Function at 0x180008360
Capabilities:
Delete file
Get common file path
Write file on windows

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1220
call fcn.18005e550
sub rsp, rax
mov rax, qword [0x180087010]
xor rax, rsp
mov qword [rsp + 0x1210], rax
mov qword [rsp + 0x80], r9
mov qword [rsp + 0x98], r8
mov r15, rdx
mov r14, rcx
mov qword [rsp + 0x268], rdx
mov rax, qword [rsp + 0x1280]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x1290]
mov qword [rsp + 0xc0], rax
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x6c0]
call fcn.180032e60
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0xdf0]
call fcn.180032e60
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1000]
call fcn.180032e60
xor edx, edx
mov r8d, 0x200
lea rcx, [rsp + 0xbf0]
call fcn.180032e60
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x8d0]
call fcn.180032e60
xor esi, esi
mov dword [rsp + 0x3c0], esi
cmp qword [r15 + 0x10], 0x16
jae 0x180008491
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x18000847c
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x180008477
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000b2d8
mov rcx, r8
call fcn.18000d6f0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
jmp 0x18000b2ad
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], sil
mov rdx, r15
cmp qword [r15 + 0x18], 0x10
jb 0x1800084ba
mov rdx, qword [r15]
mov r8d, 0x16
lea rcx, [rsp + 0x2e0]
call fcn.18000c8a0
nop
movabs rax, 0x7fffffffffffffff
sub rax, qword [rsp + 0x2f0]
cmp rax, 2
jb 0x18000b2de
lfence
lea r9, [rsp + 0x2e0]
cmp qword [rsp + 0x2f8], 0x10
cmovae r9, qword [rsp + 0x2e0]
mov qword [rsp + 0x30], 2
lea rax, [0x180078c98]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x2c0]
call fcn.18000cf40
nop
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], 0xf
mov byte [rsp + 0x2a0], 0
mov rax, qword [r15 + 0x10]
cmp rax, 0x16
jb 0x18000b2e4
mov qword [rsp + 0x3e8], 0xffffffffffffffff
add rax, 0xffffffffffffffea
mov qword [rsp + 0xc8], rax
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
mov rdx, r15
cmp qword [r15 + 0x18], 0x10
jb 0x180008594
mov rdx, qword [r15]
add rdx, 0x16
lea rcx, [rsp + 0x2a0]
call fcn.18000c8a0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x680], xmm0
mov qword [rsp + 0x690], rax
mov ebx, dword [r15 + 0x10]
mov ecx, ebx
call fcn.18000dad0
mov r12, rax
mov qword [rsp + 0x58], rax
mov r8d, ebx
xor edx, edx
mov rcx, rax
call fcn.180032e60
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], 0xf
mov byte [rsp + 0x3a0], 0
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x398], 0xf
mov byte [rsp + 0x380], 0
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], 0xf
mov byte [rsp + 0x360], 0
lea rax, [rsp + 0x208]
mov qword [rsp + 0xc8], rax
lea rax, [rsp + 0x228]
mov qword [rsp + 0x3e8], rax
lea rdx, [0x180087da8]
lea rcx, [rsp + 0x208]
call fcn.18000c290
mov rdi, rax
lea rdx, [0x180087d48]
lea rcx, [rsp + 0x228]
call fcn.18000c290
mov rbx, rax
lea rdx, [0x180087d28]
lea rcx, [rsp + 0x248]
call fcn.18000c290
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x300]
call fcn.180007c10
nop
lea rdx, [rsp + 0xdf0]
mov ecx, 0x208
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea rdx, [rsp + 0x300]
cmp qword [rsp + 0x318], 0x10
cmovae rdx, qword [rsp + 0x300]
lea r9, [rsp + 0x6c0]
xor r8d, r8d
lea rcx, [rsp + 0xdf0]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameA]
nop
lea rcx, [rsp + 0x2c0]
cmp qword [rsp + 0x2d8], 0x10
setae byte [rsp + 0x51]
mov rbx, qword [rsp + 0x2c0]
cmovae rcx, rbx
lea r8, [rsp + 0x680]
mov edx, dword [rsp + 0x2d0]
call fcn.180001640
mov r13d, eax
lea rcx, [rsp + 0x2a0]
cmp qword [rsp + 0x2b8], 0x10
setae byte [rsp + 0x50]
mov rdi, qword [rsp + 0x2a0]
cmovae rcx, rdi
mov r8, r12
mov edx, dword [rsp + 0x2b0]
call fcn.180001640
mov dword [rsp + 0x60], eax
mov r12, qword [rsp + 0x2b0]
lea rcx, [r12 + 1]
call fcn.18000dad0
mov qword [rsp + 0x70], rax
lea r8, [r12 + 1]
xor edx, edx
mov rcx, rax
call fcn.180032e60
xor edx, edx
mov r8d, 0x290
lea rcx, [rsp + 0x3f0]
call fcn.180032e60
mov dl, 1
lea rcx, [rsp + 0x3f8]
call fcn.18000fa30
mov dl, 1
lea rcx, [rsp + 0x400]
call fcn.18000fa30
mov qword [rsp + 0x410], 0xffffffffffffffff
mov qword [rsp + 0x418], rsi
mov qword [rsp + 0x420], rsi
mov qword [rsp + 0x428], rsi
mov qword [rsp + 0x430], rsi
mov qword [rsp + 0x438], rsi
mov qword [rsp + 0x440], rsi
mov qword [rsp + 0x450], 0xffffffffffffffff
mov qword [rsp + 0x458], rsi
mov qword [rsp + 0x460], rsi
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.1.0
mov qword [rsp + 0x3f0], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.0
mov qword [rsp + 0x3f8], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.2.0
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x470]
call fcn.18000bc40
nop
lea rcx, [rsp + 0x560]
call fcn.18000be20
nop
mov qword [rsp + 0x20], 0x18
mov r9, qword [rsp + 0x80]
mov r8d, 0x20
mov rdx, qword [rsp + 0x98]
lea rcx, [rsp + 0x3f0]
call fcn.180011130
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x1288]
mov r9d, r13d
mov qword [rsp + 0x48], rax
mov r12, qword [rsp + 0x58]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rcx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x18
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x680]
mov r13, qword [rsp + 0x70]
mov rdx, r13
lea rcx, [rsp + 0x3f0]
call fcn.18001a410
test al, al
jne 0x180008b97
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.1.0
mov qword [rsp + 0x3f0], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.0
mov qword [rsp + 0x3f8], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.2.0
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x560]
call fcn.180007370
lea rax, [0x180079bd8]
mov qword [rsp + 0x470], rax
lea rax, [0x180078880]
mov qword [rsp + 0x478], rax
lea rax, [0x180078d98]
mov qword [rsp + 0x480], rax
lea rax, [0x180079290]
mov qword [rsp + 0x4b0], rax
lea rcx, [rsp + 0x470]
call fcn.18000bd80
lea rcx, [rsp + 0x3f0]
call fcn.180007480
nop
mov rdx, qword [rsp + 0x318]
cmp rdx, 0x10
jb 0x1800089c1
inc rdx
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800089bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b368
call fcn.18000d6f0
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x318], 0xf
mov byte [rsp + 0x300], 0
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], 0xf
mov byte [rsp + 0x360], 0
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x398], 0xf
mov byte [rsp + 0x380], 0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], 0xf
mov byte [rsp + 0x3a0], 0
cmp byte [rsp + 0x50], 0
je 0x180008a70
mov rdx, qword [rsp + 0x2b8]
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x180008a68
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b36e
mov rcx, rdi
call fcn.18000d6f0
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], 0xf
mov byte [rsp + 0x2a0], 0
cmp byte [rsp + 0x51], 0
je 0x180008acb
mov rdx, qword [rsp + 0x2d8]
inc rdx
mov rax, rbx
cmp rdx, 0x1000
jb 0x180008ac3
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b374
mov rcx, rbx
call fcn.18000d6f0
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0x2d8], 0xf
mov byte [rsp + 0x2c0], 0
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0x10
jb 0x180008b2a
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008b25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b37a
call fcn.18000d6f0
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x180008b80
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x180008b7b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000b2d2
mov rcx, r8
call fcn.18000d6f0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
xor eax, eax
jmp 0x18000b2af
xorps xmm0, xmm0
movups xmmword [rsp + 0x698], xmm0
movups xmmword [rsp + 0x6a8], xmm0
xor r8d, r8d
xor edx, edx
mov rcx, r13
call sym.whs32res.dll_cJSON_ParseWithOpts
mov qword [rsp + 0x78], rax
xor r8d, r8d
lea rdx, str.cdrt678
mov rcx, rax
call fcn.180003830
test rax, rax
je 0x18000af6f
cmp dword [rax + 0x18], 4
je 0x18000af6f
mov r8, qword [rax + 0x20]
mov edx, 0x20
lea rcx, [rsp + 0x698]
call fcn.180046618
lea rcx, [rsp + 0x698]
call fcn.18004741c
mov dword [rsp + 0x60], eax
mov r8d, 0x30
lea rdx, [rsp + 0x270]
lea rcx, [0x180007bc0]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
mov rcx, rsi
test rax, rax
cmovne rcx, qword [rsp + 0x278]
mov r8d, 0x104
lea rdx, [rsp + 0xae0]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, 0x5c
lea rcx, [rsp + 0xae0]
call fcn.1800329cc
mov byte [rax], 0
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0xb8], 0xf
mov byte [rsp + 0xa0], 0
lea rax, [rsp + 0xae0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180008c86
lea rdx, [rsp + 0xae0]
lea rcx, [rsp + 0xa0]
call fcn.18000c8a0
nop
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
cmp rcx, rdx
jae 0x180008ce4
lea rax, [rcx + 1]
mov qword [rsp + 0xb0], rax
lea rax, [rsp + 0xa0]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0xa0]
mov word [rax + rcx], 0x5c
jmp 0x180008cfb
mov r9b, 0x5c
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0xa0]
call fcn.18000d060
movups xmm0, xmmword [rsp + 0xa0]
movups xmmword [rsp + 0x320], xmm0
movups xmm1, xmmword [rsp + 0xb0]
movups xmmword [rsp + 0x330], xmm1
mov qword [rsp + 0xb8], 0xf
mov byte [rsp + 0xa0], 0
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], rsi
mov r12, qword [0x180087d78]
lea rax, [0x180087d68]
cmp qword [0x180087d80], 0x10
cmovae rax, qword [0x180087d68]
mov qword [rsp + 0x68], rax
cmp r12, 0x10
jae 0x180008da4
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x108], 0xf
jmp 0x180008e4f
movabs rax, 0x7fffffffffffffff
mov r13, r12
or r13, 0xf
cmp r13, rax
cmova r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x180008e0b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000b2ea
lfence
mov rcx, rax
call fcn.18000d714
mov rcx, rax
test rax, rax
je 0x18000b2ef
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x180008e2d
test rcx, rcx
je 0x180008e2a
lfence
call fcn.18000d714
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x180008e2d
mov rax, rsi
mov qword [rsp + 0xf0], rax
lea r8, [r12 + 1]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call fcn.180033050
mov qword [rsp + 0x108], r13
mov qword [rsp + 0x100], r12
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rsi
mov r12, qword [0x180087d58]
lea rax, [0x180087d48]
cmp qword [0x180087d60], 0x10
cmovae rax, qword [0x180087d48]
mov qword [rsp + 0x68], rax
cmp r12, 0x10
jae 0x180008eac
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe8], 0xf
jmp 0x180008f57
movabs rax, 0x7fffffffffffffff
mov r13, r12
or r13, 0xf
cmp r13, rax
cmova r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x180008f13
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000b2f5
lfence
mov rcx, rax
call fcn.18000d714
