Function at 0x180004ff0
Capabilities:
Log keystrokes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3a8]
sub rsp, 0x4a8
mov qword [rbp - 0x10], 0xfffffffffffffffe
mov rax, qword [0x1800a5088]
xor rax, rsp
mov qword [rbp + 0x390], rax
mov r10, r9
mov qword [rbp - 0x80], r9
mov r12, r8
mov qword [rbp - 0x58], r8
mov r9, rdx
mov qword [rsp + 0x58], rdx
mov r15, rcx
mov qword [rbp - 0x60], rcx
mov r11, qword [rbp + 0x418]
mov qword [rbp - 0x70], r11
xor eax, eax
mov dword [rbp - 0x38], eax
mov dword [rbp - 0x64], eax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rax
mov esi, dword [rbp + 0x410]
mov dword [rsp + 0x40], esi
mov r14d, esi
lea eax, [rsi + 0x90]
lea rcx, [0x180000000]
mov r13, 0xffffffffffffffff
mov ebx, dword [rsp + 0x60]
mov r8, qword [rbp - 0x58]
mov edi, dword [rsp + 0x68]
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x78], r8
mov dword [rsp + 0x50], edi
cmp esi, eax
jae 0x18000561e
mov r9d, 0x6f43
mov r13, qword [rbp - 0x40]
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x48], rax
mov r15d, dword [rbp - 0x64]
mov r12d, dword [rbp - 0x64]
movzx esi, byte [rsp + 0x44]
mov byte [rsp + 0x44], sil
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x70], rax
mov esi, r14d
mov edx, 0x6552
lea eax, [r14 - 0x1f]
cmp eax, 0xae
ja case.default.0x1800050fc
movzx eax, byte [rcx + rax + 0x6704]
mov ecx, dword [rcx + rax*4 + 0x66c0]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov dword [rbp + 0x10d], 0x312e312f
mov byte [rbp + 0x111], 0
movzx eax, word [str.HosTING_CONTENT]
mov word [rbp + 0xe8], ax
movzx eax, byte [0x18008fcaa]
mov byte [rbp + 0xea], al
mov byte [rbp + 0xeb], 0
lea rcx, [0x180000000]
mov rdx, qword [rsp + 0x48]
add r14d, 9
lea eax, [rsi + 0x90]
cmp r14d, eax
jb 0x1800050d3
mov r12, qword [rbp - 0x58]
mov r14, qword [rsp + 0x70]
mov r13, 0xffffffffffffffff
mov r15, qword [rbp - 0x60]
mov r9, qword [rsp + 0x58]
jmp 0x180005630
movzx eax, word [0x18008fcd9]
mov word [rbp + 0xeb], ax
movzx eax, byte [0x18008fcdb]
mov byte [rbp + 0xed], al
mov byte [rbp + 0xee], 0
jmp case.0x1800050fc.47
mov word [rbp + 0xf8], r9w
mov byte [rbp + 0xfa], 0
jmp case.0x1800050fc.47
mov rsi, qword [rbp - 0x60]
cmp qword [r10 + 0x28], 0
je 0x1800051bc
mov rax, qword [r10 + 0x30]
mov qword [rsi + 0x18], rax
mov rax, qword [r10 + 0x30]
mov qword [rax + 0x10], rsi
jmp 0x1800051c0
mov qword [r10 + 0x28], rsi
mov qword [r10 + 0x30], rsi
mov ebx, 0x6b
nop dword [rax]
mov eax, ebx
sub eax, 0x67
je 0x180005263
sub eax, 1
je 0x18000523d
sub eax, 1
je 0x18000521b
sub eax, 1
je 0x180005210
cmp eax, 1
jne 0x18000527e
movzx eax, word [0x18008fd68]
mov word [rbp + 0xd0], ax
movzx eax, byte [0x18008fd6a]
mov byte [rbp + 0xd2], al
jmp 0x18000527e
mov word [rbp + 0xd3], 0x64
jmp 0x18000527e
mov word [rbp + 0xd4], dx
mov eax, dword [0x18008fd9c]
mov dword [rbp + 0xd6], eax
movzx eax, byte [0x18008fda0]
mov byte [rbp + 0xda], al
jmp 0x18000527e
movzx eax, word [0x18008fda7]
mov word [rbp + 0xdb], ax
movzx eax, byte [0x18008fda9]
mov byte [rbp + 0xdd], al
mov word [rbp + 0xde], 0x70
jmp 0x18000527e
mov r8, r13
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x190]
call fcn.1800011d0
mov edx, 0x6552
