Function at 0x18001ce70
Capabilities:
Create directory
Set file attributes

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x468
mov rax, qword [0x1800623f8]
xor rax, rsp
mov qword [rsp + 0x450], rax
mov dword [rsp + 0x260], 2
mov dword [rsp + 0x250], 5
mov eax, dword [rsp + 0x250]
test eax, eax
jle 0x18001cf14
mov eax, dword [rsp + 0x250]
cmp eax, 1
jle 0x18001cee1
mov eax, dword [rsp + 0x260]
and eax, 0x204d
mov dword [rsp + 0x260], eax
mov eax, dword [rsp + 0x250]
sub eax, 2
mov dword [rsp + 0x250], eax
jmp 0x18001cea4
mov eax, dword [rsp + 0x260]
cmp eax, 0x807
jle 0x18001cf02
mov eax, dword [rsp + 0x260]
and eax, 0x80
mov dword [rsp + 0x260], eax
mov eax, dword [rsp + 0x250]
dec eax
mov dword [rsp + 0x250], eax
jmp 0x18001cea4
mov dword [rsp + 0x264], 4
mov dword [rsp + 0x25c], 0x13
cmp dword [rsp + 0x25c], 0
jle 0x18001cf8a
mov eax, dword [rsp + 0x25c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001cf6c
mov dword [rsp + 0x264], 0
mov eax, dword [rsp + 0x25c]
dec eax
mov dword [rsp + 0x25c], eax
jmp 0x18001cf2a
mov dword [rsp + 0x264], 0
mov eax, dword [rsp + 0x25c]
sub eax, 2
mov dword [rsp + 0x25c], eax
jmp 0x18001cf2a
mov dword [rsp + 0x258], 1
mov dword [rsp + 0x254], 0x15
cmp dword [rsp + 0x254], 0
jle 0x18001d000
mov eax, dword [rsp + 0x254]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001cfe3
mov dword [rsp + 0x258], 4
mov eax, dword [rsp + 0x254]
sub eax, 2
mov dword [rsp + 0x254], eax
jmp 0x18001cfa0
mov dword [rsp + 0x258], 0
mov eax, dword [rsp + 0x254]
dec eax
mov dword [rsp + 0x254], eax
jmp 0x18001cfa0
mov rcx, qword [rsp + 0x470]
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x18001d30f
mov dword [rsp + 0x280], 4
mov dword [rsp + 0x28c], 3
mov eax, dword [rsp + 0x28c]
test eax, eax
jle 0x18001d09a
mov eax, dword [rsp + 0x28c]
cmp eax, 1
jle 0x18001d069
mov eax, dword [rsp + 0x280]
and eax, 0xdd8
mov dword [rsp + 0x280], eax
mov eax, dword [rsp + 0x28c]
sub eax, 2
mov dword [rsp + 0x28c], eax
jmp 0x18001d02c
mov eax, dword [rsp + 0x280]
cmp eax, 0x805
jle 0x18001d088
mov eax, dword [rsp + 0x280]
and eax, 0x7e
mov dword [rsp + 0x280], eax
mov eax, dword [rsp + 0x28c]
dec eax
mov dword [rsp + 0x28c], eax
jmp 0x18001d02c
mov dword [rsp + 0x270], 3
mov dword [rsp + 0x294], 0xf
cmp dword [rsp + 0x294], 0
jle 0x18001d111
mov eax, dword [rsp + 0x294]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d0f3
mov dword [rsp + 0x270], 0
mov eax, dword [rsp + 0x294]
sub eax, 2
mov dword [rsp + 0x294], eax
jmp 0x18001d0b0
mov dword [rsp + 0x270], 4
mov eax, dword [rsp + 0x294]
sub eax, 2
mov dword [rsp + 0x294], eax
jmp 0x18001d0b0
mov dword [rsp + 0x27c], 7
mov dword [rsp + 0x268], 4
mov eax, dword [rsp + 0x268]
test eax, eax
jle 0x18001d195
mov eax, dword [rsp + 0x268]
cmp eax, 1
jle 0x18001d164
mov eax, dword [rsp + 0x27c]
and eax, 0x21f3
mov dword [rsp + 0x27c], eax
mov eax, dword [rsp + 0x268]
sub eax, 2
mov dword [rsp + 0x268], eax
jmp 0x18001d127
mov eax, dword [rsp + 0x27c]
cmp eax, 0x806
jle 0x18001d183
mov eax, dword [rsp + 0x27c]
and eax, 0x7f
mov dword [rsp + 0x27c], eax
mov eax, dword [rsp + 0x268]
dec eax
mov dword [rsp + 0x268], eax
jmp 0x18001d127
mov dword [rsp + 0x278], 9
mov dword [rsp + 0x290], 4
mov eax, dword [rsp + 0x290]
test eax, eax
jle 0x18001d219
mov eax, dword [rsp + 0x290]
cmp eax, 1
jle 0x18001d1e8
mov eax, dword [rsp + 0x278]
and eax, 0x197d
mov dword [rsp + 0x278], eax
mov eax, dword [rsp + 0x290]
sub eax, 2
mov dword [rsp + 0x290], eax
jmp 0x18001d1ab
mov eax, dword [rsp + 0x278]
cmp eax, 0x806
jle 0x18001d207
mov eax, dword [rsp + 0x278]
and eax, 0x7f
mov dword [rsp + 0x278], eax
mov eax, dword [rsp + 0x290]
dec eax
mov dword [rsp + 0x290], eax
jmp 0x18001d1ab
mov dword [rsp + 0x288], 0
mov dword [rsp + 0x26c], 0x15
cmp dword [rsp + 0x26c], 0
jle 0x18001d28f
mov eax, dword [rsp + 0x26c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d271
mov dword [rsp + 0x288], 4
mov eax, dword [rsp + 0x26c]
dec eax
mov dword [rsp + 0x26c], eax
jmp 0x18001d22f
mov dword [rsp + 0x288], 0
mov eax, dword [rsp + 0x26c]
sub eax, 2
mov dword [rsp + 0x26c], eax
jmp 0x18001d22f
mov dword [rsp + 0x274], 8
mov dword [rsp + 0x284], 0x11
cmp dword [rsp + 0x284], 0
jle 0x18001d305
mov eax, dword [rsp + 0x284]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d2e7
mov dword [rsp + 0x274], 4
mov eax, dword [rsp + 0x284]
dec eax
mov dword [rsp + 0x284], eax
jmp 0x18001d2a5
mov dword [rsp + 0x274], 4
mov eax, dword [rsp + 0x284]
sub eax, 2
mov dword [rsp + 0x284], eax
jmp 0x18001d2a5
mov eax, 1
jmp 0x18001ef72
mov dword [rsp + 0x2bc], 2
mov dword [rsp + 0x2ac], 0x13
cmp dword [rsp + 0x2ac], 0
jle 0x18001d386
mov eax, dword [rsp + 0x2ac]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d368
mov dword [rsp + 0x2bc], 4
mov eax, dword [rsp + 0x2ac]
sub eax, 2
mov dword [rsp + 0x2ac], eax
jmp 0x18001d325
mov dword [rsp + 0x2bc], 4
mov eax, dword [rsp + 0x2ac]
sub eax, 2
mov dword [rsp + 0x2ac], eax
jmp 0x18001d325
mov dword [rsp + 0x2a0], 8
mov dword [rsp + 0x2b4], 0x11
cmp dword [rsp + 0x2b4], 0
jle 0x18001d3fc
mov eax, dword [rsp + 0x2b4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d3de
mov dword [rsp + 0x2a0], 4
mov eax, dword [rsp + 0x2b4]
dec eax
mov dword [rsp + 0x2b4], eax
jmp 0x18001d39c
mov dword [rsp + 0x2a0], 4
mov eax, dword [rsp + 0x2b4]
sub eax, 2
mov dword [rsp + 0x2b4], eax
jmp 0x18001d39c
mov dword [rsp + 0x298], 4
mov dword [rsp + 0x2b8], 0x11
cmp dword [rsp + 0x2b8], 0
jle 0x18001d471
mov eax, dword [rsp + 0x2b8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d454
mov dword [rsp + 0x298], 0
mov eax, dword [rsp + 0x2b8]
dec eax
mov dword [rsp + 0x2b8], eax
jmp 0x18001d412
mov dword [rsp + 0x298], 4
mov eax, dword [rsp + 0x2b8]
dec eax
mov dword [rsp + 0x2b8], eax
jmp 0x18001d412
mov dword [rsp + 0x2a8], 0
mov dword [rsp + 0x29c], 0xd
cmp dword [rsp + 0x29c], 0
jle 0x18001d4e7
mov eax, dword [rsp + 0x29c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d4c9
mov dword [rsp + 0x2a8], 4
mov eax, dword [rsp + 0x29c]
dec eax
mov dword [rsp + 0x29c], eax
jmp 0x18001d487
mov dword [rsp + 0x2a8], 0
mov eax, dword [rsp + 0x29c]
sub eax, 2
mov dword [rsp + 0x29c], eax
jmp 0x18001d487
mov dword [rsp + 0x2a4], 7
mov dword [rsp + 0x2b0], 0xd
cmp dword [rsp + 0x2b0], 0
jle 0x18001d55d
mov eax, dword [rsp + 0x2b0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d540
mov dword [rsp + 0x2a4], 0
mov eax, dword [rsp + 0x2b0]
sub eax, 2
mov dword [rsp + 0x2b0], eax
jmp 0x18001d4fd
mov dword [rsp + 0x2a4], 4
mov eax, dword [rsp + 0x2b0]
dec eax
mov dword [rsp + 0x2b0], eax
jmp 0x18001d4fd
mov r8, qword [rsp + 0x470]
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.180028e10
mov dword [rsp + 0x2d0], 5
mov dword [rsp + 0x2ec], 5
mov eax, dword [rsp + 0x2ec]
test eax, eax
jle 0x18001d5fa
mov eax, dword [rsp + 0x2ec]
cmp eax, 1
jle 0x18001d5c7
mov eax, dword [rsp + 0x2d0]
and eax, 0x9c1
mov dword [rsp + 0x2d0], eax
mov eax, dword [rsp + 0x2ec]
sub eax, 2
mov dword [rsp + 0x2ec], eax
jmp 0x18001d58a
mov eax, dword [rsp + 0x2d0]
cmp eax, 0x807
jle 0x18001d5e8
mov eax, dword [rsp + 0x2d0]
and eax, 0x80
mov dword [rsp + 0x2d0], eax
mov eax, dword [rsp + 0x2ec]
dec eax
mov dword [rsp + 0x2ec], eax
jmp 0x18001d58a
mov dword [rsp + 0x2e4], 5
mov dword [rsp + 0x2d8], 8
mov eax, dword [rsp + 0x2d8]
test eax, eax
jle 0x18001d680
mov eax, dword [rsp + 0x2d8]
cmp eax, 1
jle 0x18001d64d
mov eax, dword [rsp + 0x2e4]
and eax, 0xc22
mov dword [rsp + 0x2e4], eax
mov eax, dword [rsp + 0x2d8]
sub eax, 2
mov dword [rsp + 0x2d8], eax
jmp 0x18001d610
mov eax, dword [rsp + 0x2e4]
cmp eax, 0x80a
jle 0x18001d66e
mov eax, dword [rsp + 0x2e4]
and eax, 0x83
mov dword [rsp + 0x2e4], eax
mov eax, dword [rsp + 0x2d8]
dec eax
mov dword [rsp + 0x2d8], eax
jmp 0x18001d610
mov dword [rsp + 0x2cc], 7
mov dword [rsp + 0x2c8], 0x14
cmp dword [rsp + 0x2c8], 0
jle 0x18001d6f6
mov eax, dword [rsp + 0x2c8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d6d9
mov dword [rsp + 0x2cc], 0
mov eax, dword [rsp + 0x2c8]
sub eax, 2
mov dword [rsp + 0x2c8], eax
jmp 0x18001d696
mov dword [rsp + 0x2cc], 0
mov eax, dword [rsp + 0x2c8]
dec eax
mov dword [rsp + 0x2c8], eax
jmp 0x18001d696