mov rcx, rax
test rax, rax
je 0x18000b2fa
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x180008f35
test rcx, rcx
je 0x180008f32
lfence
call fcn.18000d714
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x180008f35
mov rax, rsi
mov qword [rsp + 0xd0], rax
lea r8, [r12 + 1]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call fcn.180033050
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xe0], r12
mov qword [rsp + 0x120], rsi
mov qword [rsp + 0x128], rsi
mov r12, qword [0x180087d38]
lea rax, [0x180087d28]
cmp qword [0x180087d40], 0x10
cmovae rax, qword [0x180087d28]
mov qword [rsp + 0x68], rax
cmp r12, 0x10
jae 0x180008fb4
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x128], 0xf
jmp 0x18000905f
movabs rax, 0x7fffffffffffffff
mov r13, r12
or r13, 0xf
cmp r13, rax
cmova r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x18000901b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000b300
lfence
mov rcx, rax
call fcn.18000d714
mov rcx, rax
test rax, rax
je 0x18000b305
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x18000903d
test rcx, rcx
je 0x18000903a
lfence
call fcn.18000d714
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x18000903d
mov rax, rsi
mov qword [rsp + 0x110], rax
lea r8, [r12 + 1]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call fcn.180033050
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x120], r12
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x340]
call fcn.180007c10
nop
lea rdx, [rsp + 0x340]
cmp qword [rsp + 0x358], 0x10
cmovae rdx, qword [rsp + 0x340]
mov r8, qword [rsp + 0x350]
lea rcx, [rsp + 0x320]
call fcn.18000ca10
mov r12d, dword [rsp + 0x60]
cmp r12d, 0x12c
jge 0x180009c6d
lea rcx, [rsp + 0x320]
cmp qword [rsp + 0x338], 0x10
cmovae rcx, qword [rsp + 0x320]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsp + 0x88], rax
test rax, rax
jne 0x180009486
mov rcx, qword [rsp + 0x58]
call fcn.18000d6f0
mov eax, 0x8123
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x70]
call fcn.18000d6f0
nop
mov rdx, qword [rsp + 0x358]
cmp rdx, 0x10
jb 0x180009161
inc rdx
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000915c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b32c
call fcn.18000d6f0
mov qword [rsp + 0x350], rsi
mov qword [rsp + 0x358], 0xf
mov byte [rsp + 0x340], 0
mov rdx, qword [rsp + 0x338]
cmp rdx, 0x10
jb 0x1800091c0
inc rdx
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800091bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b332
call fcn.18000d6f0
mov qword [rsp + 0x330], rsi
mov qword [rsp + 0x338], 0xf
mov byte [rsp + 0x320], 0
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.1.0
mov qword [rsp + 0x3f0], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.0
mov qword [rsp + 0x3f8], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.2.0
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x560]
call fcn.180007370
lea rax, [0x180079bd8]
mov qword [rsp + 0x470], rax
lea rax, [0x180078880]
mov qword [rsp + 0x478], rax
lea rax, [0x180078d98]
mov qword [rsp + 0x480], rax
lea rax, [0x180079290]
mov qword [rsp + 0x4b0], rax
lea rcx, [rsp + 0x470]
call fcn.18000bd80
lea rcx, [rsp + 0x3f0]
call fcn.180007480
nop
mov rdx, qword [rsp + 0x318]
cmp rdx, 0x10
jb 0x1800092b0
inc rdx
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800092ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b338
call fcn.18000d6f0
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x318], 0xf
mov byte [rsp + 0x300], 0
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], 0xf
mov byte [rsp + 0x360], 0
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x398], 0xf
mov byte [rsp + 0x380], 0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], 0xf
mov byte [rsp + 0x3a0], 0
cmp byte [rsp + 0x50], 0
je 0x18000935f
mov rdx, qword [rsp + 0x2b8]
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x180009357
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b33e
mov rcx, rdi
call fcn.18000d6f0
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], 0xf
mov byte [rsp + 0x2a0], 0
cmp byte [rsp + 0x51], 0
je 0x1800093ba
mov rdx, qword [rsp + 0x2d8]
inc rdx
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800093b2
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b344
mov rcx, rbx
call fcn.18000d6f0
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0x2d8], 0xf
mov byte [rsp + 0x2c0], 0
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0x10
jb 0x180009419
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009414
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b34a
call fcn.18000d6f0
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x18000946f
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x18000946a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000b356
mov rcx, r8
call fcn.18000d6f0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
xor eax, eax
jmp 0x18000b2af
lea rax, [rsp + 0x130]
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x150]
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x148], rsi
mov r12, qword [0x180087d98]
lea rax, [0x180087d88]
cmp qword [0x180087da0], 0x10
cmovae rax, qword [0x180087d88]
mov qword [rsp + 0x68], rax
cmp r12, 0x10
jae 0x1800094fb
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x148], 0xf
jmp 0x1800095a6
movabs rax, 0x7fffffffffffffff
mov r13, r12
or r13, 0xf
cmp r13, rax