dec ebx
cmp ebx, 0x66
ja 0x1800051d0
mov ebx, 1
mov qword [rbp - 0x48], rbx
mov dword [rsp + 0x60], ebx
mov esi, dword [rsp + 0x40]
mov r8, qword [rbp - 0x78]
mov r10, qword [rbp - 0x80]
mov r11, qword [rbp - 0x70]
mov r9d, 0x6f43
jmp case.0x1800050fc.47
xor r8d, r8d
mov qword [rbp - 0x78], r8
xor edx, edx
mov qword [rsp + 0x48], rdx
mov dword [rbp - 0x68], edx
lea rcx, [0x180000000]
jmp 0x18000513d
mov ecx, dword [r10]
test ecx, ecx
je 0x180005322
sub ecx, 2
je 0x180005306
cmp ecx, 1
jne case.default.0x180005304
mov rsi, qword [rbp - 0x60]
movsxd rax, dword [rsi]
cmp eax, 6
ja case.default.0x180005304
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x67b4]
add rcx, rdx
jmp rcx
mov rax, qword [rbp - 0x60]
cmp dword [rax], 0
jne case.default.0x180005304
mov r14d, 0xa9
mov esi, dword [rsp + 0x40]
jmp case.0x1800050fc.47
mov rsi, qword [rbp - 0x60]
movsxd rax, dword [rsi]
cmp eax, 6
ja case.default.0x18000533f
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x67d0]
add rcx, rdx
jmp rcx
cmp qword [rsi + 0x28], 0
jne case.default.0x180005304
mov r14d, 0xa9
mov esi, dword [rsp + 0x40]
jmp case.0x1800050fc.47
mov eax, 7
cmp eax, 7
je 0x180005375
cmp eax, 0x3f
je 0x1800055f0
cmp eax, 0x77
je case.0x18000533f.2
jmp 0x18000537e
mov r15d, 1
mov r12d, r15d
add eax, 0x38
cmp eax, 0xa8
jbe 0x180005360
mov r14d, 0xa9
mov esi, dword [rsp + 0x40]
jmp case.0x1800050fc.47
mov rax, qword [rbp - 0x60]
mov qword [rax + 0x20], r10
jmp case.0x1800050fc.47
mov byte [rsp + 0x44], 1
xor ecx, ecx
mov qword [rbp + 0x130], rcx
mov dword [rbp + 0x138], 2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x13c], xmm0
movups xmmword [rbp + 0x14c], xmm0
movups xmmword [rbp + 0x15c], xmm0
mov dword [rbp + 0x16c], eax
movaps xmm0, xmmword [rbp + 0x130]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm1, xmmword [rbp + 0x140]
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm0, xmmword [rbp + 0x150]
movaps xmmword [rbp + 0xb0], xmm0
movaps xmm1, xmmword [rbp + 0x160]
movaps xmmword [rbp + 0xc0], xmm1
mov dword [rsp + 0x30], 0xc
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x28]
call fcn.180017c70
test al, al
jne 0x18000529a
mov byte [rsp + 0x60], al
mov ebx, dword [rsp + 0x60]
mov edi, ebx
jmp case.0x180005665.32
movzx eax, word [0x18008fdf4]
mov word [rbp + 0xfa], ax
movzx eax, byte [0x18008fdf6]
mov byte [rbp + 0xfc], al
mov eax, dword [0x18008fe6e]
mov dword [rbp + 0xfd], eax
movzx eax, byte [0x18008fe72]
mov byte [rbp + 0x101], al
jmp case.0x1800050fc.47
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
mov dword [r10], eax
mov qword [rbp + 0x90], 0x3e8
jmp case.0x1800050fc.47
mov eax, dword [r11]
mov dword [rsp + 0x78], eax
mov rax, qword [rbp - 0x60]
mov qword [rsp + 0x70], rax
mov edi, 0xffffffff
mov dword [rsp + 0x50], edi
mov dword [rbp - 0x50], 0
lea edx, [rdi + 0x3e]
mov rcx, r10
call fcn.180053dd0
mov r8, rax
mov qword [rbp - 0x78], rax
mov r10, qword [rbp - 0x80]
mov r11, qword [rbp - 0x70]
mov r9d, 0x6f43
jmp case.0x1800050fc.47
test r8, r8
je 0x180005608
mov byte [r8], 0
mov r9d, 0xae
lea r8, [rbp - 0x68]
lea rdx, [rbp - 0x50]
mov rcx, r10
call fcn.18002d200
jmp 0x18000529a
mov r13, qword [sym.imp.KERNEL32.dll_FindResourceA]
jmp case.0x1800050fc.47
mov eax, dword [0x18008fec1]
mov dword [rbp + 0x108], eax
movzx eax, byte [0x18008fec5]
mov byte [rbp + 0x10c], al
mov byte [rbp + 0x10d], 0
jmp case.0x1800050fc.47
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
cmp rcx, rdx
je 0x180005586
add rcx, 0x10
cmp dword [rcx - 8], 2
jne 0x180005579
cmp byte [rcx], 3
jne 0x180005579
mov eax, dword [rcx + 4]
add dword [r10], eax
add rcx, 0x20
lea rax, [rcx - 0x10]
cmp rax, rdx
jne 0x180005568
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateJobObjectW]
mov rsi, rax
test rax, rax
jne 0x1800055a1
mov byte [rsp + 0x44], al
jmp 0x180005296
cmp byte [rsp + 0x44], 0
je 0x180005296
mov r9d, 0x40
lea r8, [rbp + 0x90]
lea edx, [r9 - 0x3e]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
lea rcx, [rbp]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180005296
mov edx, r12d
mov ecx, r15d
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
mov ebx, 8
mov edi, ebx
jmp case.0x180005665.32
mov rdx, r10
lea rcx, str.Invalid_class_of_service_definition:__s_n
call fcn.180001120
mov ebx, edi
jmp case.0x180005665.32
mov rdx, qword [rbp - 0x58]
mov qword [rsp + 0x48], rdx
mov r14, qword [rbp - 0x58]
mov qword [rsp + 0x70], r14
lea eax, [rsi - 0x11]
mov dword [rbp - 0x64], eax
cmp esi, eax
jbe case.0x180005665.32
nop
lea eax, [rsi - 0x1f]
cmp eax, 0x4a
ja case.0x180005665.47
movzx eax, byte [rcx + rax + 0x6830]
mov ecx, dword [rcx + rax*4 + 0x67ec]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
lea rax, [r8 + 1]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0x81
call fcn.1800114c0
mov rcx, rax
mov qword [rsp + 0x48], rax
mov r9, qword [rsp + 0x58]
cmp dword [r9], 2
jne 0x18000574a
mov esi, 0x93
nop
mov eax, esi
sub eax, 0x93
je 0x180005706
sub eax, 0x57
je 0x1800056b9
cmp eax, 0x57
je 0x18000668a
jmp 0x180005732
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x68], eax
mov qword [rbp - 0x40], rcx
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, r14
lea r8, [rbp - 0x40]
mov edx, 0x55
lea rcx, [rsp + 0x50]
call fcn.180041160
mov edi, eax
mov dword [rsp + 0x50], eax
test r15, r15
jne 0x18000572d
test r14, r14
je 0x18000572d
mov rcx, r14
call fcn.180062c04
jmp 0x18000572d
test r14, r14
jne 0x180005732
mov r8, r12
lea rdx, [rsp + 0x78]
lea ecx, [r14 + 0x20]
call fcn.180010640
mov r14, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x180006664
mov rcx, qword [rsp + 0x48]
add esi, 0x57
cmp esi, 0x198
jb 0x1800056a0
mov r9, qword [rsp + 0x58]
mov esi, dword [rsp + 0x40]
cmp dword [r9], 1
jne case.0x180005665.47
cmp dword [rbp - 0x50], 0
je case.0x180005665.47
mov r8, qword [rbp - 0x80]
mov edx, 0x95
lea rcx, str.CDP_not_supported_for_L2_CAT__n
call fcn.180025100
mov ebx, edi
jmp case.0x180005665.32
mov byte [rbp + 0x102], 0
mov r8d, 1
lea rdx, [0x18008ff2a]
lea rcx, [rbp + 0xf8]
call fcn.180062ed0
mov byte [rbp + 0x103], 0x20
jmp 0x18000662f
lea rax, [rbp + 0xe8]
mov r14, r13
inc r14
cmp byte [rax + r14], 0
jne 0x1800057b0
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180005806
lea rax, [rcx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x1800057e5
mov rax, qword [r12]
lea rsi, [rax + rcx]
mov r8, r14
lea rdx, [rbp + 0xe8]
mov rcx, rsi
call fcn.180053e80
mov byte [r14 + rsi], 0
mov esi, dword [rsp + 0x40]
jmp 0x180005820
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xe8]
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
mov r14, r13
mov r9, qword [rbp - 0x80]
nop word [rax + rax]
inc r14
cmp byte [r9 + r14], 0
jne 0x180005830
mov rdx, qword [r12 + 0x18]
mov rcx, qword [r12 + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180005881
lea rax, [rcx + r14]
mov qword [r12 + 0x10], rax
cmp rdx, 0x10
mov rax, r12
jb 0x180005865
mov rax, qword [r12]
mov rdx, r9
mov r8, r14
lea rsi, [rax + rcx]
mov rcx, rsi
call fcn.180053e80
mov byte [r14 + rsi], 0
jmp 0x180006626
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
jmp 0x18000662a
mov byte [rbp + 0xe5], 0
jmp case.0x180005665.47
cmp dword [r11], 1
jne case.0x180005665.47
test r9, r9
je case.0x180005665.47
mov r14, r13
nop dword [rax + rax]
inc r14
cmp byte [r9 + r14], 0
jne 0x1800058c0
jmp 0x18000583a
mov byte [rbp + 0x104], 0
mov eax, 0x6c63
mov word [rbp + 0xe0], ax
mov byte [rbp + 0xe2], 0x6f
jmp case.0x180005665.47
lea r9, [0x1800a62a8]
cmp qword [0x1800a62c0], 0x10
cmovae r9, qword [0x1800a62a8]
mov r14, qword [0x1800a62b8]
jmp 0x18000583a
mov byte [rbp + 0xe3], 0
jmp case.0x180005665.47
mov r8d, 2
lea rdx, [0x18008ff60]
lea rcx, [rbp + 0xe3]
call fcn.18005c310
jmp 0x18000662f
cmp dword [r9], 1
jne 0x180005a80
mov esi, 0x91
nop word [rax + rax]
cmp esi, 0x91
je 0x1800059cb
cmp esi, 0x2959
jne 0x180005a65
mov r13d, ebx
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1800059a5
mov rdx, qword [rbp - 0x18]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800059a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800066b7
call fcn.180051f84
mov eax, r13d
mov rcx, qword [rbp + 0x390]
xor rcx, rsp
call fcn.180051f60
add rsp, 0x4a8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
test r14, r14
jne 0x180005a0c
xor ecx, ecx
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9, r12
xor edx, edx
mov r8d, 0x96
call fcn.18000cb60
mov r14, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x18000667b
mov rdx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x50], eax
mov qword [rbp - 0x40], rdx
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x20], 0x34
mov r9, r14
lea r8, [rbp - 0x40]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x50]
call fcn.180028c40
mov rbx, rax
mov qword [rbp - 0x48], rax
mov edi, eax
mov dword [rsp + 0x50], ebx
test r15, r15
jne 0x180005a5c
test r14, r14
je 0x180005a5c
mov rcx, r14
call fcn.180062c04
mov dword [rsp + 0x60], ebx
mov rdx, qword [rsp + 0x48]
add esi, 0x28c8
cmp esi, 0x5190
jbe 0x180005950
mov r9, qword [rsp + 0x58]
mov esi, dword [rsp + 0x40]
test r14, r14
jne case.0x180005665.47
mov r8, r12
lea rdx, [rsp + 0x78]
lea ecx, [r14 + 0x20]
call fcn.180010640
mov r14, rax
mov qword [rsp + 0x70], rax
jmp 0x18000662f
xor ecx, ecx
mov qword [rbp - 0x30], rcx
test r9, r9
je 0x180005ac3
mov rcx, r13
inc rcx
cmp byte [r9 + rcx], 0
jne 0x180005ab5
mov qword [rbp - 0x30], rcx
mov rax, r13
inc rax
cmp byte [r10 + rax], 0
jne 0x180005ac6
mov rdx, r13
inc rdx
cmp byte [r15 + rdx], 0
jne 0x180005ad3
add rax, rcx
add rdx, rax
mov rcx, r12
call fcn.180044ce0
mov rax, qword [rbp - 0x70]
mov ebx, 0x54
cmp dword [rax], 0
jne 0x180005bb4
lea edi, [rbx - 0xd]
mov r15d, 0x98
mov eax, r15d
sub eax, 0x98
je 0x180005b8b
cmp eax, 1
jne 0x180005b9f
lea rax, [rsp + 0x7c]
mov r14, r13
inc r14
cmp byte [rax + r14], 0
jne 0x180005b21
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180005b71
lea rax, [rcx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x180005b56
mov rax, qword [r12]
lea rsi, [rax + rcx]
mov r8, r14
lea rdx, [rsp + 0x7c]
mov rcx, rsi
call fcn.180053e80
mov byte [r14 + rsi], 0
jmp 0x180005b9f
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x7c]
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
jmp 0x180005b9f
mov word [rsp + 0x7c], di
mov eax, 0x45
mov word [rsp + 0x7d], ax
mov word [rsp + 0x7e], bx
inc r15d
cmp r15d, 0x9a
jb 0x180005b06
jmp 0x180005c6c
mov r15d, 0xb7
nop word [rax + rax]
mov eax, r15d
sub eax, 0xb6
je 0x180005be6
cmp eax, 1
jne 0x180005c5c
mov dword [rbp + 0xf0], 0x534f50
mov word [rbp + 0xf3], bx
jmp 0x180005c5c
lea rax, [rbp + 0xf0]
mov r14, r13
inc r14
cmp byte [rax + r14], 0
jne 0x180005bf0
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180005c42
lea rax, [rcx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x180005c25
mov rax, qword [r12]
lea rsi, [rax + rcx]
mov r8, r14
lea rdx, [rbp + 0xf0]
mov rcx, rsi
call fcn.180053e80
mov byte [r14 + rsi], 0
jmp 0x180005c5c
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xf0]
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
dec r15d
cmp r15d, 0xb5
ja 0x180005bc0
mov edi, dword [rsp + 0x50]
mov rbx, qword [rbp - 0x48]
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
cmp rcx, rdx
jae 0x180005ca4
lea rax, [rcx + 1]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x180005c99
mov rax, qword [r12]
mov word [rax + rcx], 0x20
jmp 0x180006626
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r12
call fcn.180046820
jmp 0x180006626
lea rsi, [0x1800a62a8]
mov r9, rsi
cmp qword [0x1800a62c0], 0x10
cmovae r9, qword [0x1800a62a8]
mov r14, qword [0x1800a62b8]
mov r8, qword [r12 + 0x10]
mov rcx, qword [r12 + 0x18]
mov rax, rcx
sub rax, r8
cmp r14, rax
ja 0x180005d27
lea rax, [r8 + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rcx, 0x10
jb 0x180005d07
mov rax, qword [r12]
lea rsi, [rax + r8]
mov r8, r14
mov rdx, r9
mov rcx, rsi
call fcn.180053e80
mov byte [rsi + r14], 0
lea rsi, [0x1800a62a8]
jmp 0x180005d3a
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
mov rax, qword [rbp - 0x70]
cmp dword [rax], 1
jne 0x180006365
mov eax, 0x57
mov dword [rsp + 0x68], eax
cmp eax, 0x160
ja 0x180005ed9
je 0x180005ead
sub eax, 0x57
je 0x180005e7a
sub eax, 0x35
je 0x180005e24
sub eax, 0x35
je 0x180005e13
sub eax, 0x35
je 0x180005dd5
cmp eax, 0x35
jne 0x180006341
mov byte [rbp + 0xde], 0
mov eax, dword [str.appl]
mov dword [rbp + 0x130], eax
mov eax, 0x69
mov word [rbp + 0x134], ax
mov eax, dword [str.cation]
mov dword [rbp + 0x135], eax
movzx eax, word [0x180090060]
mov word [rbp + 0x139], ax
movzx eax, byte [0x180090062]
mov byte [rbp + 0x13b], al
jmp 0x180006341
mov byte [rbp + 0xd5], 0
mov r8d, 4
