Function at 0x18004f740
Capabilities:
Get session user name

Disassembly:
push rbp
push rbx
push r15
lea rbp, [rsp - 0x490]
sub rsp, 0x590
lea rdx, [rbp + 0x4b0]
mov dword [rbp + 0x4b0], 0x101
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
lea rax, [rbp + 0x2e0]
mov r15, 0xffffffffffffffff
movups xmmword [rbp + 0x20], xmm0
mov rbx, r15
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x18004f790
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x180050c89
mov qword [rsp + 0x588], rsi
mov ecx, 0x16
mov qword [rsp + 0x580], rdi
mov qword [rsp + 0x570], r13
mov qword [rsp + 0x568], r14
cmp rbx, 0x10
jae 0x18004f801
mov r8, rbx
mov qword [rbp + 0x30], rbx
lea rdx, [rbp + 0x2e0]
mov qword [rbp + 0x38], 0xf
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x20], 0
mov r13, qword [rbp + 0x38]
jmp 0x18004f847
mov r13, rbx
or r13, 0xf
cmp r13, rax
jbe 0x18004f812
mov r13, rax
jmp 0x18004f819
cmp r13, rcx
cmovb r13, rcx
lea rdx, [r13 + 1]
call fcn.1800615b0
mov r8, rbx
mov qword [rbp + 0x20], rax
lea rdx, [rbp + 0x2e0]
mov qword [rbp + 0x30], rbx
mov rcx, rax
mov qword [rbp + 0x38], r13
mov rdi, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rbp + 0xf0]
mov qword [rbp + 0xf0], rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_asctime]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x1b0], xmm0
mov r8, r15
movdqu xmmword [rbp + 0x1c0], xmm1
inc r8
cmp byte [rax + r8], 0
jne 0x18004f884
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.180062f90
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rbp + 0xf8]
mov qword [rbp + 0xf8], rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
xor ebx, ebx
xorps xmm0, xmm0
mov r8d, dword [rax + 8]
mov esi, dword [rax + 4]
mov edi, dword [rax]
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
movups xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x58], bl
cmp r8d, 0xa
jge 0x18004f8f4
mov qword [rsp + 0x68], 1
mov word [rsp + 0x58], 0x30
lea r14, [rbp + 0x155]
test r8d, r8d
jns 0x18004f950
neg r8d
nop dword [rax]
nop word [rax + rax]
dec r14
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r14], r8b
mov r8d, edx
test edx, edx
jne 0x18004f910
dec r14
mov byte [r14], 0x2d
jmp 0x18004f97a
dec r14
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r14], r8b
mov r8d, edx
test edx, edx
jne 0x18004f950
lea rax, [rbp + 0x155]
mov qword [rsp + 0x578], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
cmp r14, rax
jne 0x18004f9aa
mov ecx, 0xf
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rcx
mov byte [rbp - 0x80], bl
jmp 0x18004fa4c
lea r12, [rbp + 0x155]
movabs rcx, 0x7fffffffffffffff
sub r12, r14
cmp r12, rcx
ja 0x180050c8f
cmp r12, 0x10
jae 0x18004f9ef
mov r8, r12
mov qword [rbp - 0x70], r12
mov rdx, r14
mov qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + r12 - 0x80], bl
jmp 0x18004fa48
mov rax, r12
or rax, 0xf
cmp rax, rcx
jbe 0x18004fa00
mov rax, rcx
jmp 0x18004fa0d
cmp rax, 0x16
mov ecx, 0x16
cmovb rax, rcx
lea rdx, [rax + 1]
mov qword [rbp + 0x4b8], rax
call fcn.1800615b0
mov rbx, rax
mov qword [rbp - 0x80], rax
mov rax, qword [rbp + 0x4b8]
mov rcx, rbx
mov r8, r12
mov qword [rbp - 0x68], rax
mov rdx, r14
mov qword [rbp - 0x70], r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r12], 0
xor ebx, ebx
mov rcx, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x70]
mov rax, rcx
sub rax, rdx
cmp rax, 1
jb 0x18004fa7d
lea rax, [rdx + 1]
cmp rcx, 0x10
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x80]
cmovae rax, qword [rbp - 0x80]
mov word [rax + rdx], 0x3a
lea rax, [rbp - 0x80]
jmp 0x18004fa9b
lea r9, [0x18029e5d4]
mov qword [rsp + 0x20], 1
mov edx, 1
lea rcx, [rbp - 0x80]
call fcn.180062e00
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x100]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
movq r14, xmm0
mov byte [rax], 0
