Function at 0x180133630
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push rbp
push r13
push r15
lea rbp, [rsp - 0x9e0]
sub rsp, 0xae0
mov rax, r8
mov r13, rdx
mov r15, rcx
mov rdx, rax
mov r8, r9
lea rcx, [rbp + 0x600]
call fcn.1801374d0
test eax, eax
jne 0x180133671
add rsp, 0xae0
pop r15
pop r13
pop rbp
ret
mov qword [rsp + 0xb00], rbx
mov qword [rsp + 0xb10], rdi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rbp + 0x348], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rbp + 0x350], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rbp + 0x358], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rcx, qword [rbp + 0x348]
mov qword [rbp + 0x360], rax
test rcx, rcx
je 0x180137444
cmp qword [rbp + 0x350], 0
je 0x180137444
cmp qword [rbp + 0x358], 0
je 0x180137444
test rax, rax
je 0x180137444
call fcn.180146c10
xor edi, edi
test eax, eax
je 0x180133772
mov rcx, qword [rbp + 0x350]
call fcn.180146c10
test eax, eax
je 0x180133772
mov rcx, qword [rbp + 0x358]
call fcn.180146c10
test eax, eax
je 0x180133772
mov rcx, qword [rbp + 0x360]
call fcn.180146c10
test eax, eax
je 0x180133772
lea ebx, [rdi + 1]
jmp 0x1801337b0
mov rcx, qword [rbp + 0x348]
mov ebx, edi
mov rcx, qword [rcx]
call fcn.180146f60
mov rcx, qword [rbp + 0x358]
mov rcx, qword [rcx]
call fcn.180146f60
mov rcx, qword [rbp + 0x350]
mov rcx, qword [rcx]
call fcn.180146f60
mov rcx, qword [rbp + 0x360]
mov rcx, qword [rcx]
call fcn.180146f60
test ebx, ebx
je 0x18013746d
movdqa xmm0, xmmword [0x180161c40]
lea rdx, [rsp + 0x40]
movdqa xmm1, xmmword [0x180161230]
lea rcx, [rbp + 0x410]
movabs rax, 0xf5d06b73146ce1d
mov qword [rsp + 0xb08], rsi
mov qword [rsp + 0x68], rax
movabs rax, 0x494909b2c1580606
mov qword [rsp + 0x70], rax
movabs rax, 0x1f9966966826b1f2
mov qword [rsp + 0xad8], r12
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xad0], r14
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x60], 0x6ab9f987
movdqu xmmword [rsp + 0x50], xmm1
call fcn.18000b8a0
lea r8, [rbp + 0x28]
mov edx, 0x100000
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x28], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm0
mov ecx, dword [rax + 0x20]
mov dword [rbp + 0x48], ecx
lea rcx, [0x18017bd90]
movzx eax, byte [rax + 0x24]
mov byte [rbp + 0x4c], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
movdqa xmm0, xmmword [0x1801608e0]
lea rdx, [rbp + 0x298]
movabs rsi, 0xf0cec3b5d447d029
lea rcx, [rbp + 0x410]
movabs rdi, 0xe46eee7f2c3c8ffe
mov qword [rbp + 0x2a8], rsi
movabs rbx, 0x413411e2d78eb251
mov qword [rbp + 0x2b0], rdi
movdqu xmmword [rbp + 0x298], xmm0
mov qword [rbp + 0x2b8], rbx
call fcn.180013d20
lea rdx, [rbp + 0xe8]
mov dword [rbp + 0xe8], 0x21174a1b
lea rcx, [rbp + 0x8a8]
mov dword [rbp + 0xec], 0xeb01f442
mov dword [rbp + 0xf0], 0x5f2e49d6
movups xmm1, xmmword [rax]
mov dword [rbp + 0xf4], 0x1e3294d4
mov dword [rbp + 0xf8], 0xe3c43790
movups xmmword [rbp + 0x220], xmm1
mov dword [rbp + 0xfc], 0x9516a821
mov dword [rbp + 0x100], 0x9809b7be
mov dword [rbp + 0x104], 0xcfec922e
mov dword [rbp + 0x108], 0xf136b509
mov dword [rbp + 0x10c], 0x8b59b198
mov dword [rbp + 0x110], 0xfe73b8b1
mov dword [rbp + 0x114], 0x678d88d7
mov dword [rbp + 0x118], 0x47801eb1
mov dword [rbp + 0x11c], 0xb6414357
mov dword [rbp + 0x120], 0x8de7bf35
mov dword [rbp + 0x124], 0x1c23200e
mov dword [rbp + 0x128], 0x37afc4f
mov dword [rbp + 0x12c], 0xd5f8f5c2
mov dword [rbp + 0x130], 0x831f77fe
mov dword [rbp + 0x134], 0xab5e4e93
mov dword [rbp + 0x138], 0x88ed0763
mov dword [rbp + 0x13c], 0xaf5463de
mov dword [rbp + 0x140], 0xe8f5b975
mov dword [rbp + 0x144], 0xe284dedd
mov dword [rbp + 0x148], 0x6a954af6
mov dword [rbp + 0x14c], 0x5f8
mov qword [rbp + 0x150], rsi
mov qword [rbp + 0x158], rdi
mov qword [rbp + 0x160], rbx
call fcn.180013a10
movups xmm2, xmmword [rax]
movabs rdi, 0x8fbed78038f49ef6
mov dword [rbp - 0x68], 0xce5aa0fe
movabs rbx, 0x567bf83f4def8806
mov dword [rbp - 0x64], 0xb92767b0
movups xmmword [rbp + 0x7a0], xmm2
lea rdx, [rbp - 0x68]
mov dword [rbp - 0x60], 0x8ce4611d
movups xmm0, xmmword [rax + 0x10]
lea rcx, [rbp + 0x830]
mov dword [rbp - 0x5c], 0x8438b84c
mov dword [rbp - 0x58], 0x6e9f85b1
movups xmmword [rbp + 0x7b0], xmm0
mov dword [rbp - 0x54], 0xc7f49c8b
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp - 0x50], 0xf9da62ab
mov dword [rbp - 0x4c], 0xaeadb1eb
movups xmmword [rbp + 0x7c0], xmm1
mov dword [rbp - 0x48], 0xc1838ecd
movups xmm0, xmmword [rax + 0x30]
mov dword [rbp - 0x44], 0x8429c2a8
mov dword [rbp - 0x40], 0x95dc2ff3
movups xmmword [rbp + 0x7d0], xmm0
mov dword [rbp - 0x3c], 0x1b88564f
movups xmm1, xmmword [rax + 0x40]
mov dword [rbp - 0x38], 0xcec94ca
mov dword [rbp - 0x34], 0x682a7840
movups xmmword [rbp + 0x7e0], xmm1
mov dword [rbp - 0x30], 0xd9c1f2bc
movups xmm0, xmmword [rax + 0x50]
mov dword [rbp - 0x2c], 0x1796a5ac
mov dword [rbp - 0x28], 0xb37a8869
movups xmmword [rbp + 0x7f0], xmm0
mov dword [rbp - 0x24], 0x39203137
movsd xmm1, qword [rax + 0x60]
movabs rax, 0x4863e3ae9c06d2f
mov qword [rbp + 0x10], rax
movsd qword [rbp + 0x800], xmm1
mov dword [rbp - 0x20], 0xc0346bbf
mov dword [rbp - 0x1c], 0x6d709c2c
mov dword [rbp - 0x18], 0xc968fbb4
mov dword [rbp - 0x14], 0x99711c1b
mov dword [rbp - 0x10], 0x4e33a14
mov dword [rbp - 0xc], 0x83e17e5a
mov dword [rbp - 8], 0x21663db5
mov dword [rbp - 4], 0xfd747a20
mov dword [rbp], 0x130d63
mov dword [rbp + 4], 0x560bf90c
mov qword [rbp + 8], 0x70e3b55a
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x20], rbx
call fcn.180013550
mov rcx, rax
mov dword [rbp + 0x2c0], 0xce5aa0fe
