Function at 0x180019330
Capabilities:
Decrypt data using aes via x86 extensions
Parse credit card information
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x1f0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
mov rax, qword [0x1800a74e0]
xor rax, rsp
mov qword [rbp + 0x48], rax
xor r11d, r11d
mov qword [rbp - 0x10], rdx
mov rbx, rdx
mov qword [rsp + 0x68], r8
lea edx, [rcx + 0x12]
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x50], ecx
mov r10, r8
mov dword [rsp + 0x44], edx
lea r8d, [r11 + 1]
lea r9, [0x180000000]
mov eax, ecx
cmp ecx, edx
jae 0x180019572
movdqu xmm1, xmmword [rbp - 0x28]
mov rsi, qword [rsp + 0x78]
movdqu xmm0, xmmword [rbp - 0x18]
mov r15, qword [rsp + 0x78]
mov r13, qword [rbp - 0x50]
mov rdx, qword [rsp + 0x78]
mov edi, dword [rsp + 0x50]
mov r14d, dword [rsp + 0x50]
mov r8d, dword [rsp + 0x50]
mov r9d, dword [rsp + 0x50]
movdqu xmm8, xmmword [rbp + 0x58]
mov rbx, qword [rsp + 0x78]
movdqu xmm9, xmmword [rbp + 0x48]
mov r12, qword [rbp - 0x20]
movdqu xmm11, xmmword [rbp + 0x38]
mov ecx, dword [rsp + 0x44]
movdqu xmm12, xmmword [rbp + 0x28]
mov qword [rbp - 0x38], rsi
movdqu xmm13, xmmword [rbp + 0x18]
mov dword [rbp - 0x80], edi
movdqu xmm14, xmmword [rbp + 8]
mov dword [rbp - 0x7c], r14d
movdqu xmm15, xmmword [rbp - 8]
mov qword [rbp - 0x30], r15
movdqu xmm10, xmmword [rbp - 0x38]
mov qword [rbp - 0x28], r13
movdqa xmm6, xmmword [rbp - 0x20]
movdqu xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x60], r8d
movdqu xmmword [rbp - 0x60], xmm1
mov qword [rsp + 0x58], rdx
mov dword [rsp + 0x48], r9d
nop dword [rax]
nop dword [rax + rax]
add eax, 0xfffffefb
cmp eax, 0x49
ja case.default.0x1800194ae
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x1a884]
mov ecx, dword [rcx + rax*4 + 0x1a840]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov byte [0x1800a75f0], 0
mov byte [0x1800a75f3], 1
jmp case.0x1800194ae.266
inc dword [r10 + 0x10]
xor edx, edx
mov r8d, 0x122
mov rcx, r10
call fcn.180064070
test eax, eax
jne 0x18001962b
mov ecx, 0xff
mov eax, ecx
sub eax, 0xff
je 0x180019511
sub eax, 1
je 0x180019502
cmp eax, 1
je case.0x1800194ae.265
mov r10, qword [rsp + 0x68]
jmp 0x180019521
mov r10, qword [rsp + 0x68]
xor r11d, r11d
mov dword [rsp + 0x70], r11d
jmp 0x180019524
mov r10, qword [rsp + 0x68]
mov qword [r10], rsi
mov dword [r10 + 0xc], edi
mov dword [r10 + 0x10], r14d
xor r11d, r11d
inc ecx
cmp ecx, 0x102
jb 0x1800194e4
movdqu xmm0, xmmword [rbp - 0x70]
mov r8d, dword [rsp + 0x60]
movdqu xmm1, xmmword [rbp - 0x60]
mov r9d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
mov ecx, dword [rsp + 0x44]
mov eax, dword [rsp + 0x50]
inc eax
mov dword [rsp + 0x50], eax
cmp eax, ecx
jb 0x180019480
mov ecx, dword [rsp + 0x40]
lea r9, [0x180000000]
mov rbx, qword [rbp - 0x10]
mov r8d, 1
imul r12d, ecx, 0x6ae
mov esi, ecx
cmp ecx, r12d
ja case.0x1800194ae.265
mov r15, qword [rsp + 0x58]
lea r13, str.__force
mov r14, qword [rsp + 0x78]
lea rdi, [0x1800a8250]
cmp esi, 0x45978
ja 0x180019db1
je 0x180019d25
cmp esi, 0x1ef99
ja 0x180019bfa
je 0x180019bb1
cmp esi, 0x14d
je 0x180019b9b
cmp esi, 0x7ce0
je 0x180019b7a
cmp esi, 0xf873
je 0x180019b64
cmp esi, 0x17406
jne 0x18001a7aa
mov dword [0x1800a7600], r11d
jmp 0x18001a7aa
mov qword [0x1800a8248], r11
mov byte [0x1800a75ba], 0
mov byte [0x1800a75b9], 0
jmp case.0x1800194ae.266
mov rdx, qword [r15 + 0x18]
test rdx, rdx
je 0x180019542
mov rcx, qword [r10 + 0x48]
call qword [r10 + 0x40]
mov r8d, dword [rsp + 0x60]
xor r11d, r11d
movdqu xmm1, xmmword [rbp - 0x60]
mov r9d, dword [rsp + 0x48]
movdqu xmm0, xmmword [rbp - 0x70]
mov r10, qword [rsp + 0x68]
jmp 0x180019542
mov r15, qword [r10 + 0x30]
mov qword [rbp - 0x30], r15
test r15, r15
je 0x180019662
cmp qword [r15], r10
je case.0x1800194ae.266
mov dword [rsp + 0x70], 0xfffffffe
mov rax, qword [rsp + 0x70]
mov rcx, qword [rbp + 0x48]
xor rcx, rsp
call fcn.1800864a0
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rdx, r13
mov dword [rbp - 0x78], 0x38
mov ecx, 0xb1
call fcn.18005a1c0
jmp 0x18001962b
lea rax, [0x1800859d0]
mov ecx, 9
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], rax
call fcn.18002da20
mov r15, rax
xor edi, edi
lea rax, [0x1806f74f0]
mov r14, rax
mov rsi, rax
mov r9d, 0x34
mov dword [r14], edi
mov r8, r15
mov qword [rsp + 0x78], rsi
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x70], rsi
lea rcx, [rsp + 0x78]
call fcn.18003cc20
inc edi
lea r14, [r14 + 4]
add rsi, 4
cmp edi, 0x3e8
jl 0x180019712
mov edi, dword [rbp - 0x80]
mov rsi, qword [rbp - 0x38]
mov r14d, dword [rbp - 0x7c]
mov qword [rsp + 0x70], r15
mov r15, qword [rbp - 0x30]
jmp 0x18001962b
mov qword [r10 + 0x30], r11
mov dword [rsp + 0x70], r11d
jmp case.0x1800194ae.266
mov edi, dword [r10 + 0xc]
mov r14d, dword [r10 + 0x10]
mov dword [rbp - 0x80], edi
mov dword [rbp - 0x7c], r14d
jmp case.0x1800194ae.266
mov rsi, qword [r10]
mov qword [rbp - 0x38], rsi
jmp case.0x1800194ae.266
test r10, r10
je 0x180019662
jmp case.0x1800194ae.266
test edi, edi
je 0x180019857
mov r13, qword [rsp + 0x68]
mov r14, rsi
mov r15d, edi
mov rsi, qword [r14]
test rsi, rsi
je 0x180019836
nop dword [rax]
mov edi, reloc.SHELL32.dll_PathMakeUniqueName
cmp edi, 0x2f
je 0x180019800
cmp edi, 0x11fe
je 0x1800197df
cmp edi, 0x23cd
jne 0x18001981e
mov rsi, rdx
jmp 0x18001981e
mov eax, r8d
lea rdx, [rax*8]
mov rax, qword [r13]
mov rcx, qword [rdx + rax]
mov qword [rsi + 8], rcx
mov rax, qword [r13]
mov qword [rdx + rax], rsi
jmp 0x180019819
mov rax, qword [rsi + 8]
mov rcx, qword [rsi]
mov qword [rsp + 0x58], rax
call qword [r13 + 0x18]
xor edx, edx
div dword [r13 + 0xc]
mov r8d, edx
mov rdx, qword [rsp + 0x58]
add edi, 0x11cf
cmp edi, 0x356d
jbe 0x1800197c5
mov dword [rsp + 0x60], r8d
test rsi, rsi
jne 0x1800197c0
add r14, 8
sub r15, 1
jne 0x1800197b1
mov r13, qword [rbp - 0x28]
mov edi, dword [rbp - 0x80]
mov rsi, qword [rbp - 0x38]