movq r12, xmm1
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x4b8], rcx
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
mov qword [rbp + 0x4c0], rax
mov rax, rdx
cmovae r9, r14
sub rax, rcx
movups xmmword [rbp + 0x110], xmm1
cmp r12, rax
ja 0x18004fb49
cmp rdx, 0x10
lea rax, [r12 + rcx]
lea rbx, [rsp + 0x58]
mov qword [rsp + 0x68], rax
cmovae rbx, qword [rsp + 0x58]
mov r8, r12
add rcx, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [rbp + 0x4b8]
lea rax, [r12 + rbx]
xor ebx, ebx
mov byte [rax + rcx], 0
mov rax, qword [rbp + 0x4c0]
jmp 0x18004fb69
mov rdx, r12
mov qword [rsp + 0x20], r12
lea rcx, [rsp + 0x58]
call fcn.180062e00
mov rax, qword [rbp + 0x118]
mov r14, qword [rbp + 0x100]
cmp rax, 0x10
jb 0x18004fb9c
lea rdx, [rax + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18004fb94
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004fbe7
mov rcx, r14
call fcn.180110640
mov rdx, qword [rbp - 0x68]
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], 0
cmp rdx, 0x10
jb 0x18004fbf3
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004fbee
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004fbee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180110640
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp esi, 0xa
jge 0x18004fc5d
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x18004fc3e
lea rax, [rcx + 1]
cmp rdx, 0x10
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmovae rax, qword [rsp + 0x58]
mov word [rax + rcx], 0x30
jmp 0x18004fc5d
lea r9, [0x18029e024]
mov qword [rsp + 0x20], 1
mov edx, 1
lea rcx, [rsp + 0x58]
call fcn.180062e00
lea r14, [rbp + 0x16d]
test esi, esi
jns 0x18004fcb0
neg esi
nop word [rax + rax]
dec r14
mov eax, 0xcccccccd
mul esi
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub sil, cl
add sil, 0x30
mov byte [r14], sil
mov esi, edx
test edx, edx
jne 0x18004fc70
dec r14
mov byte [r14], 0x2d
jmp 0x18004fcd8
dec r14
mov eax, 0xcccccccd
mul esi
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub sil, cl
add sil, 0x30
mov byte [r14], sil
mov esi, edx
test edx, edx
jne 0x18004fcb0
lea rax, [rbp + 0x16d]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
cmp r14, rax
jne 0x18004fd01
mov ecx, 0xf
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rcx
mov byte [rbp - 0x60], 0
jmp 0x18004fd95
lea rsi, [rbp + 0x16d]
movabs rax, 0x7fffffffffffffff
sub rsi, r14
cmp rsi, rax
ja 0x180050c95
cmp rsi, 0x10
jae 0x18004fd46
mov r8, rsi
mov qword [rbp - 0x50], rsi
mov rdx, r14
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rsi - 0x60], 0
jmp 0x18004fd91
mov r12, rsi
or r12, 0xf
cmp r12, rax
jbe 0x18004fd57
mov r12, rax
jmp 0x18004fd64
cmp r12, 0x16
mov eax, 0x16
cmovb r12, rax
lea rdx, [r12 + 1]
call fcn.1800615b0
mov r8, rsi
mov qword [rbp - 0x60], rax
mov rdx, r14
mov qword [rbp - 0x50], rsi
mov rcx, rax
mov qword [rbp - 0x48], r12
mov rbx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
xor ebx, ebx
mov rcx, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x50]
mov rax, rcx
sub rax, rdx
cmp rax, 1
jb 0x18004fdc6
lea rax, [rdx + 1]
cmp rcx, 0x10
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x60]
cmovae rax, qword [rbp - 0x60]
mov word [rax + rdx], 0x3a
lea rax, [rbp - 0x60]
jmp 0x18004fde4
lea r9, [0x18029e5d4]
mov qword [rsp + 0x20], 1
mov edx, 1
lea rcx, [rbp - 0x60]
call fcn.180062e00
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x120]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
movq rsi, xmm0
mov byte [rax], 0
movq r14, xmm1
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x4b8], rcx
mov rax, rdx
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 0x10
movups xmmword [rbp + 0x130], xmm1
cmovae r9, rsi
sub rax, rcx
cmp r14, rax
ja 0x18004fe84
cmp rdx, 0x10
lea rax, [r14 + rcx]
lea rbx, [rsp + 0x58]
mov qword [rsp + 0x68], rax
cmovae rbx, qword [rsp + 0x58]
mov r8, r14
add rcx, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [rbp + 0x4b8]
lea rax, [r14 + rbx]
xor ebx, ebx
mov byte [rax + rcx], 0
jmp 0x18004fea4
mov rdx, r14
mov qword [rsp + 0x20], r14
lea rcx, [rsp + 0x58]
call fcn.180062e00
mov r12, qword [rbp + 0x138]
mov rsi, qword [rbp + 0x120]
cmp r12, 0x10
jb 0x18004fed8
lea rdx, [r12 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18004fed0
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004ff23
mov rcx, rsi
call fcn.180110640
mov rdx, qword [rbp - 0x48]
mov qword [rbp + 0x130], rbx
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], 0
cmp rdx, 0x10
jb 0x18004ff2f
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ff2a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004ff2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180110640
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp edi, 0xa
jge 0x18004ff99
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x18004ff7a
lea rax, [rcx + 1]
cmp rdx, 0x10
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmovae rax, qword [rsp + 0x58]
mov word [rax + rcx], 0x30
jmp 0x18004ff99
lea r9, [0x18029e024]
mov qword [rsp + 0x20], 1
mov edx, 1
lea rcx, [rsp + 0x58]
call fcn.180062e00
lea rsi, [rbp + 0x185]
test edi, edi
jns 0x18004ffe0
neg edi
nop word [rax + rax]
dec rsi
mov eax, 0xcccccccd
mul edi
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub dil, cl
add dil, 0x30
mov byte [rsi], dil
mov edi, edx
test edx, edx
jne 0x18004ffb0
dec rsi
mov byte [rsi], 0x2d
jmp 0x180050008
dec rsi
mov eax, 0xcccccccd
mul edi
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub dil, cl
add dil, 0x30
mov byte [rsi], dil
mov edi, edx
test edx, edx
jne 0x18004ffe0
lea rax, [rbp + 0x185]
xorps xmm0, xmm0
movabs r12, 0x7fffffffffffffff
movups xmmword [rbp - 0x40], xmm0
cmp rsi, rax
jne 0x18005003f
mov r14d, 0xf
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], r14
mov rdi, rbx
mov byte [rbp - 0x40], 0
jmp 0x1800500ca
lea rdi, [rbp + 0x185]
sub rdi, rsi
cmp rdi, r12
ja 0x180050c9b
cmp rdi, 0x10
jae 0x180050082
mov r8, rdi
mov qword [rbp - 0x30], rdi
mov rdx, rsi
mov qword [rbp - 0x28], 0xf
lea rcx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x40], 0
mov r14, qword [rbp - 0x28]
mov rdi, qword [rbp - 0x30]
jmp 0x1800500ca
mov r14, rdi
or r14, 0xf
cmp r14, r12
jbe 0x180050093
mov r14, r12
jmp 0x1800500a0
cmp r14, 0x16
mov eax, 0x16
cmovb r14, rax
lea rdx, [r14 + 1]
call fcn.1800615b0
mov r8, rdi
mov qword [rbp - 0x40], rax
mov rdx, rsi
mov qword [rbp - 0x30], rdi
mov rcx, rax
mov qword [rbp - 0x28], r14
mov rbx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
mov rcx, qword [rsp + 0x70]
lea r9, [rbp - 0x40]
mov rsi, qword [rsp + 0x68]
cmp r14, 0x10
mov rax, rcx
cmovae r9, qword [rbp - 0x40]
sub rax, rsi
cmp rdi, rax
ja 0x18005011d
cmp rcx, 0x10
lea rax, [rsi + rdi]
lea rbx, [rsp + 0x58]
mov qword [rsp + 0x68], rax
cmovae rbx, qword [rsp + 0x58]
mov r8, rdi
mov rdx, r9
lea rcx, [rbx + rsi]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rsi]
mov byte [rax + rdi], 0
jmp 0x180050133
mov rdx, rdi
mov qword [rsp + 0x20], rdi
lea rcx, [rsp + 0x58]
call fcn.180062e00
mov r14, qword [rbp - 0x28]
movaps xmmword [rsp + 0x550], xmm6
cmp r14, 0x10
jb 0x180050173
mov rcx, qword [rbp - 0x40]
lea rdx, [r14 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005016e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180050c35
call fcn.180110640
lea rdx, str.russian
mov qword [rbp - 0x30], 0
xor ecx, ecx
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
cmp r13, 0x10
lea rdx, [rbp + 0x20]
xorps xmm0, xmm0
mov r8, r15
cmovae rdx, qword [rbp + 0x20]
xor r13d, r13d
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], r13
movups xmmword [rbp + 0xa8], xmm0
inc r8