mov dword [rsp + 0x2e0], 2
mov dword [rsp + 0x2e8], 0x10
cmp dword [rsp + 0x2e8], 0
jle 0x18001d76c
mov eax, dword [rsp + 0x2e8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d74e
mov dword [rsp + 0x2e0], 4
mov eax, dword [rsp + 0x2e8]
dec eax
mov dword [rsp + 0x2e8], eax
jmp 0x18001d70c
mov dword [rsp + 0x2e0], 4
mov eax, dword [rsp + 0x2e8]
sub eax, 2
mov dword [rsp + 0x2e8], eax
jmp 0x18001d70c
mov dword [rsp + 0x2dc], 0
mov dword [rsp + 0x2c4], 0x15
cmp dword [rsp + 0x2c4], 0
jle 0x18001d7e2
mov eax, dword [rsp + 0x2c4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001d7c4
mov dword [rsp + 0x2dc], 4
mov eax, dword [rsp + 0x2c4]
dec eax
mov dword [rsp + 0x2c4], eax
jmp 0x18001d782
mov dword [rsp + 0x2dc], 0
mov eax, dword [rsp + 0x2c4]
sub eax, 2
mov dword [rsp + 0x2c4], eax
jmp 0x18001d782
mov dword [rsp + 0x2c0], 3
mov dword [rsp + 0x2d4], 8
mov eax, dword [rsp + 0x2d4]
test eax, eax
jle 0x18001d868
mov eax, dword [rsp + 0x2d4]
cmp eax, 1
jle 0x18001d835
mov eax, dword [rsp + 0x2c0]
and eax, 0x11d0
mov dword [rsp + 0x2c0], eax
mov eax, dword [rsp + 0x2d4]
sub eax, 2
mov dword [rsp + 0x2d4], eax
jmp 0x18001d7f8
mov eax, dword [rsp + 0x2c0]
cmp eax, 0x80a
jle 0x18001d856
mov eax, dword [rsp + 0x2c0]
and eax, 0x83
mov dword [rsp + 0x2c0], eax
mov eax, dword [rsp + 0x2d4]
dec eax
mov dword [rsp + 0x2d4], eax
jmp 0x18001d7f8
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
dec eax
mov eax, eax
movzx eax, word [rsp + rax*2 + 0x40]
cmp eax, 0x5c
jne 0x18001d898
mov eax, dword [rsp + 0x28]
dec eax
mov eax, eax
xor ecx, ecx
mov word [rsp + rax*2 + 0x40], cx
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
jmp 0x18001d8b2
mov rax, qword [rsp + 0x20]
add rax, 2
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
movzx eax, word [rax]
test eax, eax
je 0x18001e30d
mov rax, qword [rsp + 0x20]
movzx eax, word [rax]
cmp eax, 0x5c
jne 0x18001e308
xor eax, eax
mov rcx, qword [rsp + 0x20]
mov word [rcx], ax
mov dword [rsp + 0x2fc], 9
mov dword [rsp + 0x30c], 4
mov eax, dword [rsp + 0x30c]
test eax, eax
jle 0x18001d961
mov eax, dword [rsp + 0x30c]
cmp eax, 1
jle 0x18001d930
mov eax, dword [rsp + 0x2fc]
and eax, 0x197d
mov dword [rsp + 0x2fc], eax
mov eax, dword [rsp + 0x30c]
sub eax, 2
mov dword [rsp + 0x30c], eax
jmp 0x18001d8f3
mov eax, dword [rsp + 0x2fc]
cmp eax, 0x806
jle 0x18001d94f
mov eax, dword [rsp + 0x2fc]
and eax, 0x7f
mov dword [rsp + 0x2fc], eax
mov eax, dword [rsp + 0x30c]
dec eax
mov dword [rsp + 0x30c], eax
jmp 0x18001d8f3
mov dword [rsp + 0x2f8], 5
mov dword [rsp + 0x314], 5
mov eax, dword [rsp + 0x314]
test eax, eax
jle 0x18001d9e7
mov eax, dword [rsp + 0x314]
cmp eax, 1
jle 0x18001d9b4
mov eax, dword [rsp + 0x2f8]
and eax, 0x9c1
mov dword [rsp + 0x2f8], eax
mov eax, dword [rsp + 0x314]
sub eax, 2
mov dword [rsp + 0x314], eax
jmp 0x18001d977
mov eax, dword [rsp + 0x2f8]
cmp eax, 0x807
jle 0x18001d9d5
mov eax, dword [rsp + 0x2f8]
and eax, 0x80
mov dword [rsp + 0x2f8], eax
mov eax, dword [rsp + 0x314]
dec eax
mov dword [rsp + 0x314], eax
jmp 0x18001d977
mov dword [rsp + 0x300], 3
mov dword [rsp + 0x304], 0xc
cmp dword [rsp + 0x304], 0
jle 0x18001da5e
mov eax, dword [rsp + 0x304]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001da40
mov dword [rsp + 0x300], 0
mov eax, dword [rsp + 0x304]
sub eax, 2
mov dword [rsp + 0x304], eax
jmp 0x18001d9fd
mov dword [rsp + 0x300], 4
mov eax, dword [rsp + 0x304]
sub eax, 2
mov dword [rsp + 0x304], eax
jmp 0x18001d9fd
mov dword [rsp + 0x2f4], 7
mov dword [rsp + 0x308], 8
mov eax, dword [rsp + 0x308]
test eax, eax
jle 0x18001dae4
mov eax, dword [rsp + 0x308]
cmp eax, 1
jle 0x18001dab1
mov eax, dword [rsp + 0x2f4]
and eax, 0x2542
mov dword [rsp + 0x2f4], eax
mov eax, dword [rsp + 0x308]
sub eax, 2
mov dword [rsp + 0x308], eax
jmp 0x18001da74
mov eax, dword [rsp + 0x2f4]
cmp eax, 0x80a
jle 0x18001dad2
mov eax, dword [rsp + 0x2f4]
and eax, 0x83
mov dword [rsp + 0x2f4], eax
mov eax, dword [rsp + 0x308]
dec eax
mov dword [rsp + 0x308], eax
jmp 0x18001da74
mov dword [rsp + 0x310], 2
mov dword [rsp + 0x2f0], 0x13
cmp dword [rsp + 0x2f0], 0
jle 0x18001db5b
mov eax, dword [rsp + 0x2f0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001db3d
mov dword [rsp + 0x310], 4
mov eax, dword [rsp + 0x2f0]
sub eax, 2
mov dword [rsp + 0x2f0], eax
jmp 0x18001dafa
mov dword [rsp + 0x310], 4
mov eax, dword [rsp + 0x2f0]
sub eax, 2
mov dword [rsp + 0x2f0], eax
jmp 0x18001dafa
lea rcx, [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x18001e2fb
mov dword [rsp + 0x328], 3
mov dword [rsp + 0x348], 0x12
cmp dword [rsp + 0x348], 0
jle 0x18001dbe5
mov eax, dword [rsp + 0x348]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001dbc7
mov dword [rsp + 0x328], 4
mov eax, dword [rsp + 0x348]
sub eax, 2
mov dword [rsp + 0x348], eax
jmp 0x18001db84
mov dword [rsp + 0x328], 0
mov eax, dword [rsp + 0x348]
sub eax, 2
mov dword [rsp + 0x348], eax
jmp 0x18001db84
mov dword [rsp + 0x32c], 7
mov dword [rsp + 0x324], 0xa
mov eax, dword [rsp + 0x324]
test eax, eax
jle 0x18001dc6b
mov eax, dword [rsp + 0x324]
cmp eax, 1
jle 0x18001dc38
mov eax, dword [rsp + 0x32c]
and eax, 0x23c7
mov dword [rsp + 0x32c], eax
mov eax, dword [rsp + 0x324]
sub eax, 2
mov dword [rsp + 0x324], eax
jmp 0x18001dbfb
mov eax, dword [rsp + 0x32c]
cmp eax, 0x80c
jle 0x18001dc59
mov eax, dword [rsp + 0x32c]
and eax, 0x85
mov dword [rsp + 0x32c], eax
mov eax, dword [rsp + 0x324]
dec eax
mov dword [rsp + 0x324], eax
jmp 0x18001dbfb
mov dword [rsp + 0x318], 2
mov dword [rsp + 0x31c], 0xa
mov eax, dword [rsp + 0x31c]
test eax, eax
jle 0x18001dcf1
mov eax, dword [rsp + 0x31c]
cmp eax, 1
jle 0x18001dcbe
mov eax, dword [rsp + 0x318]
and eax, 0x2106
mov dword [rsp + 0x318], eax
mov eax, dword [rsp + 0x31c]
sub eax, 2
mov dword [rsp + 0x31c], eax
jmp 0x18001dc81
mov eax, dword [rsp + 0x318]
cmp eax, 0x80c
jle 0x18001dcdf
mov eax, dword [rsp + 0x318]
and eax, 0x85
mov dword [rsp + 0x318], eax
mov eax, dword [rsp + 0x31c]
dec eax
mov dword [rsp + 0x31c], eax
jmp 0x18001dc81
mov dword [rsp + 0x338], 3
mov dword [rsp + 0x340], 0xc
cmp dword [rsp + 0x340], 0
jle 0x18001dd68
mov eax, dword [rsp + 0x340]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001dd4a
mov dword [rsp + 0x338], 0
mov eax, dword [rsp + 0x340]
sub eax, 2
mov dword [rsp + 0x340], eax
jmp 0x18001dd07
mov dword [rsp + 0x338], 4
mov eax, dword [rsp + 0x340]
sub eax, 2
mov dword [rsp + 0x340], eax
jmp 0x18001dd07
mov dword [rsp + 0x320], 1
mov dword [rsp + 0x344], 3
mov eax, dword [rsp + 0x344]
test eax, eax
jle 0x18001ddec
mov eax, dword [rsp + 0x344]
cmp eax, 1
jle 0x18001ddbb
mov eax, dword [rsp + 0x320]
and eax, 0x1907
mov dword [rsp + 0x320], eax
mov eax, dword [rsp + 0x344]
sub eax, 2
mov dword [rsp + 0x344], eax
jmp 0x18001dd7e
mov eax, dword [rsp + 0x320]
cmp eax, 0x805
jle 0x18001ddda
mov eax, dword [rsp + 0x320]
and eax, 0x7e
mov dword [rsp + 0x320], eax
mov eax, dword [rsp + 0x344]
dec eax
mov dword [rsp + 0x344], eax
jmp 0x18001dd7e
mov dword [rsp + 0x330], 2
mov dword [rsp + 0x33c], 4
mov eax, dword [rsp + 0x33c]
test eax, eax
jle 0x18001de70
mov eax, dword [rsp + 0x33c]
cmp eax, 1
jle 0x18001de3f
mov eax, dword [rsp + 0x330]
and eax, 0x1176
mov dword [rsp + 0x330], eax
mov eax, dword [rsp + 0x33c]
sub eax, 2
mov dword [rsp + 0x33c], eax
jmp 0x18001de02
mov eax, dword [rsp + 0x330]
cmp eax, 0x806
jle 0x18001de5e
mov eax, dword [rsp + 0x330]
and eax, 0x7f
mov dword [rsp + 0x330], eax
mov eax, dword [rsp + 0x33c]
dec eax
mov dword [rsp + 0x33c], eax
jmp 0x18001de02
mov dword [rsp + 0x334], 3
mov dword [rsp + 0x34c], 9
mov eax, dword [rsp + 0x34c]
test eax, eax
jle 0x18001def6
mov eax, dword [rsp + 0x34c]
cmp eax, 1
jle 0x18001dec3
mov eax, dword [rsp + 0x334]
and eax, 0x15f8
mov dword [rsp + 0x334], eax
mov eax, dword [rsp + 0x34c]
sub eax, 2
mov dword [rsp + 0x34c], eax
jmp 0x18001de86
mov eax, dword [rsp + 0x334]
cmp eax, 0x80b
jle 0x18001dee4
mov eax, dword [rsp + 0x334]
and eax, 0x84
mov dword [rsp + 0x334], eax
mov eax, dword [rsp + 0x34c]
dec eax
mov dword [rsp + 0x34c], eax
jmp 0x18001de86
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x18001e2eb
mov dword [rsp + 0x360], 2
mov dword [rsp + 0x368], 4
mov eax, dword [rsp + 0x368]