mov dword [rbp + 0x2c4], 0xb92767b0
mov dword [rbp + 0x2c8], 0x8ce4611d
movups xmm2, xmmword [rax]
mov dword [rbp + 0x2cc], 0x8438b84c
mov dword [rbp + 0x2d0], 0x6e9f85b1
movups xmmword [rbp + 0x668], xmm2
mov dword [rbp + 0x2d4], 0xc7f49c8b
movups xmm0, xmmword [rax + 0x10]
mov dword [rbp + 0x2d8], 0xf9da62ab
mov dword [rbp + 0x2dc], 0xaeadb1eb
movups xmmword [rbp + 0x678], xmm0
mov dword [rbp + 0x2e0], 0xc1838ecd
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp + 0x2e4], 0x8429c2a8
movups xmmword [rbp + 0x688], xmm1
movups xmm0, xmmword [rax + 0x30]
movups xmmword [rbp + 0x698], xmm0
movups xmm1, xmmword [rax + 0x40]
movups xmmword [rbp + 0x6a8], xmm1
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rbp + 0x6b8], xmm0
movups xmm1, xmmword [rax + 0x60]
movups xmmword [rbp + 0x6c8], xmm1
mov eax, dword [rax + 0x70]
mov dword [rbp + 0x6d8], eax
movzx eax, word [rcx + 0x74]
mov word [rbp + 0x6dc], ax
movabs rax, 0x4863e3ae9c06d2f
mov dword [rbp + 0x2e8], 0x95dc2ff3
lea rdx, [rbp + 0x2c0]
mov qword [rbp + 0x330], rax
lea rcx, [rbp + 0x368]
mov dword [rbp + 0x2ec], 0x1b88564f
mov dword [rbp + 0x2f0], 0xcec94ca
mov dword [rbp + 0x2f4], 0x682a7840
mov dword [rbp + 0x2f8], 0xd9c1f2bc
mov dword [rbp + 0x2fc], 0x1796a5ac
mov dword [rbp + 0x300], 0xb37a8869
mov dword [rbp + 0x304], 0x39203137
mov dword [rbp + 0x308], 0xc0346bbf
mov dword [rbp + 0x30c], 0x6d709c2c
mov dword [rbp + 0x310], 0xc968fbb4
mov dword [rbp + 0x314], 0x99711c1b
mov dword [rbp + 0x318], 0x4e33a14
mov dword [rbp + 0x31c], 0x83fa7e5a
mov dword [rbp + 0x320], 0x21633dbf
mov dword [rbp + 0x324], 0xfd5e7a69
mov dword [rbp + 0x328], 0x230d22
mov dword [rbp + 0x32c], 0x567ff90c
mov qword [rbp + 0x338], rdi
mov qword [rbp + 0x340], rbx
call fcn.18000e400
movabs rdi, 0xeb8e11d65d8cedd6
mov dword [rbp + 0x50], 0x31937cb3
movabs rbx, 0x39d2d416ffd8b90d
mov dword [rbp + 0x54], 0x1c81c236
mov dword [rbp + 0x58], 0xce0e6863
lea rdx, [rbp + 0x50]
movups xmm2, xmmword [rax]
mov dword [rbp + 0x5c], 0xc9f0fae9
lea rcx, [rbp + 0x570]
mov dword [rbp + 0x60], 0x1dc3d3fb
movups xmmword [rbp + 0x4c8], xmm2
mov dword [rbp + 0x64], 0x4246cac0
movups xmm0, xmmword [rax + 0x10]
mov dword [rbp + 0x68], 0xd4d63aff
mov dword [rbp + 0x6c], 0x1ba18020
movups xmmword [rbp + 0x4d8], xmm0
mov dword [rbp + 0x70], 0x925576dd
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp + 0x74], 0x73adad9f
mov dword [rbp + 0x78], 0x732beb9d
movups xmmword [rbp + 0x4e8], xmm1
mov dword [rbp + 0x7c], 0x162a25a0
movups xmm0, xmmword [rax + 0x30]
mov dword [rbp + 0x80], 0xa59518f8
mov dword [rbp + 0x84], 0x486e639c
movups xmmword [rbp + 0x4f8], xmm0
mov dword [rbp + 0x88], 0xb7108d01
movups xmm1, xmmword [rax + 0x40]
mov dword [rbp + 0x8c], 0xebaa50bb
mov dword [rbp + 0x90], 0x825e04fb
movups xmmword [rbp + 0x508], xmm1
mov dword [rbp + 0x94], 0xb28d0d6
movups xmm0, xmmword [rax + 0x50]
mov dword [rbp + 0x98], 0x78c0a515
mov dword [rbp + 0x9c], 0xba71fba6
movups xmmword [rbp + 0x518], xmm0
mov dword [rbp + 0xa0], 0x45bcd1c2
movups xmm1, xmmword [rax + 0x60]
mov dword [rbp + 0xa4], 0x4dab136f
mov dword [rbp + 0xa8], 0x1905b044
movups xmmword [rbp + 0x528], xmm1
movzx eax, word [rax + 0x70]
mov word [rbp + 0x538], ax
movabs rax, 0x587f9cbbfb40fa25
mov qword [rbp + 0xd0], rax
mov dword [rbp + 0xac], 0x71846148
mov dword [rbp + 0xb0], 0xf973e65d
mov dword [rbp + 0xb4], 0xbc28d9cf
mov dword [rbp + 0xb8], 0x2bb970f
mov dword [rbp + 0xbc], 0x7ecfc0cd
mov dword [rbp + 0xc0], 0x45419848
mov dword [rbp + 0xc4], 0x3341eea3
mov dword [rbp + 0xc8], 0x59a1716a
mov dword [rbp + 0xcc], 0x9224
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xe0], rbx
call fcn.1800131b0
lea rdx, [rbp + 0x178]
mov dword [rbp + 0x178], 0x31937cb3
lea rcx, [rbp + 0x938]
mov dword [rbp + 0x17c], 0x1c81c236
mov dword [rbp + 0x180], 0xce0e6863
movups xmm2, xmmword [rax]
mov dword [rbp + 0x184], 0xc9f0fae9
mov dword [rbp + 0x188], 0x1dc3d3fb
movups xmmword [rbp + 0x438], xmm2
mov dword [rbp + 0x18c], 0x4246cac0
movups xmm0, xmmword [rax + 0x10]
mov dword [rbp + 0x190], 0xd4d63aff
mov dword [rbp + 0x194], 0x1ba18020
movups xmmword [rbp + 0x448], xmm0
mov dword [rbp + 0x198], 0x925576dd
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp + 0x19c], 0x73adad9f
mov dword [rbp + 0x1a0], 0x732beb9d
movups xmmword [rbp + 0x458], xmm1
mov dword [rbp + 0x1a4], 0x162a25a0
movups xmm0, xmmword [rax + 0x30]
mov dword [rbp + 0x1a8], 0xa59518f8
mov dword [rbp + 0x1ac], 0x486e639c
movups xmmword [rbp + 0x468], xmm0
mov dword [rbp + 0x1b0], 0xb7108d01
movups xmm1, xmmword [rax + 0x40]
mov dword [rbp + 0x1b4], 0xebaa50bb
mov dword [rbp + 0x1b8], 0x825e04fb
movups xmmword [rbp + 0x478], xmm1
mov dword [rbp + 0x1bc], 0xb28d0d6
movups xmm0, xmmword [rax + 0x50]
mov dword [rbp + 0x1c0], 0x78c0a515
mov dword [rbp + 0x1c4], 0xba71fba6
movups xmmword [rbp + 0x488], xmm0
mov dword [rbp + 0x1c8], 0x45bcd1c2
movups xmm1, xmmword [rax + 0x60]
mov dword [rbp + 0x1cc], 0x4dab136f
mov dword [rbp + 0x1d0], 0x1905b044
movups xmmword [rbp + 0x498], xmm1
mov dword [rbp + 0x1d4], 0x71826148
movups xmm0, xmmword [rax + 0x70]
movabs rax, 0x587f9cbbfb40fa25
mov dword [rbp + 0x1d8], 0xf974e651
mov dword [rbp + 0x1dc], 0xbc28d9cc
movups xmmword [rbp + 0x4a8], xmm0
mov dword [rbp + 0x1e0], 0x2a9970f
mov dword [rbp + 0x1e4], 0xc091
mov qword [rbp + 0x1e8], rax
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], rbx
call fcn.180012f90
mov dword [rsp + 0x40], 0xbd17e633
mov dword [rsp + 0x44], 0x1c274d32
mov dword [rsp + 0x48], 0x3a38701
movups xmm2, xmmword [rax]
