Function at 0x180075410
Capabilities:
Delete file
Download url
Receive data

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x7a8]
sub rsp, 0x880
mov qword [rbp + 0x128], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x180143158]
xor rax, rsp
mov qword [rbp + 0x770], rax
mov r13, rcx
xor r15d, r15d
mov esi, r15d
mov dword [rsp + 0x38], r15d
call fcn.180077370
cmp eax, dword [0x180143244]
jg 0x18007623c
mov rcx, qword [0x1801547e8]
test rcx, rcx
jne 0x1800754db
lea rcx, [0x180143208]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp qword [0x1801547e8], rsi
jne 0x1800754c7
lea ecx, [r15 + 8]
call fcn.180050ac4
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1800754b8
xor eax, eax
mov qword [rbx], rax
mov rcx, rbx
call fcn.18008a9d0
jmp 0x1800754bb
mov rbx, r15
lock or dword [rsp], 0
mov qword [0x1801547e8], rbx
lea rcx, [0x180143208]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [0x1801547e8]
xor r9d, r9d
lea r8, str.update_sign_url
lea rdx, [rbp + 0x130]
call fcn.18008ba30
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x1800754fe
mov rbx, qword [rax]
call fcn.1800121e0
mov rcx, rax
test rax, rax
je 0x180076908
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
mov rdi, 0xffffffffffffffff
test rbx, rbx
je 0x180075551
cmp rbx, 0x10000
jae 0x180075542
movzx edx, bx
lea rcx, [rsp + 0x30]
call fcn.180012a10
jmp 0x180075565
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x180075545
jmp 0x180075554
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.180013c30
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x1800755ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800755a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076913
call fcn.180050b00
mov rbx, qword [rsp + 0x30]
cmp dword [rbx - 0x10], 0
je 0x18007567d
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x360]
call fcn.18009b770
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
mov r9d, 0x104
lea r8, [rbp + 0x360]
mov rdx, rbx
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToCacheFileW
test eax, eax
js 0x18007567d
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x250], xmm0
mov byte [rbp + 0x240], 0
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x360]
call fcn.18008e590
test eax, eax
jne 0x18007569d
mov rdx, qword [rbp + 0x258]
cmp rdx, 0x10
jb 0x180075666
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075661
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076919
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x250], xmm0
mov byte [rbp + 0x240], 0
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x18007623c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x18007623c
lea rcx, [rbp + 0x360]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rbx, qword [str.45476F8083D74AC28A2DA8ED399737B7]
call fcn.1800121e0
mov rcx, rax
test rax, rax
je 0x18007691f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
test rbx, rbx
je 0x1800756fd
cmp rbx, 0x10000
jae 0x1800756ee
movzx edx, bx
lea rcx, [rsp + 0x50]
call fcn.180012a10
jmp 0x180075711
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800756f1
jmp 0x180075700
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.180013c30
nop
lea rdx, [rbp + 0x240]
cmp qword [rbp + 0x258], 0x10
cmovae rdx, qword [rbp + 0x240]
mov r8d, 0xfde9
lea rcx, [rbp + 0xa8]
call fcn.180083130
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x180075747
mov rbx, qword [rax]
call fcn.1800121e0
mov rcx, rax
test rax, rax
je 0x18007692a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
test rbx, rbx
je 0x18007579c
cmp rbx, 0x10000
jae 0x180075784
movzx edx, bx
lea rcx, [rsp + 0x48]
call fcn.180012a10
jmp 0x1800757b0
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180075790
jmp 0x18007579f
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.180013c30
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x60]
call fcn.180082540
nop
mov r8d, 0xfde9
mov rdx, qword [rax]
lea rcx, [rbp + 0x268]
call fcn.180082f80
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800757f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180075817
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x18007585d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075858
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076935
call fcn.180050b00
movdqa xmm0, xmmword [0x180118160]
movdqu xmmword [rbp + 0xb8], xmm0
mov word [rbp + 0xa8], r15w
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180075893
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp qword [rbp + 0x278], 0
jne 0x180075978
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x1800758e2
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800758dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007693b
call fcn.180050b00
mov qword [rbp + 0x278], r15
mov qword [rbp + 0x280], 0xf
mov byte [rbp + 0x268], 0
mov rdx, qword [rbp + 0x258]
cmp rdx, 0x10
jb 0x18007593c
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075937
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076941
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x250], xmm0
mov byte [rbp + 0x240], 0
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x18007623c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x18007623c
xor eax, eax
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x2d0], rax
mov qword [rbp + 0x2d8], rax
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x2e8], rax
lea rcx, [rbp + 0x2c8]
call fcn.180088d90
nop
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x2c8]
call fcn.180089820
test al, al
jne 0x180075a75
lea rcx, [rbp + 0x2c8]
call fcn.1800863e0
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x180075a13
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075a0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076947
call fcn.180050b00
mov qword [rbp + 0x278], r15
mov qword [rbp + 0x280], 0xf
mov byte [rbp + 0x268], 0
mov rdx, qword [rbp + 0x258]
cmp rdx, 0x10
jb 0x18007593c
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075937
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076902
jmp 0x180075937
mov qword [rbp + 0x228], r15
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x230], xmm0
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x298], xmm0
mov byte [rbp + 0x288], 0
movdqu xmmword [rbp + 0x2b8], xmm0
mov byte [rbp + 0x2a8], 0
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
xor r8d, r8d
lea rdx, [0x1800f46a0]
lea rcx, [rbp + 0x28]
call fcn.18000fec0
nop
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
mov r8d, 5
lea rdx, str.CSVer
lea rcx, [rbp - 0x38]
call fcn.18000fec0
nop
lea r9, [rbp + 0x28]
lea r8, [rbp - 0x38]
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x2c8]
call fcn.1800896f0
mov rbx, rax
lea rax, [rbp + 0x288]
cmp rax, rbx
je 0x180075b4c
lea rcx, [rbp + 0x288]
call fcn.180010220
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x288], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x298], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x180075b8d
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075b88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007694d
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0xd8], xmm0
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x180075bdf
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075bda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076953
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x180075c2b
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075c26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076959
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], 0
mov r8d, 6
lea rdx, str.CSList
lea rcx, [rbp + 0x48]
call fcn.18000fec0
nop
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x2c8]
call fcn.180089040
mov r14d, eax
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x180075ca1
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075c9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007695f
call fcn.180050b00
xor eax, eax
mov qword [rbp + 0x318], rax
mov qword [rbp + 0x320], rax
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x330], rax
mov qword [rbp + 0x338], rax
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], al
lea r8d, [rax + 6]
lea rdx, str.CSList
lea rcx, [rbp + 8]
call fcn.18000fec0
nop
lea r8, [rbp + 8]
lea rdx, [rbp + 0x318]
lea rcx, [rbp + 0x2c8]
call fcn.180089760
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x180075d3e
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075d39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076965
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
movdqa xmm1, xmm0
movdqu xmmword [rbp + 0x78], xmm0
mov byte [rbp + 0x68], 0
xor r8d, r8d
lea rdx, [0x1800f46a0]
lea rcx, [rbp + 0x68]
call fcn.18000fec0
nop
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x318]
call fcn.180089a90
mov rbx, rax
lea rax, [rbp + 0x2a8]
cmp rax, rbx
je 0x180075dc6
lea rcx, [rbp + 0x2a8]
call fcn.180010220
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x2a8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x2b8], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x180075e07
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075e02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007696b
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x180075e5c
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075e57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076971
call fcn.180050b00
mov esi, r15d
test r14d, r14d
jle 0x180076012
nop dword [rax + rax]
mov edx, esi
lea rcx, [rbp + 0x318]
call fcn.180088ee0
mov rcx, rax
lea rdx, [rbp + 0x340]
call fcn.1800875c0
nop
lea rdx, [rbp + 0x340]
cmp qword [rbp + 0x358], 0x10
cmovae rdx, qword [rbp + 0x340]
mov r8d, 0xfde9
lea rcx, [rbp + 0x150]
call fcn.180083130
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x180075ec4
mov rbx, qword [rax]
call fcn.1800121e0
mov rcx, rax
test rax, rax
je 0x180076983
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
test rbx, rbx
je 0x180075f10
cmp rbx, 0x10000
jae 0x180075f01
movzx edx, bx
lea rcx, [rsp + 0x40]
call fcn.180012a10
jmp 0x180075f24
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x180075f04
jmp 0x180075f13
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.180013c30
nop
mov rax, qword [rbp + 0x230]
cmp qword [rbp + 0x238], rax
je 0x180075f4b
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.180074690
add qword [rbp + 0x230], 8
jmp 0x180075f60
lea r8, [rsp + 0x40]
mov rdx, rax
lea rcx, [rbp + 0x228]
call fcn.180012da0
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180075f7f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x180075fc6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180075fc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076977
call fcn.180050b00
nop
mov rdx, qword [rbp + 0x358]
cmp rdx, 0x10
jb 0x180076007
inc rdx
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180076002
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007697d
call fcn.180050b00
inc esi
cmp esi, r14d
jl 0x180075e70
mov rsi, qword [rbp + 0x228]
mov r12, qword [rbp + 0x230]
cmp rsi, r12
je 0x1800760e1
nop dword [rax]
mov r15, qword [rsi]
lea rbx, [r15 - 0x18]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rbx + 0x10], 0
jl 0x180076054
cmp rax, qword [rbx]
jne 0x180076054
lock inc dword [rbx + 0x10]
jmp 0x180076092
lea r14, [rbx + 8]
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [r14]
call qword [rax]
mov rbx, rax
test rax, rax
je 0x1800769ef
mov ecx, dword [r14]
mov dword [rax + 8], ecx
mov ecx, dword [r14]
inc ecx
movsxd rdx, ecx
add rdx, rdx
lea rcx, [rax + 0x18]
mov r9, rdx
mov r8, r15
call fcn.180012cf0
add rbx, 0x18
mov qword [rsp + 0x78], rbx
mov rdx, qword [r13 + 8]
test rdx, rdx
je 0x1800769e4
mov rcx, rbx
call fcn.1800a59e0
test eax, eax
je 0x180076276
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800760d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add rsi, 8
cmp rsi, r12
jne 0x180076030
xor r15d, r15d
mov esi, dword [rsp + 0x38]
lea rcx, [rbp + 0x318]
call fcn.1800863e0
nop
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0x10
jb 0x180076133
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007612e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007698e
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x2b8], xmm0
mov byte [rbp + 0x2a8], 0
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 0x10
jb 0x18007618b
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180076186
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800768fc
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x298], xmm0
mov byte [rbp + 0x288], 0
mov rcx, qword [rbp + 0x228]
test rcx, rcx
je 0x1800761f4
lea r8, [rbp + 0x228]
mov rdx, qword [rbp + 0x230]
call fcn.180075330
mov r8, qword [rbp + 0x238]
mov rdx, qword [rbp + 0x228]
sub r8, rdx
sar r8, 3
lea rcx, [rbp + 0x228]
call fcn.180013f10
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x238], r15
lea rcx, [rbp + 0x2c8]
call fcn.1800863e0
nop
lea rcx, [rbp + 0x268]
call fcn.180010220
nop
lea rcx, [rbp + 0x240]
call fcn.180010220
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x180076238
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
test esi, esi
jne 0x180076244
mov rcx, r13
call fcn.180077da0
mov eax, esi
mov rcx, qword [rbp + 0x770]
xor rcx, rsp
call fcn.180050f90
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov esi, 1
xor eax, eax
mov qword [rbp + 0x2f0], rax
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x310], rax
lea rcx, [rbp + 0x2f0]
call fcn.180088d90
nop
lea rdx, [rbp + 0x288]
lea rcx, [rbp + 0x190]
call fcn.180085ed0
nop
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
lea r8d, [rsi + 4]
lea rdx, str.CSVer
lea rcx, [rbp - 0x58]
call fcn.18000fec0
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x2f0]
call fcn.180088ed0
mov rcx, rax
lea rdx, [rbp + 0x190]
call fcn.1800864b0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x180076342
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007633d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180076994
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
lea rcx, [rbp + 0x190]
call fcn.1800863e0
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x1b8]
call fcn.180085ed0
nop
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov r8d, 6
lea rdx, str.CSList
lea rcx, [rbp - 0x80]
call fcn.18000fec0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x2f0]
call fcn.180088ed0
mov rcx, rax
lea rdx, [rbp + 0x1b8]
call fcn.1800864b0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800763f6
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800763f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007699a
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
lea rcx, [rbp + 0x1b8]
call fcn.1800863e0
xor edx, edx
lea rcx, [rbp + 0x1e0]
call fcn.180085f30
nop
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp - 8], xmm0
mov byte [rbp - 0x18], 0
mov r8d, 0xc
lea rdx, str.CheckFailCnt
lea rcx, [rbp - 0x18]
call fcn.18000fec0
nop
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x2f0]
call fcn.180088ed0
mov rcx, rax
lea rdx, [rbp + 0x1e0]
call fcn.1800864b0
nop
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1800764a5
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800764a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800769a0
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp - 8], xmm0
mov byte [rbp - 0x18], 0
lea rcx, [rbp + 0x1e0]
call fcn.1800863e0
xor r15d, r15d
mov qword [rbp + 0x260], r15
mov rbx, qword [str.45476F8083D74AC28A2DA8ED399737B7]
call fcn.1800121e0
mov rcx, rax
test rax, rax
je 0x1800769a6
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
test rbx, rbx
je 0x18007651f
cmp rbx, 0x10000
jae 0x180076510
movzx edx, bx
lea rcx, [rsp + 0x60]
call fcn.180012a10
jmp 0x180076533
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x180076513
jmp 0x180076522
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.180013c30
nop
lea rdx, [rbp + 0x2a8]
cmp qword [rbp + 0x2c0], 0x10
cmovae rdx, qword [rbp + 0x2a8]
mov r8d, 0xfde9
lea rcx, [rbp + 0x108]
call fcn.180083130
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x180076569
mov rbx, qword [rax]
call fcn.1800121e0
mov rcx, rax
test rax, rax
je 0x1800769b1
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
test rbx, rbx
je 0x1800765bc
cmp rbx, 0x10000
jae 0x1800765a6
movzx edx, bx
lea rcx, [rsp + 0x58]
call fcn.180012a10
jmp 0x1800765d0
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800765b0
jmp 0x1800765bf
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.180013c30
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x260]
call fcn.180082a60
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180076606
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 8
jb 0x18007664c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180076647
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800769bc
call fcn.180050b00
movdqa xmm0, xmmword [0x180118160]
movdqu xmmword [rbp + 0x118], xmm0
mov word [rbp + 0x108], r15w
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180076682
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x98], xmm0
mov byte [rbp + 0x88], 0
xor r8d, r8d
lea rdx, [0x1800f46a0]
lea rcx, [rbp + 0x88]
call fcn.18000fec0
nop
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x2f0]
call fcn.180089a90
mov rdx, rax
mov rcx, r13
call fcn.1800780c0
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x180076717
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180076712
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800769c2
call fcn.180050b00
lea rax, [rsp + 0x68]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 0x10
cmovae rdx, qword [rbp + 0x288]
mov r8d, 0xfde9
lea rcx, [rbp + 0x170]
call fcn.180083130
mov rbx, rax
call fcn.1800121e0
mov rcx, rax
test rax, rax
je 0x1800769c8
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea r14, str.SOFTWAREComMaster
cmp r14, 0x10000
jae 0x18007678d
movzx edx, r14w
lea rcx, [rsp + 0x68]
call fcn.180012a10
jmp 0x1800767ac
mov rax, rdi
inc rax
cmp word [r14 + rax*2], 0
jne 0x180076790
mov r8d, eax
mov rdx, r14
lea rcx, [rsp + 0x68]
call fcn.180013c30
nop
cmp qword [rbx + 0x18], 8
jb 0x1800767b6
mov rbx, qword [rbx]
mov qword [rsp + 0x20], rbx
lea r9, [0x180103730]
lea r8, [rsp + 0x68]
mov rdx, 0xffffffff80000002
mov rcx, r13
call fcn.180077ca0
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x18007681d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180076818
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800769d3
call fcn.180050b00
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
call fcn.1800121e0
mov rcx, rax
test rax, rax
je 0x1800769d9
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
cmp r14, 0x10000
jae 0x180076860
movzx edx, r14w
lea rcx, [rsp + 0x70]
call fcn.180012a10
jmp 0x18007687f
mov rax, rdi
inc rax
cmp word [r14 + rax*2], 0
jne 0x180076863
mov r8d, eax
mov rdx, r14
lea rcx, [rsp + 0x70]
call fcn.180013c30
nop
mov rax, qword [rbp + 0x260]
mov qword [rsp + 0x20], rax
lea r9, [0x180103740]
lea r8, [rsp + 0x70]
mov rdx, 0xffffffff80000002
mov rcx, r13
call fcn.180077ca0
nop
mov rdx, qword [rbp + 0x260]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800768c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x2f0]
call fcn.1800863e0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800760e5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1800760e5
call fcn.18009e87c
nop
call fcn.18009e87c
nop
mov ecx, 0x80004005
call fcn.180010a30
nop
call fcn.18009e87c
int3
call fcn.18009e87c
nop
mov ecx, 0x80004005
call fcn.180010a30
nop
mov ecx, 0x80004005
call fcn.180010a30
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
int3
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
mov ecx, 0x80004005
call fcn.180010a30
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
mov ecx, 0x80004005
call fcn.180010a30
nop
mov ecx, 0x80004005
call fcn.180010a30
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
mov ecx, 0x80004005
call fcn.180010a30
nop
call fcn.18009e87c
int3
mov ecx, 0x80004005
call fcn.180010a30
nop
mov ecx, 0x80004005
call fcn.180010a30
nop
call fcn.180012c50
int3
push rbx
sub rsp, 0x20
mov rbx, rcx
add rcx, 8
test rdx, rdx
jne 0x180077856
xor eax, eax
jmp 0x18007786a
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x180077860
mov r8d, eax
call fcn.180013c30
mov r8, qword [str.CheckSignShareMem]
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov qword [rbx], rax
mov rcx, rbx
test rax, rax
je 0x18007789d
call fcn.1800770f0
test eax, eax
jne 0x1800778b3
mov rcx, rbx
call fcn.180076a00
test eax, eax
jne 0x1800778b3
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x180075410
add rsp, 0x20
pop rbx
ret