cmova r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x180009562
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000b30b
lfence
mov rcx, rax
call fcn.18000d714
mov rcx, rax
test rax, rax
je 0x18000b310
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x180009584
test rcx, rcx
je 0x180009581
lfence
call fcn.18000d714
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x180009584
mov rax, rsi
mov qword [rsp + 0x130], rax
lea r8, [r12 + 1]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call fcn.180033050
mov qword [rsp + 0x148], r13
mov qword [rsp + 0x140], r12
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], rsi
mov r12, qword [0x180087d58]
cmp qword [0x180087d60], 0x10
lea rax, [0x180087d48]
cmovae rax, qword [0x180087d48]
mov qword [rsp + 0x68], rax
cmp r12, 0x10
jae 0x180009603
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x168], 0xf
jmp 0x1800096ae
movabs rax, 0x7fffffffffffffff
mov r13, r12
or r13, 0xf
cmp r13, rax
cmova r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x18000966a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000b316
lfence
mov rcx, rax
call fcn.18000d714
mov rcx, rax
test rax, rax
je 0x18000b31b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x18000968c
test rcx, rcx
je 0x180009689
lfence
call fcn.18000d714
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x18000968c
mov rax, rsi
mov qword [rsp + 0x150], rax
lea r8, [r12 + 1]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call fcn.180033050
mov qword [rsp + 0x168], r13
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], rsi
mov r12, qword [0x180087d38]
cmp qword [0x180087d40], 0x10
lea rax, [0x180087d28]
cmovae rax, qword [0x180087d28]
mov qword [rsp + 0x68], rax
cmp r12, 0x10
jae 0x18000970b
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x188], 0xf
jmp 0x1800097b6
movabs rax, 0x7fffffffffffffff
mov r13, r12
or r13, 0xf
cmp r13, rax
cmova r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x180009772
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000b321
lfence
mov rcx, rax
call fcn.18000d714
mov rcx, rax
test rax, rax
je 0x18000b326
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x180009794
test rcx, rcx
je 0x180009791
lfence
call fcn.18000d714
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a0]
jmp 0x180009794
mov rax, rsi
mov qword [rsp + 0x170], rax
lea r8, [r12 + 1]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call fcn.180033050
mov qword [rsp + 0x188], r13
mov qword [rsp + 0x180], r12
lea r9, [rsp + 0x130]
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x3c8]
call fcn.180007c10
lea rdx, [rsp + 0x3c8]
cmp qword [rsp + 0x3e0], 0x10
cmovae rdx, qword [rsp + 0x3c8]
mov r13, qword [rsp + 0x88]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
jne 0x180009c08
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rsp + 0x58]
call fcn.18000d6f0
mov eax, 0x8123
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x70]
call fcn.18000d6f0
mov rdx, qword [rsp + 0x3e0]
cmp rdx, 0x10
jb 0x180009884
inc rdx
mov rcx, qword [rsp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000987f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b350
call fcn.18000d6f0
mov qword [rsp + 0x3d8], rsi
mov qword [rsp + 0x3e0], 0xf
mov byte [rsp + 0x3c8], 0
mov rdx, qword [rsp + 0x358]
cmp rdx, 0x10
jb 0x1800098e3
inc rdx
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800098de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b32c
call fcn.18000d6f0
mov qword [rsp + 0x350], rsi
mov qword [rsp + 0x358], 0xf
mov byte [rsp + 0x340], 0
mov rdx, qword [rsp + 0x338]
cmp rdx, 0x10
jb 0x180009942
inc rdx
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000993d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b332
call fcn.18000d6f0
mov qword [rsp + 0x330], rsi
mov qword [rsp + 0x338], 0xf
mov byte [rsp + 0x320], 0
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.1.0
mov qword [rsp + 0x3f0], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.0
mov qword [rsp + 0x3f8], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.2.0
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x560]
call fcn.180007370
lea rax, [0x180079bd8]
mov qword [rsp + 0x470], rax
lea rax, [0x180078880]
mov qword [rsp + 0x478], rax
lea rax, [0x180078d98]
mov qword [rsp + 0x480], rax
lea rax, [0x180079290]
mov qword [rsp + 0x4b0], rax
lea rcx, [rsp + 0x470]
call fcn.18000bd80
lea rcx, [rsp + 0x3f0]
call fcn.180007480
nop
mov rdx, qword [rsp + 0x318]
cmp rdx, 0x10
jb 0x180009a32
inc rdx
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009a2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b338
call fcn.18000d6f0
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x318], 0xf
mov byte [rsp + 0x300], 0
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], 0xf
mov byte [rsp + 0x360], 0
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x398], 0xf
mov byte [rsp + 0x380], 0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], 0xf
mov byte [rsp + 0x3a0], 0
cmp byte [rsp + 0x50], 0
je 0x180009ae1
mov rdx, qword [rsp + 0x2b8]
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x180009ad9
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b33e
mov rcx, rdi
call fcn.18000d6f0
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], 0xf
mov byte [rsp + 0x2a0], 0
cmp byte [rsp + 0x51], 0
je 0x180009b3c
mov rdx, qword [rsp + 0x2d8]
inc rdx
mov rax, rbx
cmp rdx, 0x1000
jb 0x180009b34
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b344
mov rcx, rbx
call fcn.18000d6f0
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0x2d8], 0xf
mov byte [rsp + 0x2c0], 0
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0x10
jb 0x180009b9b
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009b96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b34a
call fcn.18000d6f0
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x180009bf1
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x180009bec
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000b356
mov rcx, r8
call fcn.18000d6f0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
xor eax, eax
jmp 0x18000b2af
mov rdx, qword [rsp + 0x3e0]
cmp rdx, 0x10
jb 0x180009c4b
inc rdx
mov rcx, qword [rsp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009c46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b350
call fcn.18000d6f0
mov qword [rsp + 0x3d8], rsi
mov qword [rsp + 0x3e0], 0xf
mov byte [rsp + 0x3c8], 0
mov edx, dword [rsp + 0x60]
jmp 0x180009c90
cmp r12d, 0x191
jg 0x18000ac52
mov r13, rsi
mov r12, rsi
mov edx, dword [rsp + 0x60]
cmp edx, 0x191
je 0x18000a9b2
sub edx, 0x65
je 0x18000a961
sub edx, 0x64
je 0x18000a961
cmp edx, 0x64
jne 0x18000ac66
xor r8d, r8d
lea rdx, [0x180078ca0]
mov r12, qword [rsp + 0x78]
mov rcx, r12
call fcn.180003830
mov r13, rax
xor r8d, r8d
lea rdx, [0x180078ca4]
mov rcx, r12
call fcn.180003830
mov r8, rax
test r13, r13
je 0x18000a5cd
cmp dword [r13 + 0x18], 4
je 0x18000a5cd
mov rax, qword [r13 + 0x20]
mov r12, 0xffffffffffffffff
nop dword [rax]
inc r12
cmp byte [rax + r12], 0
jne 0x180009d00
test r8, r8
je 0x18000a239
cmp dword [r8 + 0x18], 4
je 0x18000a239
mov r8, qword [r8 + 0x20]
mov edx, 0x208
lea rcx, [rsp + 0x1000]
call fcn.180046618
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 1]
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x88], rax
cmp rax, 0xffffffffffffffff
jne 0x18000a0fe
mov rcx, qword [rsp + 0x70]
call fcn.18000d6f0
mov rcx, qword [rsp + 0x58]
call fcn.18000d6f0
mov eax, 0x8123
mov qword [rsp + 0x58], rax
mov rdx, qword [rsp + 0x358]
cmp rdx, 0x10
jb 0x180009dd6
inc rdx
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009dd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b35c
call fcn.18000d6f0
mov qword [rsp + 0x350], rsi
mov qword [rsp + 0x358], 0xf
mov byte [rsp + 0x340], 0
mov rdx, qword [rsp + 0x338]
cmp rdx, 0x10
jb 0x180009e35
inc rdx
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009e30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b362
call fcn.18000d6f0
mov qword [rsp + 0x330], rsi
mov qword [rsp + 0x338], 0xf
mov byte [rsp + 0x320], 0
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.1.0
mov qword [rsp + 0x3f0], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.0
mov qword [rsp + 0x3f8], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.2.0
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x560]
call fcn.180007370
lea rax, [0x180079bd8]
mov qword [rsp + 0x470], rax
lea rax, [0x180078880]
mov qword [rsp + 0x478], rax
lea rax, [0x180078d98]
mov qword [rsp + 0x480], rax
lea rax, [0x180079290]
mov qword [rsp + 0x4b0], rax
lea rcx, [rsp + 0x470]
call fcn.18000bd80
lea rcx, [rsp + 0x3f0]
call fcn.180007480
nop
mov rdx, qword [rsp + 0x318]
cmp rdx, 0x10
jb 0x180009f25
inc rdx
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009f20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b368
call fcn.18000d6f0
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x318], 0xf
mov byte [rsp + 0x300], 0
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], 0xf
mov byte [rsp + 0x360], 0
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x398], 0xf
mov byte [rsp + 0x380], 0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], 0xf
mov byte [rsp + 0x3a0], 0
cmp byte [rsp + 0x50], 0
je 0x180009fd4
mov rdx, qword [rsp + 0x2b8]
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x180009fcc
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b36e
mov rcx, rdi
call fcn.18000d6f0
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], 0xf
mov byte [rsp + 0x2a0], 0
cmp byte [rsp + 0x51], 0
je 0x18000a02f
mov rdx, qword [rsp + 0x2d8]
inc rdx
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000a027
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b374
mov rcx, rbx
call fcn.18000d6f0
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0x2d8], 0xf
mov byte [rsp + 0x2c0], 0
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0x10
jb 0x18000a08e
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a089
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b37a
call fcn.18000d6f0
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x18000a0e4
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x18000a0df
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x18000b2d2
mov rcx, r8
call fcn.18000d6f0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov eax, 0xffffffff
jmp 0x18000b2af
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x3c0]
mov r8d, r12d
mov rdx, qword [r13 + 0x20]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, r14
lea rcx, [rsp + 0x6c0]
call fcn.180001730
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0x1000]
mov rcx, r14
call fcn.1800082b0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r12d, dword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
call fcn.18000d6f0
mov eax, 0x8123
test rbx, rbx
cmovne rbx, rax
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0x70]
call fcn.18000d6f0
nop
lea rcx, [rsp + 0x340]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x320]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x3f0]
call fcn.18000b7e0
nop
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
nop
lea rcx, [rsp + 0x300]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x360]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x380]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x3a0]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x2a0]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x2c0]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x2e0]
call fcn.18000c1f0
nop
mov rcx, r15
call fcn.18000c1f0
mov eax, r12d
jmp 0x18000b2af
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [rsp + 0x70]
call fcn.18000d6f0
mov rcx, qword [rsp + 0x58]
call fcn.18000d6f0
mov eax, 0x8123
mov qword [rsp + 0x58], rax
mov rdx, qword [rsp + 0x358]
cmp rdx, 0x10
jb 0x18000a2a8
inc rdx
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a2a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b35c
call fcn.18000d6f0
mov qword [rsp + 0x350], rsi
mov qword [rsp + 0x358], 0xf
mov byte [rsp + 0x340], 0
mov rdx, qword [rsp + 0x338]
cmp rdx, 0x10
jb 0x18000a307
inc rdx
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a302
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b362
call fcn.18000d6f0
mov qword [rsp + 0x330], rsi
mov qword [rsp + 0x338], 0xf
mov byte [rsp + 0x320], 0
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.1.0
mov qword [rsp + 0x3f0], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.0
mov qword [rsp + 0x3f8], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.2.0
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x560]
call fcn.180007370
lea rax, [0x180079bd8]
mov qword [rsp + 0x470], rax
lea rax, [0x180078880]
mov qword [rsp + 0x478], rax
lea rax, [0x180078d98]
mov qword [rsp + 0x480], rax
lea rax, [0x180079290]
mov qword [rsp + 0x4b0], rax
lea rcx, [rsp + 0x470]
call fcn.18000bd80
lea rcx, [rsp + 0x3f0]
call fcn.180007480
nop
mov rdx, qword [rsp + 0x318]
cmp rdx, 0x10
jb 0x18000a3f7
inc rdx
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a3f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b368
call fcn.18000d6f0
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x318], 0xf
mov byte [rsp + 0x300], 0
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], 0xf
mov byte [rsp + 0x360], 0
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x398], 0xf
mov byte [rsp + 0x380], 0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], 0xf
mov byte [rsp + 0x3a0], 0
cmp byte [rsp + 0x50], 0
je 0x18000a4a6
mov rdx, qword [rsp + 0x2b8]
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x18000a49e
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b36e
mov rcx, rdi
call fcn.18000d6f0
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], 0xf
mov byte [rsp + 0x2a0], 0
cmp byte [rsp + 0x51], 0
je 0x18000a501
mov rdx, qword [rsp + 0x2d8]
inc rdx
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000a4f9
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b374
mov rcx, rbx
call fcn.18000d6f0
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0x2d8], 0xf
mov byte [rsp + 0x2c0], 0
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0x10
jb 0x18000a560
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a55b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b37a
call fcn.18000d6f0
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x18000a5b6
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x18000a5b1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000b2d2
mov rcx, r8
call fcn.18000d6f0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
xor eax, eax
jmp 0x18000b2af
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [rsp + 0x70]
call fcn.18000d6f0
mov rcx, qword [rsp + 0x58]
call fcn.18000d6f0
mov eax, 0x8123
mov qword [rsp + 0x58], rax
mov rdx, qword [rsp + 0x358]
cmp rdx, 0x10
jb 0x18000a63c
inc rdx
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a637
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b35c
call fcn.18000d6f0
mov qword [rsp + 0x350], rsi
mov qword [rsp + 0x358], 0xf
mov byte [rsp + 0x340], 0
mov rdx, qword [rsp + 0x338]
cmp rdx, 0x10
jb 0x18000a69b
inc rdx
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a696
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b362
call fcn.18000d6f0
mov qword [rsp + 0x330], rsi
mov qword [rsp + 0x338], 0xf
mov byte [rsp + 0x320], 0
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.1.0
mov qword [rsp + 0x3f0], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.0
mov qword [rsp + 0x3f8], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.2.0
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x560]
call fcn.180007370
lea rax, [0x180079bd8]
mov qword [rsp + 0x470], rax
lea rax, [0x180078880]
mov qword [rsp + 0x478], rax
lea rax, [0x180078d98]
mov qword [rsp + 0x480], rax
lea rax, [0x180079290]
mov qword [rsp + 0x4b0], rax
lea rcx, [rsp + 0x470]
call fcn.18000bd80
lea rcx, [rsp + 0x3f0]
call fcn.180007480
nop
mov rdx, qword [rsp + 0x318]
cmp rdx, 0x10
jb 0x18000a78b
inc rdx
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a786
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b368
call fcn.18000d6f0
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x318], 0xf
mov byte [rsp + 0x300], 0
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], 0xf
mov byte [rsp + 0x360], 0
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x398], 0xf
mov byte [rsp + 0x380], 0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], 0xf
mov byte [rsp + 0x3a0], 0
cmp byte [rsp + 0x50], 0
je 0x18000a83a
mov rdx, qword [rsp + 0x2b8]
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x18000a832
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b36e
mov rcx, rdi
call fcn.18000d6f0
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], 0xf
mov byte [rsp + 0x2a0], 0
cmp byte [rsp + 0x51], 0
je 0x18000a895
mov rdx, qword [rsp + 0x2d8]
inc rdx
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000a88d
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b374
mov rcx, rbx
call fcn.18000d6f0
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0x2d8], 0xf
mov byte [rsp + 0x2c0], 0
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0x10
jb 0x18000a8f4
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a8ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b37a
call fcn.18000d6f0
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x18000a94a
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x18000a945
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000b2d2
mov rcx, r8
call fcn.18000d6f0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
xor eax, eax
jmp 0x18000b2af
mov eax, dword [rsp + 0x1298]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x80]
mov r8, qword [rsp + 0x98]
mov rdx, qword [rsp + 0x78]
mov rcx, r14
call r12
mov r12d, eax
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x18000a165
xor r8d, r8d
lea rdx, [0x180078ca8]
mov rcx, qword [rsp + 0x78]
call fcn.180003830
mov rbx, rax
test rax, rax
je 0x18000aae9
cmp dword [rax + 0x18], 4
je 0x18000aae9
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor edx, edx
mov r8d, 0x207
mov rcx, r14
call fcn.180032e60
mov r8, qword [rbx + 0x20]
mov edx, 0x208
mov rcx, r14
call fcn.180046618
mov rcx, r14
call fcn.18004741c
test eax, eax
jne 0x18000a160
lea rcx, [rsp + 0x320]
call fcn.18000c1e0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [rsp + 0x58]
call fcn.18000d6f0
mov eax, 0x8123
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x70]
call fcn.18000d6f0
nop
lea rcx, [rsp + 0x340]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x320]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x3f0]
call fcn.18000b7e0
nop
lea rcx, [rsp + 0x300]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x360]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x380]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x3a0]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x2a0]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x2c0]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x2e0]
call fcn.18000c1f0
nop
mov rcx, r15
call fcn.18000c1f0
mov eax, 0xffffffff
jmp 0x18000b2af
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [rsp + 0x70]
call fcn.18000d6f0
mov rcx, qword [rsp + 0x58]
call fcn.18000d6f0
mov eax, 0x8123
mov qword [rsp + 0x58], rax
mov rdx, qword [rsp + 0x358]
cmp rdx, 0x10
jb 0x18000ab58
inc rdx
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ab53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b35c
call fcn.18000d6f0
mov qword [rsp + 0x350], rsi
mov qword [rsp + 0x358], 0xf
mov byte [rsp + 0x340], 0
mov rdx, qword [rsp + 0x338]
cmp rdx, 0x10
jb 0x18000abb7
inc rdx
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000abb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b362
call fcn.18000d6f0
mov qword [rsp + 0x330], rsi
mov qword [rsp + 0x338], 0xf
mov byte [rsp + 0x320], 0
lea rcx, [rsp + 0x3f0]
call fcn.18000b7e0
nop
lea rcx, [rsp + 0x300]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x360]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x380]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x3a0]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x2a0]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x2c0]
call fcn.18000c1f0
nop
lea rcx, [rsp + 0x2e0]
call fcn.18000c1f0
nop
mov rcx, r15
call fcn.18000c1f0
xor eax, eax
jmp 0x18000b2af
mov ecx, r12d
sub ecx, 0x1f5
je 0x18000ae53
cmp ecx, 0x64
je 0x18000ac6e
mov r12d, esi
jmp 0x18000a165
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor edx, edx
mov r8d, 0x1f4
mov rcx, r14
call fcn.180032e60
lea rbx, [rsp + 0x8d0]
mov rdi, qword [rsp + 0x78]
cmp esi, 9
jge 0x18000ada0
xor edx, edx
mov r8d, 0x200
lea rcx, [rsp + 0xbf0]
call fcn.180032e60
mov r8d, esi
lea rdx, [0x180078cac]
lea rcx, [rsp + 0xbf0]
call fcn.18000cc50
lea rdx, [rsp + 0xbf0]
mov rcx, rdi
call sym.whs32res.dll_cJSON_GetObjectItem
mov rdx, rax
test rax, rax
je 0x18000ad99
cmp dword [rax + 0x18], 4
je 0x18000ad99
cmp esi, 4
jge 0x18000ad13
movsxd rax, esi
shl rax, 6
lea rcx, [rsp + 0x904]
add rcx, rax
mov rdx, qword [rdx + 0x20]
call fcn.18000ccb0
inc esi
jmp 0x18000ac94
jne 0x18000ad2d
mov rdx, qword [rax + 0x20]
lea rcx, [rsp + 0xa04]
call fcn.18000ccb0
inc esi
jmp 0x18000ac94
cmp esi, 5
jne 0x18000ad4a
mov rdx, qword [rax + 0x20]
lea rcx, [rsp + 0xa44]
call fcn.18000ccb0
inc esi
jmp 0x18000ac94
cmp esi, 6
jne 0x18000ad67
mov rdx, qword [rax + 0x20]
lea rcx, [rsp + 0xa84]
call fcn.18000ccb0
inc esi
jmp 0x18000ac94
cmp esi, 7
jne 0x18000ad83
mov rcx, qword [rax + 0x20]
call fcn.18004741c
mov dword [rsp + 0x8d0], eax
inc esi
jmp 0x18000ac94
cmp esi, 8
jne 0x18000ad99
mov rdx, qword [rax + 0x20]
lea rcx, [rsp + 0x8d4]
call fcn.18000ccc0
inc esi
jmp 0x18000ac94
mov eax, 3
nop word [rax + rax]
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [r14 + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [r14 + 0x30], xmm1
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [r14 + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [r14 + 0x50], xmm1
movups xmm0, xmmword [rbx + 0x60]
movups xmmword [r14 + 0x60], xmm0
lea r14, [r14 + 0x80]
movups xmm1, xmmword [rbx + 0x70]
movups xmmword [r14 - 0x10], xmm1
lea rbx, [rbx + 0x80]
sub rax, 1
jne 0x18000adb0
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [r14 + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [r14 + 0x30], xmm1
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [r14 + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [r14 + 0x50], xmm1
movups xmm0, xmmword [rbx + 0x60]
movups xmmword [r14 + 0x60], xmm0
mov eax, dword [rbx + 0x70]
mov dword [r14 + 0x70], eax
jmp 0x18000a165
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor edx, edx
mov r8d, 0x180
mov rcx, r14
call fcn.180032e60
lea rbx, [rsp + 0x8d0]
mov rdi, qword [rsp + 0x78]
nop dword [rax]
cmp esi, 6
jge 0x18000af00
xor edx, edx
mov r8d, 0x200
lea rcx, [rsp + 0xbf0]
call fcn.180032e60
mov r8d, esi
lea rdx, [0x180078cac]
lea rcx, [rsp + 0xbf0]
call fcn.18000cc50
lea rdx, [rsp + 0xbf0]
mov rcx, rdi
call sym.whs32res.dll_cJSON_GetObjectItem
test rax, rax
je 0x18000aefc
cmp dword [rax + 0x18], 4
je 0x18000aefc
mov rdx, qword [rax + 0x20]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], 0
jne 0x18000aed7
test rax, rax
je 0x18000aefc
movsxd rax, esi
shl rax, 6
lea rcx, [rsp + 0x8d0]
add rcx, rax
call fcn.18000ccb0
inc esi
jmp 0x18000ae80
mov eax, 3
nop word [rax + rax]
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [r14 + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [r14 + 0x30], xmm1
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [r14 + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [r14 + 0x50], xmm1
movups xmm0, xmmword [rbx + 0x60]
movups xmmword [r14 + 0x60], xmm0
lea r14, [r14 + 0x80]
movups xmm1, xmmword [rbx + 0x70]
movups xmmword [r14 - 0x10], xmm1
lea rbx, [rbx + 0x80]
sub rax, 1
jne 0x18000af10
jmp 0x18000a165
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, r13
call fcn.18000d6f0
mov rcx, r12
call fcn.18000d6f0
mov eax, 0x8123
mov qword [rsp + 0x58], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.1.0
mov qword [rsp + 0x3f0], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.0
mov qword [rsp + 0x3f8], rax
lea rax, vtable.CryptoPP::XChaCha20Poly1305_Final_0_.2.0
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x560]
call fcn.180007370
lea rax, [0x180079bd8]
mov qword [rsp + 0x470], rax
lea rax, [0x180078880]
mov qword [rsp + 0x478], rax
lea rax, [0x180078d98]
mov qword [rsp + 0x480], rax
lea rax, [0x180079290]
mov qword [rsp + 0x4b0], rax
lea rcx, [rsp + 0x470]
call fcn.18000bd80
lea rcx, [rsp + 0x3f0]
call fcn.180007480
nop
mov rdx, qword [rsp + 0x318]
cmp rdx, 0x10
jb 0x18000b06b
inc rdx
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b066
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b368
call fcn.18000d6f0
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x318], 0xf
mov byte [rsp + 0x300], 0
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], 0xf
mov byte [rsp + 0x360], 0
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x398], 0xf
mov byte [rsp + 0x380], 0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], 0xf
mov byte [rsp + 0x3a0], 0
cmp byte [rsp + 0x50], 0
je 0x18000b11a
mov rdx, qword [rsp + 0x2b8]
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x18000b112
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b36e
mov rcx, rdi
call fcn.18000d6f0
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], 0xf
mov byte [rsp + 0x2a0], 0
cmp byte [rsp + 0x51], 0
je 0x18000b175
mov rdx, qword [rsp + 0x2d8]
inc rdx
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000b16d
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b374
mov rcx, rbx
call fcn.18000d6f0
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0x2d8], 0xf
mov byte [rsp + 0x2c0], 0
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0x10
jb 0x18000b1d4
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b1cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b37a
call fcn.18000d6f0
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x18000b22a
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x18000b225
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000b2d2
mov rcx, r8
call fcn.18000d6f0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
xor eax, eax
jmp 0x18000b2af
xor eax, eax
mov rcx, qword [rsp + 0x1210]
xor rcx, rsp
call fcn.18000d430
add rsp, 0x1220
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.1800465a0
int3
call fcn.1800465a0
nop
call fcn.1800061a0
nop
call fcn.18000caa0
nop
call fcn.180006100
call fcn.1800465a0
nop
call fcn.180006100
call fcn.1800465a0
nop
call fcn.180006100
call fcn.1800465a0
nop
call fcn.180006100
call fcn.1800465a0
nop
call fcn.180006100
call fcn.1800465a0
nop
call fcn.180006100
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
nop
call fcn.1800465a0
int3