mov dword [rsp + 0x4c], 0x58f9437a
mov dword [rsp + 0x50], 0x707188a8
movups xmmword [rbp + 0x6e0], xmm2
mov dword [rsp + 0x54], 0xad514c9e
movups xmm0, xmmword [rax + 0x10]
mov dword [rsp + 0x58], 0xe665c9e7
mov dword [rsp + 0x5c], 0xb7b6aad1
movups xmmword [rbp + 0x6f0], xmm0
mov dword [rsp + 0x60], 0x7e0d0895
movups xmm1, xmmword [rax + 0x20]
mov dword [rsp + 0x64], 0x20c2b7c5
mov dword [rsp + 0x68], 0xb772103d
movups xmmword [rbp + 0x700], xmm1
mov dword [rsp + 0x6c], 0xdf0d1b79
movups xmm0, xmmword [rax + 0x30]
mov dword [rsp + 0x70], 0xd2c3f8c9
mov dword [rsp + 0x74], 0x2a25df0d
movups xmmword [rbp + 0x710], xmm0
movups xmm1, xmmword [rax + 0x40]
movups xmmword [rbp + 0x720], xmm1
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rbp + 0x730], xmm0
movups xmm1, xmmword [rax + 0x60]
mov eax, 0xc838
movups xmmword [rbp + 0x740], xmm1
mov word [rsp + 0x78], ax
lea rdx, [rsp + 0x40]
xor eax, eax
lea rcx, [rbp + 0x760]
mov dword [rsp + 0x7a], eax
mov word [rsp + 0x7e], ax
movabs rax, 0xf5d06b73146ce1d
mov qword [rbp - 0x80], rax
movabs rax, 0x494909b2c1580606
mov qword [rbp - 0x78], rax
movabs rax, 0x1f9966966826b1f2
mov qword [rbp - 0x70], rax
call fcn.180012b20
mov rdi, qword [rbp + 0x628]
mov r14, 0xffffffffffffffff
mov rcx, r14
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x230], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp + 0x250], xmm1
movsd xmm0, qword [rax + 0x30]
movsd qword [rbp + 0x260], xmm0
mov eax, dword [rax + 0x38]
mov dword [rbp + 0x268], eax
inc rcx
cmp word [rdi + rcx*2], 0
jne 0x1801341c4
lea rdx, [rbp + 0x230]
mov rax, r14
nop dword [rax + rax]
cmp word [rdx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x1801341e0
lea rsi, [rax + 1]
add rsi, rcx
lea rbx, [rsi + rsi]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
jne 0x18013421b
mov r12d, ebx
jmp 0x18013425c
lea rax, [rbp + 0x230]
mov r9, rdi
lea r8, str._ws_ws
mov qword [rsp + 0x20], rax
mov rdx, rsi
mov rcx, rbx
call fcn.180001080
mov rax, qword [r15 + 0xf0]
mov rcx, rbx
call rax
xor r12d, r12d
mov rcx, rbx
cmp eax, 0xffffffff
setne r12b
call fcn.180146f60
xor ebx, ebx
movabs rsi, 0x5c1b7809632d1a9c
movabs rdi, 0x1b53e4003077bf02
test r12d, r12d
jne 0x180134375
movdqa xmm0, xmmword [0x180161d10]
xor eax, eax
movdqa xmm1, xmmword [0x1801620c0]
movabs r9, 0x4863e3ae9c06d2f
mov word [rsp + 0x65], ax
mov rdx, rbx
mov byte [rsp + 0x67], al
mov rcx, rdi
mov rax, rdi
mov dword [rsp + 0x60], 0x38c4ff38
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x64], 0x69
mov r8, rsi
movdqu xmmword [rsp + 0x50], xmm1
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rdi
imul rax, rcx
add r8, r9
add rax, r8
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
xor al, byte [rsp + rdx + 0x40]
mov byte [rbp + rdx + 0x28], al
inc rdx
mov rax, rcx
cmp rdx, 0x25
jb 0x1801342d2
mov eax, dword [rbp + 0x48]
lea r8, [rbp + 0x298]
movups xmm0, xmmword [rbp + 0x28]
mov dword [rbp + 0x2b8], eax
mov edx, 0x100000
movups xmm1, xmmword [rbp + 0x38]
mov byte [rbp + 0x4d], 0
lea rcx, [0x18017bd90]
movzx eax, word [rbp + 0x4c]
movups xmmword [rbp + 0x298], xmm0
mov word [rbp + 0x2bc], ax
movups xmmword [rbp + 0x2a8], xmm1
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x18013444e
mov rdx, qword [rbp + 0x628]
lea rax, [rbp + 0x220]
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x438]
lea rax, [rbp + 0x7a0]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x6e0]
lea rax, [rbp + 0x668]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x630]
lea rax, [rbp + 0x4c8]
mov qword [rsp + 0x20], rax
call fcn.18013c180
test eax, eax
je 0x18013444e
lea r9, [rbp + 0x600]
mov qword [rsp + 0x20], r13
lea r8, [rbp + 0x630]
mov rcx, r15
lea rdx, [rbp + 0x348]
call fcn.18013c6c0
mov rcx, qword [rbp + 0x648]
mov ebx, eax
call fcn.180146f60
mov rcx, qword [rbp + 0x640]
call fcn.180146f60
mov rcx, qword [rbp + 0x630]
call fcn.180146f60
mov rcx, qword [rbp + 0x638]
call fcn.180146f60
mov rcx, qword [rbp + 0x650]
call fcn.180146f60
mov rcx, qword [rbp + 0x658]
call fcn.180146f60
mov rcx, qword [rbp + 0x660]
call fcn.180146f60
test ebx, ebx
jne 0x18013451d
movdqa xmm0, xmmword [0x180161280]
lea rdx, [rbp + 0x230]
movdqa xmm1, xmmword [0x1801607f0]
lea rcx, [rbp + 0x410]
movabs rax, 0xc260ef1cb7cb8d5e
movabs rbx, 0xa3156534c2c75b13
mov qword [rbp + 0x258], rax
movabs rax, 0x87d7ccb740b1ae94
mov qword [rbp + 0x260], rax
movdqu xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x250], rbx
movdqu xmmword [rbp + 0x240], xmm1
call fcn.18000fa70
lea r8, [rbp + 0x28]
mov edx, 0x100000
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x28], xmm1
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp + 0x38], xmm0
mov ecx, dword [rax + 0x18]
mov dword [rbp + 0x40], ecx
movzx ecx, word [rax + 0x1c]
mov word [rbp + 0x44], cx
lea rcx, [0x18017bd90]
movzx eax, byte [rax + 0x1e]
mov byte [rbp + 0x46], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
xor r12d, r12d
mov dword [0x18017bd84], eax
mov r8d, eax
mov qword [rsp + 0x20], r12
lea rdx, [0x18017bd90]
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x18013452a
xor r12d, r12d
movabs rbx, 0xa3156534c2c75b13
movdqa xmm0, xmmword [0x1801611e0]
lea rdx, [rbp + 0x230]
movdqa xmm1, xmmword [0x180160b30]
lea rcx, [rbp + 0x28]
movabs rax, 0xc260ef1cb7cb8d5e
mov dword [rbp + 0x250], 0x3fb1f28
mov qword [rbp + 0x260], rax
movabs rax, 0x87d7ccb740b1ae94
mov qword [rbp + 0x268], rax
movdqu xmmword [rbp + 0x230], xmm0
mov dword [rbp + 0x254], 0x5c6
movdqu xmmword [rbp + 0x240], xmm1
mov qword [rbp + 0x258], rbx
