Function at 0x180045950
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
mov rax, qword [0x180164040]
xor rax, rsp
mov qword [rbp + 0x4e0], rax
xor edx, edx
call fcn.18005d400
movabs rax, 0x668cd625c5028003
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0xb0]
mov rax, qword [rsp + 0x30]
movabs rbx, 0x3b74159adafd2a0
mov qword [rbp + 0xb0], rax
movabs rdi, 0x46ebb84ca265ef6f
movabs rax, 0xae192ae0a503a0ff
movabs rsi, 0xc7394785d170d98c
mov qword [rsp + 0x30], rax
movabs r12, 0x2f92056a107af539
mov rax, qword [rsp + 0x30]
movabs r14, 0xc0b9bcfb79bc7a3e
mov qword [rbp + 0xb8], rax
movabs r15, 0x385be1701d4207b3
movabs rax, 0x55fb690b790e9c57
mov r8d, edx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc0], rax
movabs rax, 0xafda9c9516d50e5f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc8], rax
movabs rax, 0x383f8404782e77de
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd8], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x2a0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x2a8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x2b0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2b8], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2c0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0xb0]
xorps xmm2, xmmword [rbp + 0x2a0]
movdqa xmm0, xmmword [rbp + 0xc0]
movdqa xmm1, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x2b0]
mov qword [rbp + 0x2c8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0xb0], xmm2
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xd0], xmm1
test al, al
je 0x180045b3b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], 0
jne 0x180045b30
xor r13d, r13d
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0xb0]
lea rcx, [r13 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005db00
test al, al
je 0x1800469c5
xor edx, edx
call fcn.18005d400
movabs rax, 0x35cbc13ecd088a02
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0xe0]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0xe0], rax
movabs rax, 0xa95067e8b404aaf5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xe8], rax
movabs rax, 0x4ee86c0671138150
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf0], rax
movabs rax, 0xadd6dfdb17d3134a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf8], rax
movabs rax, 0x385b851569276bc3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x100], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x108], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x2d0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x2d8], rax
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x2d0]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x2e0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2e8], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2f0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
xorps xmm2, xmmword [rbp + 0xe0]
movdqa xmm0, xmmword [rbp + 0xf0]
movdqa xmm1, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x2e0]
mov qword [rbp + 0x2f8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0x100], xmm1
movdqa xmmword [rbp + 0xe0], xmm2
movdqa xmmword [rbp + 0xf0], xmm0
test al, al
je 0x180045cdb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180045cd0
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0xe0]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005d6d0
test al, al
je 0x1800469c5
xor edx, edx
call fcn.18005d400
movabs rax, 0x3592cb6cca118e02
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x110]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x110], rax
movabs rax, 0xb35029ecf11dbcf8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x118], rax
movabs rax, 0x46e6641079169450
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x120], rax
movabs rax, 0xacc9d1941a9c1451
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x128], rax
movabs rax, 0x385be170792773d6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x130], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x138], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x300], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x308], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x310], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x318], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x320], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x110]
xorps xmm2, xmmword [rbp + 0x300]
movdqa xmm0, xmmword [rbp + 0x120]
movdqa xmm1, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x310]
mov qword [rbp + 0x328], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x320]
movdqa xmmword [rbp + 0x110], xmm2
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
test al, al
je 0x180045e7b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180045e70
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x110]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18004e900
test al, al
je 0x1800469c5
xor edx, edx
call fcn.18005d400
movabs rax, 0x258ade3ec7118106
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x140]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x140], rax
movabs rax, 0xae4d2eebb850aae9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x148], rax
movabs rax, 0x40fb710b6a139958
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x150], rax
movabs rax, 0xa5d5cc9616df5a50
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x158], rax
movabs rax, 0x385be1701d2662c7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x160], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x330], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x338], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x340], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x348], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x350], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x140]
xorps xmm2, xmmword [rbp + 0x330]
movdqa xmm0, xmmword [rbp + 0x150]
movdqa xmm1, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x340]
mov qword [rbp + 0x358], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x140], xmm2
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmmword [rbp + 0x160], xmm1