mov r14d, dword [rbp - 0x7c]
mov r15, qword [rbp - 0x30]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [rsp + 0x70], 1
jmp 0x18001962b
mov qword [rbp - 0x28], r11
mov r13, r11
mov qword [rbp - 0x50], r11
test r9d, r9d
jle 0x1800198ce
lea rdi, [rbp - 8]
mov esi, r9d
nop dword [rax]
nop dword [rax + rax]
lea r9, [rbp - 0x50]
mov qword [rsp + 0x78], rdi
lea r8, [rsp + 0x78]
mov edx, 0xf9
xor ecx, ecx
call fcn.180056270
add rdi, 4
sub rsi, 1
jne 0x180019890
mov r13, qword [rbp - 0x50]
xor r11d, r11d
movdqu xmm0, xmmword [rbp - 0x70]
mov r9d, dword [rsp + 0x48]
movdqu xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x28], r13
movsxd r15, r9d
mov r14, r11
mov qword [rsp + 0x78], r15
test r9d, r9d
jle 0x180019ab2
mov esi, 3
lea r15, [0x1800859e0]
nop
mov eax, esi
sub eax, 3
je 0x180019916
cmp eax, 1
jne 0x180019a8a
xor r9d, r9d
lea r8d, [rax + 0x25]
mov rdx, rbx
xor ecx, ecx
call fcn.18004ad70
jmp 0x180019a87
mov eax, dword [rbp + r14*4 - 8]
mov edi, 0x44
mov qword [rbp - 0x48], r15
movdqu xmm7, xmmword [rbp - 0x48]
mov dword [rbp - 0x78], eax
nop dword [rax]
cmp edi, 0x14c8
ja 0x1800199f8
je 0x1800199e0
cmp edi, 0x25
je 0x180019a6f
cmp edi, 0x44
je 0x180019992
cmp edi, 0x118
je 0x18001997d
cmp edi, 0x50c
je 0x180019971
cmp edi, 0x9d4
je 0x180019a84
jmp 0x180019a49
mov r12, r11
mov qword [rbp - 0x20], r11
jmp 0x180019a49
movdqu xmm6, xmmword [r13]
pxor xmm6, xmm7
aesdec xmm6, xmm10
jmp 0x180019a49
mov rbx, r13
test r13, r13
je 0x180019a49
nop
mov rax, qword [rbx]
lea r8, [rbp - 0x78]
mov qword [rsp + 0x38], rax
xor r9d, r9d
mov dword [rsp + 0x30], 0xb4
xor edx, edx
mov qword [rsp + 0x28], r11
xor ecx, ecx
mov qword [rsp + 0x20], r11
call fcn.180019010
test eax, eax
jne 0x180019a66
mov rbx, qword [rbx + 8]
mov r11d, eax
test rbx, rbx
jne 0x1800199a0
jmp 0x180019a49
aesdec xmm6, xmm1
aesdec xmm6, xmm0
aesdec xmm6, xmm15
aesdec xmm6, xmm14
jmp 0x180019a49
cmp edi, 0x2878
je 0x180019a37
cmp edi, 0x3c28
je 0x180019a2f
cmp edi, 0x4fd8
je 0x180019a1a
cmp edi, 0x6388
je 0x180019a84
jmp 0x180019a49
movdqa xmm0, xmm6
aesdeclast xmm0, xmm8
movdqa xmmword [rbp - 0x20], xmm0
mov r12, qword [rbp - 0x20]
jmp 0x180019a49
aesdec xmm6, xmm9
jmp 0x180019a49
aesdec xmm6, xmm13
aesdec xmm6, xmm12
aesdec xmm6, xmm11
add edi, 0x4c8
cmp edi, 0x2fd0
ja 0x180019a84
movdqu xmm0, xmmword [rbp - 0x70]
movdqu xmm1, xmmword [rbp - 0x60]
jmp 0x180019930
mov r12, rbx
mov qword [rbp - 0x20], rbx
jmp 0x180019a87
mov eax, r11d
test r15d, r15d
setne al
mov dword [r13 + 0x6c], eax
mov dword [rbp - 0x20], r11d
mov r12, qword [rbp - 0x20]
mov rbx, r12
xor r11d, r11d
movdqu xmm0, xmmword [rbp - 0x70]
inc esi
movdqu xmm1, xmmword [rbp - 0x60]
cmp esi, 5
jb 0x1800198f0
inc r14
cmp r14, qword [rsp + 0x78]
jl 0x1800198e2
mov r9d, dword [rsp + 0x48]
movdqu xmm0, xmmword [rbp - 0x70]
mov r8d, dword [rsp + 0x60]
movdqu xmm1, xmmword [rbp - 0x60]
mov edi, dword [rbp - 0x80]
mov rsi, qword [rbp - 0x38]
mov r14d, dword [rbp - 0x7c]
mov r15, qword [rbp - 0x30]
mov r10, qword [rsp + 0x68]
mov dword [rbp - 0x78], r11d
jmp 0x180019542
mov rdx, qword [r15 + 0x20]
test rdx, rdx
je 0x180019af4
mov rcx, qword [r10 + 0x48]
call qword [r10 + 0x40]
mov r10, qword [rsp + 0x68]
mov rdx, qword [r15 + 0x28]
test rdx, rdx
je 0x180019b05
mov rcx, qword [r10 + 0x48]
call qword [r10 + 0x40]
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax + 0x30]
mov rcx, qword [rax + 0x48]
call qword [rax + 0x40]
jmp 0x18001962b
movdqa xmm0, xmmword [0x18009fd80]
mov r9d, 0xa
movdqa xmm1, xmmword [0x18009fdc0]
movups xmmword [rbp - 8], xmm0
mov dword [rbp + 0x40], 0x32
mov dword [rbp + 0x44], 0x1e
movsd xmm0, qword [rbp + 0x40]
movsd qword [rbp + 0x18], xmm0
movdqu xmm0, xmmword [rbp - 0x70]
mov dword [rsp + 0x48], r9d
movups xmmword [rbp + 8], xmm1
movdqu xmm1, xmmword [rbp - 0x60]
jmp case.0x1800194ae.266
mov dword [0x1800a823c], 0x1e
mov byte [0x1800a75bb], 0
jmp 0x18001a7aa
mov byte [0x1800a75f1], 0
mov byte [0x1800a75f2], 0
mov dword [0x1800a75f4], r11d
mov dword [0x1800a75f8], r11d
jmp 0x18001a7aa
mov dword [0x1800a75bc], r11d
mov dword [0x1800a75fc], 9
jmp 0x18001a7aa
lea rdx, [0x180052410]
mov ecx, 0xb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_signal]
mov r8d, 0x23
lea rdx, [0x1800a7610]
lea rcx, str._none_
call fcn.180043c50
mov r8d, 0x23
lea rdx, [0x1800a7a20]
lea rcx, str._none_
call fcn.180043c50
jmp 0x18001a7a3
cmp esi, 0x26b2c
je 0x180019d08
cmp esi, 0x2e6bf
je 0x180019cd3
cmp esi, 0x36252
je 0x180019cae
cmp esi, 0x3dde5
jne 0x18001a7aa
lea r8, str.BZIP
mov edx, 0xf8
lea rcx, [rsp + 0x58]
call fcn.180035540
mov r13, qword [rsp + 0x68]
mov edi, 1
mov r15, qword [rsp + 0x58]
mov eax, dword [r13]
dec eax
cmp eax, edi
jl 0x180019c98
add rbx, 8
nop dword [rax]
mov r9, qword [rbx]
xor edx, edx
mov qword [rsp + 0x28], r15
xor ecx, ecx
mov r8d, 0x82
mov qword [rsp + 0x20], 0
call fcn.180021a30
mov ecx, dword [r13]
lea rbx, [rbx + 8]
dec ecx
inc edi
mov r15, rax
cmp edi, ecx
jle 0x180019c60
mov qword [rsp + 0x58], rax
mov dword [0x1800a760c], 7
lea r13, str.__force
jmp 0x18001a7a3
lea r8, str.BZIP2
mov qword [rsp + 0x58], r11
mov edx, 0xf8
lea rcx, [rsp + 0x58]
call fcn.180035540
mov r15, qword [rsp + 0x58]
jmp 0x18001a7a3
movzx eax, byte [0x1800a8250]
mov rcx, rdi
test al, al
je 0x180019da8
cmp al, 0x5c
jne 0x180019cf4
lea rax, [rcx + 1]
mov qword [0x1800a8240], rax
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x180019ce5
mov ecx, dword [rsp + 0x40]
jmp 0x18001a7aa
mov rcx, qword [rbx]
mov r8d, 0x23
mov rdx, rdi
call fcn.180043c50
mov qword [0x1800a8240], rdi
jmp 0x18001a7a3
mov dword [0x1800a75f4], r11d
mov r8b, 1
mov rdx, r15
test r15, r15
je 0x18001a7aa
nop dword [rax + rax]
mov rax, qword [rdx]
cmp byte [rax], 0x2d
jne 0x180019d63
cmp byte [rax + 1], 0x2d
jne 0x180019d59
cmp byte [rax + 2], 0
jne 0x180019d59
xor r8b, r8b
jmp 0x180019d9f
cmp byte [rax], 0x2d
jne 0x180019d63
test r8b, r8b
jne 0x180019d9f
inc dword [0x1800a75f4]
mov rax, 0xffffffffffffffff
mov rcx, qword [rdx]
inc rax
cmp byte [rcx + rax], 0
jne 0x180019d73
cmp dword [0x1800a760c], eax
jge 0x180019d9f
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x180019d90
mov dword [0x1800a760c], eax
mov rdx, qword [rdx + 8]
test rdx, rdx
jne 0x180019d40
mov ecx, dword [rsp + 0x40]
jmp 0x18001a7aa
cmp esi, 0x6c357
ja 0x18001a524
je 0x18001a48b
cmp esi, 0x4d50b
je 0x18001a470
cmp esi, 0x5509e
je 0x18001a3a1
cmp esi, 0x5cc31
je 0x18001a179
cmp esi, 0x647c4
jne 0x18001a7aa
mov rdi, r15
test r15, r15
je 0x18001a158
nop
mov rbx, qword [rdi]
cmp byte [rbx], 0x2d
jne 0x180019e18
cmp byte [rbx + 1], 0x2d
jne 0x180019e18
cmp byte [rbx + 2], 0
je 0x18001a154
lea rdx, str.__stdout
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180019e3a
mov dword [0x1800a7608], 2
jmp 0x18001a144
lea rdx, str._billinois_b
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180019e5c
mov dword [0x1800a7604], 2
jmp 0x18001a144
lea rdx, str.LB_GETTEXT
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
xor r11d, r11d
test eax, eax
jne 0x180019e84
mov r8d, 1
mov dword [0x1800a7604], r8d
jmp 0x18001a147
mov rcx, r11
nop word [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rcx + r13 - 1]
jne 0x180019eb0
cmp rcx, 8
jne 0x180019e90
mov byte [0x1800a75f0], 1
jmp 0x18001a147
mov rcx, r11
lea rdx, str.__test
nop word [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x180019ee2
cmp rcx, 7
jne 0x180019ec0
mov dword [0x1800a7604], 3
jmp 0x18001a147
mov rcx, r11
lea rdx, str.__keep
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x180019f0f
cmp rcx, 7
jne 0x180019ef0
mov byte [0x1800a75b9], 1
jmp 0x18001a147
mov rcx, r11
lea rdx, str.__small
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x180019f3f
cmp rcx, 8
jne 0x180019f20
mov byte [0x1800a75ba], 1
jmp 0x18001a147
mov rcx, r11
lea rdx, str.__quiet
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x180019f6f
cmp rcx, 8
jne 0x180019f50
mov byte [0x1800a75f3], r11b
jmp 0x18001a147
lea rdx, str.__version
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18001a132
lea rdx, str.__license
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18001a132
lea rdx, str.224.2.127.254
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180019fbf
mov dword [0x1800a823c], 1
jmp 0x18001a144
lea rdx, str.Sectores_ocultos:
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18001a112
lea rdx, str.StringImpl_symbol
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18001a112
xor r11d, r11d
lea rdx, str.__fast
mov ecx, r11d
nop word [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x18001a022
cmp rcx, 7
jne 0x18001a000
mov dword [0x1800a75fc], 1
jmp 0x18001a147
mov rcx, r11
lea rdx, str.__best
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x18001a052
cmp rcx, 7
jne 0x18001a030
mov dword [0x1800a75fc], 9
jmp 0x18001a147
lea rdx, str.__verbose
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18001a070
inc dword [0x1800a75bc]
jmp 0x18001a144
xor ecx, ecx
lea rdx, str.__help
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x18001a0b3
cmp rcx, 7
jne 0x18001a080
mov rdx, qword [0x1800a8240]
mov r9d, 0xf7
xor r8d, r8d
xor ecx, ecx
call fcn.18002a4f0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, 2
lea rdx, [0x1800979f8]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x18001a144
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, qword [rdi]
lea rdx, str.PSOUget_sync_point
mov r8, qword [0x1800a8240]
mov rcx, rax
call fcn.180085950
mov rdx, qword [0x1800a8240]
mov r9d, 0xf7
xor r8d, r8d
xor ecx, ecx
call fcn.18002a4f0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor eax, eax
mov r9, rbx
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0x87
call fcn.18003a9c0
jmp 0x18001a144
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xa5
call fcn.18004c5f0
xor r11d, r11d
mov rdi, qword [rdi + 8]
test rdi, rdi
jne 0x180019e00
mov ecx, dword [rsp + 0x40]
cmp dword [0x1800a75bc], 4
mov esi, 0x647c4
jle 0x18001a7aa
mov dword [0x1800a75bc], 4
jmp 0x18001a7aa
mov rdi, r15
test r15, r15
je 0x18001a397
nop word [rax + rax]
mov rax, qword [rdi]
cmp byte [rax], 0x2d
jne 0x18001a37f
cmp byte [rax + 1], 0x2d
jne 0x18001a1ac
cmp byte [rax + 2], 0
je 0x18001a393
cmp byte [rax], 0x2d
jne 0x18001a37f
movzx ecx, byte [rax + 1]
cmp cl, 0x2d
je 0x18001a37f
mov rsi, r8
test cl, cl
je 0x18001a37f
nop dword [rax]
movsx eax, byte [rsi + rax]
add eax, 0xffffffcf
cmp eax, 0x49
ja case.0x18001a1f6.69
cdqe
movzx eax, byte [r9 + rax + 0x1a924]
mov ecx, dword [r9 + rax*4 + 0x1a8d0]
add rcx, r9
jmp rcx
mov dword [0x1800a7608], 2
jmp 0x18001a368
mov dword [0x1800a7604], 2
jmp 0x18001a368
mov dword [0x1800a7604], r8d
jmp 0x18001a368
mov byte [0x1800a75f0], 1
jmp 0x18001a368
mov dword [0x1800a7604], 3
jmp 0x18001a368
mov byte [0x1800a75b9], 1
jmp 0x18001a368
mov byte [0x1800a75ba], 1
jmp 0x18001a368
mov byte [0x1800a75f3], 0
jmp 0x18001a368
mov dword [0x1800a75fc], r8d
jmp 0x18001a368
mov dword [0x1800a75fc], 2
jmp 0x18001a368
mov dword [0x1800a75fc], 3
jmp 0x18001a368
mov dword [0x1800a75fc], 4
jmp 0x18001a368
mov dword [0x1800a75fc], 5
jmp 0x18001a368
mov dword [0x1800a75fc], 6
jmp 0x18001a368
mov dword [0x1800a75fc], 7
jmp 0x18001a368
mov dword [0x1800a75fc], 8
jmp 0x18001a368
mov dword [0x1800a75fc], 9
jmp 0x18001a368
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xa5
call fcn.18004c5f0
jmp 0x18001a362
inc dword [0x1800a75bc]
jmp 0x18001a368
mov ebx, 0x62
mov eax, ebx
sub eax, 0x5f
je 0x18001a362
sub eax, 1
je 0x18001a7ee
sub eax, 1
je 0x18001a344
cmp eax, 1
jne 0x18001a35b
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, qword [rdi]
lea rdx, str.pSignalsTitleLabel
mov r8, qword [0x1800a8240]
mov rcx, rax
call fcn.180085950
jmp 0x18001a35b
mov rdx, qword [0x1800a8240]
mov r9d, 0xf7
xor r8d, r8d
xor ecx, ecx
call fcn.18002a4f0
dec ebx
cmp ebx, 0x5e
ja 0x18001a306
mov r8d, 1
mov rax, qword [rdi]
lea r9, [0x180000000]
inc rsi
cmp byte [rsi + rax], 0
jne 0x18001a1d0
mov rdi, qword [rdi + 8]
lea r9, [0x180000000]
test rdi, rdi
jne 0x18001a190
mov ecx, dword [rsp + 0x40]
mov esi, 0x5cc31
jmp 0x18001a7a7
mov rcx, qword [0x1800a8240]
lea rdx, str.unzip
mov dword [0x1800a7604], r8d
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18001a3d8
mov rcx, qword [0x1800a8240]
lea rdx, str.UNZIP
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18001a3e2
mov dword [0x1800a7604], 2
mov rcx, qword [0x1800a8240]
lea rdx, str.z2cat
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18001a446
mov rcx, qword [0x1800a8240]
lea rdx, str.Z2CAT
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18001a446
mov rcx, qword [0x1800a8240]
lea rdx, str.zcat
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18001a446
mov rcx, qword [0x1800a8240]
lea rdx, str.ZCAT
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18001a7a3
mov ecx, dword [rsp + 0x40]
xor r11d, r11d
mov eax, r11d
mov dword [0x1800a7604], 2
cmp dword [0x1800a75f4], eax
setne al
inc eax
mov dword [0x1800a7608], eax
jmp 0x18001a7aa
cmp dword [0x1800a75f4], 0
mov eax, 3
cmove eax, r8d
mov dword [0x1800a7608], eax
jmp 0x18001a7aa
cmp dword [0x1800a7604], 1
jne 0x18001a4e5
cmp byte [0x1800a75ba], 0
je 0x18001a4b0
cmp dword [0x1800a75fc], 2
jle 0x18001a4b0
mov dword [0x1800a75fc], 2
mov eax, dword [0x1800a7608]
cmp eax, 2
jne 0x18001a4cc
cmp dword [0x1800a75f4], 0
cmove eax, r8d
mov dword [0x1800a7608], eax
cmp dword [0x1800a7604], 1
je 0x18001a7aa
mov dword [0x1800a75fc], r11d
jmp 0x18001a7aa
cmp dword [0x1800a7604], 3
jne 0x18001a4b0
cmp dword [0x1800a7608], 2
jne 0x18001a4d9
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x1800a8240]
lea rdx, str.Discarding_report_instead_of_uploading.
mov rcx, rax
call fcn.180085950
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp esi, 0x73eea
je 0x18001a5a9
cmp esi, 0x7ba7d
je 0x18001a54f
cmp esi, 0x83610
jne 0x18001a7aa
mov eax, dword [0x1800a7600]
mov dword [rsp + 0x70], eax
jmp case.0x1800194ae.265
mov rbx, r15
test r15, r15
je 0x18001a7aa
nop dword [rax + rax]
mov edi, 0x5f
mov eax, edi
sub eax, 0x5d
je 0x18001a595
sub eax, 1
je 0x18001a58a
cmp eax, 1
jne 0x18001a598
mov rcx, qword [rbx]
mov r14, qword [rbx + 8]
test rcx, rcx
je 0x18001a598
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18001a598
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18001a598
mov rbx, r14
dec edi
cmp edi, 0x5c
ja 0x18001a565
test rbx, rbx
jne 0x18001a560
jmp 0x18001a7a3
cmp dword [0x1800a7608], 3
jne 0x18001a5da
lea rdx, [0x180052440]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_signal]
lea rdx, [0x180052440]
mov ecx, ILClone
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_signal]
mov ecx, dword [rsp + 0x40]
cmp dword [0x1800a7604], 1
jne 0x18001a654
cmp dword [0x1800a7608], 1
jne 0x18001a5fe
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x7e]
call fcn.180077c00
jmp 0x18001a7a3
mov dil, 1
mov rbx, r15
test r15, r15
je 0x18001a7a7
nop dword [rax]
mov rax, qword [rbx]
cmp byte [rax], 0x2d
jne 0x18001a633
cmp byte [rax + 1], 0x2d
jne 0x18001a629
cmp byte [rax + 2], 0
jne 0x18001a629
xor dil, dil
jmp 0x18001a646
cmp byte [rax], 0x2d
jne 0x18001a633
test dil, dil
jne 0x18001a646
inc dword [0x1800a75f8]
xor edx, edx
mov r8, qword [rbx]
lea ecx, [rdx + 0x7e]
call fcn.180077c00
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x18001a610
jmp 0x18001a7a3
cmp dword [0x1800a7604], 2
jne 0x18001a720
cmp dword [0x1800a7608], 1
mov byte [0x1800a75f2], 0
jne 0x18001a68a
xor r9d, r9d
mov dword [rsp + 0x20], 0x82
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800470f0
jmp 0x18001a6ea
mov dil, 1
mov rbx, r15
test r15, r15
je 0x18001a7a7
nop dword [rax]
mov rax, qword [rbx]
cmp byte [rax], 0x2d
jne 0x18001a6c3
cmp byte [rax + 1], 0x2d
jne 0x18001a6b9
cmp byte [rax + 2], 0
jne 0x18001a6b9
xor dil, dil
jmp 0x18001a6e1
cmp byte [rax], 0x2d
jne 0x18001a6c3
test dil, dil
jne 0x18001a6e1
inc dword [0x1800a75f8]
xor r9d, r9d
mov rdx, qword [rbx]
xor r8d, r8d
xor ecx, ecx
mov dword [rsp + 0x20], 0x82
call fcn.1800470f0
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x18001a6a0
cmp byte [0x1800a75f2], 0
je 0x18001a7a3
xor r9d, r9d
mov dword [rsp + 0x50], 2
lea r8, [rsp + 0x50]
mov edx, 0x9d
xor ecx, ecx
call fcn.18003bd80
mov ecx, dword [0x1800a7600]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp dword [0x1800a7608], 1
mov byte [0x1800a75f1], 0
jne 0x18001a740
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0xa]
call fcn.18005a3b0
jmp 0x18001a791
mov dil, 1
mov rbx, r15
test r15, r15
je 0x18001a7a7
nop dword [rax + rax]
mov rax, qword [rbx]
cmp byte [rax], 0x2d
jne 0x18001a773
cmp byte [rax + 1], 0x2d
jne 0x18001a769
cmp byte [rax + 2], 0
jne 0x18001a769
xor dil, dil
jmp 0x18001a788
cmp byte [rax], 0x2d
jne 0x18001a773
test dil, dil
jne 0x18001a788
inc dword [0x1800a75f8]
xor r8d, r8d
mov rcx, qword [rbx]
lea edx, [r8 + 0xa]
call fcn.18005a3b0
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x18001a750
cmp byte [0x1800a75f1], 0
je 0x18001a7a3
cmp byte [0x1800a75f3], 0
jne 0x18001a7fa
mov ecx, dword [rsp + 0x40]
xor r11d, r11d
imul eax, ecx, 0x5f
add esi, eax
cmp esi, r12d
ja case.0x1800194ae.265
mov rbx, qword [rbp - 0x10]
lea r9, [0x180000000]
mov r8d, 1
jmp 0x180019595
mov rdx, qword [0x1800a8240]
mov r9d, 0xf7
xor r8d, r8d
xor ecx, ecx
call fcn.18002a4f0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.H_TFQGOIMLLOKSKVLYMZO_Q_TZVXXUYRZNZKYHXGVFTF_QHOJNLMOLSLWMY_TYVWWUXRYNYJXH_TFRGPJOLNOMSMXNZO__Q_SZUWVUWRXNXIWGVF
call fcn.180085950
xor r9d, r9d
mov dword [rsp + 0x50], 2
lea r8, [rsp + 0x50]
mov edx, 0x9d
xor ecx, ecx
call fcn.18003bd80
mov ecx, dword [0x1800a7600]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3