Function at 0x180006f80
Capabilities:
Check os version
Contain obfuscated stackstrings
Query environment variable
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x840]
sub rsp, 0x940
mov rax, qword [0x180024008]
xor rax, rsp
mov qword [rbp + 0x830], rax
xor r12d, r12d
lea r13, [0x180026008]
nop dword [rax]
nop word [rax + rax]
lea rcx, [rsp + 0x54]
mov dword [rsp + 0x54], r12d
call fcn.1800068f0
mov r15, rax
test rax, rax
jne 0x180006ffb
call fcn.180006ed0
call fcn.18000b930
cmp eax, 1
jne 0x180006fd0
jmp 0x180007c4c
mov r14d, dword [rsp + 0x54]
test r14d, r14d
je 0x18000703d
mov rsi, qword [0x1800260d8]
mov rcx, r15
sub rsi, r15
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [rsi + rcx]
movsx edx, byte [rcx]
cmp dl, al
jne 0x18000724d
inc rcx
mov rax, rcx
sub rax, r15
cmp rax, r14
jb 0x180007020
mov ecx, r12d
test ecx, ecx
jne 0x180007256
xor edx, edx
lea rcx, [rbp + 0x104]
mov r8d, 0x728
call fcn.18000ff30
mov eax, dword [0x180025fe8]
mov dword [rbp + 0x104], eax
mov eax, dword [0x180025bbc]
mov dword [rbp + 0x100], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp + 0x10c]
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov rax, qword [0x180025ff0]
xor edx, edx
xorps xmm0, xmm0
lea ecx, [rdx + 7]
nop dword [rax]
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmmword [rax - 0x10], xmm0
sub rcx, 1
jne 0x1800070a0
movups xmmword [rax], xmm0
lea r8, [rsp + 0x58]
mov ecx, 2
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
mov qword [rax + 0x60], rdx
lea rdx, [rbp + 0x5d4]
mov dword [rsp + 0x58], 0x12c
call qword [0x180026070]
mov ecx, r12d
cmp word [rbp + 0x5d4], r12w
je 0x180007120
inc ecx
cmp word [rbp + rcx*2 + 0x5d4], r12w
jne 0x180007113
test ecx, ecx
mov qword [rbp - 0x20], 0x11c
mov eax, r12d
mov qword [rbp - 0x18], r12
setne al
mov dword [rbp - 0x10], r12d
xor edx, edx
mov dword [rbp + 0x108], eax
mov r8d, 0x100
lea rcx, [rbp - 0xc]
call fcn.18000ff30
mov r8b, 1
mov dword [rbp + 0xf4], r12d
mov edx, 0x80
mov dword [rbp + 0xf8], 0x10000
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov edx, 0x80
lea rcx, [rbp - 0x20]
mov r8, rax
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov rdi, qword [0x180025e38]
mov ecx, r12d
test eax, eax
sete cl
mov dword [rbp + 0x110], ecx
mov eax, dword [0x7ffe026c]
mov ecx, dword [0x1800249e0]
mov dword [rbp + 0x114], eax
mov eax, dword [0x7ffe0270]
mov dword [rbp + 0x118], eax
mov eax, dword [0x7ffe0260]
mov dword [rbp + 0x11c], eax
mov eax, 0xd41d41d5
mul ecx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 6
mov dword [rbp + 0x120], ecx
mov ecx, r12d
cmp word [rdi], r12w
je 0x1800071ec
inc ecx
cmp word [rdi + rcx*2], r12w
jne 0x1800071e3
mov esi, ecx
mov edx, r12d
test ecx, ecx
