Function at 0x180031660
Capabilities:
Encode data using xor
Get file version info

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x130
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov r15, rcx
xor r14d, r14d
mov dword [rax + 0x18], r14d
lea rdx, [rsp + 0x30]
call fcn.18001e980
nop
mov cl, 1
call fcn.18009bd18
mov r12, rax
mov qword [rsp + 0xa0], rax
mov esi, 1
mov edi, esi
mov dword [rsp + 0x180], esi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.acsd.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180031728
movzx ecx, sil
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x58], rax
mov edi, 3
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.aolwbspd.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x18003172d
xor r13b, r13b
jmp 0x180031730
mov rbx, qword [rsp + 0x58]
mov r13b, 1
test dil, 2
je 0x18003175f
and edi, 0xfffffffd
mov dword [rsp + 0x180], edi
test rbx, rbx
je 0x18003175f
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x18003175f
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
test dil, 1
je 0x180031789
and edi, 0xfffffffe
mov dword [rsp + 0x180], edi
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031789
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r13b, r13b
je 0x18003179e
mov dword [r15 + 0xd4], 0x81
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov r13, rax
mov qword [rsp + 0xa0], rax
or edi, 4
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x90], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rsp + 0x88]
mov qword [rsp + 0x188], rax
lea rcx, [rsp + 0x30]
mov rbx, qword [rsp + 0x40]
cmp qword [rsp + 0x48], 0x10
jb 0x1800317fc
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x178], rcx
jmp 0x180031809
lea rax, [rsp + 0x30]
mov qword [rsp + 0x178], rax
add rbx, rcx
mov r12, qword [rsp + 0x90]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [0x1800eb44c]
mov qword [rsp + 0x60], rax
lea rax, [0x1800eb44f]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], r12
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031869
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031884
mov r9, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r9]
nop
mov r9, rbx
mov r8, qword [rsp + 0x178]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x60]
call fcn.18002a830
mov rbx, qword [rax + 8]
mov r12, qword [rax]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1800318c9
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800318c9
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x1800318ec
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800318ec
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
cmp r12, rbx
je 0x180031935
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x58], rax
or edi, 8
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.18003a0a0
test al, al
je 0x18003193a
mov r12, qword [rsp + 0x90]
jmp 0x180031986
mov rbx, qword [rsp + 0x58]
mov cl, 1
call fcn.18009bd18
mov r12, rax
mov qword [rsp + 0x90], rax
or edi, 0x10
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.aolservicehost.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
mov byte [rsp + 0x178], 0
je 0x18003198e
mov byte [rsp + 0x178], 1
test dil, 0x10
je 0x1800319be
and edi, 0xffffffef
mov dword [rsp + 0x180], edi
test r12, r12
je 0x1800319be
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800319be
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
test dil, 8
je 0x1800319ed
and edi, 0xfffffff7
mov dword [rsp + 0x180], edi
test rbx, rbx
je 0x1800319ed
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800319ed
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
test dil, 4
je 0x180031a17
and edi, 0xfffffffb
mov dword [rsp + 0x180], edi
mov rax, qword [r13]
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031a17
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
cmp byte [rsp + 0x178], 0
je 0x180031a31
mov dword [r15 + 0xd4], 8
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov qword [rsp + 0x108], rax
or edi, 0x20
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.waol.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180031cbd
mov cl, 1
call fcn.18009bd18
mov qword [rsp + 0xf8], rax
or edi, 0x40
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.aolbrowser.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180031cbd
mov cl, 1
call fcn.18009bd18
mov qword [rsp + 0xe8], rax
bts edi, 7
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.aolhelix.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180031cbd
mov cl, 1
call fcn.18009bd18
mov r13, rax
mov qword [rsp + 0x28], rax
bts edi, 8
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x58], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x50]
lea rdx, str.aoldesktop.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180031cc2
mov cl, 1
call fcn.18009bd18
mov r12, rax
mov qword [rsp + 0x58], rax
bts edi, 9
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x90], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rsp + 0x88]
mov qword [rsp + 0xa8], rax
lea rcx, [rsp + 0x30]
mov rbx, qword [rsp + 0x40]
cmp qword [rsp + 0x48], 0x10
jb 0x180031ba3
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x188], rcx
jmp 0x180031bb0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x188], rax
add rbx, rcx
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x178], rcx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x178]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, str.aolope
mov qword [rsp + 0x60], rax
lea rax, [0x1800eb45e]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x178]
mov qword [rsp + 0x78], rcx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x178]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031c20
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
mov rcx, qword [rsp + 0x178]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031c3f
mov r9, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r9]
nop
mov r9, rbx
mov r8, qword [rsp + 0x188]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x60]
call fcn.18002a830
mov rbx, qword [rax + 8]
mov rax, qword [rax]
mov qword [rsp + 0x178], rax
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x180031c8c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031c8c
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x180031caf
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031caf
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
cmp qword [rsp + 0x178], rbx
jne 0x180031cc7
xor bl, bl
jmp 0x180031cc9
mov r13, qword [rsp + 0x28]
mov r12, qword [rsp + 0x58]
mov bl, 1
bt edi, 9
jae 0x180031cfa
btr edi, 9
mov dword [rsp + 0x180], edi
test r12, r12
je 0x180031cfa
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031cfa
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 8
jae 0x180031d2b
btr edi, 8
mov dword [rsp + 0x180], edi
test r13, r13
je 0x180031d2b
mov rax, qword [r13]
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031d2b
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
test dil, dil
jns 0x180031d5f
btr edi, 7
mov dword [rsp + 0x180], edi
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x180031d5f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031d5f
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
test dil, 0x40
je 0x180031d93
and edi, 0xffffffbf
mov dword [rsp + 0x180], edi
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
je 0x180031d93
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031d93
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
test dil, 0x20
je 0x180031dc1
and edi, 0xffffffdf
mov dword [rsp + 0x180], edi
mov rcx, qword [rsp + 0x108]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180031dc1
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test bl, bl
je 0x180031dd5
mov dword [r15 + 0xd4], 0x81
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov qword [rsp + 0xa0], rax
bts edi, 0xa
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.ypager.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x1800320e5
mov cl, 1
call fcn.18009bd18
mov qword [rsp + 0xd8], rax
bts edi, 0xb
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.yahoomessenger.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x1800320e5
mov cl, 1
call fcn.18009bd18
mov qword [rsp + 0xe8], rax
bts edi, 0xc
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.yahoom
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
je 0x180031ee2
mov cl, 1
call fcn.18009bd18
mov qword [rsp + 0xf8], rax
bts edi, 0xd
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.18003a0a0
test al, al
jne 0x1800320e5
mov cl, 1
call fcn.18009bd18
mov qword [rsp + 0x108], rax
bts edi, 0xe
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.yahoo.
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
je 0x180031f67
mov cl, 1
call fcn.18009bd18
mov r13, rax
mov qword [rsp + 0x90], rax
bts edi, 0xf
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.18003a0a0
test al, al
je 0x180031f6f
jmp 0x1800320ed
mov r13, qword [rsp + 0x90]
mov cl, 1
call fcn.18009bd18
mov r12, rax
mov qword [rsp + 0x28], rax
bts edi, 0x10
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x58], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rsp + 0x50]
mov qword [rsp + 0xa8], rax
lea rcx, [rsp + 0x30]
mov rbx, qword [rsp + 0x40]
cmp qword [rsp + 0x48], 0x10
jb 0x180031fc5
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x188], rcx
jmp 0x180031fd2
lea rax, [rsp + 0x30]
mov qword [rsp + 0x188], rax
