Function at 0x1800a1cd0
Capabilities:
Delete file
Download url
Receive data

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x7a8]
sub rsp, 0x880
mov qword [rbp + 0x128], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x180168908]
xor rax, rsp
mov qword [rbp + 0x770], rax
mov r13, rcx
xor r15d, r15d
mov esi, r15d
mov dword [rsp + 0x38], r15d
call fcn.1800a3c30
cmp eax, dword [0x1801688e4]
jg 0x1800a2afc
mov rcx, qword [0x180176b30]
test rcx, rcx
jne 0x1800a1d9b
lea rcx, [0x180167da8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp qword [0x180176b30], rsi
jne 0x1800a1d87
lea ecx, [r15 + 8]
call fcn.1800a5060
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1800a1d78
xor eax, eax
mov qword [rbx], rax
mov rcx, rbx
call fcn.180084fb0
jmp 0x1800a1d7b
mov rbx, r15
lock or dword [rsp], 0
mov qword [0x180176b30], rbx
lea rcx, [0x180167da8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [0x180176b30]
xor r9d, r9d
lea r8, str.update_sign_url
lea rdx, [rbp + 0x130]
call fcn.180086730
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x1800a1dbe
mov rbx, qword [rax]
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x1800a31c8
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
mov rdi, 0xffffffffffffffff
test rbx, rbx
je 0x1800a1e11
cmp rbx, 0x10000
jae 0x1800a1e02
movzx edx, bx
lea rcx, [rsp + 0x30]
call fcn.180012580
jmp 0x1800a1e25
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800a1e05
jmp 0x1800a1e14
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.180009210
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x1800a1e6b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a1e66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a31d3
call fcn.1800a4c5c
mov rbx, qword [rsp + 0x30]
cmp dword [rbx - 0x10], 0
je 0x1800a1f3d
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x360]
call fcn.1800d4600
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
mov r9d, 0x104
lea r8, [rbp + 0x360]
mov rdx, rbx
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToCacheFileW
test eax, eax
js 0x1800a1f3d
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x250], xmm0
mov byte [rbp + 0x240], 0
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x360]
call fcn.18008c4d0
test eax, eax
jne 0x1800a1f5d
mov rdx, qword [rbp + 0x258]
cmp rdx, 0x10
jb 0x1800a1f26
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a1f21
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a31d9
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x250], xmm0
mov byte [rbp + 0x240], 0
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x1800a2afc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x1800a2afc
lea rcx, [rbp + 0x360]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rbx, qword [str.45476F8083D74AC28A2DA8ED399737B7]
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x1800a31df
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
test rbx, rbx
je 0x1800a1fbd
cmp rbx, 0x10000
jae 0x1800a1fae
movzx edx, bx
lea rcx, [rsp + 0x50]
call fcn.180012580
jmp 0x1800a1fd1
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800a1fb1
jmp 0x1800a1fc0
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.180009210
nop
lea rdx, [rbp + 0x240]
cmp qword [rbp + 0x258], 0x10
cmovae rdx, qword [rbp + 0x240]
mov r8d, 0xfde9
lea rcx, [rbp + 0xa8]
call fcn.1800aac80
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x1800a2007
mov rbx, qword [rax]
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x1800a31ea
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
test rbx, rbx
je 0x1800a205c
cmp rbx, 0x10000
jae 0x1800a2044
movzx edx, bx
lea rcx, [rsp + 0x48]
call fcn.180012580
jmp 0x1800a2070
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800a2050
jmp 0x1800a205f
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.180009210
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x60]
call fcn.1800aa1b0
nop
mov r8d, 0xfde9
mov rdx, qword [rax]
lea rcx, [rbp + 0x268]
call fcn.1800aaad0
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800a20b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800a20d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x1800a211d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2118
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a31f5
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x180113320]
movdqu xmmword [rbp + 0xb8], xmm0
mov word [rbp + 0xa8], r15w
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800a2153
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
cmp qword [rbp + 0x278], 0
jne 0x1800a2238
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x1800a21a2
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a219d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a31fb
call fcn.1800a4c5c
mov qword [rbp + 0x278], r15
mov qword [rbp + 0x280], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x268], 0
mov rdx, qword [rbp + 0x258]
cmp rdx, 0x10
jb 0x1800a21fc
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a21f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3201
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x250], xmm0
mov byte [rbp + 0x240], 0
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x1800a2afc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x1800a2afc
xor eax, eax
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x2d0], rax
mov qword [rbp + 0x2d8], rax
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x2e8], rax
lea rcx, [rbp + 0x2c8]
call fcn.180083190
nop
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x2c8]
call fcn.180084070
test al, al
jne 0x1800a2335
lea rcx, [rbp + 0x2c8]
call fcn.1800805a0
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x1800a22d3
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a22ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3207
call fcn.1800a4c5c
mov qword [rbp + 0x278], r15
mov qword [rbp + 0x280], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x268], 0
mov rdx, qword [rbp + 0x258]
cmp rdx, 0x10
jb 0x1800a21fc
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a21f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a31c2
jmp 0x1800a21f7
mov qword [rbp + 0x228], r15
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x230], xmm0
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x298], xmm0
mov byte [rbp + 0x288], 0
movdqu xmmword [rbp + 0x2b8], xmm0
mov byte [rbp + 0x2a8], 0
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
xor r8d, r8d
lea rdx, [0x180112398]
lea rcx, [rbp + 0x28]
call fcn.18000a3d0
nop
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
mov r8d, 5
lea rdx, str.CSVer
lea rcx, [rbp - 0x38]
call fcn.18000a3d0
nop
lea r9, [rbp + 0x28]
lea r8, [rbp - 0x38]
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x2c8]
call fcn.180083ce0
mov rbx, rax
lea rax, [rbp + 0x288]
cmp rax, rbx
je 0x1800a240c
lea rcx, [rbp + 0x288]
call fcn.180008ad0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x288], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x298], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x1800a244d
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2448
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a320d
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0xd8], xmm0
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1800a249f
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a249a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3213
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x1800a24eb
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a24e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3219
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], 0
mov r8d, 6
lea rdx, str.CSList
lea rcx, [rbp + 0x48]
call fcn.18000a3d0
nop
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x2c8]
call fcn.180083610
mov r14d, eax
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x1800a2561
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a255c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a321f
call fcn.1800a4c5c
xor eax, eax
mov qword [rbp + 0x318], rax
mov qword [rbp + 0x320], rax
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x330], rax
mov qword [rbp + 0x338], rax
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], al
lea r8d, [rax + 6]
lea rdx, str.CSList
lea rcx, [rbp + 8]
call fcn.18000a3d0
nop
lea r8, [rbp + 8]
lea rdx, [rbp + 0x318]
lea rcx, [rbp + 0x2c8]
call fcn.180083f90
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x1800a25fe
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a25f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3225
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
movdqa xmm1, xmm0
movdqu xmmword [rbp + 0x78], xmm0
mov byte [rbp + 0x68], 0
xor r8d, r8d
lea rdx, [0x180112398]
lea rcx, [rbp + 0x68]
call fcn.18000a3d0
nop
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x318]
call fcn.1800842e0
mov rbx, rax
lea rax, [rbp + 0x2a8]
cmp rax, rbx
je 0x1800a2686
lea rcx, [rbp + 0x2a8]
call fcn.180008ad0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x2a8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x2b8], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x1800a26c7
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a26c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a322b
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x1800a271c
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2717
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3231
call fcn.1800a4c5c
mov esi, r15d
test r14d, r14d
jle 0x1800a28d2
nop dword [rax + rax]
mov edx, esi
lea rcx, [rbp + 0x318]
call fcn.1800832c0
mov rcx, rax
lea rdx, [rbp + 0x340]
call fcn.180081760
nop
lea rdx, [rbp + 0x340]
cmp qword [rbp + 0x358], 0x10
cmovae rdx, qword [rbp + 0x340]
mov r8d, 0xfde9
lea rcx, [rbp + 0x150]
call fcn.1800aac80
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x1800a2784
mov rbx, qword [rax]
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x1800a3243
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
test rbx, rbx
je 0x1800a27d0
cmp rbx, 0x10000
jae 0x1800a27c1
movzx edx, bx
lea rcx, [rsp + 0x40]
call fcn.180012580
jmp 0x1800a27e4
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800a27c4
jmp 0x1800a27d3
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.180009210
nop
mov rax, qword [rbp + 0x230]
cmp qword [rbp + 0x238], rax
je 0x1800a280b
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.180035e30
add qword [rbp + 0x230], 8
jmp 0x1800a2820
lea r8, [rsp + 0x40]
mov rdx, rax
lea rcx, [rbp + 0x228]
call fcn.18002f670
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800a283f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x1800a2886
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2880
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3237
call fcn.1800a4c5c
nop
mov rdx, qword [rbp + 0x358]
cmp rdx, 0x10
jb 0x1800a28c7
inc rdx
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a28c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a323d
call fcn.1800a4c5c
inc esi
cmp esi, r14d
jl 0x1800a2730
mov rsi, qword [rbp + 0x228]
mov r12, qword [rbp + 0x230]
cmp rsi, r12
je 0x1800a29a1
nop dword [rax]
mov r15, qword [rsi]
lea rbx, [r15 - 0x18]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rbx + 0x10], 0
jl 0x1800a2914
cmp rax, qword [rbx]
jne 0x1800a2914
lock inc dword [rbx + 0x10]
jmp 0x1800a2952
lea r14, [rbx + 8]
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [r14]
call qword [rax]
mov rbx, rax
test rax, rax
je 0x1800a32af
mov ecx, dword [r14]
mov dword [rax + 8], ecx
mov ecx, dword [r14]
inc ecx
movsxd rdx, ecx
add rdx, rdx
lea rcx, [rax + 0x18]
mov r9, rdx
mov r8, r15
call fcn.180009440
add rbx, 0x18
mov qword [rsp + 0x78], rbx
mov rdx, qword [r13 + 8]
test rdx, rdx
je 0x1800a32a4
mov rcx, rbx
call fcn.1800dce44
test eax, eax
je 0x1800a2b36
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800a2991
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rsi, 8
cmp rsi, r12
jne 0x1800a28f0
xor r15d, r15d
mov esi, dword [rsp + 0x38]
lea rcx, [rbp + 0x318]
call fcn.1800805a0
nop
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0x10
jb 0x1800a29f3
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a29ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a324e
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x2b8], xmm0
mov byte [rbp + 0x2a8], 0
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 0x10
jb 0x1800a2a4b
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2a46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a31bc
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x298], xmm0
mov byte [rbp + 0x288], 0
mov rcx, qword [rbp + 0x228]
test rcx, rcx
je 0x1800a2ab4
lea r8, [rbp + 0x228]
mov rdx, qword [rbp + 0x230]
call fcn.1800a1bf0
mov r8, qword [rbp + 0x238]
mov rdx, qword [rbp + 0x228]
sub r8, rdx
sar r8, 3
lea rcx, [rbp + 0x228]
call fcn.180030c40
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x238], r15
lea rcx, [rbp + 0x2c8]
call fcn.1800805a0
nop
lea rcx, [rbp + 0x268]
call fcn.180008ad0
nop
lea rcx, [rbp + 0x240]
call fcn.180008ad0
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x1800a2af8
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
test esi, esi
jne 0x1800a2b04
mov rcx, r13
call fcn.1800a4660
mov eax, esi
mov rcx, qword [rbp + 0x770]
xor rcx, rsp
call fcn.1800a5130
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov esi, 1
xor eax, eax
mov qword [rbp + 0x2f0], rax
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x310], rax
lea rcx, [rbp + 0x2f0]
call fcn.180083190
nop
lea rdx, [rbp + 0x288]
lea rcx, [rbp + 0x190]
call fcn.180080090
nop
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
lea r8d, [rsi + 4]
lea rdx, str.CSVer
lea rcx, [rbp - 0x58]
call fcn.18000a3d0
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x2f0]
call fcn.1800832b0
mov rcx, rax
lea rdx, [rbp + 0x190]
call fcn.180080670
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1800a2c02
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2bfd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3254
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
lea rcx, [rbp + 0x190]
call fcn.1800805a0
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x1b8]
call fcn.180080090
nop
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov r8d, 6
lea rdx, str.CSList
lea rcx, [rbp - 0x80]
call fcn.18000a3d0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x2f0]
call fcn.1800832b0
mov rcx, rax
lea rdx, [rbp + 0x1b8]
call fcn.180080670
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800a2cb6
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2cb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a325a
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
lea rcx, [rbp + 0x1b8]
call fcn.1800805a0
xor edx, edx
lea rcx, [rbp + 0x1e0]
call fcn.1800800f0
nop
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp - 8], xmm0
mov byte [rbp - 0x18], 0
mov r8d, ntohs
lea rdx, str.CheckFailCnt
lea rcx, [rbp - 0x18]
call fcn.18000a3d0
nop
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x2f0]
call fcn.1800832b0
mov rcx, rax
lea rdx, [rbp + 0x1e0]
call fcn.180080670
nop
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1800a2d65
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2d60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3260
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp - 8], xmm0
mov byte [rbp - 0x18], 0
lea rcx, [rbp + 0x1e0]
call fcn.1800805a0
xor r15d, r15d
mov qword [rbp + 0x260], r15
mov rbx, qword [str.45476F8083D74AC28A2DA8ED399737B7]
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x1800a3266
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
test rbx, rbx
je 0x1800a2ddf
cmp rbx, 0x10000
jae 0x1800a2dd0
movzx edx, bx
lea rcx, [rsp + 0x60]
call fcn.180012580
jmp 0x1800a2df3
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800a2dd3
jmp 0x1800a2de2
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.180009210
nop
lea rdx, [rbp + 0x2a8]
cmp qword [rbp + 0x2c0], 0x10
cmovae rdx, qword [rbp + 0x2a8]
mov r8d, 0xfde9
lea rcx, [rbp + 0x108]
call fcn.1800aac80
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x1800a2e29
mov rbx, qword [rax]
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x1800a3271
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
test rbx, rbx
je 0x1800a2e7c
cmp rbx, 0x10000
jae 0x1800a2e66
movzx edx, bx
lea rcx, [rsp + 0x58]
call fcn.180012580
jmp 0x1800a2e90
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800a2e70
jmp 0x1800a2e7f
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.180009210
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x260]
call fcn.1800aa6d0
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800a2ec6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 8
jb 0x1800a2f0c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2f07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a327c
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x180113320]
movdqu xmmword [rbp + 0x118], xmm0
mov word [rbp + 0x108], r15w
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800a2f42
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x98], xmm0
mov byte [rbp + 0x88], 0
xor r8d, r8d
lea rdx, [0x180112398]
lea rcx, [rbp + 0x88]
call fcn.18000a3d0
nop
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x2f0]
call fcn.1800842e0
mov rdx, rax
mov rcx, r13
call fcn.1800a4980
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x1800a2fd7
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a2fd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3282
call fcn.1800a4c5c
lea rax, [rsp + 0x68]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 0x10
cmovae rdx, qword [rbp + 0x288]
mov r8d, 0xfde9
lea rcx, [rbp + 0x170]
call fcn.1800aac80
mov rbx, rax
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x1800a3288
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea r14, str.SOFTWAREComMaster
cmp r14, 0x10000
jae 0x1800a304d
movzx edx, r14w
lea rcx, [rsp + 0x68]
call fcn.180012580
jmp 0x1800a306c
mov rax, rdi
inc rax
cmp word [r14 + rax*2], 0
jne 0x1800a3050
mov r8d, eax
mov rdx, r14
lea rcx, [rsp + 0x68]
call fcn.180009210
nop
cmp qword [rbx + 0x18], 8
jb 0x1800a3076
mov rbx, qword [rbx]
mov qword [rsp + 0x20], rbx
lea r9, [0x180124700]
lea r8, [rsp + 0x68]
mov rdx, 0xffffffff80000002
mov rcx, r13
call fcn.1800a4560
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x1800a30dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a30d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800a3293
call fcn.1800a4c5c
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x1800a3299
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
cmp r14, 0x10000
jae 0x1800a3120
movzx edx, r14w
lea rcx, [rsp + 0x70]
call fcn.180012580
jmp 0x1800a313f
mov rax, rdi
inc rax
cmp word [r14 + rax*2], 0
jne 0x1800a3123
mov r8d, eax
mov rdx, r14
lea rcx, [rsp + 0x70]
call fcn.180009210
nop
mov rax, qword [rbp + 0x260]
mov qword [rsp + 0x20], rax
lea r9, [0x180124710]
lea r8, [rsp + 0x70]
mov rdx, 0xffffffff80000002
mov rcx, r13
call fcn.1800a4560
nop
mov rdx, qword [rbp + 0x260]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800a3188
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rbp + 0x2f0]
call fcn.1800805a0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800a29a5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x1800a29a5
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
call fcn.1800d79f8
int3
call fcn.1800d79f8
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
int3
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
call fcn.1800d79f8
int3
mov ecx, 0x80004005
call fcn.180008c20
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
call fcn.180009380
int3
push rbx
sub rsp, 0x20
mov rbx, rcx
add rcx, 8
test rdx, rdx
jne 0x1800a4116
xor eax, eax
jmp 0x1800a412a
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1800a4120
mov r8d, eax
call fcn.180009210
mov r8, qword [str.CheckSignShareMem]
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov qword [rbx], rax
mov rcx, rbx
test rax, rax
je 0x1800a415d
call fcn.1800a39b0
test eax, eax
jne 0x1800a4173
mov rcx, rbx
call fcn.1800a32c0
test eax, eax
jne 0x1800a4173
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x1800a1cd0
add rsp, 0x20
pop rbx
ret