je 0x180007225
lea rax, [rbp + 0x124]
sub rdi, rax
lea rcx, [rbp + 0x124]
nop word [rax + rax]
movzx eax, word [rdi + rcx]
inc edx
mov word [rcx], ax
lea rcx, [rcx + 2]
movsxd rax, edx
cmp rax, rsi
jb 0x180007210
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x12c
lea rcx, [rbp + 0x37c]
call qword [0x180026078]
lea r8, [rbp + 0x100]
mov edx, 0x72c
jmp 0x180007291
mov ecx, edx
sub ecx, eax
jmp 0x180007040
test r14d, r14d
je 0x180007285
mov r8, qword [0x1800260a0]
mov rdx, r15
sub r8, r15
mov rcx, r15
neg rdx
nop
movzx eax, byte [r8 + rcx]
cmp byte [rcx], al
jne 0x1800072b9
inc rcx
lea rax, [rcx + rdx]
cmp rax, r14
jb 0x180007270
mov r8, qword [0x1800260c8]
mov edx, 0xa
call fcn.180006370
test eax, eax
jne 0x1800072a0
dec dword [0x180025c10]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x180006fd0
mov r8, qword [0x180026128]
mov rcx, r15
sub r8, r15
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
cmp byte [rcx], al
jne 0x180007360
inc rcx
lea rax, [rcx + rdx]
cmp rax, 0xa
jb 0x1800072d0
lea r8, [r15 + 0xa]
mov r9d, r12d
mov esi, r12d
lea ecx, [rsi + rsi]
mov edi, 1
test ecx, ecx
jle 0x18000730b
mov eax, ecx
shl edi, 4
sub rax, 1
jne 0x180007302
inc ecx
mov edx, 1
test ecx, ecx
jle 0x180007329
mov eax, ecx
nop dword [rax + rax]
shl edx, 4
sub rax, 1
jne 0x180007320
movzx ecx, byte [r8]
inc esi
mov eax, ecx
inc r8
and ecx, 0xf
shr eax, 4
imul ecx, edi
imul eax, edx
add r9d, ecx
add r9d, eax
cmp esi, 4
jl 0x1800072f4
imul eax, r9d, 0x46
mov dword [0x1800249e0], eax
mov dword [0x1800249e8], eax
jmp 0x1800072a0
mov r8, qword [0x1800260b8]
mov rcx, r15
sub r8, r15
nop dword [rax]
movzx eax, byte [r8 + rcx]
cmp byte [rcx], al
jne 0x180007449
inc rcx
lea rax, [rcx + rdx]
cmp rax, 0xd
jb 0x180007370
cmp byte [r15 + 0xd], 0x2d
lea rdi, [r15 + 0xd]
movdqa xmm0, xmmword [0x180021b80]
lea rcx, [rsp + 0x68]
cmove rdi, r12
mov dword [0x18002600c], 1
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], 0x53333675
mov dword [rsp + 0x7c], 0x2560636a
mov dword [rbp - 0x80], 0x27637567
mov word [rbp - 0x7c], 0x6e2e
mov byte [rbp - 0x7a], 0xfa
call fcn.180007e50
mov rdx, rdi
mov rcx, rax
mov rsi, rax
call fcn.18000e360
cmp eax, 1
jne 0x18000741f
test rsi, rsi
je 0x180007406
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [0x180026140]
mov edx, 6
call fcn.180006370
test eax, eax
je 0x180007a69
test rsi, rsi
je 0x180007438
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [0x1800260b0]
mov edx, 7
jmp 0x180007a60
mov r8, qword [0x180026080]
mov rcx, r15
sub r8, r15
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
cmp byte [rcx], al
jne 0x180007537
inc rcx
lea rax, [rcx + rdx]
cmp rax, 0xd
jb 0x180007460
lea r8d, [r14 - 1]
lea rdx, [r15 + 1]
test r8d, r8d
je 0x180007492
mov ecx, r8d
mov rdi, r15
mov rsi, rdx
rep movsb byte [rdi], byte [rsi]
lea eax, [r14 - 2]
test eax, eax
je 0x1800074a4
mov ecx, eax
mov rdi, r15
mov rsi, rdx
rep movsb byte [rdi], byte [rsi]
mov byte [rax + r15], 0xd
lea esi, [r14 - 0xb]
mov byte [r8 + r15], 0xa
mov edi, r12d
mov rbx, qword [0x180026020]
mov dword [rsp + 0x54], r12d
test esi, esi
je 0x1800074fe
nop word [rax + rax]
mov r8d, esi
mov eax, edi
lea rdx, [r15 + 0xb]
mov qword [rsp + 0x20], r12
sub r8d, edi
lea r9, [rsp + 0x54]
add rdx, rax
mov rcx, rbx
call qword [0x1800261c8]
test eax, eax
je 0x180007502
add edi, dword [rsp + 0x54]
cmp edi, esi
jb 0x1800074d0
cmp edi, esi
je 0x180007526
mov r8, qword [0x180026140]
mov edx, 6
call fcn.180006370
test eax, eax
jne 0x180006fd0
dec dword [0x180025c10]
jmp 0x180006fd0
mov r8, qword [0x1800260b0]
mov edx, 7
jmp 0x180007291
mov r8, qword [0x180026130]
mov rcx, r15
sub r8, r15
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [r8 + rcx]
cmp byte [rcx], al
jne 0x180007646
inc rcx
lea rax, [rcx + rdx]
cmp rax, r14
jb 0x180007550
mov rcx, qword [0x180025bc0]
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], r12
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rsp + 0x54], r12d
call qword [0x180026098]
mov edx, dword [rsp + 0x54]
test edx, edx
je 0x180007635
mov rbx, qword [0x180025ff0]
movsxd r8, edx
mov rcx, rbx
xor edx, edx
call fcn.18000ff30
mov edx, dword [rsp + 0x54]
mov edi, r12d
mov r14, qword [0x180025bc0]
mov esi, edx
mov dword [rsp + 0x50], r12d
test edx, edx
je 0x180007605
nop dword [rax + rax]
mov r8d, esi
mov edx, edi
sub r8d, edi
mov qword [rsp + 0x20], r12
add rdx, rbx
lea r9, [rsp + 0x50]
mov rcx, r14
call qword [0x1800261b0]
test eax, eax
je 0x180007609
add edi, dword [rsp + 0x50]
cmp edi, esi
jb 0x1800075d0
mov edx, dword [rsp + 0x54]
mov rbx, qword [0x180025ff0]
cmp edi, esi
je 0x18000762d
mov r8, qword [0x180026088]
mov edx, 0xb
call fcn.180006370
test eax, eax
jne 0x180006fd0
dec dword [0x180025c10]
jmp 0x180006fd0
mov r8, rbx
jmp 0x180007291
mov r8, qword [0x180026088]
mov edx, 0xb
jmp 0x180007291
mov r8, qword [0x180026150]
mov rcx, r15
sub r8, r15
movzx eax, byte [r8 + rcx]
cmp byte [rcx], al
jne 0x1800076cd
inc rcx
lea rax, [rcx + rdx]
cmp rax, r14
jb 0x180007653
mov rcx, qword [0x180026030]
mov eax, dword [0x1800249e0]
mov dword [0x18002600c], r12d
mov dword [0x1800249e8], eax
test rcx, rcx
je 0x18000768f
xor edx, edx
call qword [0x180026058]
mov rcx, qword [0x180026020]
test rcx, rcx
je 0x1800076a1
call qword [0x1800260e8]
mov rcx, qword [0x180025bc0]
test rcx, rcx
je 0x1800076b3
call qword [0x1800260e8]
mov qword [0x180026030], r12
mov qword [0x180026020], r12
mov qword [0x180025bc0], r12
jmp 0x1800072a0
mov rsi, qword [0x180026060]
mov rcx, r15
sub rsi, r15
nop word [rax + rax]
movzx eax, byte [rsi + rcx]
cmp byte [rcx], al
jne 0x1800077b4
inc rcx
lea rax, [rcx + rdx]
cmp rax, 7
jb 0x1800076e0
mov dword [0x18002600c], 2
lea r8, [r15 + 7]
mov r9d, r12d
mov esi, r12d
nop dword [rax]
lea edx, [rsi + rsi]
mov edi, 1
test edx, edx
jle 0x180007729
mov eax, edx
nop
shl edi, 4
sub rax, 1
jne 0x180007720
inc edx
mov ecx, 1
test edx, edx
jle 0x18000773f
mov eax, edx
shl ecx, 4
sub rax, 1
jne 0x180007736
movzx edx, byte [r8]
inc esi
mov eax, edx
inc r8
and edx, 0xf
shr eax, 4
imul edx, edi
imul eax, ecx
add r9d, edx
add r9d, eax
cmp esi, 4
jl 0x180007710
mov dword [0x180026008], r9d
lea rcx, [r15 + 0xc]
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 1
call qword [0x180026090]
mov qword [0x180025bb0], rax
cmp rax, 0xffffffffffffffff
je 0x18000792b
mov r8, qword [0x1800260b0]
mov edx, 7
jmp 0x180007a60
mov rsi, qword [0x1800260d0]
mov rcx, r15
sub rsi, r15
movzx eax, byte [rsi + rcx]
cmp byte [rcx], al
jne 0x18000788c
inc rcx
lea rax, [rcx + rdx]
cmp rax, 9
jb 0x1800077c1
cmp dword [0x18002600c], 2
jne 0x180006fd0
mov rbx, qword [0x180025bb0]
lea esi, [r14 - 9]
test esi, esi
je 0x180007835
mov dword [rsp + 0x5c], r12d
mov edi, r12d
nop
mov r8d, esi
mov eax, edi
lea rdx, [r15 + 9]
mov qword [rsp + 0x20], r12
sub r8d, edi
lea r9, [rsp + 0x5c]
add rdx, rax
mov rcx, rbx
call qword [0x1800261c8]
test eax, eax
je 0x18000782e
add edi, dword [rsp + 0x5c]
cmp edi, esi
jb 0x180007800
mov rbx, qword [0x180025bb0]
mov edi, dword [0x180025c08]
lea edx, [r14 - 9]
add edx, dword [0x180025bb8]
inc edi
cmp edi, dword [0x180026008]
mov dword [0x180025c08], edi
mov dword [0x180025bb8], edx
jne 0x1800072a0
mov eax, dword [0x1800249e0]
xor r9d, r9d
xor r8d, r8d
mov dword [0x1800249e8], eax
mov rcx, rbx
call qword [0x180026050]
mov rcx, qword [0x180025bb0]
call qword [0x1800260e0]
jmp 0x180007be9
mov rsi, qword [0x180026110]
mov rcx, r15
sub rsi, r15
nop dword [rax]
movzx eax, byte [rsi + rcx]
cmp byte [rcx], al
jne 0x180007a83
inc rcx
lea rax, [rcx + rdx]
cmp rax, 9
jb 0x1800078a0
mov qword [rsp + 0x30], r12
lea rcx, [r15 + 9]
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov dword [0x18002600c], 3
call qword [0x180026090]
mov qword [0x180025bb0], rax
cmp rax, 0xffffffffffffffff
je 0x18000792b
xor edx, edx
mov rcx, rax
call qword [0x1800260f8]
mov dword [0x180025bb8], eax
mov ecx, eax
cmp eax, 0xffffffff
jne 0x180007956
mov rcx, qword [0x180025bb0]
test rcx, rcx
je 0x180007924
call qword [0x1800260e8]
mov qword [0x180025bb0], r12
mov r8, qword [0x180026140]
mov edx, 6
call fcn.180006370
test eax, eax
jne 0x180006fd0
dec dword [0x180025c10]
mov dword [0x18002600c], r12d
jmp 0x180006fd0
mov eax, 0x10624dd3
mul ecx
shr edx, 0xf
imul eax, edx, 0x7d000
mov dword [0x180026008], edx
cmp ecx, eax
je 0x180007979
lea eax, [rdx + 1]
mov dword [0x180026008], eax
mov r8, qword [0x180025ff0]
xorps xmm0, xmm0
mov rdx, qword [0x180026068]
xor eax, eax
mov edi, r12d
sub rdx, r8
movups xmmword [r8], xmm0
lea rcx, [r8 + 1]
movups xmmword [r8 + 0x10], xmm0
movups xmmword [r8 + 0x20], xmm0
movups xmmword [r8 + 0x30], xmm0
movups xmmword [r8 + 0x40], xmm0
movups xmmword [r8 + 0x50], xmm0
mov dword [r8 + 0x60], eax
nop word [rax + rax]
movzx eax, byte [rcx + rdx - 1]
add edi, 8
mov byte [rcx - 1], al
movzx eax, byte [rcx + rdx]
mov byte [rcx], al
movzx eax, byte [rcx + rdx + 1]
mov byte [rcx + 1], al
movzx eax, byte [rcx + rdx + 2]
mov byte [rcx + 2], al
movzx eax, byte [rcx + rdx + 3]
mov byte [rcx + 3], al
movzx eax, byte [rcx + rdx + 4]
mov byte [rcx + 4], al
movzx eax, byte [rcx + rdx + 5]
mov byte [rcx + 5], al
movzx eax, byte [rcx + rdx + 6]
mov byte [rcx + 6], al
lea rcx, [rcx + 8]
cmp edi, 8
jb 0x1800079c0
lea rcx, [r8 + 8]
mov r10, r13
lea rsi, [0x180026009]
sub r10, rcx
sub rsi, rcx
lea rdx, [rcx + 2]
mov r9, r13
mov edi, r12d
sub r9, rcx
nop dword [rax + rax]
movzx eax, byte [r10 + rdx - 2]
add edi, 4
mov byte [rdx - 2], al
movzx eax, byte [rsi + rdx - 2]
mov byte [rdx - 1], al
movzx eax, byte [r9 + rdx]
mov byte [rdx], al
movzx eax, byte [rsi + rdx]
mov byte [rdx + 1], al
lea rdx, [rdx + 4]
cmp edi, 4
jb 0x180007a30
mov edx, 0xc
call fcn.180006370
test eax, eax
jne 0x180007a74
dec dword [0x180025c10]
jmp 0x180006fd0
mov dword [0x1800249e8], 0xc350
jmp 0x1800072a0
mov rsi, qword [0x180026108]
mov rcx, r15
sub rsi, r15
movzx eax, byte [rsi + rcx]
cmp byte [rcx], al
jne 0x180007c23
inc rcx
lea rax, [rcx + rdx]
cmp rax, 0xb
jb 0x180007a90
cmp dword [0x18002600c], 3
jne 0x180006fd0
lea r8, [r15 + 0xb]
mov r9d, r12d
mov esi, r12d
lea ecx, [rsi + rsi]
mov edi, 1
test ecx, ecx
jle 0x180007ad9
mov eax, ecx
nop
shl edi, 4
sub rax, 1
jne 0x180007ad0
inc ecx
mov eax, 1
test ecx, ecx
jle 0x180007aed
shl eax, 4
sub rcx, 1
jne 0x180007ae4
movzx edx, byte [r8]
inc esi
mov ecx, edx
inc r8
and edx, 0xf
shr ecx, 4
imul edx, edi
imul ecx, eax
add r9d, edx
add r9d, ecx
cmp esi, 4
jl 0x180007ac0
mov ecx, dword [0x180025bb8]
imul edi, r9d, 0x7d000
lea eax, [rcx - 1]
lea esi, [rdi + 0x7cfff]
cmp esi, eax
jb 0x180007b2c
lea esi, [rcx - 1]
mov r14, qword [0x180025ff0]
sub esi, edi
add esi, 1
movsxd r8, esi
je 0x180007b47
xor edx, edx
mov rcx, r14
call fcn.18000ff30
mov rbx, qword [0x180025bb0]
xor r9d, r9d
mov rcx, rbx
xor r8d, r8d
mov edx, edi
call qword [0x1800261b8]
mov dword [rsp + 0x60], r12d
mov edi, r12d
test esi, esi
je 0x180007b9e