add rbx, rcx
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x178], rcx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x178]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, str.yahoo.messenger.ymapp.exe
mov qword [rsp + 0xb0], rax
lea rax, [0x1800eb4b1]
mov qword [rsp + 0xb8], rax
mov rcx, qword [rsp + 0x178]
mov qword [rsp + 0xc8], rcx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x178]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032048
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
mov rcx, qword [rsp + 0x178]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032067
mov r9, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r9]
nop
mov r9, rbx
mov r8, qword [rsp + 0x188]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xb0]
call fcn.18002a830
mov rbx, qword [rax + 8]
mov rax, qword [rax]
mov qword [rsp + 0x178], rax
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x1800320b7
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800320b7
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1800320d7
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800320d7
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
cmp qword [rsp + 0x178], rbx
jne 0x1800320f2
xor bl, bl
jmp 0x1800320f4
mov r13, qword [rsp + 0x90]
mov r12, qword [rsp + 0x28]
mov bl, 1
bt edi, 0x10
jae 0x180032125
btr edi, 0x10
mov dword [rsp + 0x180], edi
test r12, r12
je 0x180032125
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032125
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0xf
jae 0x180032156
btr edi, 0xf
mov dword [rsp + 0x180], edi
test r13, r13
je 0x180032156
mov rax, qword [r13]
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032156
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0xe
jae 0x18003218b
btr edi, 0xe
mov dword [rsp + 0x180], edi
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x18003218b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x18003218b
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0xd
jae 0x1800321c0
btr edi, 0xd
mov dword [rsp + 0x180], edi
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
je 0x1800321c0
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800321c0
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0xc
jae 0x1800321f5
btr edi, 0xc
mov dword [rsp + 0x180], edi
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1800321f5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800321f5
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0xb
jae 0x18003222a
btr edi, 0xb
mov dword [rsp + 0x180], edi
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x18003222a
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x18003222a
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0xa
jae 0x180032259
btr edi, 0xa
mov dword [rsp + 0x180], edi
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032259
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test bl, bl
je 0x18003226d
mov dword [r15 + 0xd4], 4
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov qword [rsp + 0xd8], rax
bts edi, 0x11
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.msmsgs.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x18003238c
mov cl, 1
call fcn.18009bd18
mov r13, rax
mov qword [rsp + 0xa0], rax
bts edi, 0x12
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.msnmsgr.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180032394
mov cl, 1
call fcn.18009bd18
mov r12, rax
mov qword [rsp + 0x90], rax
bts edi, 0x13
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.myspaceim.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x18003239c
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x28], rax
bts edi, 0x14
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x58], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x50]
lea rdx, str.wlcomm.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x1800323a1
mov byte [rsp + 0x178], al
jmp 0x1800323a9
mov r13, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x28]
mov byte [rsp + 0x178], 1
bt edi, 0x14
jae 0x1800323d9
btr edi, 0x14
mov dword [rsp + 0x180], edi
test rbx, rbx
je 0x1800323d9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800323d9
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0x13
jae 0x18003240a
btr edi, 0x13
mov dword [rsp + 0x180], edi
test r12, r12
je 0x18003240a
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x18003240a
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0x12
jae 0x18003243b
btr edi, 0x12
mov dword [rsp + 0x180], edi
test r13, r13
je 0x18003243b
mov rax, qword [r13]
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x18003243b
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0x11
jae 0x18003246a
btr edi, 0x11
mov dword [rsp + 0x180], edi
