Function at 0x180032e20
Capabilities:
Get disk information
Get geographical location
Get hostname
Get memory capacity

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a80]
mov eax, 0x1b80
call fcn.1801eee00
sub rsp, rax
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x1bd0], rbx
mov rax, qword [0x1802a8008]
xor rax, rsp
mov qword [rbp + 0x1a70], rax
mov r15, rdx
mov r12, rcx
mov qword [rbp - 0x80], rcx
mov qword [rbp - 0x78], rdx
xor eax, eax
mov qword [rbp + 0x5f0], rax
mov qword [rbp + 0x5f8], rax
mov qword [rbp + 0x600], rax
mov qword [rbp + 0x608], rax
mov ecx, dword [0x1802ec5e8]
mov rax, qword gs:[0x58]
mov ebx, 4
mov r13, qword [rax + rcx*8]
xor edi, edi
mov eax, dword [rbx + r13]
cmp dword [0x18034fb8c], eax
jle 0x180032fb4
lea rcx, [0x18034fb8c]
call fcn.1801e63c8
cmp dword [0x18034fb8c], 0xffffffff
jne 0x180032fb4
mov qword [rbp + 0xc8], 0xf
mov qword [rbp + 0xc0], rdi
mov byte [rbp + 0xb0], dil
mov qword [rbp + 0xe8], 0xf
mov qword [rbp + 0xe0], rdi
mov byte [rbp + 0xd0], dil
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rdi
lea r8d, [rdi + 0x2c]
lea rdx, str.40_53_48_83_EC_20_33_DB_38_1D_________74_1C
lea rcx, [rbp + 0xb0]
call fcn.1800bce40
nop
cmp byte [rbp + 0x118], dil
jne 0x180032f46
lea edx, [rdi + 1]
lea rcx, [rbp + 0xb0]
call fcn.1800bd430
xor edx, edx
lea rcx, [rbp + 0xb0]
call fcn.18003cd30
mov rcx, qword [rax]
mov qword [0x18034fb90], rcx
mov rdx, qword [rbp + 0x100]
test rdx, rdx
je 0x180032f8f
mov r8, qword [rbp + 0x110]
sub r8, rdx
sar r8, 3
call fcn.18003cb40
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rdi
lea rcx, [rbp + 0xd0]
call fcn.18003d070
lea rcx, [rbp + 0xb0]
call fcn.18003d070
nop
lea rcx, [0x18034fb8c]
call fcn.1801e6368
mov dword [0x1802da4f0], edi
mov dword [0x1802da500], edi
movabs rsi, 0x4f8644af03d0e0d6
mov qword [0x18034fb78], rsi
call fcn.1800cf390
mov ecx, dword [rax]
call qword [0x18034fb90]
mov qword [rbp + 0x138], 0xf
mov qword [rbp + 0x130], rdi
mov byte [rbp + 0x120], 0
mov r14, qword [rax + 0x10a8]
test r14, r14
je 0x180033565
movzx eax, byte [r14 + 0xc8]
movzx ecx, byte [r14 + 0xc9]
movzx edx, byte [r14 + 0xca]
movzx r9d, byte [r14 + 0xcb]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
lea r8, str.rIP:__u._u._u._u
mov edx, 0x1f
lea rcx, [rbp + 0x5f0]
call fcn.18003c9c0
movzx edx, byte [r14 + 0xc8]
lea rcx, [rbp - 0x10]
call fcn.18003c8d0
mov rsi, rax
movzx edx, byte [r14 + 0xc9]
lea rcx, [rbp - 0x50]
call fcn.18003c8d0
mov rdi, rax
movzx edx, byte [r14 + 0xca]
lea rcx, [rbp - 0x70]
call fcn.18003c8d0
mov rbx, rax
movzx edx, byte [r14 + 0xcb]
lea rcx, [rbp - 0x30]
call fcn.18003c8d0
nop
lea r8, [0x180204424]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.180035800
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.180035870
nop
lea r8, [0x180204424]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.180035800
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.180035870
nop
lea r8, [0x180204424]
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.180035800
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.180035870
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.18003c8f0
mov rax, qword [rbp + 0x48]
cmp rax, 0x10
jb 0x180033173
inc rax
mov rcx, qword [rbp + 0x30]
cmp rax, 0x1000
jb 0x18003316e
test cl, 0x1f
je 0x18003313e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18003314e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x18003315e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x18003316b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0x48], 0xf
xor edi, edi
mov qword [rbp + 0x40], rdi
mov byte [rbp + 0x30], dil
mov rax, qword [rbp + 0x178]
cmp rax, 0x10
jb 0x1800331e5
inc rax
mov rcx, qword [rbp + 0x160]
cmp rax, 0x1000
jb 0x1800331e0
test cl, 0x1f
je 0x1800331b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800331c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800331d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1800331dd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0x178], 0xf
mov qword [rbp + 0x170], rdi
mov byte [rbp + 0x160], 0
mov rax, qword [rbp + 0x68]
cmp rax, 0x10
jb 0x180033258
inc rax
mov rcx, qword [rbp + 0x50]
cmp rax, 0x1000
jb 0x180033253
test cl, 0x1f
je 0x180033223
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033233
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033243
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033250
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0x68], 0xf
mov qword [rbp + 0x60], rdi
mov byte [rbp + 0x50], 0
mov rax, qword [rbp + 0x88]
cmp rax, 0x10
jb 0x1800332c5
inc rax
mov rcx, qword [rbp + 0x70]
cmp rax, 0x1000
jb 0x1800332c0
test cl, 0x1f
je 0x180033290
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800332a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800332b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1800332bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0x88], 0xf
mov qword [rbp + 0x80], rdi
mov byte [rbp + 0x70], 0
mov rax, qword [rbp + 0xa8]
cmp rax, 0x10
jb 0x18003333b
inc rax
mov rcx, qword [rbp + 0x90]
cmp rax, 0x1000
jb 0x180033336
test cl, 0x1f
je 0x180033306
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033316
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033326
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033333
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0xa8], 0xf
mov qword [rbp + 0xa0], rdi
mov byte [rbp + 0x90], 0
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x1800333ae
inc rax
mov rcx, qword [rbp + 0x10]
cmp rax, 0x1000
jb 0x1800333a9
test cl, 0x1f
je 0x180033379
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033389
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033399
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1800333a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0x28], 0xf
mov qword [rbp + 0x20], rdi
mov byte [rbp + 0x10], 0
mov rax, qword [rbp - 0x18]
cmp rax, 0x10
jb 0x180033418
inc rax
mov rcx, qword [rbp - 0x30]
cmp rax, 0x1000
jb 0x180033413
test cl, 0x1f
je 0x1800333e3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800333f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033403
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033410
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x18], 0xf
mov qword [rbp - 0x20], rdi
mov byte [rbp - 0x30], 0
mov rax, qword [rbp - 0x58]
cmp rax, 0x10
jb 0x180033482
inc rax
mov rcx, qword [rbp - 0x70]
cmp rax, 0x1000
jb 0x18003347d
test cl, 0x1f
je 0x18003344d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18003345d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x18003346d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x18003347a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x58], 0xf
mov qword [rbp - 0x60], rdi
mov byte [rbp - 0x70], 0
mov rax, qword [rbp - 0x38]
cmp rax, 0x10
jb 0x1800334ec
inc rax
mov rcx, qword [rbp - 0x50]
cmp rax, 0x1000
jb 0x1800334e7
test cl, 0x1f
je 0x1800334b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800334c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800334d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1800334e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x38], 0xf
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x50], 0
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x180033556
inc rax
mov rcx, qword [rbp - 0x10]
cmp rax, 0x1000
jb 0x180033551
test cl, 0x1f
je 0x180033521
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033531
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033541
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x18003354e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
movabs rsi, 0x4f8644af03d0e0d6
mov ebx, 4
mov qword [rbp + 0x158], 0xf
mov qword [rbp + 0x150], rdi
mov byte [rbp + 0x140], 0
mov qword [rbp + 0x68], 0xf
mov qword [rbp + 0x60], rdi
mov byte [rbp + 0x50], 0
mov qword [rbp + 0x88], 0xf
mov qword [rbp + 0x80], rdi
mov byte [rbp + 0x70], 0
mov qword [rbp + 0xa8], 0xf
mov qword [rbp + 0xa0], rdi
mov byte [rbp + 0x90], 0
lea r8, [rbp + 0x120]
lea rdx, str.http:__ip_api.com_php_
lea rcx, [rbp - 0x70]
call fcn.180035900
nop
lea r8, str._fields