nop dword [rax + rax]
mov r8d, esi
mov edx, edi
sub r8d, edi
mov qword [rsp + 0x20], r12
add rdx, r14
lea r9, [rsp + 0x60]
mov rcx, rbx
call qword [0x1800261b0]
test eax, eax
je 0x180006fd0
add edi, dword [rsp + 0x60]
cmp edi, esi
jb 0x180007b70
cmp edi, esi
jne 0x180006fd0
mov r8, qword [0x180025ff0]
mov edx, esi
call fcn.180006370
test eax, eax
jne 0x180007bc3
dec dword [0x180025c10]
jmp 0x180006fd0
mov eax, dword [0x180025c08]
inc eax
cmp eax, dword [0x180026008]
mov dword [0x180025c08], eax
jne 0x1800072a0
mov eax, dword [0x1800249e0]
mov dword [0x1800249e8], eax
mov rcx, qword [0x180025bb0]
mov dword [0x18002600c], r12d
mov dword [0x180025bb8], r12d
mov dword [0x180026008], r12d
mov dword [0x180025c08], r12d
test rcx, rcx
je 0x180007c17
call qword [0x1800260e8]
mov qword [0x180025bb0], r12
jmp 0x1800072a0
mov rsi, qword [0x180026148]
mov rcx, r15
sub rsi, r15
movzx eax, byte [rsi + rcx]
cmp byte [rcx], al
jne 0x180007c7c
inc rcx
lea rax, [rcx + rdx]
cmp rax, 5
jb 0x180007c30
mov dword [0x1800249e4], r12d
mov rcx, qword [rbp + 0x830]
xor rcx, rsp
call fcn.18000ee00
lea r11, [rsp + 0x940]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rsi, qword [0x180026118]
mov rcx, r15
sub rsi, r15
nop dword [rax]
movzx eax, byte [rsi + rcx]
cmp byte [rcx], al
jne 0x1800072a0
inc rcx
lea rax, [rcx + rdx]
cmp rax, 8
jb 0x180007c90
mov rcx, qword [0x180025bd8]
call qword [0x180026138]
mov rcx, qword [0x180025bd8]
call qword [0x1800260e8]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x60]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
movdqa xmm0, xmmword [0x180021b20]
lea rcx, [rbp - 0x70]
movdqa xmm1, xmmword [0x180021c10]
mov rsi, rax
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [0x180021bf0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [str.gt_Tq]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x40], xmm1
mov dword [rax], 0x68
mov dword [rbp - 0x30], 0x36d7463
call fcn.180008480
mov r9, qword [0x180025ff0]
xor r8d, r8d
mov rcx, r9
xorps xmm0, xmm0
lea edx, [r8 + 3]
nop word [rax + rax]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmmword [rcx - 0x10], xmm0
sub rdx, 1
jne 0x180007d60
movups xmmword [rcx], xmm0
mov rdx, r9
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x60], xmm0
mov dword [rcx + 0x70], r8d
mov r8d, 0x12c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
test eax, eax
jne 0x180007dd2
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x180025ff0]
xor r9d, r9d
mov qword [rsp + 0x48], rdi
xor r8d, r8d
mov qword [rsp + 0x40], rsi
xor edx, edx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 1
call qword [0x180026120]
test rdi, rdi
je 0x180007e21
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1800072a0