cmp byte [rdx + r8], r13b
jne 0x1800501c1
lea rcx, [rbp + 0xa8]
call fcn.180062f90
mov ecx, dword [0x180319290]
test ecx, ecx
je 0x1800501f4
sub ecx, 1
je 0x1800501f4
cmp ecx, 1
je 0x1800501f4
movss xmm6, dword [rbp + 0x4b0]
jmp 0x1800501fd
call qword [0x180319288]
movaps xmm6, xmm0
xorps xmm0, xmm0
mov qword [rbp - 0x10], r13
movups xmmword [rbp - 0x20], xmm0
xor edx, edx
mov byte [rbp - 0x20], r13b
mov r8d, 0x100
mov qword [rbp - 8], 0xf
lea rcx, [rbp + 0x1e0]
call sub.VCRUNTIME140.dll_memset
movabs rcx, 0xdab273b6bb73cb68
lea rdx, [rbp + 0xd0]
movabs rax, 0x13f025d14c1b9e25
xorps xmm2, xmm2
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0xd0], rax
movabs rax, 0x1e4f253852101e86
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0xd8], rax
movabs rax, 0x46781974e1d9f22f
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0xe0], rax
mov qword [rsp + 0x50], rcx
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0xe8], rax
movabs rax, 0x608944bd1c3be205
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x190], rax
movabs rax, 0x78610018207f58a6
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x198], rax
movabs rax, 0x351c771b82bca10f
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x50], rcx
lea rcx, [rbp + 0x1e0]
mov qword [rbp + 0x1a0], rax
mov rax, qword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0xd0]
movdqa xmm1, xmmword [rbp + 0xe0]
pxor xmm0, xmmword [rbp + 0x190]
cvtss2sd xmm2, xmm6
mov qword [rbp + 0x1a8], rax
pxor xmm1, xmmword [rbp + 0x1a0]
movq r8, xmm2
movdqa xmmword [rbp + 0xe0], xmm1
movdqa xmmword [rbp + 0xd0], xmm0
call fcn.180062470
lea rax, [rbp + 0x1e0]
mov rdi, r15
nop
inc rdi
cmp byte [rax + rdi], r13b
jne 0x180050350
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18005039c
cmp rdx, 0x10
lea rax, [rcx + rdi]
lea rbx, [rbp - 0x20]
mov qword [rbp - 0x10], rax
cmovae rbx, qword [rbp - 0x20]
lea rdx, [rbp + 0x1e0]
add rbx, rcx
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], r13b
jmp 0x1800503b4
lea r9, [rbp + 0x1e0]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.180062e00
mov r14, qword [rbp + 0xb8]
mov rax, r12
sub rax, r14
cmp rax, 0x20
jb 0x180050c7d
cmp qword [rbp + 0xc0], 0x10
lea r12, [rbp + 0xa8]
lea rsi, [r14 + 0x20]
mov ebx, 0xf
cmovae r12, qword [rbp + 0xa8]
lea rdi, [rbp + 0x68]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x68], xmm0
movdqu xmmword [rbp + 0x78], xmm1
cmp rsi, rbx
jbe 0x18005048c
mov rbx, rsi
movabs rcx, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rcx
jbe 0x18005044d
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.180110604
test rax, rax
je 0x18005053c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180050488
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180050476
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180050c83
jmp 0x18005042e
test rcx, rcx
je 0x180050485
call fcn.180110604
mov rdi, rax
jmp 0x180050488
mov rdi, r13
mov qword [rbp + 0x68], rdi
movups xmm0, xmmword [str._Anyware__Last_Update:___User:]
mov qword [rbp + 0x78], rsi
lea rcx, [rdi + 0x20]
mov qword [rbp + 0x80], rbx
mov r8, r14
movups xmmword [rdi], xmm0
mov rdx, r12
movups xmm1, xmmword [0x18029e5f0]
movups xmmword [rdi + 0x10], xmm1
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], r13b
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
lea rcx, [rbp + 0x68]
mov r8, qword [rbp - 0x10]
cmovae rdx, qword [rbp - 0x20]
call fcn.180060c90
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp], xmm0
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x180050548
mov rcx, qword [rbp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180050543
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180050543
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180110640
cmp qword [rbp + 0x18], 0x10
lea rax, [rbp]
movdqa xmm0, xmmword [0x1802a31e0]
lea rdx, [rbp + 0x4c8]
cmovae rax, qword [rbp]
mov rcx, qword [0x180318268]
movaps xmmword [rsp + 0x540], xmm7
movaps xmmword [rsp + 0x530], xmm8
movaps xmmword [rsp + 0x520], xmm9
movaps xmmword [rsp + 0x510], xmm10
movaps xmmword [rsp + 0x500], xmm11
xorps xmm11, xmm11
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movaps xmmword [rsp + 0x4f0], xmm12
movss xmm12, dword [0x1802a2e7c]
movaps xmm2, xmm12
movss dword [rsp + 0x20], xmm11
movdqu xmmword [rbp + 0x78], xmm0
mov byte [rbp + 0x68], r13b
call fcn.180086b40
movss xmm2, dword [0x1802a2eb8]
lea rax, [rbp + 0x88]
mov rcx, qword [0x1803182b0]
lea rdx, [rbp + 0x4c0]
xorps xmm0, xmm0
mov qword [rsp + 0x30], r13
movups xmmword [rbp + 0x88], xmm0
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
mov word [rbp + 0x88], 0x45
mov qword [rbp + 0x98], 1
mov qword [rbp + 0xa0], 0xf
call fcn.180086b40
mov eax, dword [0x18031813c]
lea rcx, [rbp - 0x60]
add eax, 0xfffffe20
xor edx, edx
mov r8d, 0x1fb
movd xmm0, eax
mov rax, qword [0x180318320]
cvtdq2ps xmm0, xmm0
or dword [rax + 0x3fa8], 3
mov qword [rax + 0x3fbc], 0x41700000
mov dword [rax + 0x3fc4], r13d
movss dword [rax + 0x3fb8], xmm0
movss xmm0, dword [rbp + 0x4c8]
addss xmm0, dword [0x1802a2e98]
mov dword [rax + 0x3fac], 1
mov dword [rax + 0x3fcc], 0x42700000
mov dword [rax + 0x3fb0], 1
addss xmm0, dword [rbp + 0x4c0]
movss dword [rax + 0x3fc8], xmm0
movabs rax, 0x12e829cf794f8352
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x60], rax
movabs rax, 0x78610018207f58cd
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x58], rax
movabs rax, 0x608944bd1c3be205
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x80], rax
movabs rax, 0x78610018207f58a6
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x78], rax
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x60], xmm0
call fcn.180074180
mov rcx, qword [0x180318320]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm9, dword [rax + 0x18]
mov rbx, qword [rax + 0x2a8]
movss xmm10, dword [rax + 0x1c]
movss dword [rbp + 0x4b8], xmm9
movaps xmm0, xmmword [0x1802a3640]
lea rcx, [rbp - 0x80]
movaps xmm8, xmm9
movss dword [rbp + 0x4bc], xmm10
addss xmm8, dword [0x1802a2e98]
movaps xmm7, xmm10
addss xmm7, dword [0x1802a2ea8]
movups xmmword [rbp - 0x80], xmm0
addss xmm8, dword [rbp + 0x4c8]
movss dword [rbp + 0x44], xmm7
addss xmm8, dword [rbp + 0x4c0]
movss dword [rbp + 0x40], xmm8
call fcn.18006a410
movss xmm6, dword [0x1802a2e5c]
lea rdx, [rbp + 0x4b8]
mov r9d, eax
mov dword [rsp + 0x28], r13d
lea r8, [rbp + 0x40]
movss dword [rsp + 0x20], xmm6
mov rcx, rbx
call fcn.180083990
movaps xmm0, xmmword [0x1802a3850]
lea rax, str.Anyware_
mov rcx, qword [0x180318268]
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x30], r13
movaps xmm2, xmm12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movups xmmword [rbp - 0x80], xmm0
call fcn.180086b40
movaps xmm0, xmm9
movss dword [rbp + 0x4c], xmm7
addss xmm0, dword [rbp + 0x4c0]
lea rcx, [rbp - 0x80]
addss xmm0, dword [rax]
movss dword [rbp + 0x48], xmm0
call fcn.18006a410
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rbp + 0x4b8]
movss dword [rsp + 0x20], xmm6
lea r8, [rbp + 0x48]
mov rcx, rbx
call fcn.180083990
movaps xmm0, xmmword [0x1802a3400]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
movss dword [rbp + 0x50], xmm8
movss dword [rbp + 0x54], xmm7
call fcn.18006a410
movss xmm0, dword [0x1802a2ab4]
lea r8, [rbp + 0x50]
movss dword [rsp + 0x30], xmm0
lea rdx, [rbp + 0x4b8]
mov r9d, eax
movss dword [rsp + 0x20], xmm6
mov rcx, rbx
call fcn.180083880
movaps xmm0, xmmword [0x1802a38a0]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.18006a410
mov rcx, qword [0x1803182b0]
movaps xmm0, xmm9
movaps xmm8, xmmword [rsp + 0x530]
mov r8d, eax
movaps xmm7, xmmword [rsp + 0x540]
movss dword [rbp + 0x5c], xmm10
addss xmm0, dword [0x1802a2e30]
movss dword [rbp + 0x58], xmm0
test eax, 0xff000000
je 0x18005094e
test rcx, rcx
jne 0x1800508fd
mov rax, qword [rbx + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rbx + 0x88]
lea rax, [0x18029e605]
mov byte [rsp + 0x48], r13b
movss xmm2, dword [0x1802a2eb8]
lea r9, [rbp + 0x58]
movss dword [rsp + 0x40], xmm11
mov rdx, rbx
mov qword [rsp + 0x38], rax
lea rax, [0x18029e604]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
movups xmmword [rbp - 0x80], xmm0
call fcn.180086d70
movaps xmm0, xmmword [0x1802a38a0]
lea r8, [rbp]
cmp qword [rbp + 0x18], 0x10
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
cmovae r8, qword [rbp]
call fcn.18006a410
movss xmm0, dword [rbp + 0x4cc]
addss xmm10, xmm12
mulss xmm0, dword [0x1802a2960]
mov r9d, eax
mov rcx, qword [0x180318268]
addss xmm9, dword [0x1802a2e70]
subss xmm10, xmm0
addss xmm9, dword [rbp + 0x4c0]
movss dword [rbp + 0x64], xmm10
movaps xmm10, xmmword [rsp + 0x510]
movss dword [rbp + 0x60], xmm9
movaps xmm9, xmmword [rsp + 0x520]
test eax, 0xff000000
je 0x180050a2d
nop dword [rax + rax]
inc r15
cmp byte [r8 + r15], r13b
jne 0x1800509d0
add r15, r8
cmp r8, r15
je 0x180050a2d
test rcx, rcx
jne 0x1800509ee
mov rax, qword [rbx + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [rbp - 0x80]
movss dword [rsp + 0x40], xmm11
movaps xmm2, xmm12
mov qword [rsp + 0x38], r15
mov rdx, rbx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x60]
movups xmmword [rbp - 0x80], xmm0
call fcn.180086d70
call fcn.180076580
mov rdx, qword [rbp + 0xa0]
movaps xmm12, xmmword [rsp + 0x4f0]
movaps xmm11, xmmword [rsp + 0x500]
cmp rdx, 0x10
jb 0x180050a85
mov rcx, qword [rbp + 0x88]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180050a80
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180050c35
call fcn.180110640
mov rdx, qword [rbp + 0x18]
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], r13b
cmp rdx, 0x10
jb 0x180050ad9
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180050ad4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180050c35
call fcn.180110640
mov rdx, qword [rbp - 8]
movdqa xmm0, xmmword [0x1802a31e0]
mov byte [rbp], r13b
movdqu xmmword [rbp + 0x10], xmm0
cmp rdx, 0x10
jb 0x180050b25
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180050b20
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180050c35
call fcn.180110640
mov rdx, qword [rbp + 0xc0]
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], r13b
cmp rdx, 0x10
jb 0x180050b76
mov rcx, qword [rbp + 0xa8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180050b71
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180050c35
call fcn.180110640
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x180050bb3
mov rcx, qword [rsp + 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180050bae
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180050c35
call fcn.180110640
mov rdx, qword [rbp + 0x1c8]
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], r13b
cmp rdx, 0x10
jb 0x180050c03
mov rcx, qword [rbp + 0x1b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180050bfe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180050c35
call fcn.180110640
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x180050c41
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180050c3c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180050c3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180110640
movaps xmm6, xmmword [rsp + 0x550]
mov r12, qword [rsp + 0x578]
mov r13, qword [rsp + 0x570]
mov rdi, qword [rsp + 0x580]
mov rsi, qword [rsp + 0x588]
mov r14, qword [rsp + 0x568]
add rsp, 0x590
pop r15
pop rbx
pop rbp
ret
call fcn.180007650
int3
call fcn.180007470
int3
call fcn.180007650
int3
call fcn.180007650
int3
call fcn.180007650
int3
call fcn.180007650
int3