Function at 0x180025b70
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x90
imul eax, r8d, 0x1bc
mov rsi, r9
mov r9d, r8d
mov dword [rbp - 0x11], r8d
mov r12, rcx
mov dword [rbp - 1], eax
cmp r8d, eax
ja 0x180025bf6
mov r13, qword [rbp + 0x7f]
mov r14d, dword [rbp + 0x6f]
mov r15, qword [rbp + 0xf]
cmp r8d, 0x5127
ja 0x180025e73
je 0x180025d71
cmp r8d, 0xa
je 0x180025cae
cmp r8d, 0x115
je 0x180025c15
cmp r8d, 0x2ee
jne 0x180026172
mov rax, qword [rbp - 9]
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r14d, dword [0x18003cb1c]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], 0
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18002616a
movzx edx, byte [0x18003cbb1]
mov ecx, 0x4f
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x4c
je 0x180025c6a
sub eax, 1
je 0x180025c74
cmp eax, 2
jne 0x180025c6d
mov byte [0x18003900c], 0x2b
jmp 0x180025c6d
or dl, 2
inc ecx
cmp ecx, 0x52
jb 0x180025c50
mov byte [0x18003cbb1], dl
lea r9, [0x18002fa85]
lea rdx, [0x18002fa85]
mov dword [rbp - 0x19], 0
lea r8, [rbp - 0x19]
mov ecx, 0x5d
call fcn.180007790
xor edx, edx
mov ecx, 0xcb
call fcn.18002b650
jmp 0x18002616a
mov eax, dword [r12]
cmp eax, dword [rdx]
je 0x18002619c
xor edi, edi
dec eax
cmp dword [r13 + rax*4], edi
jbe 0x180025d65
nop dword [rax]
mov ebx, 0x129
cmp ebx, 0x129
je 0x180025d14
cmp ebx, 0x1dd
jne 0x180025d3c
mov r9d, r15d
lea rcx, [rbp - 0x21]
mov dword [rsi + rdi*4], r9d
mov r8d, 0xa
mov eax, dword [rdx]
lea rdx, [rbp - 0x19]
mov dword [rbp - 0x19], eax
mov eax, dword [r12]
inc eax
mov qword [rsp + 0x20], r13
mov dword [rbp - 0x21], eax
call fcn.180025b70
jmp 0x180025d38
mov eax, dword [r12]
mov edx, 1
mov ecx, dword [r13 + rax*4]
shl rcx, 2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r15, rax
test rax, rax
je 0x180026190
mov rdx, qword [rbp + 0x67]
add ebx, 0xb4
cmp ebx, 0x291
jb 0x180025cd5
mov eax, dword [r12]
inc edi
dec eax
cmp edi, dword [r13 + rax*4]
jb 0x180025cd0
mov r8d, dword [rbp - 0x11]
mov r9d, dword [rbp + 0x6f]
mov dword [rbp - 9], 0
jmp 0x180026172
mov r8, qword [rsi + 0x18]
mov ecx, 0x56
mov rdx, qword [0x18003cb58]
call fcn.180014e50
mov edx, 1
lea ecx, [rdx + 0x1f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp + 7], rax
mov rbx, rax
test rax, rax
jne 0x180025de6
mov ebx, 0x126
mov ecx, ebx
sub ecx, 0x126
je 0x180025dbe
cmp ecx, 1
jne 0x180025dd8
mov ecx, dword [rbp + 3]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, 0xe
lea rdx, str.VFMADD132PDZrb
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov dword [rbp + 3], eax
inc ebx
cmp ebx, 0x128
jb 0x180025da5
mov rbx, qword [rbp + 7]
xor edi, edi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x180025e46
lea rax, [rbp - 0x31]
mov byte [rbp - 0x31], 1
mov qword [rsp + 0x30], rax
lea r9, [rbp - 0x21]
lea rax, [rbp - 0x29]
mov dword [rsp + 0x28], 0x121
lea r8, [0x18002fa85]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x19]
mov byte [rbp - 0x29], 2
lea rcx, [0x18002fa85]
mov dword [rbp - 0x21], ebx
mov dword [rbp - 0x19], edi
call fcn.18001c8f0
mov eax, dword [rsi + 0xc]
mov r9d, 0x81
mov rcx, qword [rsi + 0x18]
xor r8d, r8d
mov dword [rbp - 0x21], eax
xor edx, edx
lea rax, [rbp - 0x21]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
call fcn.18000b9c0
jmp 0x18002616a
cmp r8d, 0xa139
je 0x180025fb6
cmp r8d, 0xf14b
jne 0x180026172
mov esi, 0x78
mov eax, esi
sub eax, 0x78
je 0x180025ea7
cmp eax, 1
je 0x180025bf6
jmp 0x180025fa2
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x180025f9a
mov edi, 0x11d
nop
cmp edi, 0x11d
je 0x180025f09
cmp edi, 0x591
jne 0x180025f88
lea r9, [0x18002fa85]
mov dword [rbp - 0x21], 0
lea r8, [rbp - 0x21]
mov ecx, 0x5d
lea rdx, [0x18002fa85]
call fcn.180007790
jmp 0x180025f88
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x15]
call fcn.18002a460
cmp r14d, dword [0x18003cb1c]
je 0x180025f88
mov ebx, 0x87
cmp ebx, 0x87
je 0x180025f64
cmp ebx, 0xa8c
je 0x180025f45
cmp ebx, 0x1491
jne 0x180025f7a
mov dword [0x18003cb1c], r14d
jmp 0x180025f7a
xor r9d, r9d
lea r8, [0x18002fa85]
lea rdx, [0x18002fa85]
lea rcx, str.BytesProvider_ResponseValidator
call fcn.18002cfd0
jmp 0x180025f7a
mov r8d, dword [0x18003cb1c]
lea rcx, str.NwoDBDARBglghkgBhvhCAQEEBAMCAAcwGgYDVR0RBBMwEYEPaXBzQG1haWwuaXBzLmVzMBoGA1Ud
mov edx, r14d
call fcn.18002cfd0
add ebx, 0xa05
cmp ebx, 0x1e0f
jbe 0x180025f24
add edi, 0x474
cmp edi, 0x8e8
jbe 0x180025ed0
mov rax, qword [rbp + 7]
mov qword [rbp - 9], rax
inc esi
cmp esi, 0x7a
jb 0x180025e92
mov rsi, qword [rbp + 0x77]
jmp 0x18002616a
mov rdi, qword [rsi]
test rdi, rdi
je 0x1800260d8
mov r13, qword [rbp + 7]
mov rax, qword [rbp + 0xf]
nop word [rax + rax]
mov esi, 0xaf
nop word [rax + rax]
cmp esi, 0xaf
je 0x180026096
cmp esi, 0x6270
jne 0x1800260b2
mov ebx, 0x8f
nop dword [rax]
mov eax, ebx
sub eax, 0x8f
je 0x180026012
cmp eax, 0x52
jne 0x180026081
xor edi, edi
jmp 0x180026081
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x180026078
lea rax, [rbp - 0x29]
mov byte [rbp - 0x29], 3
mov qword [rsp + 0x30], rax
lea r9, [rbp - 0x21]
lea rax, [rbp - 0x31]
mov dword [rsp + 0x28], 0x121
lea r8, [0x18002fa85]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x19]
mov byte [rbp - 0x31], 2
lea rcx, [0x18002fa85]
mov dword [rbp - 0x21], edi
mov dword [rbp - 0x19], 0
call fcn.18001c8f0
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add ebx, 0x52
cmp ebx, 0x133
jb 0x180026000
mov rax, qword [rbp + 0xf]
jmp 0x1800260b2
mov r9, qword [rdi + 8]
mov rdx, r13
mov r8, qword [rdi]
mov ecx, 0x5a
call fcn.1800225b0
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0xf], rax
add esi, 0x61c1
cmp esi, 0xc382
jbe 0x180025fe0
mov rdi, rax
test rax, rax
jne 0x180025fd0
mov r13, qword [rbp + 0x7f]
mov rsi, qword [rbp + 0x77]
mov ebx, 0x7f
nop dword [rax]
cmp ebx, 0x7f
jne 0x180026154
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea ecx, [rbx + 0x77]
xor edx, edx
call fcn.18002c4e0
test al, al
je 0x180026149
lea rax, [rbp - 0x29]
mov byte [rbp - 0x29], 3
mov qword [rsp + 0x30], rax
lea r9, [rbp - 0x21]
lea rax, [rbp - 0x31]
mov dword [rsp + 0x28], 0x121
lea r8, [0x18002fa85]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x19]
mov byte [rbp - 0x31], 2
lea rcx, [0x18002fa85]
mov dword [rbp - 0x21], esi
mov dword [rbp - 0x19], 0
call fcn.18001c8f0
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor esi, esi
add ebx, 0xb1
cmp ebx, 0x130
jb 0x1800260e0
mov qword [rbp + 0x77], rsi
mov r8d, dword [rbp - 0x11]
mov r9d, dword [rbp + 0x6f]
imul eax, r9d, 0x4a
add r8d, eax
mov dword [rbp - 0x11], r8d
cmp r8d, dword [rbp - 1]
ja 0x180025bf6
mov rdx, qword [rbp + 0x67]
jmp 0x180025bc3
mov dword [rbp - 9], 0xffffffff
jmp 0x180025bf6
mov dword [rbp - 9], 0
jmp 0x180025bf6