test eax, eax
jle 0x18001df8f
mov eax, dword [rsp + 0x368]
cmp eax, 1
jle 0x18001df5e
mov eax, dword [rsp + 0x360]
and eax, 0x1176
mov dword [rsp + 0x360], eax
mov eax, dword [rsp + 0x368]
sub eax, 2
mov dword [rsp + 0x368], eax
jmp 0x18001df21
mov eax, dword [rsp + 0x360]
cmp eax, 0x806
jle 0x18001df7d
mov eax, dword [rsp + 0x360]
and eax, 0x7f
mov dword [rsp + 0x360], eax
mov eax, dword [rsp + 0x368]
dec eax
mov dword [rsp + 0x368], eax
jmp 0x18001df21
mov dword [rsp + 0x35c], 2
mov dword [rsp + 0x36c], 0x10
cmp dword [rsp + 0x36c], 0
jle 0x18001e005
mov eax, dword [rsp + 0x36c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001dfe7
mov dword [rsp + 0x35c], 4
mov eax, dword [rsp + 0x36c]
dec eax
mov dword [rsp + 0x36c], eax
jmp 0x18001dfa5
mov dword [rsp + 0x35c], 4
mov eax, dword [rsp + 0x36c]
sub eax, 2
mov dword [rsp + 0x36c], eax
jmp 0x18001dfa5
mov dword [rsp + 0x358], 0
mov dword [rsp + 0x354], 0x15
cmp dword [rsp + 0x354], 0
jle 0x18001e07b
mov eax, dword [rsp + 0x354]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001e05d
mov dword [rsp + 0x358], 4
mov eax, dword [rsp + 0x354]
dec eax
mov dword [rsp + 0x354], eax
jmp 0x18001e01b
mov dword [rsp + 0x358], 0
mov eax, dword [rsp + 0x354]
sub eax, 2
mov dword [rsp + 0x354], eax
jmp 0x18001e01b
mov dword [rsp + 0x350], 4
mov dword [rsp + 0x364], 0x11
cmp dword [rsp + 0x364], 0
jle 0x18001e0f1
mov eax, dword [rsp + 0x364]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001e0d3
mov dword [rsp + 0x350], 4
mov eax, dword [rsp + 0x364]
dec eax
mov dword [rsp + 0x364], eax
jmp 0x18001e091
mov dword [rsp + 0x350], 4
mov eax, dword [rsp + 0x364]
sub eax, 2
mov dword [rsp + 0x364], eax
jmp 0x18001e091
mov dword [rsp + 0x38c], 7
mov dword [rsp + 0x384], 0x11
cmp dword [rsp + 0x384], 0
jle 0x18001e166
mov eax, dword [rsp + 0x384]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001e149
mov dword [rsp + 0x38c], 0
mov eax, dword [rsp + 0x384]
dec eax
mov dword [rsp + 0x384], eax
jmp 0x18001e107
mov dword [rsp + 0x38c], 0
mov eax, dword [rsp + 0x384]
dec eax
mov dword [rsp + 0x384], eax
jmp 0x18001e107
mov dword [rsp + 0x378], 1
mov dword [rsp + 0x388], 3
mov eax, dword [rsp + 0x388]
test eax, eax
jle 0x18001e1ea
mov eax, dword [rsp + 0x388]
cmp eax, 1
jle 0x18001e1b9
mov eax, dword [rsp + 0x378]
and eax, 0x1907
mov dword [rsp + 0x378], eax
mov eax, dword [rsp + 0x388]
sub eax, 2
mov dword [rsp + 0x388], eax
jmp 0x18001e17c
mov eax, dword [rsp + 0x378]
cmp eax, 0x805
jle 0x18001e1d8
mov eax, dword [rsp + 0x378]
and eax, 0x7e
mov dword [rsp + 0x378], eax
mov eax, dword [rsp + 0x388]
dec eax
mov dword [rsp + 0x388], eax
jmp 0x18001e17c
mov dword [rsp + 0x37c], 7
mov dword [rsp + 0x370], 4
mov eax, dword [rsp + 0x370]
test eax, eax
jle 0x18001e26e
mov eax, dword [rsp + 0x370]
cmp eax, 1
jle 0x18001e23d
mov eax, dword [rsp + 0x37c]
and eax, 0x21f3
mov dword [rsp + 0x37c], eax
mov eax, dword [rsp + 0x370]
sub eax, 2
mov dword [rsp + 0x370], eax
jmp 0x18001e200
mov eax, dword [rsp + 0x37c]
cmp eax, 0x806
jle 0x18001e25c
mov eax, dword [rsp + 0x37c]
and eax, 0x7f
mov dword [rsp + 0x37c], eax
mov eax, dword [rsp + 0x370]
dec eax
mov dword [rsp + 0x370], eax
jmp 0x18001e200
mov dword [rsp + 0x380], 0
mov dword [rsp + 0x374], 0x15
cmp dword [rsp + 0x374], 0
jle 0x18001e2e4
mov eax, dword [rsp + 0x374]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001e2c6
mov dword [rsp + 0x380], 4
mov eax, dword [rsp + 0x374]
dec eax
mov dword [rsp + 0x374], eax
jmp 0x18001e284
mov dword [rsp + 0x380], 0
mov eax, dword [rsp + 0x374]
sub eax, 2
mov dword [rsp + 0x374], eax
jmp 0x18001e284
xor eax, eax
jmp 0x18001ef72
mov edx, 2
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov eax, 0x5c
mov rcx, qword [rsp + 0x20]
mov word [rcx], ax
jmp 0x18001d8a4
mov dword [rsp + 0x3b4], 0
mov dword [rsp + 0x3b8], 0x14
cmp dword [rsp + 0x3b8], 0
jle 0x18001e382
mov eax, dword [rsp + 0x3b8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001e365
mov dword [rsp + 0x3b4], 4
mov eax, dword [rsp + 0x3b8]
dec eax
mov dword [rsp + 0x3b8], eax
jmp 0x18001e323