test al, al
je 0x18004601b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180046010
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x140]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x6c9c32d0059e4b71
lea rcx, [rbp + 0x1a0]
mov qword [rsp + 0x30], rax
movabs r15, 0x9ab7429282e5b3a8
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xa15acd78c9510446
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x55947fd32407f643
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1b0], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x6cee32b505f74b05
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x240], rax
movabs rax, 0xa136cd1cc97f0476
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x248], rax
movabs rax, 0x55947fd32407f62f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x250], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x1a0]
xorps xmm0, xmmword [rbp + 0x240]
mov qword [rbp + 0x258], rax
movdqa xmm1, xmmword [rbp + 0x250]
xorps xmm1, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x1b0], xmm1
movdqa xmmword [rbp + 0x1a0], xmm0
call fcn.18005ec30
mov r8, rax
test rax, rax
je 0x1800469c5
movabs rax, 0x3825df66b98083a
lea rdx, [rbp + 0x1c0]
mov qword [rsp + 0x30], rax
movabs rax, 0xe06f8d5cae0c4904
mov rcx, qword [rsp + 0x30]
mov qword [rbp + 0x1c0], rcx
mov qword [rsp + 0x30], rax
movabs rax, 0x39fb3c856642b777
mov rcx, qword [rsp + 0x30]
mov qword [rbp + 0x1c8], rcx
movabs rcx, 0xddb4c6f0a2c165ca
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xdef507c2c2a5c1c7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x5e5e5bd928302ed3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1e0], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x6cee32b505f74b05
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x360], rax
movabs rax, 0xa136cd1cc97f0476
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x368], rax
movabs rax, 0x55947fd32407f62f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x370], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x378], rax
movabs rax, 0x5e5e5bd928307489
movdqa xmm1, xmmword [rbp + 0x370]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rcx
mov rcx, r8
mov qword [rbp + 0x380], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x360]
xorps xmm1, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x388], rax
movdqa xmm0, xmmword [rbp + 0x380]
xorps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmmword [rbp + 0x1d0], xmm1
call fcn.18005ef10
mov qword [0x180166f98], rax
test rax, rax
je 0x1800469c5
xor edx, edx
call fcn.18005d400
movabs rax, 0x3282d625820e8b1c
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x70]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x70], rax
movabs rax, 0xae4d26ffb81cb8e5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
movabs rax, 0x43e26805735a9b56
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x80], rax
movabs rax, 0xc0b9bcfb1dd90e5b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x260], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x268], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x270], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp + 0x260]
movdqa xmm0, xmmword [rbp - 0x80]
mov qword [rbp + 0x278], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmmword [rbp - 0x80], xmm0
test al, al
je 0x1800463db
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800463d0
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rsp + 0x70]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x180166cf0]
test rcx, rcx
jne 0x18004642c
lea rdx, [0x180166cf0]
lea rcx, [0x18005d2c0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x180166cf0]
test rcx, rcx
je 0x180046401
lea r8, [0x18004c2a0]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x180166e08], rax
test rax, rax
je 0x1800469c5
xor edx, edx
call fcn.18005d400
movabs rax, 0x3f989838d7158106
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x170]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x170], rax
movabs rax, 0xae572ea5bc15adff
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x178], rax
movabs rax, 0x5bf37f037c1b9c4d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x180], rax
movabs rax, 0xb0d4d39859d21557
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x188], rax
movabs rax, 0x385be114783662df
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x190], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x198], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x390], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x398], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3a0], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x385be1701d4207b3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3b0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x170]
xorps xmm2, xmmword [rbp + 0x390]
movdqa xmm0, xmmword [rbp + 0x180]
movdqa xmm1, xmmword [rbp + 0x190]
xorps xmm0, xmmword [rbp + 0x3a0]
mov qword [rbp + 0x3b8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x170], xmm2
movdqa xmmword [rbp + 0x180], xmm0
movdqa xmmword [rbp + 0x190], xmm1
test al, al
je 0x1800465cb
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800465c0
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x170]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x180166be0]
mov rdx, qword [0x180166bd8]
mov rcx, qword [0x180166cf0]
call fcn.18005c0f0
xor ecx, ecx
call fcn.180051f00
cmp byte [0x180166be8], r13b
jne 0x180046625
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x180166be8], r13b
je 0x180046611
xor edx, edx
call fcn.18005d400
movabs rax, 0x348eca29c60b8a1d
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x40]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp - 0x40], rax
movabs rax, 0xa35722eeb211bbac
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x38], rax
movabs rax, 0x43f36c1e79149c19
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x30], rax
movabs rax, 0xe0d7d3920ddd0057
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x28], rax
movabs rax, 0x5d2f841c6d2f68d0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x20], rax