mov rcx, qword [rsp + 0xd8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x18003246a
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
cmp byte [rsp + 0x178], 0
je 0x180032484
mov dword [r15 + 0xd4], 0x82
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov r12, rax
mov qword [rsp + 0x68], rax
bts edi, 0x15
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.netscp.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180032510
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0xa0], rax
bts edi, 0x16
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.netscp6.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180032518
xor r13b, r13b
jmp 0x18003251b
mov rbx, qword [rsp + 0xa0]
mov r13b, 1
bt edi, 0x16
jae 0x18003254b
btr edi, 0x16
mov dword [rsp + 0x180], edi
test rbx, rbx
je 0x18003254b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x18003254b
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0x15
jae 0x180032576
btr edi, 0x15
mov dword [rsp + 0x180], edi
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032576
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r13b, r13b
je 0x18003258b
mov dword [r15 + 0xd4], 0xc1
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.trillian.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
movzx r12d, al
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800325db
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r12b, r12b
je 0x1800325f0
mov dword [r15 + 0xd4], reloc.WS2_32.dll_socket
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov r12, rax
mov qword [rsp + 0x68], rax
bts edi, 0x17
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.icqlite.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x18003267c
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0xa0], rax
bts edi, 0x18
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.icq.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180032684
xor r13b, r13b
jmp 0x180032687
mov rbx, qword [rsp + 0xa0]
mov r13b, 1
bt edi, 0x18
jae 0x1800326b7
btr edi, 0x18
mov dword [rsp + 0x180], edi
test rbx, rbx
je 0x1800326b7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800326b7
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0x17
jae 0x1800326e2
btr edi, 0x17
mov dword [rsp + 0x180], edi
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800326e2
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r13b, r13b
je 0x1800326f7
mov dword [r15 + 0xd4], 0x21
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov r13, rax
mov qword [rsp + 0x68], rax
bts edi, 0x19
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.msn6.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x1800327cd
mov cl, 1
call fcn.18009bd18
mov r12, rax
mov qword [rsp + 0xa0], rax
bts edi, 0x1a
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.iexplore.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x1800327d5
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x58], rax
bts edi, 0x1b
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.msn.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x1800327da
mov byte [rsp + 0x178], al
jmp 0x1800327e2
mov r12, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x58]
mov byte [rsp + 0x178], 1
bt edi, 0x1b
jae 0x180032812
btr edi, 0x1b
mov dword [rsp + 0x180], edi
test rbx, rbx
je 0x180032812
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032812
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0x1a
jae 0x180032843
btr edi, 0x1a
mov dword [rsp + 0x180], edi
test r12, r12
je 0x180032843
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032843
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0x19
jae 0x18003286e
btr edi, 0x19
mov dword [rsp + 0x180], edi
mov rax, qword [r13]
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x18003286e
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
cmp byte [rsp + 0x178], 0
je 0x180032888
mov dword [r15 + 0xd4], 0x80
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.netscape.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
movzx r12d, al
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800328d8
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r12b, r12b
je 0x1800328ed
mov dword [r15 + 0xd4], 0x80
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.wcs2000.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
movzx r12d, al
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + reloc.WS2_32.dll_recv]
test rax, rax
je 0x18003293d
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r12b, r12b
je 0x180032952
mov dword [r15 + 0xd4], 0x101
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.googletalk.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
movzx r12d, al
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1800329a2
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r12b, r12b
je 0x1800329b7
mov dword [r15 + 0xd4], 0x200
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.myspaceim.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
movzx r12d, al
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032a07
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r12b, r12b
je 0x180032a1c
mov dword [r15 + 0xd4], 0x80
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.magent.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
movzx r12d, al
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032a6c
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r12b, r12b
je 0x180032a7e
mov dword [r15 + 0xd4], 0x400
jmp 0x180032ae2
mov cl, 1
call fcn.18009bd18
mov rbx, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x28], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x20]
lea rdx, str.qip.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
movzx r12d, al
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032ace
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
test r12b, r12b
je 0x18003305c
mov dword [r15 + 0xd4], 0x1000
cmp byte [0x18010a364], 0
je 0x180032c12
lea rdx, [rsp + 0xb0]
mov rcx, r15
call fcn.18001ea60
mov r12, rax
cmp qword [rax + 0x18], 0x10
jb 0x180032b0c
mov r12, qword [rax]
movdqa xmm6, xmmword [0x1800ec920]
movdqa xmm7, xmmword [0x1800ec700]
mov dword [rsp + 0x80], 0x3cef9142
mov word [rsp + 0x84], 0xefc8
mov rdx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov r13d, 4
mov rax, qword [rdx + rax*8]
mov eax, dword [r13 + rax]
cmp dword [0x18010d230], eax
jg 0x18003316c
lea r10, [0x180106350]
movabs rbx, 0xd993efbb19cfe32d
cmp byte [0x180106376], 0
je 0x180032bbc
mov r9, r14
mov r11, rsi
sub r11, r10
nop
lea r8, [r9 + r10]
movzx ecx, r9b
and cl, 7
shl cl, 3
mov rax, rbx
shr rax, cl
xor byte [r8], al
lea ecx, [r8 + r11]
and cl, 7
shl cl, 3
mov rdx, rbx
shr rdx, cl
xor byte [r8 + 1], dl
add r9, 2
cmp r9, 0x26
jb 0x180032b80
mov byte [0x180106376], 0
mov r8, r12
mov rdx, r10
mov ecx, 5
call fcn.18006a848
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0x10
jb 0x180032c1c
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032c0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800331d4
call fcn.18009d1f4
jmp 0x180032c1c
movabs rbx, 0xd993efbb19cfe32d
mov dword [r15 + 0xd0], r14d
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae rax, qword [rsp + 0x30]
mov qword [rsp + 0xa8], rax
mov r13, r14
mov qword [rsp + 0x98], r14
xor r12b, r12b
mov byte [rsp + 0xa0], r12b
lea rdx, [rsp + 0x188]
mov rcx, rax
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov dword [rsp + 0x178], eax
test eax, eax
je 0x180032ca4
mov ecx, eax
call fcn.18009d8b4
mov r13, rax
xor ecx, ecx
call fcn.18009d1f4
mov r9, r13
mov r8d, dword [rsp + 0x178]
xor edx, edx
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoA]
movzx r12d, r12b
test eax, eax
cmovne r12d, esi
test r12b, r12b
je 0x180032ce2
lea r9, [rsp + 0x178]
lea r8, [rsp + 0x188]
lea rdx, [0x1800ea574]
mov rcx, r13
call qword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x180032ce2
mov rax, qword [rsp + 0x188]
test rax, rax
je 0x180032ce2
mov eax, dword [rax + 8]
shr eax, 0x10
jmp 0x180032ce5
mov eax, r14d
mov dword [r15 + 0xd0], eax
mov rcx, r13
call fcn.18009d1f4
nop
jmp 0x180032d17
mov r13d, 4
cmp dword [r15 + 0xd0], 0
jbe 0x180032df9
cmp byte [0x18010a364], 0
je 0x180032df9
lea rdx, [rsp + 0xb0]
mov rcx, r15
call fcn.18001ea60
mov r12, rax
cmp qword [rax + 0x18], 0x10
jb 0x180032d55
mov r12, qword [rax]
movdqa xmm6, xmmword [0x1800ec9e0]
movdqa xmm7, xmmword [0x1800ec930]
mov word [rsp + 0x80], 0x8708
mov rcx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov edx, r13d
mov rcx, qword [rcx + rax*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d268], eax
jg 0x1800331da
lea r10, [0x1801065b0]
cmp byte [0x1801065d3], 0
je 0x180032dd3
mov rdx, r14
nop word [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, rbx
shr rax, cl
xor byte [rdx + r10], al
inc rdx
cmp rdx, 0x23
jb 0x180032db0
mov byte [0x1801065d3], 0
mov r9d, dword [r15 + 0xd0]
mov r8, r12
mov rdx, r10
mov ecx, 5
call fcn.18006a848
nop
lea rcx, [rsp + 0xb0]
call fcn.180002c2c
nop
mov cl, 1
call fcn.18009bd18
mov r13, rax
mov qword [rsp + 0x68], rax
bts edi, 0x1c
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov r8, qword [rax]
mov rcx, rax
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea r8, [rsp + 0x20]
lea rdx, str.acsd.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180032e8b
mov cl, 1
call fcn.18009bd18
mov r12, rax
mov qword [rsp + 0xa0], rax
bts edi, 0x1d
mov dword [rsp + 0x180], edi
mov qword [rsp + 0x28], rax
mov r8, qword [rax]