lea rdx, [0x18008ffb5]
lea rcx, [rbp + 0xd0]
call fcn.180062ed0
mov r8d, 5
lea rdx, [0x18008ffe3]
lea rcx, [rbp + 0xd9]
call fcn.18005c310
jmp 0x180006341
mov eax, 0x6574
mov word [rbp + 0xd3], ax
jmp 0x180006341
mov eax, 0x67
mov word [rbp + 0x123], ax
mov eax, 0x74
mov word [rbp + 0x124], ax
lea r8d, [rax - 0x70]
lea rdx, [0x18009001c]
lea rcx, [rbp + 0x125]
call fcn.18005c310
movzx eax, word [0x180090024]
mov word [rbp + 0xd0], ax
movzx eax, byte [0x180090026]
mov byte [rbp + 0xd2], al
mov byte [rbp + 0xd3], 0
jmp 0x180006341
mov eax, dword [str.Conte]
mov dword [rbp + 0x118], eax
movzx eax, word [0x180090044]
mov word [rbp + 0x11c], ax
mov dword [rbp + 0x11d], 0x2d746e
mov dword [rbp + 0x120], 0x6e654c
jmp 0x180006341
mov eax, dword [str._x_www]
mov dword [rbp + 0x13b], eax
movzx eax, word [0x18009004c]
mov word [rbp + 0x13f], ax
movzx eax, byte [0x18009004e]
mov byte [rbp + 0x141], al
jmp 0x180006341
sub eax, 0x195
je 0x180006323
sub eax, 0x35
je 0x1800062cc
sub eax, 0x35
je 0x1800060ea
sub eax, 0x35
je 0x180005f81
cmp eax, 0x35
jne 0x180006341
mov r9, rsi
cmp qword [0x1800a62c0], 0x10
cmovae r9, qword [0x1800a62a8]
mov r14, qword [0x1800a62b8]
mov r8, qword [r12 + 0x10]
mov rcx, qword [r12 + 0x18]
mov rax, rcx
sub rax, r8
cmp r14, rax
ja 0x180005f69
lea rax, [r8 + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rcx, 0x10
jb 0x180005f4d
mov rax, qword [r12]
lea rsi, [rax + r8]
mov r8, r14
mov rdx, r9
mov rcx, rsi
call fcn.180053e80
mov byte [rsi + r14], 0
jmp 0x180006341
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
jmp 0x180006341
mov r9, rsi
cmp qword [0x1800a62c0], 0x10
cmovae r9, qword [0x1800a62a8]
mov r14, qword [0x1800a62b8]
mov r8, qword [r12 + 0x10]
mov rcx, qword [r12 + 0x18]
mov rax, rcx
sub rax, r8
cmp r14, rax
ja 0x180005fdf
lea rax, [r8 + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rcx, 0x10
jb 0x180005fc6
mov rax, qword [r12]
lea rsi, [rax + r8]
mov r8, r14
mov rdx, r9
mov rcx, rsi
call fcn.180053e80
mov byte [rsi + r14], 0
jmp 0x180005ff2
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
lea rax, [rbp + 0xd0]
mov r14, r13
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x180006000
mov rdx, qword [r12 + 0x10]
mov rcx, qword [r12 + 0x18]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x180006052
lea rax, [rdx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rcx, 0x10
jb 0x180006035
mov rax, qword [r12]
lea rsi, [rax + rdx]
mov r8, r14
lea rdx, [rbp + 0xd0]
mov rcx, rsi
call fcn.180053e80
mov byte [rsi + r14], 0
jmp 0x18000606c
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xd0]
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
lea rax, [rbp + 0x130]
mov r14, r13
inc r14
cmp byte [rax + r14], 0
jne 0x180006076
mov rdx, qword [r12 + 0x10]
mov rcx, qword [r12 + 0x18]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800060cb
lea rax, [rdx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rcx, 0x10
jb 0x1800060ab
mov rax, qword [r12]
lea rsi, [rax + rdx]
mov r8, r14
lea rdx, [rbp + 0x130]
mov rcx, rsi
call fcn.180053e80
mov byte [rsi + r14], 0
jmp 0x180006341
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x130]
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
jmp 0x180006341
mov eax, 0x65
mov word [rbp + 0x14f], ax
mov eax, 0x64
mov word [rbp + 0x150], ax
lea rax, [rbp + 0x118]
mov r14, r13
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x180006110
mov rdx, qword [r12 + 0x10]
mov rcx, qword [r12 + 0x18]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x180006162
lea rax, [rdx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rcx, 0x10
jb 0x180006145
mov rax, qword [r12]
lea rsi, [rax + rdx]
mov r8, r14
lea rdx, [rbp + 0x118]
mov rcx, rsi
call fcn.180053e80
mov byte [r14 + rsi], 0
jmp 0x18000617c
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x118]
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
lea r9, [rbp + 0x185]
mov r8, qword [rbp - 0x30]
movabs r12, 0xcccccccccccccccd
nop dword [rax]
nop word [rax + rax]
dec r9
mov rax, r12
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x1800061a0
mov r12, qword [rbp - 0x58]
xor r14d, r14d
mov qword [rbp + 0x80], r14
mov r15d, 0xf
mov qword [rbp + 0x88], r15
mov byte [rbp + 0x70], r14b
lea rax, [rbp + 0x185]
cmp r9, rax
je 0x180006219
lea r8, [rbp + 0x185]
sub r8, r9
mov rdx, r9
lea rcx, [rbp + 0x70]
call fcn.180044ec0
mov r15, qword [rbp + 0x88]
mov r14, qword [rbp + 0x80]
or dword [rbp - 0x38], 3
lea r9, [rbp + 0x70]
mov r13, qword [rbp + 0x70]
cmp r15, 0x10
cmovae r9, r13
mov r8, qword [r12 + 0x10]
mov rcx, qword [r12 + 0x18]
mov rax, rcx
sub rax, r8
cmp r14, rax
ja 0x180006271
lea rax, [r14 + r8]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rcx, 0x10
jb 0x180006258
mov rax, qword [r12]
lea rsi, [rax + r8]
mov r8, r14
mov rdx, r9
mov rcx, rsi
call fcn.180053e80
mov byte [r14 + rsi], 0
jmp 0x18000628f
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
mov r15, qword [rbp + 0x88]
mov r13, qword [rbp + 0x70]
cmp r15, 0x10
jb 0x180006341
lea rdx, [r15 + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x1800062c2
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800066b1
mov rcx, r13
call fcn.180051f84
jmp 0x180006341
mov eax, 0x6d
mov word [rbp + 0x145], ax
mov eax, dword [str._urlen]
mov dword [rbp + 0x146], eax
movzx eax, word [0x180090038]
mov word [rbp + 0x14a], ax
movzx eax, byte [0x18009003a]
mov byte [rbp + 0x14c], al
lea rcx, [rbp + 0x130]
dec rcx
nop dword [rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180006310
mov eax, dword [0x18009003c]
mov dword [rcx], eax
jmp 0x180006341
mov dword [rbp + 0x141], 0x6f662d
lea rdx, [0x18008fbfc]
lea rcx, [rbp + 0x144]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [rsp + 0x68]
add eax, 0x35
mov dword [rsp + 0x68], eax
cmp eax, 0x29e
mov r13, 0xffffffffffffffff
lea rsi, [0x1800a62a8]
jb 0x180005d50
lea rax, [rbp + 0xf8]
mov r14, r13
nop
inc r14
cmp byte [rax + r14], 0
jne 0x180006370
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x1800063c2
lea rax, [rcx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x1800063a5
mov rax, qword [r12]
lea rsi, [rax + rcx]
mov r8, r14
lea rdx, [rbp + 0xf8]
mov rcx, rsi
call fcn.180053e80
mov byte [r14 + rsi], 0
jmp 0x1800063dc
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xf8]
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
lea rax, [rbp + 0xe0]
mov r14, r13
inc r14
cmp byte [rax + r14], 0
jne 0x1800063e6
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180006427
lea rax, [rcx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x18000641b
mov rax, qword [r12]
lea rdx, [rbp + 0xe0]
jmp 0x180005868
lea r9, [rbp + 0xe0]
jmp 0x180006613
test r14, r14
je 0x180006691
mov eax, dword [rbp - 0x50]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x68], eax
mov qword [rbp - 0x40], rdx
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x28], 0x22
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
mov r8, r14
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.180010d80
mov edi, eax
mov dword [rsp + 0x50], eax
test r15, r15
jne 0x180006491
mov rcx, r14
call fcn.180062c04
mov ebx, edi
mov qword [rbp - 0x48], rbx
mov dword [rsp + 0x60], ebx
jmp 0x18000662f
cmp byte [r15], 0x2f
je 0x1800064f9
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1800064da
lea rax, [rcx + 1]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x1800064d2
mov rax, qword [r12]
mov word [rax + rcx], 0x2f
jmp 0x1800064f9
mov qword [rsp + 0x20], 1
lea r9, [0x180090090]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r12
call fcn.180046980
mov r14, r13
nop dword [rax]
inc r14
cmp byte [r15 + r14], 0
jne 0x180006500
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x18000654e
lea rax, [rcx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x180006535
mov rax, qword [r12]
lea rsi, [rax + rcx]
mov r8, r14
mov rdx, r15
mov rcx, rsi
call fcn.180053e80
mov byte [r14 + rsi], 0
jmp 0x180006564
mov qword [rsp + 0x20], r14
mov r9, r15
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
lea rax, [rbp + 0x108]
mov r14, r13
nop
inc r14
cmp byte [rax + r14], 0
jne 0x180006570
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x1800065c2
lea rax, [rcx + r14]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x1800065a5
mov rax, qword [r12]
lea rsi, [rax + rcx]
mov r8, r14
lea rdx, [rbp + 0x108]
mov rcx, rsi
call fcn.180053e80
mov byte [r14 + rsi], 0
jmp 0x1800065dc
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x108]
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
lea r9, [0x1800a62a8]
cmp qword [0x1800a62c0], 0x10
cmovae r9, qword [0x1800a62a8]
mov r14, qword [0x1800a62b8]
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp r14, rax
jbe 0x18000584f
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180046980
mov esi, dword [rsp + 0x40]
mov r14, qword [rsp + 0x70]
mov r9, qword [rsp + 0x58]
dec esi
mov dword [rsp + 0x40], esi
cmp esi, dword [rbp - 0x64]
jbe case.0x180005665.32
mov r10, qword [rbp - 0x80]
mov r15, qword [rbp - 0x60]
mov rdx, qword [rsp + 0x48]
mov r8, qword [rbp - 0x78]
mov r11, qword [rbp - 0x70]
lea rcx, [0x180000000]
jmp 0x180005640
lea rcx, str.Buy_it_direct_here_or_from_Amazon_here
call fcn.180001120
mov edi, r13d
mov ebx, r13d
jmp case.0x180005665.32
lea rcx, [0x18008ff80]
call fcn.180001120
mov edi, r13d
mov ebx, edi
jmp case.0x180005665.32
lea rcx, str._Raised_the_gamestate_from_16k_to_128k
call fcn.180001120
jmp 0x180005967
mov byte [rsp + 0x60], 1
mov r13d, dword [rsp + 0x60]
jmp 0x180005967
call fcn.180063ba4
nop
call fcn.180063ba4
int3