mov dword [rsp + 0x3b4], 0
mov eax, dword [rsp + 0x3b8]
dec eax
mov dword [rsp + 0x3b8], eax
jmp 0x18001e323
mov dword [rsp + 0x3a4], 2
mov dword [rsp + 0x398], 5
mov eax, dword [rsp + 0x398]
test eax, eax
jle 0x18001e408
mov eax, dword [rsp + 0x398]
cmp eax, 1
jle 0x18001e3d5
mov eax, dword [rsp + 0x3a4]
and eax, 0x204d
mov dword [rsp + 0x3a4], eax
mov eax, dword [rsp + 0x398]
sub eax, 2
mov dword [rsp + 0x398], eax
jmp 0x18001e398
mov eax, dword [rsp + 0x3a4]
cmp eax, 0x807
jle 0x18001e3f6
mov eax, dword [rsp + 0x3a4]
and eax, 0x80
mov dword [rsp + 0x3a4], eax
mov eax, dword [rsp + 0x398]
dec eax
mov dword [rsp + 0x398], eax
jmp 0x18001e398
mov dword [rsp + 0x3a0], 4
mov dword [rsp + 0x3b0], 3
mov eax, dword [rsp + 0x3b0]
test eax, eax
jle 0x18001e48c
mov eax, dword [rsp + 0x3b0]
cmp eax, 1
jle 0x18001e45b
mov eax, dword [rsp + 0x3a0]
and eax, 0x1891
mov dword [rsp + 0x3a0], eax
mov eax, dword [rsp + 0x3b0]
sub eax, 2
mov dword [rsp + 0x3b0], eax
jmp 0x18001e41e
mov eax, dword [rsp + 0x3a0]
cmp eax, 0x805
jle 0x18001e47a
mov eax, dword [rsp + 0x3a0]
and eax, 0x7e
mov dword [rsp + 0x3a0], eax
mov eax, dword [rsp + 0x3b0]
dec eax
mov dword [rsp + 0x3b0], eax
jmp 0x18001e41e
mov dword [rsp + 0x3a8], 7
mov dword [rsp + 0x3bc], 8
mov eax, dword [rsp + 0x3bc]
test eax, eax
jle 0x18001e512
mov eax, dword [rsp + 0x3bc]
cmp eax, 1
jle 0x18001e4df
mov eax, dword [rsp + 0x3a8]
and eax, 0x2542
mov dword [rsp + 0x3a8], eax
mov eax, dword [rsp + 0x3bc]
sub eax, 2
mov dword [rsp + 0x3bc], eax
jmp 0x18001e4a2
mov eax, dword [rsp + 0x3a8]
cmp eax, 0x80a
jle 0x18001e500
mov eax, dword [rsp + 0x3a8]
and eax, 0x83
mov dword [rsp + 0x3a8], eax
mov eax, dword [rsp + 0x3bc]
dec eax
mov dword [rsp + 0x3bc], eax
jmp 0x18001e4a2
mov dword [rsp + 0x394], 5
mov dword [rsp + 0x3ac], 4
mov eax, dword [rsp + 0x3ac]
test eax, eax
jle 0x18001e596
mov eax, dword [rsp + 0x3ac]
cmp eax, 1
jle 0x18001e565
mov eax, dword [rsp + 0x394]
and eax, 0x1952
mov dword [rsp + 0x394], eax
mov eax, dword [rsp + 0x3ac]
sub eax, 2
mov dword [rsp + 0x3ac], eax
jmp 0x18001e528
mov eax, dword [rsp + 0x394]
cmp eax, 0x806
jle 0x18001e584
mov eax, dword [rsp + 0x394]
and eax, 0x7f
mov dword [rsp + 0x394], eax
mov eax, dword [rsp + 0x3ac]
dec eax
mov dword [rsp + 0x3ac], eax
jmp 0x18001e528
mov dword [rsp + 0x390], 3
mov dword [rsp + 0x39c], 0xa
mov eax, dword [rsp + 0x39c]
test eax, eax
jle 0x18001e61c
mov eax, dword [rsp + 0x39c]
cmp eax, 1
jle 0x18001e5e9
mov eax, dword [rsp + 0x390]
and eax, 0x107d
mov dword [rsp + 0x390], eax
mov eax, dword [rsp + 0x39c]
sub eax, 2
mov dword [rsp + 0x39c], eax
jmp 0x18001e5ac
mov eax, dword [rsp + 0x390]
cmp eax, 0x80c
jle 0x18001e60a
mov eax, dword [rsp + 0x390]
and eax, 0x85
mov dword [rsp + 0x390], eax
mov eax, dword [rsp + 0x39c]
dec eax
mov dword [rsp + 0x39c], eax
jmp 0x18001e5ac
lea rcx, [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x18001eded
mov dword [rsp + 0x3cc], 1
mov dword [rsp + 0x3e0], 3
mov eax, dword [rsp + 0x3e0]
test eax, eax
jle 0x18001e6b3
mov eax, dword [rsp + 0x3e0]
cmp eax, 1
jle 0x18001e682
mov eax, dword [rsp + 0x3cc]
and eax, 0x1907
mov dword [rsp + 0x3cc], eax
mov eax, dword [rsp + 0x3e0]
sub eax, 2
mov dword [rsp + 0x3e0], eax
jmp 0x18001e645
mov eax, dword [rsp + 0x3cc]
cmp eax, 0x805
jle 0x18001e6a1
mov eax, dword [rsp + 0x3cc]
and eax, 0x7e
mov dword [rsp + 0x3cc], eax
mov eax, dword [rsp + 0x3e0]
dec eax
mov dword [rsp + 0x3e0], eax
jmp 0x18001e645
mov dword [rsp + 0x3c8], 3
mov dword [rsp + 0x3d4], 8
mov eax, dword [rsp + 0x3d4]
test eax, eax
jle 0x18001e739
mov eax, dword [rsp + 0x3d4]
cmp eax, 1
jle 0x18001e706
mov eax, dword [rsp + 0x3c8]
and eax, 0x11d0
mov dword [rsp + 0x3c8], eax
mov eax, dword [rsp + 0x3d4]
sub eax, 2
mov dword [rsp + 0x3d4], eax
jmp 0x18001e6c9
mov eax, dword [rsp + 0x3c8]
cmp eax, 0x80a
jle 0x18001e727
mov eax, dword [rsp + 0x3c8]
and eax, 0x83
mov dword [rsp + 0x3c8], eax
mov eax, dword [rsp + 0x3d4]
dec eax
mov dword [rsp + 0x3d4], eax
jmp 0x18001e6c9
mov dword [rsp + 0x3e4], 5
mov dword [rsp + 0x3dc], 0xf
cmp dword [rsp + 0x3dc], 0
jle 0x18001e7ae
mov eax, dword [rsp + 0x3dc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001e791
mov dword [rsp + 0x3e4], 0
mov eax, dword [rsp + 0x3dc]
dec eax
mov dword [rsp + 0x3dc], eax
jmp 0x18001e74f
mov dword [rsp + 0x3e4], 4
mov eax, dword [rsp + 0x3dc]
dec eax
mov dword [rsp + 0x3dc], eax
jmp 0x18001e74f
mov dword [rsp + 0x3d8], 9
mov dword [rsp + 0x3c4], 5
mov eax, dword [rsp + 0x3c4]
test eax, eax
jle 0x18001e834
mov eax, dword [rsp + 0x3c4]
cmp eax, 1
jle 0x18001e801
mov eax, dword [rsp + 0x3d8]
and eax, 0x10a2
mov dword [rsp + 0x3d8], eax
mov eax, dword [rsp + 0x3c4]
sub eax, 2
mov dword [rsp + 0x3c4], eax
jmp 0x18001e7c4
mov eax, dword [rsp + 0x3d8]
cmp eax, 0x807
jle 0x18001e822
mov eax, dword [rsp + 0x3d8]
and eax, 0x80
mov dword [rsp + 0x3d8], eax
mov eax, dword [rsp + 0x3c4]
dec eax
mov dword [rsp + 0x3c4], eax
jmp 0x18001e7c4
mov dword [rsp + 0x3d0], 6
mov dword [rsp + 0x3c0], 7
mov eax, dword [rsp + 0x3c0]
test eax, eax
jle 0x18001e8ba
mov eax, dword [rsp + 0x3c0]
cmp eax, 1
jle 0x18001e887
mov eax, dword [rsp + 0x3d0]
and eax, 0x169a
mov dword [rsp + 0x3d0], eax
mov eax, dword [rsp + 0x3c0]
sub eax, 2
mov dword [rsp + 0x3c0], eax
jmp 0x18001e84a
mov eax, dword [rsp + 0x3d0]
cmp eax, 0x809
jle 0x18001e8a8
mov eax, dword [rsp + 0x3d0]
and eax, 0x82
mov dword [rsp + 0x3d0], eax
mov eax, dword [rsp + 0x3c0]
dec eax
mov dword [rsp + 0x3c0], eax
jmp 0x18001e84a
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x18001eddd
mov dword [rsp + 0x400], 3
mov dword [rsp + 0x414], 0x12
cmp dword [rsp + 0x414], 0
jle 0x18001e946
mov eax, dword [rsp + 0x414]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001e928
mov dword [rsp + 0x400], 4
mov eax, dword [rsp + 0x414]
sub eax, 2
mov dword [rsp + 0x414], eax
jmp 0x18001e8e5
mov dword [rsp + 0x400], 0
mov eax, dword [rsp + 0x414]
sub eax, 2
mov dword [rsp + 0x414], eax
jmp 0x18001e8e5
mov dword [rsp + 0x3ec], 2
mov dword [rsp + 0x3e8], 5
mov eax, dword [rsp + 0x3e8]
test eax, eax
jle 0x18001e9cc
mov eax, dword [rsp + 0x3e8]
cmp eax, 1
jle 0x18001e999
mov eax, dword [rsp + 0x3ec]
and eax, 0x204d
mov dword [rsp + 0x3ec], eax
mov eax, dword [rsp + 0x3e8]
sub eax, 2
mov dword [rsp + 0x3e8], eax
jmp 0x18001e95c
mov eax, dword [rsp + 0x3ec]
cmp eax, 0x807
jle 0x18001e9ba
mov eax, dword [rsp + 0x3ec]
and eax, 0x80
mov dword [rsp + 0x3ec], eax
mov eax, dword [rsp + 0x3e8]
dec eax
mov dword [rsp + 0x3e8], eax
jmp 0x18001e95c
mov dword [rsp + 0x3f4], 7
mov dword [rsp + 0x410], 8
mov eax, dword [rsp + 0x410]
test eax, eax
jle 0x18001ea52
mov eax, dword [rsp + 0x410]
cmp eax, 1
jle 0x18001ea1f
mov eax, dword [rsp + 0x3f4]
and eax, 0x2542
mov dword [rsp + 0x3f4], eax
mov eax, dword [rsp + 0x410]
sub eax, 2
mov dword [rsp + 0x410], eax
jmp 0x18001e9e2
mov eax, dword [rsp + 0x3f4]
cmp eax, 0x80a
jle 0x18001ea40
mov eax, dword [rsp + 0x3f4]
and eax, 0x83
mov dword [rsp + 0x3f4], eax
mov eax, dword [rsp + 0x410]
dec eax
mov dword [rsp + 0x410], eax
jmp 0x18001e9e2
mov dword [rsp + 0x3f0], 1
mov dword [rsp + 0x40c], 3
mov eax, dword [rsp + 0x40c]
test eax, eax
jle 0x18001ead6
mov eax, dword [rsp + 0x40c]
cmp eax, 1
jle 0x18001eaa5
mov eax, dword [rsp + 0x3f0]
and eax, 0x1907
mov dword [rsp + 0x3f0], eax
mov eax, dword [rsp + 0x40c]
sub eax, 2
mov dword [rsp + 0x40c], eax
jmp 0x18001ea68
mov eax, dword [rsp + 0x3f0]
cmp eax, 0x805
jle 0x18001eac4
mov eax, dword [rsp + 0x3f0]
and eax, 0x7e
mov dword [rsp + 0x3f0], eax
mov eax, dword [rsp + 0x40c]
dec eax
mov dword [rsp + 0x40c], eax
jmp 0x18001ea68
mov dword [rsp + 0x3fc], 0
mov dword [rsp + 0x404], 0x14
cmp dword [rsp + 0x404], 0
jle 0x18001eb4b
mov eax, dword [rsp + 0x404]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001eb2e
mov dword [rsp + 0x3fc], 4
mov eax, dword [rsp + 0x404]
dec eax
mov dword [rsp + 0x404], eax
jmp 0x18001eaec
mov dword [rsp + 0x3fc], 0
mov eax, dword [rsp + 0x404]
dec eax
mov dword [rsp + 0x404], eax
jmp 0x18001eaec
mov dword [rsp + 0x3f8], 7
mov dword [rsp + 0x408], 9
mov eax, dword [rsp + 0x408]
test eax, eax
jle 0x18001ebd1
mov eax, dword [rsp + 0x408]
cmp eax, 1
jle 0x18001eb9e
mov eax, dword [rsp + 0x3f8]
and eax, 0x19b6
mov dword [rsp + 0x3f8], eax
mov eax, dword [rsp + 0x408]
sub eax, 2
mov dword [rsp + 0x408], eax
jmp 0x18001eb61
mov eax, dword [rsp + 0x3f8]
cmp eax, 0x80b
jle 0x18001ebbf
mov eax, dword [rsp + 0x3f8]
and eax, 0x84
mov dword [rsp + 0x3f8], eax
mov eax, dword [rsp + 0x408]
dec eax
mov dword [rsp + 0x408], eax
jmp 0x18001eb61
mov dword [rsp + 0x41c], 3
mov dword [rsp + 0x424], 0xa
mov eax, dword [rsp + 0x424]
test eax, eax
jle 0x18001ec57
mov eax, dword [rsp + 0x424]
cmp eax, 1
jle 0x18001ec24
mov eax, dword [rsp + 0x41c]
and eax, 0x107d
mov dword [rsp + 0x41c], eax
mov eax, dword [rsp + 0x424]
sub eax, 2
mov dword [rsp + 0x424], eax
jmp 0x18001ebe7
mov eax, dword [rsp + 0x41c]
cmp eax, 0x80c
jle 0x18001ec45
mov eax, dword [rsp + 0x41c]
and eax, 0x85
mov dword [rsp + 0x41c], eax
mov eax, dword [rsp + 0x424]
dec eax
mov dword [rsp + 0x424], eax
jmp 0x18001ebe7
mov dword [rsp + 0x42c], 7
mov dword [rsp + 0x430], 9
mov eax, dword [rsp + 0x430]
test eax, eax
jle 0x18001ecdd
mov eax, dword [rsp + 0x430]
cmp eax, 1
jle 0x18001ecaa
mov eax, dword [rsp + 0x42c]
and eax, 0x19b6
mov dword [rsp + 0x42c], eax
mov eax, dword [rsp + 0x430]
sub eax, 2
mov dword [rsp + 0x430], eax
jmp 0x18001ec6d
mov eax, dword [rsp + 0x42c]
cmp eax, 0x80b
jle 0x18001eccb
mov eax, dword [rsp + 0x42c]
and eax, 0x84
mov dword [rsp + 0x42c], eax
mov eax, dword [rsp + 0x430]
dec eax
mov dword [rsp + 0x430], eax
jmp 0x18001ec6d
mov dword [rsp + 0x418], 4
mov dword [rsp + 0x434], 0x11
cmp dword [rsp + 0x434], 0
jle 0x18001ed52
mov eax, dword [rsp + 0x434]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001ed35
mov dword [rsp + 0x418], 0
mov eax, dword [rsp + 0x434]
dec eax
mov dword [rsp + 0x434], eax
jmp 0x18001ecf3
mov dword [rsp + 0x418], 4
mov eax, dword [rsp + 0x434]
dec eax
mov dword [rsp + 0x434], eax
jmp 0x18001ecf3
mov dword [rsp + 0x428], 7
mov dword [rsp + 0x420], 4
mov eax, dword [rsp + 0x420]
test eax, eax
jle 0x18001edd6
mov eax, dword [rsp + 0x420]
cmp eax, 1
jle 0x18001eda5
mov eax, dword [rsp + 0x428]
and eax, 0x21f3
mov dword [rsp + 0x428], eax
mov eax, dword [rsp + 0x420]
sub eax, 2
mov dword [rsp + 0x420], eax
jmp 0x18001ed68
mov eax, dword [rsp + 0x428]
cmp eax, 0x806
jle 0x18001edc4
mov eax, dword [rsp + 0x428]
and eax, 0x7f
mov dword [rsp + 0x428], eax
mov eax, dword [rsp + 0x420]
dec eax
mov dword [rsp + 0x420], eax
jmp 0x18001ed68
xor eax, eax
jmp 0x18001ef72
mov edx, 2
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov dword [rsp + 0x440], 6
mov dword [rsp + 0x438], 7
mov eax, dword [rsp + 0x438]
test eax, eax
jle 0x18001ee73
mov eax, dword [rsp + 0x438]
cmp eax, 1
jle 0x18001ee40
mov eax, dword [rsp + 0x440]
and eax, 0x169a
mov dword [rsp + 0x440], eax
mov eax, dword [rsp + 0x438]
sub eax, 2
mov dword [rsp + 0x438], eax
jmp 0x18001ee03
mov eax, dword [rsp + 0x440]
cmp eax, 0x809
jle 0x18001ee61
mov eax, dword [rsp + 0x440]
and eax, 0x82
mov dword [rsp + 0x440], eax
mov eax, dword [rsp + 0x438]
dec eax
mov dword [rsp + 0x438], eax
jmp 0x18001ee03
mov dword [rsp + 0x448], 8
mov dword [rsp + 0x44c], 0xc
cmp dword [rsp + 0x44c], 0
jle 0x18001eee9
mov eax, dword [rsp + 0x44c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001eecb
mov dword [rsp + 0x448], 4
mov eax, dword [rsp + 0x44c]
dec eax
mov dword [rsp + 0x44c], eax
jmp 0x18001ee89
mov dword [rsp + 0x448], 0
mov eax, dword [rsp + 0x44c]
sub eax, 2
mov dword [rsp + 0x44c], eax
jmp 0x18001ee89
mov dword [rsp + 0x43c], 4
mov dword [rsp + 0x444], 3
mov eax, dword [rsp + 0x444]
test eax, eax
jle 0x18001ef6d
mov eax, dword [rsp + 0x444]
cmp eax, 1
jle 0x18001ef3c
mov eax, dword [rsp + 0x43c]
and eax, 0x1891
mov dword [rsp + 0x43c], eax
mov eax, dword [rsp + 0x444]
sub eax, 2
mov dword [rsp + 0x444], eax
jmp 0x18001eeff
mov eax, dword [rsp + 0x43c]
cmp eax, 0x805
jle 0x18001ef5b
mov eax, dword [rsp + 0x43c]
and eax, 0x7e
mov dword [rsp + 0x43c], eax
mov eax, dword [rsp + 0x444]
dec eax
mov dword [rsp + 0x444], eax
jmp 0x18001eeff
mov eax, 1
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.180049ea0
add rsp, 0x468
ret