mov rcx, rax
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea r8, [rsp + 0x20]
lea rdx, str.aolwbspd.exe
lea rcx, [rsp + 0x30]
call fcn.18002a620
test al, al
jne 0x180032e93
mov byte [rsp + 0x178], al
jmp 0x180032e9b
mov r12, qword [rsp + 0xa0]
mov byte [rsp + 0x178], 1
bt edi, 0x1d
jae 0x180032ec5
btr edi, 0x1d
test r12, r12
je 0x180032ec5
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032ec5
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
nop
bt edi, 0x1c
jae 0x180032ee5
mov rax, qword [r13]
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x180032ee5
mov r8, qword [rax]
mov edx, esi
mov rcx, rax
call qword [r8]
cmp byte [rsp + 0x178], 0
je 0x180032efa
mov dword [r15 + 0xd0], 9
lea rcx, [r15 + 0xf8]
xor edx, edx
call fcn.1800460d0
cmp byte [0x18010a364], 0
je 0x180033018
lea rdx, [rsp + 0xb0]
mov rcx, r15
call fcn.18001ea60
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x180032f32
mov rdi, qword [rax]
movdqa xmm6, xmmword [0x1800ec160]
movdqa xmm7, xmmword [0x1800ec780]
mov rcx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov edx, 4
mov rcx, qword [rcx + rax*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d274], eax
jg 0x180033237
lea r10, [0x1801064b0]
cmp byte [0x1801064d0], 0
je 0x180032fbc
sub rsi, r10
nop dword [rax]
lea r8, [r14 + r10]
movzx ecx, r14b
and cl, 7
shl cl, 3
mov rax, rbx
shr rax, cl
xor byte [r8], al
lea ecx, [r8 + rsi]
and cl, 7
shl cl, 3
mov rdx, rbx
shr rdx, cl
xor byte [r8 + 1], dl
add r14, 2
cmp r14, 0x20
jb 0x180032f80
mov byte [0x1801064d0], 0
mov r9d, dword [r15 + 0xd0]
mov r8, rdi
mov rdx, r10
mov ecx, 5
call fcn.18006a848
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0x10
jb 0x180033018
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180033012
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180033283
call fcn.18009d1f4
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x180033055
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180033050
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180033289
call fcn.18009d1f4
mov al, 1
jmp 0x180033149
cmp byte [0x18010a364], 0
je 0x18003313d
lea rdi, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae rdi, qword [rsp + 0x30]
movdqa xmm6, xmmword [0x1800ec980]
mov dword [rsp + 0x70], 0x6da38a4b
mov dword [rsp + 0x74], 0xb0b39dde
mov dword [rsp + 0x78], 0x5f80c35e
mov word [rsp + 0x7c], 0xeffd
mov rdx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov ecx, 4
mov rax, qword [rdx + rax*8]
mov eax, dword [rcx + rax]
cmp dword [0x18010d270], eax
jg 0x18003328f
lea r9, [0x1801063e0]
cmp byte [0x1801063fe], 0
je 0x18003312c
sub rsi, r9
movabs rbx, 0xd993efbb19cfe32d
nop word [rax + rax]
lea r8, [r14 + r9]
movzx ecx, r14b
and cl, 7
shl cl, 3
mov rax, rbx
shr rax, cl
xor byte [r8], al
lea ecx, [r8 + rsi]
and cl, 7
shl cl, 3
mov rdx, rbx
shr rdx, cl
xor byte [r8 + 1], dl
add r14, 2
cmp r14, 0x1e
jb 0x1800330f0
mov byte [0x1801063fe], 0
mov r8, rdi
mov rdx, r9
mov ecx, 5
call fcn.18006a848
nop
lea rcx, [rsp + 0x30]
call fcn.180002c2c
xor al, al
movaps xmm6, xmmword [rsp + 0x120]
movaps xmm7, xmmword [rsp + 0x110]
add rsp, 0x130
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rcx, [0x18010d230]
call fcn.18009d704
cmp dword [0x18010d230], 0xffffffff
jne 0x180032b5b
mov byte [0x180106376], 1
movaps xmmword [0x180106350], xmm6
movaps xmmword [0x180106360], xmm7
mov eax, dword [rsp + 0x80]
mov dword [0x180106370], eax
movzx eax, word [rsp + 0x84]
mov word [0x180106374], ax
lea rcx, [0x1800ce3d0]
call fcn.18009d564
lea rcx, [0x18010d230]
call fcn.18009d6a4
nop
jmp 0x180032b5b
call fcn.1800a45b8
nop
lea rcx, [0x18010d268]
call fcn.18009d704
cmp dword [0x18010d268], 0xffffffff
jne 0x180032d94
mov word [0x1801065d2], 0x1cf
movaps xmmword [0x1801065b0], xmm6
movaps xmmword [0x1801065c0], xmm7
movzx eax, word [rsp + 0x80]
mov word [0x1801065d0], ax
lea rcx, [0x1800ce370]
call fcn.18009d564
lea rcx, [0x18010d268]
call fcn.18009d6a4
nop
jmp 0x180032d94
lea rcx, [0x18010d274]
call fcn.18009d704
cmp dword [0x18010d274], 0xffffffff
jne 0x180032f69
mov byte [0x1801064d0], 1
movaps xmmword [0x1801064b0], xmm6
movaps xmmword [0x1801064c0], xmm7
lea rcx, [0x1800ce350]
call fcn.18009d564
lea rcx, [0x18010d274]
call fcn.18009d6a4
nop
jmp 0x180032f69
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
lea rcx, [0x18010d270]
call fcn.18009d704
cmp dword [0x18010d270], 0xffffffff
jne 0x1800330c8
mov byte [0x1801063fe], 1
movaps xmmword [0x1801063e0], xmm6
movsd xmm0, qword [rsp + 0x70]
movsd qword [0x1801063f0], xmm0
mov eax, dword [rsp + 0x78]
mov dword [0x1801063f8], eax
movzx eax, word [rsp + 0x7c]
mov word [0x1801063fc], ax
lea rcx, [0x1800ce400]
call fcn.18009d564
lea rcx, [0x18010d270]
call fcn.18009d6a4
jmp 0x1800330c8