movabs rax, 0x3b74159adafd2c4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x3c0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x3c8], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3d0], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3d8], rax
movabs rax, 0x385be1701d4207b3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3e0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp - 0x40]
xorps xmm2, xmmword [rbp + 0x3c0]
movdqa xmm0, xmmword [rbp - 0x30]
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm0, xmmword [rbp + 0x3d0]
mov qword [rbp + 0x3e8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp - 0x40], xmm2
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmmword [rbp - 0x20], xmm1
test al, al
je 0x18004677e
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180046773
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp - 0x40]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.1800566c0
test al, al
jne 0x1800469f7
mov dl, 3
call fcn.18005d400
movabs rbx, 0x18ce56d0699e2a63
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x70]
mov rax, qword [rsp + 0x30]
movabs rdi, 0x6cee32b505f74b05
mov qword [rbp - 0x70], rax
movabs rsi, 0xa136cd1cc97f0476
movabs rax, 0xc05fb975a7162419
movabs r14, 0x55947fd32407f62f
mov qword [rsp + 0x30], rax
mov r8d, edx
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x68], rax
movabs rax, 0x34fc1cf3417d9f43
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x60], rax
movabs rax, 0x9ab7429282e5c0c5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x280], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x288], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x290], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0x280]
mov qword [rbp + 0x298], rax
movq rax, xmm1
movdqa xmm0, xmmword [rbp + 0x290]
xorps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmmword [rbp - 0x70], xmm1
test al, al
je 0x1800468ae
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800468a3
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp - 0x70]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dl, 3
call fcn.18005d400
mov qword [rsp + 0x30], rbx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov r8d, ecx
movabs rax, 0x8146b868ac0c2419
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x55e713b251749f59
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x220], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x228], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x230], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x220]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x238], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x230]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x1800469ab
nop
inc rdx
mov r8, rdx
cmp byte [rdx], r13b
jne 0x1800469a0
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, ecx
lea rdx, [rsp + 0x50]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0x4e0]
xor rcx, rsp
call fcn.1800c2800
lea r11, [rsp + 0x5f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.18005d400
movabs rax, 0x358eca39d6048a09
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x10]
mov rax, qword [rsp + 0x30]
movabs r15, 0x385be1701d4207b3
mov qword [rbp - 0x10], rax
mov r8d, edx
movabs rax, 0xab582ef1b81eb0ac
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 8], rax
movabs rax, 0xffc6a03641b8f50
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp], rax
movabs rax, 0xa5cdd99709d1155d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 8], rax
movabs rax, 0x385be1701d4207d7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x3f0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x3f8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x400], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x408], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x410], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp - 0x10]
xorps xmm2, xmmword [rbp + 0x3f0]
movdqa xmm0, xmmword [rbp]
movdqa xmm1, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x400]
mov qword [rbp + 0x418], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x410]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp], xmm0
movdqa xmmword [rbp + 0x10], xmm1
test al, al
je 0x180046b4b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180046b40
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp - 0x10]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x22c5cc22c70c830c
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x1f0]
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x50], rax
movabs rax, 0xc7394785d170b5e0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp - 0x50]
mov qword [rsp + 0x48], rax
movabs rax, 0x468eb824a206ef1c
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x50], xmm0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1f0], rax
movabs rax, 0xc75a47dad111d9e1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x2ffc050f1013f555
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x200], rax
movabs rax, 0xc0c1bc8f79927a4a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x208], rax
movabs rax, 0x385be1701d4207c7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x210], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x218], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x420], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x428], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x430], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x438], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x440], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x1f0]
xorps xmm0, xmmword [rbp + 0x420]
movdqa xmm1, xmmword [rbp + 0x200]
xorps xmm1, xmmword [rbp + 0x430]
movdqa xmmword [rbp + 0x1f0], xmm0
movdqa xmm0, xmmword [rbp + 0x210]
mov qword [rbp + 0x448], rax
xorps xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmmword [rbp + 0x200], xmm1
call fcn.1800539c0
test al, al
je 0x1800469c5
xor edx, edx
call fcn.18005d400
movabs rax, 0x35cbd921c70d8c1c
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x20]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x20], rax
movabs rax, 0xa95067e8b404aaf5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x28], rax
movabs rax, 0x4ee86c0671138150
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
movabs rax, 0xadd6dfdb17d3134a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0x385b851569276bc3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x450], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x458], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x460], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x468], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x470], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x20]
xorps xmm2, xmmword [rbp + 0x450]
movdqa xmm0, xmmword [rbp + 0x30]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x460]
mov qword [rbp + 0x478], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x20], xmm2
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x40], xmm1
test al, al
je 0x180046e6b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180046e60
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x20]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x469db822a20aef0c
xor edx, edx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
movabs rax, 0xc71747f6d102d9ed
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
movabs rax, 0x2f92051e1002f54d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
call fcn.18005d400
movabs rax, 0x6698ca2dd40b800c
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x50]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x50], rax
movabs rax, 0xa41923e0a11dace8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
movabs rax, 0x4bf7710f7c0a9856
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x60], rax
movabs rax, 0xb4cccc8f0cd35a12
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x68], rax
movabs rax, 0x592d8f1f7e602789
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x3953521d981a1d2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x480], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x488], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x490], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rbp + 0x498], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4a0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x50]
movdqa xmm0, xmmword [rbp + 0x60]
movdqa xmm1, xmmword [rbp + 0x70]
xorps xmm2, xmmword [rbp + 0x480]
xorps xmm0, xmmword [rbp + 0x490]
mov qword [rbp + 0x4a8], rax
xorps xmm1, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x70], xmm1
movdqa xmmword [rbp + 0x50], xmm2
movdqa xmmword [rbp + 0x60], xmm0
movq rax, xmm2
test al, al
je 0x18004704b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180047040
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x50]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.180048d90
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x180166cf8], rax
mov r12, rax
call fcn.180048d90
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x180166d10], rax
mov r15, rax
call fcn.180048d90
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x180166d08], rax
mov r14, rax
call fcn.180048d90
movabs rdx, 0xb231a1bea995f83b
mov qword [0x180166d18], rax
mov rsi, rax
call fcn.180048d90
movabs rdx, 0x5f0720d54e5f164
mov qword [0x180166d00], rax
mov rdi, rax
call fcn.180048d90
movabs rdx, 0x483047d5ed936395
mov qword [0x180166d20], rax
mov rbx, rax
call fcn.180048d90
test rax, rax
mov qword [0x180166d28], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x1800469c5
xor edx, edx
call fcn.18005d400
movabs rax, 0x6698ca2dd40b800c
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x30], rax
movabs rcx, 0x3b74159adafd2a0
mov rax, qword [rsp + 0x30]
movabs rbx, 0x46ebb84ca265ef6f
mov qword [rbp + 0x80], rax
movabs rdi, 0xc7394785d170d98c
movabs rax, 0xae192ae0a503a0ff
movabs r14, 0x2f92056a107af539
mov qword [rsp + 0x30], rax
movabs rsi, 0xc0b9bcfb79bc7a3e
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x88], rax
movabs rax, 0x55fb690b790e9c57
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
movabs rax, 0xafda9c9516d50e5f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x98], rax
movabs rax, 0x383f8404782e77de
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rdi
mov qword [rbp + 0x4b0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x4b8], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4c0], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x385be1701d4207b3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4d0], rax
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x80]
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x80]
xorps xmm2, xmmword [rbp + 0x4b0]
movdqa xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x4c0]
mov qword [rbp + 0x4d8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x4d0]
movdqa xmmword [rbp + 0x80], xmm2
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0xa0], xmm1
test al, al
je 0x18004730b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180047300
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x80]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180049f20
test al, al
je 0x1800469c5
xor edx, edx
call fcn.18005d400
movabs rax, 0x2882983fc90a8007
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xa6432ee9b019ade5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x42fd664a7e159c4d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0xc0b9d89e0dd9164e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rdi
mov qword [rbp + 0x220], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x228], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x230], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x220]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x238], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x230]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x18004742b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180047420
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rsp + 0x50]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x1800469c7