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.180035800
nop
lea r8, str.city
mov rdx, rax
lea rcx, [rbp + 0x260]
call fcn.180035800
nop
mov rax, qword [rbp - 0x38]
cmp rax, 0x10
jb 0x18003365a
inc rax
mov rcx, qword [rbp - 0x50]
cmp rax, 0x1000
jb 0x180033655
test cl, 0x1f
je 0x180033625
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033635
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033645
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033652
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x38], 0xf
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x50], 0
mov rax, qword [rbp - 0x58]
cmp rax, 0x10
jb 0x1800336c4
inc rax
mov rcx, qword [rbp - 0x70]
cmp rax, 0x1000
jb 0x1800336bf
test cl, 0x1f
je 0x18003368f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18003369f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800336af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1800336bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x58], 0xf
mov qword [rbp - 0x60], rdi
mov byte [rbp - 0x70], 0
lea r8, [rbp + 0x120]
lea rdx, str.http:__ip_api.com_php_
lea rcx, [rbp + 0x10]
call fcn.180035900
nop
lea r8, str._fields
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.180035800
nop
lea r8, str.country
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.180035800
nop
mov rax, qword [rbp - 0x18]
cmp rax, 0x10
jb 0x180033771
inc rax
mov rcx, qword [rbp - 0x30]
cmp rax, 0x1000
jb 0x18003376c
test cl, 0x1f
je 0x18003373c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18003374c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x18003375c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033769
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x18], 0xf
mov qword [rbp - 0x20], rdi
mov byte [rbp - 0x30], 0
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x1800337db
inc rax
mov rcx, qword [rbp + 0x10]
cmp rax, 0x1000
jb 0x1800337d6
test cl, 0x1f
je 0x1800337a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800337b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800337c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1800337d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0x28], 0xf
mov qword [rbp + 0x20], rdi
mov byte [rbp + 0x10], 0
lea r8, [rbp + 0x120]
lea rdx, str.http:__ip_api.com_php_
lea rcx, [rbp - 0x70]
call fcn.180035900
nop
lea r8, str._fields
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.180035800
nop
lea r8, [0x180203a30]
mov rdx, rax
lea rcx, [rbp + 0x220]
call fcn.180035800
nop
mov rax, qword [rbp - 0x38]
cmp rax, 0x10
jb 0x180033888
inc rax
mov rcx, qword [rbp - 0x50]
cmp rax, 0x1000
jb 0x180033883
test cl, 0x1f
je 0x180033853
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033863
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033873
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033880
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x38], 0xf
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x50], 0
mov rax, qword [rbp - 0x58]
cmp rax, 0x10
jb 0x1800338f2
inc rax
mov rcx, qword [rbp - 0x70]
cmp rax, 0x1000
jb 0x1800338ed
test cl, 0x1f
je 0x1800338bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800338cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800338dd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1800338ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x58], 0xf
mov qword [rbp - 0x60], rdi
mov byte [rbp - 0x70], 0
lea r8, [rbp + 0x120]
lea rdx, str.http:__ip_api.com_php_
lea rcx, [rbp + 0x10]
call fcn.180035900
nop
lea r8, str._fields
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.180035800
nop
lea r8, str.regionName
mov rdx, rax
lea rcx, [rbp + 0x200]
call fcn.180035800
nop
mov rax, qword [rbp - 0x18]
cmp rax, 0x10
jb 0x18003399f
inc rax
mov rcx, qword [rbp - 0x30]
cmp rax, 0x1000
jb 0x18003399a
test cl, 0x1f
je 0x18003396a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18003397a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x18003398a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033997
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x18], 0xf
mov qword [rbp - 0x20], rdi
mov byte [rbp - 0x30], 0
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x180033a09
inc rax
mov rcx, qword [rbp + 0x10]
cmp rax, 0x1000
jb 0x180033a04
test cl, 0x1f
je 0x1800339d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800339e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800339f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033a01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0x28], 0xf
mov qword [rbp + 0x20], rdi
mov byte [rbp + 0x10], 0
xor eax, eax
mov qword [rbp + 0x610], rax
mov qword [rbp + 0x618], rax
mov qword [rbp + 0x620], rax
mov qword [rbp + 0x628], rax
mov eax, dword [rbx + r13]
cmp dword [0x18034fb98], eax
jle 0x180033b46
lea rcx, [0x18034fb98]
call fcn.1801e63c8
cmp dword [0x18034fb98], 0xffffffff
jne 0x180033b46
mov qword [rbp + 0xc8], 0xf
mov qword [rbp + 0xc0], rdi
mov byte [rbp + 0xb0], 0
mov qword [rbp + 0xe8], 0xf
mov qword [rbp + 0xe0], rdi
mov byte [rbp + 0xd0], 0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rdi
mov r8d, 0x2c
lea rdx, str.40_53_48_83_EC_20_33_DB_38_1D_________74_1C
lea rcx, [rbp + 0xb0]
call fcn.1800bce40
nop
cmp byte [rbp + 0x118], 0
jne 0x180033ad8
mov edx, 1
lea rcx, [rbp + 0xb0]
call fcn.1800bd430
xor edx, edx
lea rcx, [rbp + 0xb0]
call fcn.18003cd30
mov rcx, qword [rax]
mov qword [0x18034fba0], rcx
mov rdx, qword [rbp + 0x100]
test rdx, rdx
je 0x180033b21
mov r8, qword [rbp + 0x110]
sub r8, rdx
sar r8, 3
call fcn.18003cb40
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rdi
lea rcx, [rbp + 0xd0]
call fcn.18003d070
lea rcx, [rbp + 0xb0]
call fcn.18003d070
nop
lea rcx, [0x18034fb98]
call fcn.1801e6368
mov dword [0x1802da4f0], edi
mov dword [0x1802da500], edi
mov qword [0x18034fb78], rsi
call fcn.1800cf390
mov ecx, dword [rax]
call qword [0x18034fba0]
mov rbx, qword [rax + 0x10a8]
test rbx, rbx
je 0x180033d9d
movzx eax, byte [rbx + 0xc8]
movzx ecx, byte [rbx + 0xc9]
movzx r8d, byte [rbx + 0xca]
movzx r9d, byte [rbx + 0xcb]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], r8d
lea r8, str._u._u._u._u
mov edx, 0x1f
lea rcx, [rbp + 0x610]
call fcn.18003c9c0
movzx edx, byte [rbx + 0xcb]
lea rcx, [rbp - 0x10]
call fcn.18003c8d0
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.18003c8f0
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x180033c32
inc rax
mov rcx, qword [rbp - 0x10]
cmp rax, 0x1000
jb 0x180033c2d
test cl, 0x1f
je 0x180033bfd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033c0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033c1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033c2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
movzx edx, byte [rbx + 0xca]
lea rcx, [rbp - 0x10]
call fcn.18003c8d0
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.18003c8f0
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x180033cab
inc rax
mov rcx, qword [rbp - 0x10]
cmp rax, 0x1000
jb 0x180033ca6
test cl, 0x1f
je 0x180033c76
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033c86
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033c96
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033ca3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
movzx edx, byte [rbx + 0xc9]
lea rcx, [rbp - 0x10]
call fcn.18003c8d0
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.18003c8f0
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x180033d24
inc rax
mov rcx, qword [rbp - 0x10]
cmp rax, 0x1000
jb 0x180033d1f
test cl, 0x1f
je 0x180033cef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033cff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033d0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033d1c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
movzx edx, byte [rbx + 0xc8]
lea rcx, [rbp - 0x10]
call fcn.18003c8d0
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.18003c8f0
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x180033d9d
inc rax
mov rcx, qword [rbp - 0x10]
cmp rax, 0x1000
jb 0x180033d98
test cl, 0x1f
je 0x180033d68
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033d78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033d88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180033d95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov dword [0x1802da4f0], edi
mov dword [0x1802da500], edi
mov qword [0x18034fb78], rsi
call fcn.1800cf390
mov ecx, dword [rax]
mov dword [0x1802da500], edi
movabs rax, 0x388eb2b86c73b6b3
mov qword [0x18034fb78], rax
mov qword [rsp + 0x50], rdi
mov dword [rsp + 0x50], ecx
mov rax, qword [rsp + 0x50]
mov qword [0x1802da5c8], rax
lea rax, [rbp + 0x4c0]
mov qword [0x1802da5d0], rax
mov qword [rsp + 0x50], rdi
mov dword [rsp + 0x50], 0xd
mov rax, qword [rsp + 0x50]
mov qword [0x1802da5d8], rax
mov dword [0x1802da4f0], 3
call fcn.1800cf390
mov dword [0x1802da500], edi
movabs rax, 0x6f79b93b0a8e4133
mov qword [0x18034fb78], rax
lea rax, [rbp + 0x4c0]
mov qword [0x1802da5c8], rax
mov qword [rsp + 0x50], rdi
mov dword [rsp + 0x50], 0xd
mov rax, qword [rsp + 0x50]
mov qword [0x1802da5d0], rax
mov dword [0x1802da4f0], 2
call fcn.1800cf390
mov dword [rbp + 0x280], 0x40
lea rcx, [rbp + 0x280]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov r8, qword [rbp + 0x288]
shr r8, 0xa
lea rdx, str._I64i
lea rcx, [rbp + 0xa70]
call fcn.1800359d0
xor edx, edx
mov r8d, 0x20a
lea rcx, [rbp + 0x860]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x20a
lea rcx, [rbp + 0x650]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x5c], edi
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x60], edi
mov dword [rsp + 0x38], 0x105
lea rax, [rbp + 0x650]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x5c]
mov r8d, 0x105
lea rdx, [rbp + 0x860]
lea rcx, [0x180203a60]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x650]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x5c]
lea r8, [rbp + 0xa70]
lea rdx, str._s_li_ws_li
lea rcx, [rbp + 0xa70]
call fcn.1800359d0
mov dword [rsp + 0x64], 0x10
lea rdx, [rsp + 0x64]
lea rcx, [rbp + 0x630]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea r9, [rbp + 0x630]
lea r8, [rbp + 0xa70]
lea rdx, str._s_ws
lea rcx, [rbp + 0xa70]
call fcn.1800359d0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x180269fd8]
mulsd xmm0, qword [0x18026a3e8]
cvttsd2si r13, xmm0
lea rcx, [rbp - 0x10]
call fcn.180032310
nop
mov rcx, rax
call fcn.18003ddf0
mov r9d, 8
mov r8, rax
mov edx, 0xff
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov byte [rbp + 0x4be], 0
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x180034046
inc rax
mov rcx, qword [rbp - 0x10]
cmp rax, 0x1000
jb 0x180034041
test cl, 0x1f
je 0x180034011
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180034021
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180034031
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x18003403e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0x48], 0xf
mov qword [rbp + 0x40], rdi
mov byte [rbp + 0x30], 0
cmp byte [rbp + 0xa70], 0
jne 0x180034064
mov r8, rdi
jmp 0x18003407a
lea rax, [rbp + 0xa70]
or r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180034070
lea rdx, [rbp + 0xa70]
lea rcx, [rbp + 0x30]
call fcn.18003d620
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.180034540
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.180032790
nop
cmp qword [rbx + 0x18], 0x10
jb 0x1800340af
mov rbx, qword [rbx]
cmp qword [r15 + 0x18], 0x10
jb 0x1800340bb
mov rsi, qword [r15]
jmp 0x1800340be
mov rsi, r15
cmp qword [r12 + 0x18], 0x10
jb 0x1800340cc
mov rdi, qword [r12]
jmp 0x1800340cf
mov rdi, r12
mov rcx, rax
call fcn.18003ddf0
mov r9, rax
mov dword [rsp + 0x40], r13d
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rdi
lea rax, str.username_spassword_shwid_sreference_u
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x2c0]
call fcn.18003c1f0
nop
mov rax, qword [rbp - 0x38]
cmp rax, 0x10
jb 0x18003416b
inc rax
mov rcx, qword [rbp - 0x50]
cmp rax, 0x1000
jb 0x180034166
test cl, 0x1f
je 0x180034136
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180034146
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x180034156
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180034163
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x38], 0xf
xor ebx, ebx
mov qword [rbp - 0x40], rbx
mov byte [rbp - 0x50], bl
mov rax, qword [rbp - 0x58]
cmp rax, 0x10
jb 0x1800341d6
inc rax
mov rcx, qword [rbp - 0x70]
cmp rax, 0x1000
jb 0x1800341d1
test cl, 0x1f
je 0x1800341a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800341b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800341c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1800341ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x58], 0xf
mov qword [rbp - 0x60], rbx
mov byte [rbp - 0x70], 0
mov rax, qword [rbp + 0x48]
cmp rax, 0x10
jb 0x180034240
inc rax
mov rcx, qword [rbp + 0x30]
cmp rax, 0x1000
jb 0x18003423b
test cl, 0x1f
je 0x18003420b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18003421b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x18003422b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180034238
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp + 0x48], 0xf
mov qword [rbp + 0x40], rbx
mov byte [rbp + 0x30], 0
lea rcx, [rbp - 0x30]
call fcn.180032990
mov r14, rax
mov dword [0x1802da4f0], ebx
mov dword [0x1802da500], ebx
movabs rax, 0x4f8644af03d0e0d6
mov qword [0x18034fb78], rax
call fcn.1800cf390
cmp qword [r15 + 0x18], 0x10
jb 0x18003428a
mov rsi, qword [r15]
jmp 0x18003428d
mov rsi, r15
cmp qword [r12 + 0x18], 0x10
jb 0x18003429b
mov rdi, qword [r12]
jmp 0x18003429e
mov rdi, r12
mov ecx, dword [rax]
call qword [0x180341458]
mov rbx, rax
mov rcx, r14
call fcn.18003ddf0
mov r9, rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rdi
lea rax, str.username_spassword_sSocialClub_sreference_u
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x2c0]
call fcn.18003c1f0
nop
mov rax, qword [rbp - 0x18]
cmp rax, 0x10
jb 0x180034340
inc rax
mov rcx, qword [rbp - 0x30]
cmp rax, 0x1000
jb 0x18003433b
test cl, 0x1f
je 0x18003430b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18003431b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x18003432b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x180034338
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
mov qword [rbp - 0x18], 0xf
mov qword [rbp - 0x20], 0
mov byte [rbp - 0x30], 0
lea rcx, [rbp - 0x10]
call fcn.180032be0
mov r14, rax
lea rcx, [rbp + 0x4c0]
call fcn.18003c7b0
mov rsi, rax
mov rcx, r15
call fcn.18003ce50
mov rdi, rax
mov rcx, r12
call fcn.18003ce50
mov rbx, rax
mov rcx, r14
call fcn.18003ddf0
mov r9, rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rbx
lea rax, str.username_spassword_sRID_sreference_u
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x2c0]
call fcn.18003c1f0
nop
lea rcx, [rbp - 0x10]
call fcn.18003d070
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1a0]
call fcn.180036e40
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1a0]
call fcn.180036e70
mov r8, qword [r8]
mov rdx, qword [rax]
lea rcx, [rbp + 0x180]
call fcn.180035a30
nop
lea rcx, [rbp + 0x180]
call fcn.1800326b0
test al, al
je 0x1800344fd
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x10]
call fcn.180036300
mov rdx, rax
mov ecx, r13d
call fcn.1800324b0
test al, al
je 0x1800344f2
lea rcx, [rbp + 0x180]
call fcn.18003d070
nop
lea rcx, [rbp + 0x1c0]
call fcn.18003c150
nop
lea rcx, [rbp + 0x1e0]
call fcn.18003c150
nop
lea rcx, [rbp + 0x1a0]
call fcn.18003c150
nop
lea rcx, [rbp + 0x200]
call fcn.18003d070
nop
lea rcx, [rbp + 0x220]
call fcn.18003d070
nop
lea rcx, [rbp + 0x240]
call fcn.18003d070
nop
lea rcx, [rbp + 0x260]
call fcn.18003d070
nop
lea rcx, [rbp + 0x90]
call fcn.18003d070
nop
lea rcx, [rbp + 0x70]
call fcn.18003d070
nop
lea rcx, [rbp + 0x50]
call fcn.18003d070
nop
lea rcx, [rbp + 0x140]
call fcn.18003d070
nop
lea rcx, [rbp + 0x120]
call fcn.18003d070
nop
mov rcx, r12
call fcn.18003d070
nop
mov rcx, r15
call fcn.18003d070
mov al, 1
jmp 0x180034508
call fcn.180063330
call fcn.180063360
int3
call fcn.180063330
call fcn.180063360
nop
mov rcx, qword [rbp + 0x1a70]
xor rcx, rsp
call fcn.1801e6190
mov rbx, qword [rsp + 0x1bd0]
add rsp, 0x1b80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret