Function at 0x180050ca0
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x228]
sub rsp, 0x300
vmovaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x180141040]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
movabs rax, 0xd6d0824ea6ded10e
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x40], rax
movabs rbx, 0x374c07797228bb32
mov rax, qword [rsp + 0x40]
movabs rdi, 0xd6b8823ea6add16f
mov qword [rsp + 0x50], rax
movabs rsi, 0x95e958374533b2f0
movabs rax, 0x9588585e454bb289
movabs r14, 0x390410204e9d7291
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x3963104f4ef172bf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm6, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
mov qword [rbp - 0x58], rax
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
vmovdqu xmmword [rsp + 0x60], xmm1
vmovdqu xmmword [rsp + 0x50], xmm6
call fcn.180050760
test al, al
je 0x180052768
cmp word [rbp - 0x30], 0
lea rax, [rbp - 0x30]
je 0x180050dde
add rax, 2
cmp word [rax], 0
jne 0x180050dd4
vmovq rcx, xmm6
test cx, cx
je 0x180050e00
lea rdx, [rsp + 0x50]
sub rdx, rax
mov word [rax], cx
add rax, 2
movzx ecx, word [rax + rdx]
test cx, cx
jne 0x180050df0
xor r13d, r13d
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov r8d, 1
mov dword [rsp + 0x20], 2
mov word [rax], r13w
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x180141318], rax
cmp rax, 0xffffffffffffffff
je 0x180052768
xor r9d, r9d
mov qword [rsp + 0x20], r13
mov r8d, 3
lea rdx, [0x18013043c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180072d40
movabs rax, 0xf6dfec57c1cabe03
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r15, 0x244a7feb7efe3474
mov qword [rsp + 0x50], rax
movabs r12, 0x202292226898a803
movabs rax, 0xfcc935523140cb83
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x436d7c4127e91bff
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x582f27171d41cf53
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x2046f7560df4d86e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x180050fbb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180050fb0
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.1800733f0
test al, al
je 0x180052768
xor edx, edx
call fcn.180072d40
movabs rax, 0xa598fb4cc9c0b402
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xfb80785a2047c189
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x587e794c2ff406f8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x5a2364591c47d246
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x2022f6471cfdc473
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x180051120
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051115
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180073010
test al, al
je 0x180052768
xor edx, edx
call fcn.180072d40
movabs rax, 0xa5c1f11eced9b002
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xe180365e655ed784
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x5070715a27f113f8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x5b3c6a161108d55d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x202292220cfddc66
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rbp - 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rsp + 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x18005128b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051280
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.1800597e0
test al, al
je 0x180052768
xor edx, edx
call fcn.180072d40
movabs rax, 0xb5d9e44cc3d9bf06
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xfc9d31592c13c195
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x566d644134f41ef0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x522077141d4b9b5c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x2022922268fccd77
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x1800513f0
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800513e5
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xd6ca825ba6c4d11b
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x95855853451db2c0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x390410204e9d72fd
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vmovdqu xmm2, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x60]
vmovdqu xmmword [rsp + 0x60], xmm0
vmovdqu xmmword [rsp + 0x50], xmm1
call fcn.180073720
mov r8, rax
test rax, rax
je 0x180052768
movabs rax, 0xb9d4ed7dc8c29250
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
movabs rax, 0xd4b018772240ff82
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0x556b53760cd833c9
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x58], rcx
mov rcx, r8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x730e42293268c95d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x202292226898f259
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovups ymm1, ymmword [rsp + 0x50]
vpxor ymm1, ymm1, ymmword [rbp - 0x70]
vmovups ymmword [rsp + 0x50], ymm1
vmovdqu xmm1, xmmword [rsp + 0x70]
mov qword [rbp - 0x48], rax
vpxor xmm2, xmm1, xmmword [rbp - 0x50]
vmovdqu xmmword [rsp + 0x70], xmm2
vzeroupper
call fcn.180073a00
mov qword [0x180142280], rax
test rax, rax
je 0x180052768
xor edx, edx
call fcn.180072d40
movabs rax, 0xa2d1ec5786c6b51c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xfc9d394d2c5fd399
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x55747d4f2dbd1cfe
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x374c0779164dcf57
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm2, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
mov qword [rbp - 0x58], rax
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
vmovq rax, xmm2
vmovdqu xmmword [rsp + 0x60], xmm1
vmovdqu xmmword [rsp + 0x50], xmm2
test al, al
je 0x1800516df
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800516d4
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x180141ed0]
test rcx, rcx
jne 0x18005173b
nop dword [rax + rax]
lea rdx, [0x180141ed0]
lea rcx, [0x180072cc0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x180141ed0]
test rcx, rcx
je 0x180051710
lea r8, [0x180057620]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x180141fb8], rax
test rax, rax
je 0x180052768
xor edx, edx
call fcn.180072d40
movabs rax, 0xafcba24ad3ddbf06
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xfc8731172856c683
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x4d656a4922fc1be5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x4721681a5246d45b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x202292460deccd6f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x18005189b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051890
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x180141dc0]
mov rdx, qword [0x180141db8]
mov rcx, qword [0x180141ed0]
call fcn.1800714f0
xor ecx, ecx
call fcn.18005ef10
cmp byte [0x180141dc8], r13b
jne 0x1800518f6
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x180141dc8], r13b
je 0x1800518e2
xor edx, edx
call fcn.180072d40
movabs rax, 0xa4ddf05bc2c3b41d
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf1873d5c2652d0d0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x5565795427f31bb1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x172268100649c15b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x4556f74e18f5c760
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0x244a7feb7efe3410
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x180051a3b
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051a30
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xd6dd8256a6ced11c
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x959d58194552b29d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x390410204ee972e9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vmovdqu xmm2, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x60]
vmovdqu xmmword [rsp + 0x60], xmm0
vmovdqu xmmword [rsp + 0x50], xmm1
call fcn.18006db00
test al, al
je 0x180052768
xor edx, edx
call fcn.180072d40
movabs rax, 0xa598e353c3c5b21c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xfb80785a2047c189
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x587e794c2ff406f8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x5a2364591c47d246
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x2022f6471cfdc473
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x180051c5b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051c50
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xd6ce8250a6c2d10c
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x95c758444541b291
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x390410544ee572e5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vmovdqu xmm2, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x60]
vmovdqu xmmword [rsp + 0x60], xmm0
vmovdqu xmmword [rsp + 0x50], xmm1
call fcn.180054770
test al, al
je 0x180052768
xor edx, edx
call fcn.180072d40
movabs rax, 0xf6cbf05fd0c3be0c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf6c93c52355ec794
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x5d61644522ed1ffe
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x4339770d07479b1e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x4154fc4d0bba8839
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0x24680b930ad04706
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x180051e8b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051e80
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.1800536d0
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x180141ed8], rax
mov r12, rax
call fcn.1800536d0
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x180141ef0], rax
mov r15, rax
call fcn.1800536d0
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x180141ee8], rax
mov r14, rax
call fcn.1800536d0
movabs rdx, 0xb231a1bea995f83b
mov qword [0x180141ef8], rax
mov rsi, rax
call fcn.1800536d0
movabs rdx, 0x5f0720d54e5f164
mov qword [0x180141ee0], rax
mov rdi, rax
call fcn.1800536d0
movabs rdx, 0x483047d5ed936395
mov qword [0x180141f00], rax
mov rbx, rax
call fcn.1800536d0
test rax, rax
mov qword [0x180141f08], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x180052768
xor edx, edx
call fcn.180072d40
movabs rax, 0xf6cbf05fd0c3be0c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r15, 0x244a7feb7efe3474
mov qword [rsp + 0x50], rax
movabs rdi, 0xd6b8823ea6add16f
movabs rax, 0xfcc935523140cb83
movabs rsi, 0x95e958374533b2f0
mov qword [rsp + 0x40], rax
movabs r14, 0x390410204e9d7291
mov rax, qword [rsp + 0x40]
movabs rbx, 0x374c07797228bb32
mov qword [rsp + 0x58], rax
movabs r12, 0x202292226898a803
movabs rax, 0x436d7c4127e91bff
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x582f27171d41cf53
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x2046f7560df4d86e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x18005211b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052110
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180055620
test al, al
je 0x180052768
xor edx, edx
call fcn.180072d40
movabs rax, 0xb8d1a24dcdc2be07
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf493315b245ac699
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x546b730020f21be5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x374c631c064dd742
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm2, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
mov qword [rbp - 0x58], rax
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
vmovq rax, xmm2
vmovdqu xmmword [rsp + 0x60], xmm1
vmovdqu xmmword [rsp + 0x50], xmm2
test al, al
je 0x18005222b
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052220
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xd6d98258a6c8d10b
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0x95e95843455fb285
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rbp - 0x70]
mov qword [rsp + 0x58], rax
vpxor xmm1, xmm0, xmmword [rsp + 0x50]
vmovdqu xmmword [rbp - 0x70], xmm1
call fcn.18006a270
test al, al
jne 0x18005246f
mov dl, 2
call fcn.180072d40
movabs rax, 0xa298e65bcac4b009
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
movabs rcx, 0x37b97a2d33ae8a46
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xb5992d432040929f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x5524624f61f91cf0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x562a621d524cda5d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x464cfd4148ecc476
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0x4b230b8a0c8b531d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
movabs rax, 0xb2e9c61448667adb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
movabs rax, 0xb2e9c61448667ab5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
vmovups ymm1, ymmword [rsp + 0x60]
vpxor ymm1, ymm1, ymmword [rbp - 0x60]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x38], rax
vmovups ymmword [rsp + 0x60], ymm1
vmovdqu xmm1, xmmword [rbp - 0x80]
vpxor xmm2, xmm1, xmmword [rbp - 0x40]
vmovq rax, xmm3
vmovdqu xmmword [rbp - 0x80], xmm2
vmovdqu xmmword [rsp + 0x50], xmm3
test al, al
je 0x180052450
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052445
mov rcx, qword [0x180141318]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea rdx, [rsp + 0x50]
vzeroupper
jmp 0x1800525d2
xor edx, edx
call fcn.180072d40
movabs rax, 0xa4cde557c0c3be0c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xec9a78592a5ac691
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x506a790023f806e2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x432d7d101e49d246
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x504ffd4148f6c76a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0x244a7f8f1b8a5118
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x1800525bb
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800525b0
mov rcx, qword [0x180141318]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180072d40
movabs rax, 0xb7d1fa47cedda20e
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf98831432c5ddbd0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x196a7f493afc08f8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x523862150245d451
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x4951e0471eb88467
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0x244a7feb5ec45a1b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
vmovdqu xmm0, xmmword [rsp + 0x50]
vpxor xmm3, xmm0, xmmword [rbp - 0x70]
vmovdqu xmm0, xmmword [rsp + 0x60]
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
vpxor xmm0, xmm2, xmmword [rbp - 0x50]
vmovq rax, xmm3
vmovdqu xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x50], xmm3
vmovdqu xmmword [rsp + 0x60], xmm1
test al, al
je 0x18005271d
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052712
mov rcx, qword [0x180141318]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov r8, rdx
inc r8
cmp byte [r8], r13b
jne 0x180052744
mov rcx, qword [0x180141318]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x18005276a
xor al, al
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.1800d7380
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
vmovaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret