdx, qword [rsp + 0x30]
mov qword [rdi], rdx
mov qword [rsp + 0x30], rcx
mov ecx, dword [rdi + 8]
mov edx, ecx
shr edx, 8
and edx, 1
mov eax, dword [rsp + 0x38]
xor eax, ecx
and eax, 0x100
xor eax, ecx
mov dword [rdi + 8], eax
shl edx, 8
mov eax, dword [rsp + 0x38]
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [rsp + 0x38], eax
lea rdx, [rdi + 0x10]
lea rax, [rsp + 0x40]
cmp rdx, rax
je 0x180019a7a
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x40]
mov qword [rdx], rax
mov qword [rsp + 0x40], rcx
lea rdx, [rdi + 0x18]
lea rax, [rsp + 0x48]
cmp rdx, rax
je 0x180019a98
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov qword [rdx], rax
mov qword [rsp + 0x48], rcx
add rdi, 0x20
lea rax, [rsp + 0x50]
cmp rdi, rax
je 0x180019ab6
mov rcx, qword [rdi]
mov rax, qword [rsp + 0x50]
mov qword [rdi], rax
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x30]
call fcn.180066210
nop
cmp qword [rsp + 0x90], 0x10
jb 0x180019ad6
mov rcx, qword [rsp + 0x78]
call fcn.18009a864
lea rax, [rsp + 0x30]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x70]
call fcn.180001590
nop
mov byte [rsp + 0x38], 4
bts dword [rsp + 0x38], 8
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov rdx, qword [rax + 0x18]
cmp qword [rax + 0x20], 0x10
jb 0x180019b1e
mov rcx, qword [rax + 8]
jmp 0x180019b22
lea rcx, [rax + 8]
call fcn.18006587c
mov qword [rsp + 0x30], rax
lea r8, [0x1800cf4a3]
lea rdx, str.ft_procname
lea rcx, [rsp + 0x100]
call fcn.1800671b4
mov rdi, rax
movsx edx, byte [rax + 8]
movzx ecx, byte [rsp + 0x38]
mov byte [rax + 8], cl
mov byte [rsp + 0x38], dl
lea rax, [rsp + 0x30]
cmp rdi, rax
je 0x180019b74
mov rcx, qword [rdi]
mov rdx, qword [rsp + 0x30]
mov qword [rdi], rdx
mov qword [rsp + 0x30], rcx
mov ecx, dword [rdi + 8]
mov edx, ecx
shr edx, 8
and edx, 1
mov eax, dword [rsp + 0x38]
xor eax, ecx
and eax, 0x100
xor eax, ecx
mov dword [rdi + 8], eax
shl edx, 8
mov eax, dword [rsp + 0x38]
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [rsp + 0x38], eax
lea rdx, [rdi + 0x10]
lea rax, [rsp + 0x40]
cmp rdx, rax
je 0x180019bc2
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x40]
mov qword [rdx], rax
mov qword [rsp + 0x40], rcx
lea rdx, [rdi + 0x18]
lea rax, [rsp + 0x48]
cmp rdx, rax
je 0x180019be0
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov qword [rdx], rax
mov qword [rsp + 0x48], rcx
add rdi, 0x20
lea rax, [rsp + 0x50]
cmp rdi, rax
je 0x180019bfe
mov rcx, qword [rdi]
mov rax, qword [rsp + 0x50]
mov qword [rdi], rax
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x30]
call fcn.180066210
nop
cmp qword [rsp + 0x90], 0x10
jb 0x180019c1e
mov rcx, qword [rsp + 0x78]
call fcn.18009a864
lea rbx, vtable.Json::FastWriter.0
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xe8], socket
mov qword [rsp + 0xe0], r15
mov byte [rsp + 0xd0], 0
mov byte [rsp + 0xf0], 0
mov byte [rsp + 0xf1], 0
mov byte [rsp + 0xf2], 0
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0xc0]
call qword [0x1800cfc88]
nop
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180001500
nop
cmp qword [rax + 0x20], 8
jb 0x180019c9b
mov r9, qword [rax + 8]
jmp 0x180019c9f
lea r9, [rax + 8]
mov r8, r12
lea rdx, str.file:_ls__reporter:_ls
lea rcx, [0x1800cf4d8]
call fcn.18005c640
nop
cmp qword [rsp + 0x90], 8
jb 0x180019ccb
mov rcx, qword [rsp + 0x78]
call fcn.18009a864
mov qword [rsp + 0x90], 7
mov qword [rsp + 0x88], r15
mov word [rsp + 0x78], r15w
cmp qword [rsp + 0x160], 0x10
jb 0x180019cfd
mov rcx, qword [rsp + 0x148]
call fcn.18009a864
mov qword [rsp + 0x160], socket
mov qword [rsp + 0x158], r15
mov byte [rsp + 0x148], 0
mov qword [rsp + 0xc0], rbx
cmp qword [rsp + 0xe8], 0x10
jb 0x180019d39
mov rcx, qword [rsp + 0xd0]
call fcn.18009a864
xor r9d, r9d
mov r8, r12
lea rdx, [rsp + 0x100]
lea rcx, str.t_filetransfer_log
call fcn.18005e04c
nop
lea rcx, [rsp + 0x100]
call fcn.180066210
nop
cmp qword [rsp + 0x260], 8
jb 0x180019d7a
mov rcx, qword [rsp + 0x248]
call fcn.18009a864
mov qword [rsp + 0x260], 7
mov qword [rsp + 0x258], r15
mov word [rsp + 0x248], r15w
cmp qword [rsp + 0x238], 8
jb 0x180019daf
mov rcx, qword [rsp + 0x220]
call fcn.18009a864
mov qword [rsp + 0x238], 7
mov qword [rsp + 0x230], r15
mov word [rsp + 0x220], r15w
cmp qword [rsp + 0x288], 8
jb 0x180019de4
mov rcx, qword [rsp + 0x270]
call fcn.18009a864
mov qword [rsp + 0x288], 7
mov qword [rsp + 0x280], r15
mov word [rsp + 0x270], r15w
cmp qword [rsp + 0x210], 8
jb 0x180019e19
mov rcx, qword [rsp + 0x1f8]
call fcn.18009a864
test r14, r14
jne 0x180019e23
call fcn.18009a80c
cmp byte [rsi + 0x41], 0
je 0x180019e37
call fcn.18009a80c
or r12, 0xffffffffffffffff
jmp 0x180018b00
mov rax, qword [rsi + 0x10]
cmp byte [rax + 0x41], 0
jne 0x180019e65
mov rsi, rax
mov rax, qword [rax]
cmp byte [rax + 0x41], 0
jne 0x180019e5c
nop dword [rax]
mov rsi, rax
mov rax, qword [rax]
cmp byte [rax + 0x41], 0
je 0x180019e50
or r12, 0xffffffffffffffff
jmp 0x180018b00
mov rax, qword [rsi + 8]
cmp byte [rax + 0x41], 0
jne 0x180019e83
nop
cmp rsi, qword [rax + 0x10]
jne 0x180019e83
mov rsi, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x41], 0
je 0x180019e70
mov rsi, rax
or r12, 0xffffffffffffffff
jmp 0x180018b00
cmp qword [r13 + 0x30], 8
jb 0x180019e9c
mov rdx, qword [r13 + 0x18]
jmp 0x180019ea0
lea rdx, [r13 + 0x18]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
nop
cmp qword [rsp + 0x1e8], 8
jb 0x180019ec6
mov rcx, qword [rsp + 0x1d0]
call fcn.18009a864
mov qword [rsp + 0x1e8], 7
mov qword [rsp + 0x1e0], r15
mov word [rsp + 0x1d0], r15w
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x170]
mov qword [rsp + 0x60], rcx
mov rax, qword [rax]
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], rcx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
movaps xmm1, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0x130], xmm1
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x130]
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x170]
call fcn.18000e860
mov rcx, qword [rsp + 0x1a0]
call fcn.18009a864
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x1a8], r15
mov rcx, qword [rsp + 0x170]
call fcn.18009a864
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.180099fe0
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret