Function at 0x180003748
Capabilities:
Accept command line arguments
Check os version
Encrypt data using speck
Parse credit card information
Terminate process

Disassembly:
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x78
mov eax, dword [rsp + 0xb8]
mov esi, edx
mov qword [rsp + 0x68], rax
jmp 0x180003786
mov esi, dword [rsp + 0xa8]
mov ecx, 0x41
lea edx, [rcx - 0x34]
jmp 0x180003793
mov esi, dword [rsp + 0xa8]
mov edx, 0xd
lea ecx, [rdx + 0x34]
mov edi, 0x4a
mov r11d, 0x4e
mov rbx, qword [0x180033010]
mov r8d, 0x6f
movzx r9d, bx
mov ebp, 0x4f
and r9w, cx
sub r8b, r9b
movzx eax, r9w
sub r8b, bl
mov qword [rsp + 0x60], r9
sub rbp, rax
mov dword [rsp + 0x40], r8d
cmp r9w, cx
jne 0x1800038cb
cmp rbp, 0x23
jb 0x1800037ea
mov qword [0x180033020], 0x2c3
jmp 0x1800038fd
cmp rbp, 0xe
jne 0x1800038bb
cmp rbx, 0x63
jb 0x180004ea6
cmp rbx, rdx
jne 0x180003813
mov qword [0x180033020], 0xfffffffffffffdcb
jmp 0x1800038fd
cmp rbx, 0xa
je 0x180004e9f
movabs rax, 0xa708cebaa1ed41e9
cmp rbx, rax
jne 0x180003839
mov dword [rsp + 0x48], 0x5bd1e995
jmp 0x1800038fd
cmp rbx, 0x5d
jne 0x180003866
movzx r9d, r8b
mov rdx, rbx
lea r8d, [rbx - 0x4f]
mov qword [rsp + 0x20], rcx
call fcn.180004f7c
mov r8b, al
mov ebx, 0x12f57
mov dword [rsp + 0x40], r8d
jmp 0x1800038f3
cmp rbx, 0x1a
jae 0x18000387c
mov ecx, 0xe
call qword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x180003775
cmp rbx, r11
je 0x180003799
cmp rbx, 0x32
jne 0x1800038a5
lea edx, [rbx - 0x24]
mov rcx, rbx
call fcn.18000705c
mov r8d, dword [rsp + 0x40]
mov r9, rax
mov qword [rsp + 0x60], rax
jmp 0x1800038f8
cmp rbx, 0x62
je 0x180004ea6
cmp rbx, 1
jb 0x180003799
jmp 0x1800038fd
mov eax, 0x24
cmp rbp, rax
je 0x180003799
jmp 0x1800038fd
cmp r9w, di
jne 0x1800038fd
movzx eax, r8b
mov r9, rbp
mov r8, rdi
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, rbx
call fcn.180004f7c
mov r8d, dword [rsp + 0x40]
mov rbp, rax
mov r9, qword [rsp + 0x60]
mov ecx, 0x41
xor edx, edx
movzx edi, r8b
mov eax, 0x12d
div rbx
mov edx, 0x24
mov r11, rax
mov eax, 0x28a
add r11w, di
or r11w, ax
lea eax, [r9 - 0x29]
cmp ax, dx
mov qword [rsp + 0x58], r11
mov edx, 0xd
ja 0x18000378e
cmp r9w, dx
jne 0x18000394e
movzx r8d, r8b
mov rcx, rbp
call fcn.180003748
jmp 0x180003786
cmp r9w, cx
jne 0x18000399a
movzx ecx, r8b
movabs rax, 0xa01a01a01a01a01b
mul rcx
mov eax, ecx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 8
imul rax, rax, 0x13b
sub rcx, rax
movzx eax, r8b
and ecx, eax
or ecx, 0x237
sub ecx, 0x25f
mov qword [rsp + 0x68], rcx
jmp 0x180003a20
mov eax, 5
cmp r9w, ax
jae 0x1800039b9
movzx r8d, r9w
mov edx, ebx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x180003786
mov eax, 0x59
cmp r9w, ax
jne 0x1800039d6
movzx ecx, r8b
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x180003786
mov eax, 0x2d
cmp r9w, ax
jb 0x180004f69
cmp r9w, dx
jb 0x18000378e
cmp r9w, 0x4b
jbe 0x180003a08
movzx edx, r8b
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x180003786
mov eax, 2
cmp r9w, ax
jne 0x180003a20
neg rbx
and ebx, 0x25
mov qword [0x180033010], rbx
movzx r10d, r9w
movabs rax, 0x4bd3edda68fe0e43
mul r10
mov eax, r10d
mov ecx, r10d
sub rax, rdx
mov ebx, 0x75
shr rax, 1
add rax, rdx
shr rax, 9
imul rax, rax, 0x316
sub rcx, rax
sub rbx, rcx
cmp rbx, 0x19
jne 0x180003a8b
xor edx, edx
mov eax, 0x5be0
div r10
movzx r9d, dx
mov qword [rsp + 0x60], r9
mov edi, dword [rsp + 0xb8]
lea rsi, [rbx + 0x21]
xor rsi, 0x1f2
mov qword [rsp + 0x50], rsi
jmp 0x180003c37
cmp rbx, 0xc
jae 0x180003aa5
and r9w, r11w
mov ecx, 0x300
and r9w, cx
or r9w, 0x6f
jmp 0x180003a6a
cmp rbx, 0x15
jb 0x180004f63
cmp rbx, 0x57
jb 0x180003ad6
movzx edx, r11w
movzx ecx, r8b
call fcn.18000705c
mov r9, qword [rsp + 0x60]
mov rbp, rax
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
jmp 0x180003a6f
cmp rbx, 0x46
jbe 0x180003b08
movzx ecx, r8b
mov rdx, rbx
mov r9d, ecx
movzx r8d, r11w
mov qword [rsp + 0x20], rcx
call fcn.180004f7c
mov r9d, 0x74
mov rbx, rax
sub r9w, di
mov qword [rsp + 0x60], r9
jmp 0x180003aca
mov edx, 0xd
cmp rbx, rdx
jae 0x180003b2e
movzx edx, r11w
mov r9, r10
mov r8, rbx
mov qword [rsp + 0x20], r10
mov rcx, rbp
call fcn.180004f7c
jmp 0x180003786
mov ecx, 0x41
lea edi, [rcx + 9]
cmp rbx, 0x26
jb 0x180003793
cmp rbx, 0x34
jne 0x180003b66
lea eax, [rcx + 0x49]
movzx edi, r11w
and edi, eax
sub edi, eax
xor edi, esi
xor edi, dword [rsp + 0xb0]
mov dword [rsp + 0xb8], edi
jmp 0x180003a76
cmp rbx, 0x25
jne 0x180003b77
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x180003775
cmp rbx, 0x4e
jbe 0x180003b98
mov r9, rbp
mov qword [rsp + 0x20], r10
mov r8, r10
mov rdx, r10
mov rcx, rbp
call fcn.180004f7c
jmp 0x180003ac2
cmp rbx, 0x1d
ja 0x180003bcf
movzx ecx, r11w
movabs rax, 0xf1d48bcee0d399fb
mul rcx
shr rdx, 9
imul rax, rdx, 0x21e
sub rcx, rax
and ecx, 0x31d
mov qword [0x180033020], rcx
jmp 0x180003a6f
cmp rbx, 0x62
jbe 0x180003bf2
imul rcx, r10, 0x28c
lea rax, [rbx + 0xe9]
xor rcx, rax
mov qword [0x180033028], rcx
jmp 0x180003a6f
cmp rbx, 0x37
jne 0x180003c1e
movzx ecx, r8b
mov edx, ebp
mov r8, r10
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r9, qword [rsp + 0x60]
mov r8b, al
mov r11, qword [rsp + 0x58]
mov dword [rsp + 0x40], r8d
jmp 0x180003a6f
cmp rbx, 0x25
ja 0x180003a6f
mov rcx, r10
jmp 0x180003871
mov edi, dword [rsp + 0xb8]
mov r10d, dword [rsp + 0xa8]
movzx eax, r8b
mov ecx, 0x49
sub rcx, rax
mov edx, r10d
cmp rdx, rcx
jae 0x180004477
movzx eax, r11w
sub rax, 0x2cd
cmp rdx, rax
ja 0x18000437e
movzx ecx, r9w
xor edx, edx
mov eax, 0xcf
div rcx
mov rcx, rax
mov eax, r10d
or rcx, 0x139
sub rcx, 0x13a
cmp rax, rcx
ja 0x180004186
jmp 0x180003c9f
mov r10d, dword [rsp + 0xa8]
movzx eax, r11w
mov ecx, 0x2cf
sub rcx, rax
mov eax, r10d
cmp rax, rcx
ja 0x180003f75
cmp rbp, 0x2f
je 0x18000415e
cmp rbp, 0x58
jbe 0x180003cd9
movzx edx, r9w
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
movsxd rbp, eax
jmp 0x180003d0c
cmp rbp, 0x37
ja 0x18000444f
cmp rbp, 0x5d
je 0x180004139
mov eax, 0x2d
cmp rbp, rax
jne 0x180003d1b
movzx edx, r11w
movzx ecx, r11w
call fcn.18000705c
mov rsi, rax
mov qword [rsp + 0x50], rax
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
jmp 0x180003e49
cmp rbp, 0xe
jne 0x180003e31
cmp rsi, 0x4c
jae 0x180003d5a
movzx edx, r8b
mov rcx, rsi
movzx r8d, r9w
mov r9d, r8d
mov qword [rsp + 0x20], rdx
call fcn.180004f7c
mov r11, qword [rsp + 0x58]
mov r8b, al
mov dword [rsp + 0x40], r8d
mov ebp, 0x37f
jmp 0x180003e49
cmp rsi, 0x11
jne 0x180003d75
movzx r8d, r11w
lea edx, [rsi - 3]
movzx ecx, r11w
call fcn.180003748
jmp 0x180003dfe
cmp rsi, 0x4d
je 0x180004430
cmp rsi, 0x3b
jbe 0x180004108
cmp rsi, 0x44
jb 0x180004eb0
cmp rsi, 0xf
jae 0x180003dae
movzx edx, r9w
movzx ecx, r11w
call fcn.18000705c
mov rbp, rax
jmp 0x180003d0c
cmp rsi, 0x1a7
jne 0x180003dd8
add r9b, 0xe5
lea eax, [r8 + 0x67]
xor r9b, al
mov edx, edi
lea ecx, [r9 + 0x83]
shr edx, cl
xor edi, edx
mov dword [rsp + 0xb8], edi
jmp 0x180003e49
cmp rsi, 0x4c
jbe 0x180004ea6
cmp rsi, 0x3a
jb 0x180004ea6
cmp rsi, 0xe
jae 0x180003e0c
movzx edx, r8b
mov rcx, rsi
call fcn.18000705c
movzx r11d, ax
mov qword [rsp + 0x58], r11
jmp 0x180003d11
cmp rsi, 0x27
jae 0x180003e49
movzx r8d, r9w
mov edx, 0xe
mov r9d, r8d
movzx ecx, r11w
mov qword [rsp + 0x20], rcx
call fcn.180004f7c
jmp 0x18000377f
mov eax, 0x59
cmp rbp, rax
ja 0x18000377f
cmp rbp, 9
je 0x180004f63
mov eax, 0xae
movzx ebx, r11w
and bx, ax
mov eax, 0x391
xor bx, ax
or bx, si
cmp r8b, 0x42
jae 0x180003e81
movzx ecx, r11w
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r11, qword [rsp + 0x58]
mov eax, 9
mov r8d, dword [rsp + 0x40]
jmp 0x180003ea3
mov eax, 9
cmp r8b, 0x45
jne 0x180003e9a
imul edi, dword [rsp + 0x48]
mov dword [rsp + 0xb8], edi
jmp 0x180003ea3
cmp r8b, al
jae 0x180003ea3
lea r8d, [rsi + 0x13]
sub r8b, 0x1f
mov ecx, 0x2cf
and r8b, r11b
mov dword [rsp + 0x40], r8d
cmp r11w, cx
jne 0x180003ed0
mov al, bl
or al, 1
lea ecx, [rax + 0x50]
mov eax, edi
shr eax, cl
xor edi, eax
mov dword [rsp + 0xb8], edi
jmp 0x180003f05
cmp r11w, ax
je 0x18000377f
mov eax, 0x4e
cmp r11w, ax
ja 0x180003f05
xor edx, edx
mov eax, 0x339
div rsi
mov rsi, rax
movzx eax, r11w
xor rsi, rax
or rsi, 0x315
mov qword [rsp + 0x50], rsi
xor edx, edx
movzx eax, bx
div rsi
mov ecx, 0x3d9
shr rax, 4
lea r9d, [rcx + rax]
mov qword [rsp + 0x60], r9
cmp rbp, 0x51
ja 0x180003f75
cmp rbp, 0x4c
je 0x18000433b
cmp rbp, 0x31
je 0x180004f0c
cmp rbp, 0x26
ja 0x180004ed7
cmp rbp, 0x16
jae 0x18000377f
cmp rbp, 0x2e
je 0x180004442
cmp rbp, 0x54
ja 0x180004efe
cmp rbp, 0x60
ja 0x180004f69
mov rdi, qword [0x180033028]
mov rsi, rdi
or rsi, 0x282
lea ebx, [rdi + 1]
or bl, sil
cmp bl, 0x19
jb 0x180004075
cmp bl, 0x53
jb 0x180004371
cmp bl, 0xe
jb 0x18000404b
cmp bl, 0x48
jbe 0x18000403e
cmp bl, 0x13
jb 0x180004333
cmp bl, 0x20
jb 0x180004030
cmp bl, 0x47
jb 0x180004177
cmp bl, 0x62
jae 0x180003fda
movzx ecx, bl
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
jmp 0x180003f75
cmp bl, 0xef
je 0x180004013
mov eax, 0x4e
cmp bl, al
jb 0x180004ed7
cmp bl, 0x4a
ja 0x18000407f
mov edx, esi
mov rcx, rdi
call fcn.18000705c
mov rbx, rax
mov esi, 0x66
imul rax, rdi, 0x271
sub rsi, rax
jmp 0x18000407f
mov edi, dword [rsp + 0xb8]
mov rax, qword [rsp + 0xa0]
movzx eax, byte [rax]
xor edi, eax
mov dword [rsp + 0xb8], edi
jmp 0x180004086
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
jmp 0x18000407f
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
add bl, 0x34
jmp 0x18000407f
movabs rax, 0x1734f0c541fe8cb1
mov rcx, rsi
mul rsi
shr rdx, 5
imul rax, rdx, 0x161
sub rcx, rax
sub rcx, rdi
mov qword [section..data], rcx
jmp 0x18000407f
add rsi, rdi
or rsi, 0x339
mov edi, dword [rsp + 0xb8]
mov r9, qword [rsp + 0x60]
lea rax, [rsi + 0x3b1]
mov rsi, qword [rsp + 0x50]
or rax, 0x31d
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
cmp rax, 0x5e
jbe 0x180003cb7
mov ecx, 0x59
cmp rax, rcx
jne 0x1800040c6
movzx ecx, bl
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
jmp 0x1800040e1
movabs rcx, 0xc87838419cd5bb9f
cmp rax, rcx
jne 0x1800040fa
imul edi, dword [rsp + 0x48]
mov dword [rsp + 0xb8], edi
mov rsi, qword [rsp + 0x50]
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
jmp 0x180003cb7
cmp rax, 6
jne 0x1800040e1
movzx eax, bl
jmp 0x180004f6d
movzx ecx, r8b
movabs rax, 0x2492492492492493
mul rcx
mov eax, ecx
mov ebp, 0x2e3
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 3
imul rax, rax, 0xe
sub rcx, rax
sub rbp, rcx
jmp 0x180004186
movzx r9d, r9w
mov edx, 0x5d
movzx r8d, r11w
mov rcx, rsi
mov qword [rsp + 0x20], rsi
call fcn.180004f7c
movzx r11d, ax
mov qword [rsp + 0x58], r11
jmp 0x18000417c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r11, qword [rsp + 0x58]
movzx r9d, ax
mov qword [rsp + 0x60], r9
jmp 0x180004181
mov r11, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
mov r8d, dword [rsp + 0x40]
mov r10, qword [0x180033030]
xor edx, edx
mov rsi, qword [rsp + 0x50]
mov rax, r10
mov edi, dword [rsp + 0xb8]
div r10
imul rax, r10, 0x8d
mov rcx, rdx
and ecx, 0x2c
cmp rax, 0x43
jb 0x180003c97
cmp rax, 0x23
jae 0x1800041ce
mov r8d, ecx
mov edx, r10d
call fcn.180003748
jmp 0x18000430e
movabs rbx, 0xe96dca95dc586160
cmp rax, rbx
jne 0x1800042e2
cmp rcx, 0xb
ja 0x180004371
cmp rcx, 0x15
ja 0x180004f23
cmp rcx, 0x61
jb 0x18000420f
mov eax, 0x266
sub rax, r10
mov qword [0x180033030], rax
jmp 0x18000431d
cmp rcx, 0x2a
ja 0x180004364
mov esi, dword [rsp + 0xa8]
cmp rcx, 0x10
ja 0x180003786
cmp rcx, 0x2e
jbe 0x180004240
mov qword [0x180033020], 0
jmp 0x18000431d
cmp rcx, 0x2f
ja 0x180004f17
mov esi, dword [rsp + 0xa8]
mov edi, 0x4a
cmp rcx, 0x18
je 0x180003775
cmp rcx, rdi
jbe 0x180004275
lea rax, [rcx + 0x2b]
and rax, rbx
mov qword [section..data], rax
jmp 0x1800042d1
cmp rcx, 0x5e
jbe 0x180004293
mov edx, ecx
call fcn.18000705c
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
jmp 0x1800042d1
cmp rcx, 0x41
jae 0x180004355
test rcx, rcx
jne 0x1800042cb
mov edi, dword [rsp + 0xb8]
mov rax, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x50]
movzx eax, byte [rax + 1]
shl eax, 8
xor edi, eax
mov dword [rsp + 0xb8], edi
jmp 0x180003c97
cmp rcx, 0x42
jae 0x18000434a
mov rsi, qword [rsp + 0x50]
mov edi, dword [rsp + 0xb8]
jmp 0x180003c97
cmp rax, 0x30
jbe 0x180004461
cmp rax, 0x64
ja 0x1800042fa
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
jmp 0x18000430e
cmp rax, 0x45
jae 0x180004327
mov edx, ecx
mov r8, r10
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
jmp 0x180003c97
cmp rax, 0x39
je 0x180004477
jmp 0x18000431d
call qword [sym.imp.KERNEL32.dll_GetVersion]
jmp 0x180004371
call qword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov esi, eax
mov qword [rsp + 0x50], rsi
jmp 0x180004376
mov edx, r10d
mov rcx, rbx
call fcn.18000705c
mov rsi, qword [rsp + 0x50]
mov r10d, dword [rsp + 0xa8]
jmp 0x180004383
mov edx, 0xdc586160
mov rcx, rbx
call fcn.18000705c
mov rsi, qword [rsp + 0x50]
mov r10d, dword [rsp + 0xa8]
mov edi, 0x4a
mov r8, qword [section..data]
movabs rax, 0xf0f0f0f0f0f0f0f1
mul r8
lea eax, [r8 - 0x42]
mov cl, r8b
shr rdx, 8
shl dl, 4
sub cl, dl
movabs rdx, 0xe1bf6299f2f7060f
and cl, al
movzx eax, cl
imul eax, r8d
or eax, 0x1e5
cmp r8, rdx
jne 0x1800043f7
mov edi, dword [rsp + 0xb8]
mov rax, qword [rsp + 0xa0]
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
movzx eax, byte [rax + 2]
shl eax, 0x10
xor edi, eax
mov dword [rsp + 0xb8], edi
jmp 0x180003c6a
cmp r8, 0x48
je 0x180004f1e
cmp r8, 0x47
jb 0x180004f6d
cmp r8, 0x2b
jbe 0x18000376e
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
mov edi, dword [rsp + 0xb8]
jmp 0x180003c6a
mov ecx, 0xe
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov word [rsp + 0x58], ax
jmp 0x180004477
and esi, 0x156
mov qword [rsp + 0x50], rsi
jmp 0x180004477
movzx ecx, r8b
mov edx, ebp
call fcn.18000705c
mov word [rsp + 0x60], ax
jmp 0x180004477
mov r9, r10
mov r8, r10
mov edx, eax
mov rcx, r10
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_HeapQueryInformation]
movabs r8, 0x7734f0fe07fe3b1b
mov rbx, qword [0x180033008]
xor edx, edx
mov eax, 0x150
div rbx
mov rdi, rdx
or edi, ebx
cmp rbx, 0x40
je 0x180004e80
mov eax, 5
cmp rbx, rax
ja 0x1800044c5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
movabs r8, 0x7734f0fe07fe3b1b
jmp 0x180004590
cmp rbx, 0x5b
ja 0x1800044dc
mov r8d, edi
mov edx, ebx
mov rcx, rbx
call fcn.180003748
mov ebx, eax
jmp 0x1800044b6
mov eax, 0x64
cmp rbx, rax
jne 0x1800044ef
mov r8d, eax
mov edx, eax
mov ecx, eax
jmp 0x1800044d3
cmp rbx, 0x26
jb 0x180004e73
cmp rbx, 0x19
je 0x180004ed7
cmp rbx, 0xa
jne 0x180004520
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov eax, edi
mov rbx, 0xfffffffffffffd8f
sub rbx, rax
xor rbx, rax
jmp 0x1800044b6
cmp rbx, r8
jne 0x180004536
mov rcx, qword [rsp + 0xa0]
movzx esi, byte [rcx]
mov dword [rsp + 0x44], esi
jmp 0x18000459c
cmp rbx, 0xa
jb 0x180004481
cmp rbx, 6
ja 0x18000457c
mov edx, ebx
mov rcx, rbx
call fcn.18000705c
mov edi, eax
movabs rax, 0xafb321a1496fdf0f
imul rbx, rdi, 0x2e4
mul rbx
shr rdx, 8
imul rax, rdx, 0x175
sub rbx, rax
add rbx, rdi
jmp 0x1800044b6
cmp rbx, 0x5e
je 0x180004f5c
cmp rbx, 0x45
jbe 0x180004f53
mov rcx, qword [rsp + 0xa0]
mov esi, dword [rsp + 0x44]
cmp edi, 0x28
jb 0x180004481
cmp edi, 0x5e
jb 0x180004ed7
cmp edi, 0x2a
jb 0x180004481
cmp edi, 0x3d
je 0x180004f4c
cmp edi, 0x57
jae 0x1800045d7
mov eax, edi
mov r9, rbx
mov r8, rbx
mov edx, ebx
mov rcx, rbx
jmp 0x18000446c
cmp edi, 0x7fe3b5b
jne 0x1800045ec
movzx eax, byte [rcx + 1]
shl eax, 8
or esi, eax
mov dword [rsp + 0x44], esi
xor edx, edx
lea eax, [rdx + 0x6d]
div rbx
mov rdi, rax
movabs rax, 0x1a7b9611a7b9611b
mul rbx
mov rax, rbx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 6
or edi, eax
cmp rbx, r8
jne 0x18000462d
movzx eax, byte [rcx + 2]
shl eax, 0x10
or esi, eax
mov dword [rsp + 0x44], esi
jmp 0x180004722
cmp rbx, 0x33
jb 0x180004481
cmp rbx, 0xd
jbe 0x180004f48
cmp rbx, 0x57
jb 0x180004722
cmp rbx, 0x12
jne 0x18000465e
mov edx, edi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x180004693
cmp rbx, 0x23
je 0x180004dbf
cmp rbx, 0x10
jb 0x180004ed7
cmp rbx, 0x61
jb 0x180004481
cmp rbx, 0x63
jne 0x180004697
mov ecx, edi
mov edx, ebx
mov r8d, ebx
call fcn.180003748
and eax, 0x299
mov edi, eax
jmp 0x18000470c
cmp rbx, 0x4f
jae 0x1800046a7
mov ecx, edi
mov rdx, rbx
jmp 0x180004c8e
cmp rbx, 0x47
jae 0x1800046ba
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd rbx, eax
jmp 0x18000470c
cmp rbx, 0x5b
jb 0x180004db0
cmp rbx, 0x3a
ja 0x1800046ed
mov qword [rsp + 0x30], rbx
mov r8d, ebx
mov dword [rsp + 0x28], ebx
mov edx, edi
mov r9d, edi
mov rcx, rbx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
jmp 0x180004477
cmp rbx, 0x5f
jne 0x180004718
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
imul rbx, rdi, 0x3b9
or rbx, 0x1bd
movabs r8, 0x7734f0fe07fe3b1b
jmp 0x180004722
cmp rbx, 0x38
je 0x180004481
mov ecx, edi
xor edx, edx
mov rax, rbx
div rcx
lea edi, [rdx - 0xa1]
cmp edi, 0x1f
jae 0x180004741
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edi, eax
jmp 0x180004763
cmp edi, 0x6c747442
jne 0x180004763
cmp rbx, r8
jne 0x180004763
mov rax, qword [rsp + 0xa0]
movzx eax, byte [rax + 3]
shl eax, 0x18
or esi, eax
mov dword [rsp + 0x44], esi
and edi, 3
cmp rbx, 0x3a
jae 0x180004774
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
jmp 0x180004783
cmp rbx, 0x47
ja 0x180004787
mov ecx, edi
mov edx, ebx
call fcn.18000705c
mov edi, eax
jmp 0x1800047e8
cmp rbx, 0x5f
jb 0x180004f48
cmp rbx, 0x64
jb 0x18000377f
cmp rbx, 0x37
ja 0x1800047be
mov rdx, rbx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov ecx, edi
xor edx, edx
mov eax, 0x13b
div rcx
mov rbx, rax
jmp 0x1800047e8
mov eax, 9
cmp rbx, rax
ja 0x1800047f4
mov eax, edi
imul rcx, rax, 0x1a3
movabs rax, 0xf0f0f0f0f0f0f0f1
mul rbx
shr rdx, 8
or rcx, rdx
mov rbx, rcx
movabs rax, 0x7734f0fe07fe3b1b
jmp 0x180004810
movabs rax, 0x7734f0fe07fe3b1b
cmp rbx, rax
jne 0x180004888
imul esi, dword [rsp + 0x48]
mov dword [rsp + 0x44], esi
cmp rbx, rax
jne 0x180004888
cmp edi, 0x3c
ja 0x180004f2f
cmp edi, 8
je 0x18000377f
cmp edi, 0x25
jne 0x180004838
movabs rbx, 0x7734f0fe07fe3b5f
jmp 0x180004888
cmp edi, 0x13
jbe 0x18000484a
call qword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov ebx, 0x18
jmp 0x180004888
mov eax, 0x35
cmp edi, eax
je 0x180004dcc
mov eax, 2
cmp edi, eax
jne 0x180004870
mov ecx, dword [rsp + 0x68]
mov eax, esi
shr eax, cl
xor esi, eax
mov dword [rsp + 0x44], esi
jmp 0x180004888
cmp edi, 0x18
je 0x180004f28
cmp edi, 0xd
jbe 0x180004888
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
mov esi, 0x370
sub esi, edi
movabs rdi, 0x7734f0fe07fe3b1b
cmp rbx, rdi
je 0x1800048c9
cmp rbx, 0x50
jae 0x1800048c9
mov qword [rsp + 0x30], rbx
mov r9, rbx
mov dword [rsp + 0x28], esi
mov r8d, esi
mov ecx, esi
mov edx, ebx
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r8, rdi
jmp 0x180004481
xor edx, edx
mov ecx, esi
mov eax, 0x222
div rcx
lea rdi, [rbx + rax]
and edi, 0x15d
cmp rdi, 0x15
jae 0x1800048f2
mov esi, edi
imul esi, edi
sub esi, 0x7250
jmp 0x180004908
cmp rdi, 0x119
jne 0x180004908
mov eax, dword [rsp + 0x44]
imul eax, dword [rsp + 0x48]
mov dword [rsp + 0x44], eax
mov r8d, dword [rsp + 0xb8]
imul r8d, dword [rsp + 0x48]
mov dword [rsp + 0xb8], r8d
cmp rdi, 0x39
jb 0x180004f41
cmp rdi, 0x21
jb 0x180004e56
cmp rdi, 0x119
jne 0x180004981
mov eax, esi
imul rcx, rax, 0x119
movabs rax, 0x204081020408103
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 8
imul rax, rax, 0x1fc
sub rcx, rax
sub ecx, 0x152
xor r8d, ecx
mov dword [rsp + 0xb8], r8d
jmp 0x180004a75
cmp rdi, 0x53
jae 0x1800049a5
mov eax, 0x33f
mov ecx, esi
mov r9d, eax
mov r8d, esi
mov edx, eax
mov qword [rsp + 0x20], rax
call fcn.180004f7c
jmp 0x180004a6d
cmp rdi, 0x1c
ja 0x1800049be
mov ecx, 0x33f
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rdi, eax
jmp 0x180004a6d
cmp rdi, 0x26
je 0x180004f41
mov edx, 7
cmp rdi, rdx
jne 0x1800049f9
mov eax, 0x33f
mov ecx, esi
mov qword [rsp + 0x30], rax
mov r9d, edx
mov r8d, edx
mov dword [rsp + 0x28], esi
mov edx, esi
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
jmp 0x180004a6d
cmp rdi, 0x58
je 0x180004f3d
cmp rdi, 0x1f
jbe 0x180004f41
cmp rdi, 0xc
jb 0x180004477
mov r10d, 9
cmp rdi, r10
jne 0x180004a33
mov ecx, esi
mov edx, r10d
call fcn.18000705c
mov edi, 0x33c
jmp 0x180004a6d
cmp rdi, 0x18
jb 0x180004e44
cmp rdi, 0x1d
ja 0x180004a51
mov edx, edi
mov ecx, 0x33f
call fcn.18000705c
jmp 0x1800049f4
cmp rdi, 0x32
je 0x18000377f
cmp rdi, 0x48
ja 0x180004a7b
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
and rdi, 0xffffffffffffffef
mov r8d, dword [rsp + 0xb8]
mov r10d, 9
xor edx, edx
mov eax, 0x1e3
div rdi
movabs rax, 0xbc52640bc52640bd
mov rbx, rdx
mul rdi
shr rdx, 7
sub rbx, rdx
cmp rdi, 0x23
jb 0x180004f48
cmp rdi, r10
jb 0x18000377f
cmp rdi, 0x1b
jb 0x180004ed7
cmp rdi, 3
jne 0x180004ad0
mov ecx, esi
mov r8d, esi
mov edx, edi
call fcn.180003748
jmp 0x180004477
cmp rdi, 0x119
jne 0x180004ae8
xor r8d, dword [rsp + 0x44]
mov dword [rsp + 0xb8], r8d
jmp 0x180004b19
cmp rdi, 0x16
jbe 0x180004e2c
cmp rdi, 0x1b
ja 0x180004b19
mov qword [rsp + 0x30], rbx
mov r8d, edi
mov dword [rsp + 0x28], esi
mov edx, ebx
mov r9d, esi
mov rcx, rbx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
and esi, 0x142
mov ecx, 0x59
cmp rbx, rcx
jae 0x180004b43
mov edx, esi
mov r9, rbx
mov r8, rdi
mov qword [rsp + 0x20], rbx
mov rcx, rdi
call fcn.180004f7c
jmp 0x180004477
cmp rbx, 0xf
je 0x180004f36
cmp rbx, 0x42
jne 0x180004b5c
imul rbx, rdi, 0x58
jmp 0x180004bf3
mov eax, 0x24
cmp rbx, rax
jae 0x180004b95
mov qword [rsp + 0x30], rbx
mov r8d, ebx
mov dword [rsp + 0x28], esi
mov edx, ebx
mov r9d, esi
mov rcx, rbx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
div rax
mov rbx, rax
or rbx, 0x1fe
jmp 0x180004bce
cmp rbx, 0x62
ja 0x180004ba5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x180004bce
cmp rbx, 0xc9
jne 0x180004bd5
mov rcx, qword [rsp + 0xa0]
mov eax, esi
add rcx, 0xfffffffffffe9e92
imul rax, rdi
add rcx, rax
mov qword [rsp + 0xa0], rcx
mov ecx, 0x59
jmp 0x180004bf3
cmp rbx, 0x13
jb 0x180004f48
movabs r8, 0x7734f0fe07fe3b1b
cmp rbx, 0x53
jbe 0x180004481
mov r10d, esi
mov eax, 0xcd
sub r10, 0x28
sub rax, rbx
and r10, rax
cmp esi, 0x46
jb 0x18000377f
cmp esi, 0x38
jb 0x180004d75
cmp esi, 0x44
jb 0x180004e22
mov edi, 0x142
cmp esi, edi
jne 0x180004d09
mov esi, dword [rsp + 0xa8]
cmp r10, 0x11
je 0x180003786
mov rsi, qword [rsp + 0x50]
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
cmp r10, 0x17
je 0x180003c30
test r10, r10
je 0x180004cd5
mov eax, 9
cmp r10, rax
je 0x180004dec
cmp r10, 0x26
je 0x180003c30
cmp r10, 0x49
jae 0x180003c30
cmp r10, 0x2f
jne 0x180004c99
mov edx, edi
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x180004477
mov rsi, qword [rsp + 0x50]
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
mov edi, dword [rsp + 0xb8]
cmp r10, rcx
je 0x180003c37
cmp r10, 0x2b
jbe 0x180003c37
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x180004d5c
mov r10d, dword [rsp + 0xa8]
mov rsi, qword [rsp + 0x50]
add r10d, 0xfffffffc
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
mov edi, dword [rsp + 0xb8]
mov dword [rsp + 0xa8], r10d
jmp 0x180003c3f
cmp esi, 0x43
jae 0x180004d21
mov ecx, esi
mov edx, r10d
call fcn.18000705c
mov edi, dword [rsp + 0xb8]
jmp 0x180004d5c
cmp esi, 0x4c
jb 0x180004dfe
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
mov edi, dword [rsp + 0xb8]
cmp esi, ecx
jae 0x180004d6b
mov eax, esi
mov r9, r10
mov r8, rbx
mov qword [rsp + 0x20], rax
mov edx, esi
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_HeapQueryInformation]
mov r8d, dword [rsp + 0x40]
mov r11, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x50]
jmp 0x180003c37
mov rsi, qword [rsp + 0x50]
movabs rax, 0x34ae820ed114942b
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x40]
mul r10
shr rdx, 6
add rdx, r10
or rdx, 0x23d
mov qword [0x180033018], rdx
jmp 0x180003c30
mov ecx, edi
mov r9, rbx
mov r8, rbx
mov edx, edi
jmp 0x180003e22
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
jmp 0x18000377f
movabs rbx, 0x7734f0fe07fe3b1b
mov qword [rsp + 0x20], rax
mov r9, rbx
mov rcx, rbx
mov r8, rax
mov rdx, rax
jmp 0x180003e27
mov r8d, edi
mov edx, eax
mov rcx, rdi
call fcn.180003748
jmp 0x18000377f
mov qword [rsp + 0x30], r10
mov r9, r10
mov dword [rsp + 0x28], esi
mov r8d, esi
mov dword [rsp + 0x20], r10d
mov rcx, rbx
mov edx, esi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
jmp 0x18000377f
mov r8d, esi
mov edx, esi
mov rcx, r10
jmp 0x180004df4
mov eax, esi
mov r9, rdi
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, rbx
mov rcx, rdi
jmp 0x180003e27
mov edx, esi
mov ecx, 0x33f
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x18000377f
mov eax, 0x33f
mov rcx, rdi
mov qword [rsp + 0x30], rax
mov r9d, eax
mov dword [rsp + 0x28], eax
mov r8d, eax
mov dword [rsp + 0x20], edi
jmp 0x180004e15
mov r8d, ebx
mov edx, edi
mov rcx, rbx
jmp 0x180004df4
mov ecx, edi
mov r9d, 0x40
mov qword [rsp + 0x30], rcx
mov r8d, edi
mov dword [rsp + 0x28], edi
mov edx, edi
mov dword [rsp + 0x20], edi
jmp 0x180004e17
mov eax, ecx
jmp 0x180004f6d
mov eax, 0xe
jmp 0x180004f6d
movzx eax, r8b
jmp 0x180004f6d
mov eax, edi
jmp 0x180004f6d
movzx edx, r11w
mov rcx, rbp
call fcn.18000705c
jmp 0x180004ed7
movzx ecx, r11w
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0xdc586160
jmp 0x180004f6d
movzx eax, cl
jmp 0x180004f6d
mov eax, r10d
jmp 0x180004f6d
mov eax, 0x18
jmp 0x180004f6d
mov eax, 0x7fe3b1b
jmp 0x180004f6d
mov eax, 0xf
jmp 0x180004f6d
mov eax, esi
jmp 0x180004f6d
mov eax, 0x33f
jmp 0x180004f6d
mov eax, ebx
jmp 0x180004f6d
mov eax, 0x3d
jmp 0x180004f6d
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0x5e
jmp 0x180004f6d
movzx eax, r9w
jmp 0x180004f6d
movzx eax, r11w
add rsp, 0x78
pop rdi
pop rsi
pop rbp
pop rbx
ret