call fcn.18000d7e0
lea r8, [rbp + 0x298]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x298], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2a8], xmm0
movsd xmm1, qword [rax + 0x20]
movsd qword [rbp + 0x2b8], xmm1
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
movdqa xmm0, xmmword [0x180160940]
lea rdx, [rbp + 0x298]
movabs rax, 0xa7ec59b91e41e411
lea rcx, [rbp + 0x28]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x9db3e3a20838a126
mov qword [rbp + 0x2b0], rax
movabs rax, 0x9dbe438aebd42f31
mov qword [rbp + 0x2b8], rax
movdqu xmmword [rbp + 0x298], xmm0
call fcn.180013d20
lea rdx, [rbp + 0xe8]
mov dword [rbp + 0xe8], 0x382103bb
lea rcx, [rbp + 0x938]
mov dword [rbp + 0xec], 0x531f6f3f
mov dword [rbp + 0xf0], 0x125cfe13
movups xmm1, xmmword [rax]
movabs rax, 0x53a4a43623c65917
mov dword [rbp + 0xf4], 0x7405c8c3
mov qword [rbp + 0x150], rax
movabs rax, 0xb239e6a5d6a6619e
mov qword [rbp + 0x158], rax
movabs rax, 0x27588b27cf2319ad
mov qword [rbp + 0x160], rax
movups xmmword [rbp + 0x410], xmm1
mov dword [rbp + 0xf8], 0xc9e053bf
mov dword [rbp + 0xfc], 0xf97d4563
mov dword [rbp + 0x100], 0x6a494243
mov dword [rbp + 0x104], 0x8a0f93a7
mov dword [rbp + 0x108], 0x2b09ee39
mov dword [rbp + 0x10c], 0xc8dcc62b
mov dword [rbp + 0x110], 0xa038251b
mov dword [rbp + 0x114], 0xded4fbe4
mov dword [rbp + 0x118], 0xab721902
mov dword [rbp + 0x11c], 0xf4af0c66
mov dword [rbp + 0x120], 0xcba1fa3b
mov dword [rbp + 0x124], 0xf4bbd7b
mov dword [rbp + 0x128], 0x5cce3eeb
mov dword [rbp + 0x12c], 0x55ae20a9
mov dword [rbp + 0x130], 0xb5ddec58
mov dword [rbp + 0x134], 0x2e318ec0
mov dword [rbp + 0x138], 0x1d287c7b
mov dword [rbp + 0x13c], 0xd81f7ef1
mov dword [rbp + 0x140], 0xf8f2ec73
mov dword [rbp + 0x144], 0x38daac60
mov dword [rbp + 0x148], 0x70084efc
mov dword [rbp + 0x14c], 0xedf331d
call fcn.180014a60
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x7a0], xmm2
movups xmm0, xmmword [rax + 0x10]
movabs rdx, 0xb239e6a5d6a6619e
mov dword [rbp + 0x178], 0x382103bb
movabs r10, 0x53a4a43623c65917
mov qword [rbp + 0x1f8], rdx
movups xmmword [rbp + 0x7b0], xmm0
xor r9d, r9d
mov r8, rdx
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp + 0x17c], 0x531f6f3f
mov edx, r9d
mov dword [rbp + 0x180], 0x125cfe13
movups xmmword [rbp + 0x7c0], xmm1
mov dword [rbp + 0x184], 0x7405c8c3
movups xmm0, xmmword [rax + 0x30]
mov dword [rbp + 0x188], 0xc9e053bf
mov dword [rbp + 0x18c], 0xf97d4563
movups xmmword [rbp + 0x7d0], xmm0
mov dword [rbp + 0x190], 0x6a494243
movups xmm1, xmmword [rax + 0x40]
mov dword [rbp + 0x194], 0x8a0f93a7
mov dword [rbp + 0x198], 0x2b09ee39
movups xmmword [rbp + 0x7e0], xmm1
mov dword [rbp + 0x19c], 0xc8dcc62b
movups xmm0, xmmword [rax + 0x50]
mov dword [rbp + 0x1a0], 0xa038251b
mov dword [rbp + 0x1a4], 0xded4fbe4
movups xmmword [rbp + 0x7f0], xmm0
mov dword [rbp + 0x1a8], 0xab721902
movsd xmm1, qword [rax + 0x60]
movsd qword [rbp + 0x800], xmm1
movzx eax, word [rax + 0x68]
mov word [rbp + 0x808], ax
movabs rax, 0x27588b27cf2319ad
mov qword [rbp + 0x200], rax
mov rcx, rax
mov dword [rbp + 0x1ac], 0xf4af0c66
mov dword [rbp + 0x1b0], 0xcba1fa3b
mov dword [rbp + 0x1b4], 0xf4bbd7b
mov dword [rbp + 0x1b8], 0x5cce3eeb
mov dword [rbp + 0x1bc], 0x55ae20a9
mov dword [rbp + 0x1c0], 0xb5ddec58
mov dword [rbp + 0x1c4], 0x2e318ec0
mov dword [rbp + 0x1c8], 0x1d227c73
mov dword [rbp + 0x1cc], 0xd81f7ef4
mov dword [rbp + 0x1d0], 0xf8beec6a
mov dword [rbp + 0x1d4], 0x38f2ac47
mov dword [rbp + 0x1d8], 0x70134ed1
mov dword [rbp + 0x1dc], 0xeb6331f
mov dword [rbp + 0x1e0], 0x4772157a
mov dword [rbp + 0x1e4], 0xe570a6dd
mov dword [rbp + 0x1e8], 0x9f68e1f6
mov dword [rbp + 0x1ec], 0x9079
mov qword [rbp + 0x1f0], r10
nop word [rax + rax]
imul rax, rcx
add r8, r10
add rax, r8
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cx
xor ax, word [rbp + rdx + 0x178]
mov word [rbp + rdx + 0x2c0], ax
add rdx, 2
mov rax, rcx
cmp rdx, 0x76
jb 0x180134970
movups xmm0, xmmword [rbp + 0x2c0]
mov eax, 0x4e91
mov word [rbp + 0x336], r9w
movups xmm1, xmmword [rbp + 0x2d0]
mov word [rbp + 8], ax
lea rdx, [rbp - 0x68]
xor eax, eax
mov dword [rbp - 0x68], 0x63509a64
movups xmmword [rbp + 0x668], xmm0
mov dword [rbp + 0xa], eax
lea rcx, [rbp + 0x830]
movups xmm0, xmmword [rbp + 0x2e0]
mov word [rbp + 0xe], ax
movabs rax, 0xf5d06b73146ce1d
movups xmmword [rbp + 0x678], xmm1
mov qword [rbp + 0x10], rax
movabs rax, 0xf61df23882b5854e
movups xmm1, xmmword [rbp + 0x2f0]
mov qword [rbp + 0x18], rax
movabs rax, 0x16caef8e541171c4
movups xmmword [rbp + 0x688], xmm0
mov dword [rbp - 0x64], 0x2286584b
movups xmm0, xmmword [rbp + 0x300]
mov dword [rbp - 0x60], 0x1f66d867
movups xmmword [rbp + 0x698], xmm1
mov dword [rbp - 0x5c], 0xe80fce18
movups xmm1, xmmword [rbp + 0x310]
mov dword [rbp - 0x58], 0xdfecb121
movups xmmword [rbp + 0x6a8], xmm0
mov dword [rbp - 0x54], 0xb3f22831
movups xmm0, xmmword [rbp + 0x320]
mov dword [rbp - 0x50], 0x765b9dd2
movups xmmword [rbp + 0x6b8], xmm1
mov dword [rbp - 0x4c], 0x439f1eff
movsd xmm1, qword [rbp + 0x330]
movups xmmword [rbp + 0x6c8], xmm0
mov dword [rbp - 0x48], 0xe9fec0c
movsd qword [rbp + 0x6d8], xmm1
mov dword [rbp - 0x44], 0x121be3b7
mov dword [rbp - 0x40], 0x3651a56f
mov dword [rbp - 0x3c], 0x8804f17f
mov dword [rbp - 0x38], 0xd91a8f
mov dword [rbp - 0x34], 0x4d2d8cb9
mov dword [rbp - 0x30], 0x44356c1d
mov dword [rbp - 0x2c], 0x4102a54c
mov dword [rbp - 0x28], 0x50b3896a
mov dword [rbp - 0x24], 0x5a338f8c
mov dword [rbp - 0x20], 0xda4e8a79
mov dword [rbp - 0x1c], 0xae4fc29c
mov dword [rbp - 0x18], 0xa47f3ab5
mov dword [rbp - 0x14], 0xac020615
mov dword [rbp - 0x10], 0x834a6e33
mov dword [rbp - 0xc], 0xb8e56fa1
mov dword [rbp - 8], 0x4cbe90d2
mov dword [rbp - 4], 0xdf75b71c
mov dword [rbp], 0x69e6bae
mov dword [rbp + 4], 0xcfb68e81
mov qword [rbp + 0x20], rax
call fcn.180014700
mov dword [rbp + 0x50], 0x63509a64
mov dword [rbp + 0x54], 0x2286584b
mov dword [rbp + 0x58], 0x1f66d867
movups xmm2, xmmword [rax]
mov dword [rbp + 0x5c], 0xe80fce18
mov dword [rbp + 0x60], 0xdfecb121
movups xmmword [rbp + 0x4c8], xmm2
mov dword [rbp + 0x64], 0xb3f22831
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x4d8], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp + 0x4e8], xmm1
movups xmm0, xmmword [rax + 0x30]
movups xmmword [rbp + 0x4f8], xmm0
movups xmm1, xmmword [rax + 0x40]
movups xmmword [rbp + 0x508], xmm1
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rbp + 0x518], xmm0
movups xmm1, xmmword [rax + 0x60]
movups xmmword [rbp + 0x528], xmm1
mov eax, dword [rax + 0x70]
mov dword [rbp + 0x538], eax
movabs rax, 0xf5d06b73146ce1d
mov dword [rbp + 0x68], 0x765b9dd2
mov qword [rbp + 0xd0], rax
lea rdx, [rbp + 0x50]
movabs rax, 0xf61df23882b5854e
mov dword [rbp + 0x6c], 0x439f1eff
mov qword [rbp + 0xd8], rax
lea rcx, [rbp + 0x570]
movabs rax, 0x16caef8e541171c4
mov dword [rbp + 0x70], 0xe9fec0c
mov qword [rbp + 0xe0], rax
mov dword [rbp + 0x74], 0x121be3b7
mov dword [rbp + 0x78], 0x3651a56f
mov dword [rbp + 0x7c], 0x8804f17f
mov dword [rbp + 0x80], 0xd91a8f
mov dword [rbp + 0x84], 0x4d2d8cb9
mov dword [rbp + 0x88], 0x44356c1d
mov dword [rbp + 0x8c], 0x4102a54c
mov dword [rbp + 0x90], 0x50b3896a
mov dword [rbp + 0x94], 0x5a338f8c
mov dword [rbp + 0x98], 0xda4e8a79
mov dword [rbp + 0x9c], 0xae4fc29c
mov dword [rbp + 0xa0], 0xa47f3ab5
mov dword [rbp + 0xa4], 0xac020615
mov dword [rbp + 0xa8], 0x834a6e33
mov dword [rbp + 0xac], 0xb8e56fa1
mov dword [rbp + 0xb0], 0x4cbe90cb
mov dword [rbp + 0xb4], 0xdf22b70a
mov dword [rbp + 0xb8], 0x68d6b85
mov dword [rbp + 0xbc], 0xcf8b8e9e
mov dword [rbp + 0xc0], 0x9bb04ed2
mov dword [rbp + 0xc4], 0x2a954690
mov dword [rbp + 0xc8], 0x8deb1f0f
mov dword [rbp + 0xcc], 0x603ed9f6
call fcn.180014400
mov dword [rbp + 0x368], 0xbd17e633
mov dword [rbp + 0x36c], 0x1c274d32
mov dword [rbp + 0x370], 0x3a38701
movups xmm2, xmmword [rax]
mov dword [rbp + 0x374], 0x58f9437a
mov dword [rbp + 0x378], 0x707188a8
movups xmmword [rbp + 0x438], xmm2
mov dword [rbp + 0x37c], 0xad514c9e
movups xmm0, xmmword [rax + 0x10]
mov dword [rbp + 0x380], 0xe665c9e7
mov dword [rbp + 0x384], 0xb7bcaad1
movups xmmword [rbp + 0x448], xmm0
mov dword [rbp + 0x388], 0x7e010893
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp + 0x38c], 0x20c1b7d0
mov dword [rbp + 0x390], 0xb741102b
movups xmmword [rbp + 0x458], xmm1
mov dword [rbp + 0x394], 0xdf111b5c
movups xmm0, xmmword [rax + 0x30]
mov dword [rbp + 0x398], 0xd2e9f8e7
mov dword [rbp + 0x39c], 0x2a27df04
movups xmmword [rbp + 0x468], xmm0
mov dword [rbp + 0x3a0], 0x9268c85d
movups xmm1, xmmword [rax + 0x40]
mov dword [rbp + 0x3a4], 0xc551a700
mov dword [rbp + 0x3a8], 0x2ba5ec90
movups xmmword [rbp + 0x478], xmm1
mov dword [rbp + 0x3ac], 0x772e3393
movups xmm0, xmmword [rax + 0x50]
mov dword [rbp + 0x3b0], 0x1e986cf2
mov dword [rbp + 0x3b4], 0x58f547c9
movups xmmword [rbp + 0x488], xmm0
mov dword [rbp + 0x3b8], 0x355a20ea
movups xmm1, xmmword [rax + 0x60]
mov dword [rbp + 0x3bc], 0xed2c7889
mov dword [rbp + 0x3c0], 0x80ed61d0
movups xmmword [rbp + 0x498], xmm1
mov dword [rbp + 0x3c4], 0x6e1ec547
movups xmm0, xmmword [rax + 0x70]
mov dword [rbp + 0x3c8], 0x2e673e3a
mov dword [rbp + 0x3cc], 0xd8561de2
movups xmmword [rbp + 0x4a8], xmm0
movzx eax, word [rax + 0x80]
mov word [rbp + 0x4b8], ax
mov dword [rbp + 0x3d0], 0x1e32b16f
mov dword [rbp + 0x3d4], 0xf03ebb66
movabs rax, 0xf5d06b73146ce1d
lea rdx, [rbp + 0x368]
mov qword [rbp + 0x3d8], rax
lea rcx, [rbp + 0x8a8]
movabs rax, 0x494909b2c1580606
mov qword [rbp + 0x3e0], rax
movabs rax, 0x1f9966966826b1f2
mov qword [rbp + 0x3e8], rax
call fcn.18000e400
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0xbd17e633
lea rcx, [rbp + 0x760]
mov dword [rsp + 0x44], 0x1c274d32
mov dword [rsp + 0x48], 0x3a38701
movups xmm2, xmmword [rax]
mov dword [rsp + 0x4c], 0x58f9437a
mov dword [rsp + 0x50], 0x707188a8
movups xmmword [rbp + 0x6e0], xmm2
mov dword [rsp + 0x54], 0xad514c9e
movups xmm0, xmmword [rax + 0x10]
mov dword [rsp + 0x58], 0xe665c9e7
mov dword [rsp + 0x5c], 0xb7bcaad1
movups xmmword [rbp + 0x6f0], xmm0
mov dword [rsp + 0x60], 0x7e010893
movups xmm1, xmmword [rax + 0x20]
mov dword [rsp + 0x64], 0x20c1b7d0
mov dword [rsp + 0x68], 0xb741102b
movups xmmword [rbp + 0x700], xmm1
mov dword [rsp + 0x6c], 0xdf111b5c
movups xmm0, xmmword [rax + 0x30]
mov dword [rsp + 0x70], 0xd2e9f8e7
mov dword [rsp + 0x74], 0x2a27df04
movups xmmword [rbp + 0x710], xmm0
mov dword [rsp + 0x78], 0x9234c85d
movups xmm1, xmmword [rax + 0x40]
movups xmmword [rbp + 0x720], xmm1
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rbp + 0x730], xmm0
movups xmm1, xmmword [rax + 0x60]
movups xmmword [rbp + 0x740], xmm1
movzx eax, word [rax + 0x70]
mov word [rbp + 0x750], ax
xor eax, eax
mov dword [rsp + 0x7c], eax
movabs rax, 0xf5d06b73146ce1d
mov qword [rbp - 0x80], rax
movabs rax, 0x494909b2c1580606
mov qword [rbp - 0x78], rax
movabs rax, 0x1f9966966826b1f2
mov qword [rbp - 0x70], rax
call fcn.180013f60
mov r12, qword [rbp + 0x628]
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x230], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp + 0x250], xmm1
movsd xmm0, qword [rax + 0x30]
movsd qword [rbp + 0x260], xmm0
mov ecx, dword [rax + 0x38]
mov dword [rbp + 0x268], ecx
mov rcx, r14
movzx eax, word [rax + 0x3c]
mov word [rbp + 0x26c], ax
inc rcx
cmp word [r12 + rcx*2], 0
jne 0x180135004
lea rdx, [rbp + 0x230]
mov rax, r14
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x180135020
inc rcx
add rax, rcx
mov qword [rbp + 0x220], rax
lea rbx, [rax + rax]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
jne 0x18013505f
mov r12d, ebx
jmp 0x1801350a4
mov rdx, qword [rbp + 0x220]
lea rax, [rbp + 0x230]
mov r9, r12
mov qword [rsp + 0x20], rax
lea r8, str._ws_ws
mov rcx, rbx
call fcn.180001080
mov rax, qword [r15 + 0xf0]
mov rcx, rbx
call rax
xor r12d, r12d
mov rcx, rbx
cmp eax, 0xffffffff
setne r12b
call fcn.180146f60
xor ebx, ebx
test r12d, r12d
jne 0x1801351c5
movdqa xmm0, xmmword [0x180161d10]
xor eax, eax
movdqa xmm1, xmmword [0x1801620c0]
movabs r9, 0x4863e3ae9c06d2f
mov word [rsp + 0x65], ax
mov rdx, rbx
mov byte [rsp + 0x67], al
mov rcx, rdi
mov rax, rdi
mov dword [rsp + 0x60], 0x38c4ff38
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x64], 0x69
mov r8, rsi
movdqu xmmword [rsp + 0x50], xmm1
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rdi
nop word [rax + rax]
imul rax, rcx
add r8, r9
add rax, r8
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
xor al, byte [rsp + rdx + 0x40]
mov byte [rbp + rdx + 0x410], al
inc rdx
mov rax, rcx
cmp rdx, 0x25
jb 0x180135110
mov eax, dword [rbp + 0x430]
lea r8, [rbp + 0x298]
movups xmm0, xmmword [rbp + 0x410]
mov dword [rbp + 0x2b8], eax
mov edx, 0x100000
movups xmm1, xmmword [rbp + 0x420]
mov byte [rbp + 0x435], 0
lea rcx, [0x18017bd90]
movzx eax, word [rbp + 0x434]
movups xmmword [rbp + 0x298], xmm0
mov word [rbp + 0x2bc], ax
movups xmmword [rbp + 0x2a8], xmm1
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x18013529e
mov rdx, qword [rbp + 0x628]
lea rax, [rbp + 0x410]
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x438]
lea rax, [rbp + 0x7a0]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x6e0]
lea rax, [rbp + 0x668]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x630]
lea rax, [rbp + 0x4c8]
mov qword [rsp + 0x20], rax
call fcn.18013c180
test eax, eax
je 0x18013529e
lea r9, [rbp + 0x600]
mov qword [rsp + 0x20], r13
lea r8, [rbp + 0x630]
mov rcx, r15
lea rdx, [rbp + 0x348]
call fcn.18013c6c0
mov rcx, qword [rbp + 0x648]
mov ebx, eax
call fcn.180146f60
mov rcx, qword [rbp + 0x640]
call fcn.180146f60
mov rcx, qword [rbp + 0x630]
call fcn.180146f60
mov rcx, qword [rbp + 0x638]
call fcn.180146f60
mov rcx, qword [rbp + 0x650]
call fcn.180146f60
mov rcx, qword [rbp + 0x658]
call fcn.180146f60
mov rcx, qword [rbp + 0x660]
call fcn.180146f60
test ebx, ebx
jne 0x18013536d
movdqa xmm0, xmmword [0x180161d90]
lea rdx, [rbp + 0x230]
movdqa xmm1, xmmword [0x180160660]
lea rcx, [rbp + 0x410]
movabs rax, 0xa7ec59b91e41e411
mov qword [rbp + 0x250], rax
movabs rax, 0x9db3e3a20838a126
mov qword [rbp + 0x258], rax
movabs rax, 0x9dbe438aebd42f31
mov qword [rbp + 0x260], rax
movdqu xmmword [rbp + 0x230], xmm0
movdqu xmmword [rbp + 0x240], xmm1
call fcn.18000fa70
lea r8, [rbp + 0x28]
mov edx, 0x100000
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x28], xmm1
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp + 0x38], xmm0
mov ecx, dword [rax + 0x18]
mov dword [rbp + 0x40], ecx
movzx ecx, word [rax + 0x1c]
mov word [rbp + 0x44], cx
lea rcx, [0x18017bd90]
movzx eax, byte [rax + 0x1e]
mov byte [rbp + 0x46], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
xor r12d, r12d
mov dword [0x18017bd84], eax
mov r8d, eax
mov qword [rsp + 0x20], r12
lea rdx, [0x18017bd90]
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180135370
xor r12d, r12d
movdqa xmm0, xmmword [0x180162460]
movabs rax, 0xf5c508cf63b89306
movdqa xmm1, xmmword [0x180160990]
movabs r9, 0xf437ff3808c16f2b
movabs r8, 0x57b184a6e8603d76
mov qword [rbp + 0x250], r9
movdqu xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x258], r8
mov rcx, rax
movdqu xmmword [rbp + 0x240], xmm1
mov qword [rbp + 0x260], rax
mov rdx, r12
nop dword [rax]
imul rax, rcx
add r8, r9
add rax, r8
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
xor al, byte [rbp + rdx + 0x230]
mov byte [rbp + rdx + 0x28], al
inc rdx
mov rax, rcx
cmp rdx, 0x1f
jb 0x1801353d0
movups xmm0, xmmword [rbp + 0x28]
mov byte [rbp + 0x47], 0
lea r8, [rbp + 0x410]
movups xmm1, xmmword [rbp + 0x38]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmmword [rbp + 0x410], xmm0
movups xmmword [rbp + 0x420], xmm1
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
movdqa xmm0, xmmword [0x1801609b0]
lea rdx, [rbp + 0x298]
movabs rax, 0xb239e6a5d6a6619e
lea rcx, [rbp + 0x28]
movabs rbx, 0x53a4a43623c65917
mov qword [rbp + 0x2b0], rax
movabs r12, 0x27588b27cf2319ad
mov qword [rbp + 0x2a8], rbx
movdqu xmmword [rbp + 0x298], xmm0
mov qword [rbp + 0x2b8], r12
call fcn.180013d20
lea rdx, [rbp - 0x68]
mov dword [rbp - 0x68], 0x382103bb
lea rcx, [rbp + 0x830]
mov dword [rbp - 0x64], 0x531f6f3f
mov dword [rbp - 0x60], 0x125cfe13
movups xmm1, xmmword [rax]
xor eax, eax
mov dword [rbp - 0x5c], 0x7405c8c3
mov dword [rbp + 0xc], eax
movabs rax, 0xb239e6a5d6a6619e
mov qword [rbp + 0x18], rax
movups xmmword [rbp + 0x410], xmm1
mov dword [rbp - 0x58], 0xc9e053bf
mov dword [rbp - 0x54], 0xf97d4563
mov dword [rbp - 0x50], 0x6a494243
mov dword [rbp - 0x4c], 0x8a1b93a7
mov dword [rbp - 0x48], 0x2b04ee31
mov dword [rbp - 0x44], 0xc8d6c63d
mov dword [rbp - 0x40], 0xa00b2510
mov dword [rbp - 0x3c], 0xdec1fbdb
mov dword [rbp - 0x38], 0xab531930
mov dword [rbp - 0x34], 0xf4b00c67
mov dword [rbp - 0x30], 0xcb8ffa1c
mov dword [rbp - 0x2c], 0xf4fbd41
mov dword [rbp - 0x28], 0x5cd93efd
mov dword [rbp - 0x24], 0x55b620fb
mov dword [rbp - 0x20], 0xb5daec6c
mov dword [rbp - 0x1c], 0x2e1f8ec4
mov dword [rbp - 0x18], 0x1d037c17
mov dword [rbp - 0x14], 0xd80a7ef3
mov dword [rbp - 0x10], 0xf88eec7e
mov dword [rbp - 0xc], 0x38c1ac7f
mov dword [rbp - 8], 0x701d4efe
mov dword [rbp - 4], 0xeff3314
mov dword [rbp], 0x47261547
mov dword [rbp + 4], 0xe565a6f8
mov dword [rbp + 8], 0x9f09e1e7
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x20], r12
call fcn.180013550
mov rcx, rax
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x668], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x678], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp + 0x688], xmm1
movups xmm0, xmmword [rax + 0x30]
movups xmmword [rbp + 0x698], xmm0
movups xmm1, xmmword [rax + 0x40]
movups xmmword [rbp + 0x6a8], xmm1
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rbp + 0x6b8], xmm0
movups xmm1, xmmword [rax + 0x60]
movups xmmword [rbp + 0x6c8], xmm1
mov eax, dword [rax + 0x70]
lea rdx, [rbp + 0x4c8]
mov dword [rbp + 0x6d8], eax
movzx eax, word [rcx + 0x74]
lea rcx, [rbp + 0x938]
mov word [rbp + 0x6dc], ax
movabs rax, 0xf5d06b73146ce1d
mov qword [rbp + 0x558], rax
movabs rax, 0xf61df23882b5854e
mov qword [rbp + 0x560], rax
movabs rax, 0x16caef8e541171c4
mov qword [rbp + 0x568], rax
mov dword [rbp + 0x4c8], 0x63509a64
mov dword [rbp + 0x4cc], 0x2286584b
mov dword [rbp + 0x4d0], 0x1f66d867
mov dword [rbp + 0x4d4], 0xe80fce18
mov dword [rbp + 0x4d8], 0xdfecb121
mov dword [rbp + 0x4dc], 0xb3f22831
mov dword [rbp + 0x4e0], 0x765b9dd2
mov dword [rbp + 0x4e4], 0x438b1eff
mov dword [rbp + 0x4e8], 0xe92ec04
mov dword [rbp + 0x4ec], 0x1211e3a1
mov dword [rbp + 0x4f0], 0x3662a564
mov dword [rbp + 0x4f4], 0x8811f140
mov dword [rbp + 0x4f8], 0xf81abd
mov dword [rbp + 0x4fc], 0x4d328cb8
mov dword [rbp + 0x500], 0x441b6c3a
mov dword [rbp + 0x504], 0x4106a576
mov dword [rbp + 0x508], 0x50a4897c
mov dword [rbp + 0x50c], 0x5a2b8fde
mov dword [rbp + 0x510], 0xda498a4d
mov dword [rbp + 0x514], 0xae61c298
mov dword [rbp + 0x518], 0xa45e3ad1
mov dword [rbp + 0x51c], 0xac170612
mov dword [rbp + 0x520], 0x837a6e27
mov dword [rbp + 0x524], 0xb8dc6f91
mov dword [rbp + 0x528], 0x4cba90e3
mov dword [rbp + 0x52c], 0xdf39b70b
mov dword [rbp + 0x530], 0x6a36b9e
mov dword [rbp + 0x534], 0xcfb68eac
mov dword [rbp + 0x538], 0x9b8f4eb1
mov dword [rbp + 0x53c], 0x2a8d469e
mov dword [rbp + 0x540], 0x8de31f15
mov dword [rbp + 0x544], 0x6050d9e4
mov dword [rbp + 0x548], 0xb63c7344
mov dword [rbp + 0x54c], 0xb3f58be6
mov qword [rbp + 0x550], 0x98fdb56
call fcn.180015210
mov rcx, rax
mov dword [rbp + 0x368], 0x63509a64
mov dword [rbp + 0x36c], 0x2286584b
mov dword [rbp + 0x370], 0x1f66d867
movups xmm2, xmmword [rax]
mov dword [rbp + 0x374], 0xe80fce18
mov dword [rbp + 0x378], 0xdfecb121
movups xmmword [rbp + 0x438], xmm2
mov dword [rbp + 0x37c], 0xb3f22831
movups xmm0, xmmword [rax + 0x10]
mov dword [rbp + 0x380], 0x765b9dd2
mov dword [rbp + 0x384], 0x438b1eff
movups xmmword [rbp + 0x448], xmm0
mov dword [rbp + 0x388], 0xe92ec04
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp + 0x458], xmm1
movups xmm0, xmmword [rax + 0x30]
movups xmmword [rbp + 0x468], xmm0
movups xmm1, xmmword [rax + 0x40]
movups xmmword [rbp + 0x478], xmm1
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rbp + 0x488], xmm0
movups xmm1, xmmword [rax + 0x60]
movups xmmword [rbp + 0x498], xmm1
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rbp + 0x4a8], xmm0
movsd xmm1, qword [rax + 0x80]
movsd qword [rbp + 0x4b8], xmm1
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x4c0], eax
movzx eax, word [rcx + 0x8c]
mov word [rbp + 0x4c4], ax
movabs rax, 0xf5d06b73146ce1d
mov dword [rbp + 0x38c], 0x1211e3a1
mov qword [rbp + 0x3f8], rax
lea rdx, [rbp + 0x368]
movabs rax, 0xf61df23882b5854e
mov dword [rbp + 0x390], 0x3662a564
mov qword [rbp + 0x400], rax
lea rcx, [rbp + 0x7a0]
movabs rax, 0x16caef8e541171c4
mov dword [rbp + 0x394], 0x8811f140
mov qword [rbp + 0x408], rax
mov dword [rbp + 0x398], 0xf81abd
mov dword [rbp + 0x39c], 0x4d328cb8
mov dword [rbp + 0x3a0], 0x441b6c3a
mov dword [rbp + 0x3a4], 0x4106a576
mov dword [rbp + 0x3a8], 0x50a4897c
mov dword [rbp + 0x3ac], 0x5a2b8fde
mov dword [rbp + 0x3b0], 0xda498a4d
mov dword [rbp + 0x3b4], 0xae61c298
mov dword [rbp + 0x3b8], 0xa45e3ad1
mov dword [rbp + 0x3bc], 0xac170612
mov dword [rbp + 0x3c0], 0x837a6e27
mov dword [rbp + 0x3c4], 0xb8dc6f91
mov dword [rbp + 0x3c8], 0x4cba90e3
mov dword [rbp + 0x3cc], 0xdf39b70b
mov dword [rbp + 0x3d0], 0x6a36b9e
mov dword [rbp + 0x3d4], 0xcfb68eac
mov dword [rbp + 0x3d8], 0x9b9c4eb1
mov dword [rbp + 0x3dc], 0x2a9b468d
mov dword [rbp + 0x3e0], 0x8de71f02
mov dword [rbp + 0x3e4], 0x601ed9f1
mov dword [rbp + 0x3e8], 0xb6197327
mov dword [rbp + 0x3ec], 0xb3e58bf5
mov qword [rbp + 0x3f0], 0x98fdb44
call fcn.180015210
mov rcx, rax
mov dword [rbp + 0x178], 0xd2b96069
mov dword [rbp + 0x17c], 0xaa9040e8
mov dword [rbp + 0x180], 0x4a1c147c
movups xmm2, xmmword [rax]
mov dword [rbp + 0x184], 0xe5b71fe3
mov dword [rbp + 0x188], 0x91131a15
movups xmmword [rbp + 0x570], xmm2
mov dword [rbp + 0x18c], 0x276402a9
movups xmm0, xmmword [rax + 0x10]
mov dword [rbp + 0x190], 0xac5835fc
mov dword [rbp + 0x194], 0x482e5a08
movups xmmword [rbp + 0x580], xmm0
mov dword [rbp + 0x198], 0xc61ceb3b
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp + 0x19c], 0x1b930b43
mov dword [rbp + 0x1a0], 0x4246853c
movups xmmword [rbp + 0x590], xmm1
mov dword [rbp + 0x1a4], 0x4263243a
movups xmm0, xmmword [rax + 0x30]
mov dword [rbp + 0x1a8], 0x8e4f1460
mov dword [rbp + 0x1ac], 0xc04b8fb4
movups xmmword [rbp + 0x5a0], xmm0
mov dword [rbp + 0x1b0], 0x303239dd
movups xmm1, xmmword [rax + 0x40]
mov dword [rbp + 0x1b4], 0xf1654de6
mov dword [rbp + 0x1b8], 0x24060e2d
movups xmmword [rbp + 0x5b0], xmm1
mov dword [rbp + 0x1bc], 0x4d289119
movups xmm0, xmmword [rax + 0x50]
mov dword [rbp + 0x1c0], 0x304849db
mov dword [rbp + 0x1c4], 0x16251d38
movups xmmword [rbp + 0x5c0], xmm0
mov dword [rbp + 0x1c8], 0x7429d3a9
movups xmm1, xmmword [rax + 0x60]
mov dword [rbp + 0x1cc], 0xd232feb3
mov dword [rbp + 0x1d0], 0x1267c485
movups xmmword [rbp + 0x5d0], xmm1
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rbp + 0x5e0], xmm0
movsd xmm1, qword [rax + 0x80]
movsd qword [rbp + 0x5f0], xmm1
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x5f8], eax
movzx eax, word [rcx + 0x8c]
mov word [rbp + 0x5fc], ax
xor eax, eax
mov dword [rbp + 0x1d4], 0xe7d4ad39
mov dword [rbp + 0x204], eax
lea rdx, [rbp + 0x178]
movabs rax, 0x587f9cbbfb40fa25
mov dword [rbp + 0x1d8], 0xb1897150
mov qword [rbp + 0x208], rax
lea rcx, [rbp + 0x8a8]
movabs rax, 0xbf0eb0fd095c248e
mov dword [rbp + 0x1dc], 0xbcff0f68
mov qword [rbp + 0x210], rax
movabs rax, 0x5f99b71ee9676212
mov qword [rbp + 0x218], rax
mov dword [rbp + 0x1e0], 0x29ba773f
mov dword [rbp + 0x1e4], 0x681a161
mov dword [rbp + 0x1e8], 0x1b45faf8
mov dword [rbp + 0x1ec], 0x94cb5d09
mov dword [rbp + 0x1f0], 0xf31cc790
mov dword [rbp + 0x1f4], 0x1d8b5d22
mov dword [rbp + 0x1f8], 0xb8a9365d
mov dword [rbp + 0x1fc], 0x573bedc9
mov dword [rbp + 0x200], 0x8fc3b35e
call fcn.180015210
mov rcx, rax
mov dword [rbp + 0x50], 0xd2b96069
movabs r11, 0x587f9cbbfb40fa25
mov dword [rbp + 0x54], 0xaa9040e8
mov dword [rbp + 0x58], 0x4a1c147c
movups xmm2, xmmword [rax]
mov dword [rbp + 0x5c], 0xe5b71fe3
mov dword [rbp + 0x60], 0x91131a15
movups xmmword [rbp + 0xe8], xmm2
mov dword [rbp + 0x64], 0x276402a9
movups xmm0, xmmword [rax + 0x10]
mov dword [rbp + 0x68], 0xac5835fc
mov dword [rbp + 0x6c], 0x482e5a08
movups xmmword [rbp + 0xf8], xmm0
mov dword [rbp + 0x70], 0xc61ceb3b
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp + 0x74], 0x1b930b43
mov dword [rbp + 0x78], 0x4246853c
movups xmmword [rbp + 0x108], xmm1
mov dword [rbp + 0x7c], 0x4263243a
movups xmm0, xmmword [rax + 0x30]
mov dword [rbp + 0x80], 0x8e4f1460
mov dword [rbp + 0x84], 0xc04b8fb4
movups xmmword [rbp + 0x118], xmm0
mov dword [rbp + 0x88], 0x303239dd
movups xmm1, xmmword [rax + 0x40]
mov dword [rbp + 0x8c], 0xf1654de6
mov dword [rbp + 0x90], 0x24060e2d
movups xmmword [rbp + 0x128], xmm1
mov dword [rbp + 0x94], 0x4d289119
movups xmm0, xmmword [rax + 0x50]
mov dword [rbp + 0x98], 0x304849db
mov dword [rbp + 0x9c], 0x16251d38
movups xmmword [rbp + 0x138], xmm0
mov dword [rbp + 0xa0], 0x7429d3a9
movups xmm1, xmmword [rax + 0x60]
mov dword [rbp + 0xa4], 0xd232feb3
mov dword [rbp + 0xa8], 0x1267c485
movups xmmword [rbp + 0x148], xmm1
mov dword [rbp + 0xac], 0xe7d4ad39
movups xmm0, xmmword [rax + 0x70]
mov dword [rbp + 0xb0], 0xb1897150
mov dword [rbp + 0xb4], 0xbcff0f68
movups xmmword [rbp + 0x158], xmm0
mov dword [rbp + 0xb8], 0x29ba773f
movsd xmm1, qword [rax + 0x80]
movsd qword [rbp + 0x168], xmm1
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x170], eax
movzx eax, word [rcx + 0x8c]
mov word [rbp + 0x174], ax
xor eax, eax
mov dword [rbp + 0xcc], eax
mov dword [rbp + 0xbc], 0x68da167
mov dword [rbp + 0xc0], 0x1b46faff
mov dword [rbp + 0xc4], 0x94cb5d09
mov dword [rbp + 0xc8], 0xf340c782
mov qword [rbp + 0xd0], r11
movabs rax, 0x5f99b71ee9676212
movabs rcx, 0xbf0eb0fd095c248e
xor r10d, r10d
mov qword [rbp + 0xd8], rcx
mov qword [rbp + 0xe0], rax
mov r8, rax
mov r9d, r10d
nop dword [rax + rax]
imul rax, r8
add rcx, r11
add rax, rcx
add rcx, r11
mov rdx, rax
shl rax, 0x20
shr rdx, 0x20
or rdx, rax
movzx eax, dx
xor ax, word [rbp + r9 + 0x50]
mov word [rbp + r9 + 0x2c0], ax
imul rdx, rdx
add rdx, rcx
mov r8, rdx
shl rdx, 0x20
shr r8, 0x20
or r8, rdx
movzx eax, r8w
xor ax, word [rbp + r9 + 0x52]
mov word [rbp + r9 + 0x2c2], ax
add r9, 4
mov rax, r8
cmp r9, 0x7c
jb 0x180135df0
movups xmm0, xmmword [rbp + 0x2c0]
mov eax, dword [rbp + 0x338]
lea rdx, [rsp + 0x40]
movups xmm1, xmmword [rbp + 0x2d0]
mov dword [rbp + 0x758], eax
lea rcx, [rbp + 0x630]
xor eax, eax
mov word [rbp + 0x75c], r10w
movups xmmword [rbp + 0x6e0], xmm0
mov dword [rsp + 0x6c], eax
movabs rax, 0xf437ff3808c16f2b
movups xmm0, xmmword [rbp + 0x2e0]
mov qword [rsp + 0x70], rax
movabs rax, 0x57b184a6e8603d76
movups xmmword [rbp + 0x6f0], xmm1
mov qword [rsp + 0x78], rax
movabs rax, 0xf5c508cf63b89306
movups xmm1, xmmword [rbp + 0x2f0]
mov dword [rsp + 0x40], 0x7906ee01
movups xmmword [rbp + 0x700], xmm0
mov dword [rsp + 0x44], 0x8d6ee346
movups xmm0, xmmword [rbp + 0x300]
mov dword [rsp + 0x48], 0x1651c306
movups xmmword [rbp + 0x710], xmm1
mov dword [rsp + 0x4c], 0x9d949bfc
movups xmm1, xmmword [rbp + 0x310]
mov dword [rsp + 0x50], 0x2c5b5cfc
movups xmmword [rbp + 0x720], xmm0
mov dword [rsp + 0x54], 0x3a3302f5
movups xmm0, xmmword [rbp + 0x320]
mov dword [rsp + 0x58], 0xee7d38b1
movups xmmword [rbp + 0x730], xmm1
mov dword [rsp + 0x5c], 0x59dc0afb
movsd xmm1, qword [rbp + 0x330]
movups xmmword [rbp + 0x740], xmm0
mov dword [rsp + 0x60], 0xa11a4413
movsd qword [rbp + 0x750], xmm1
mov dword [rsp + 0x64], 0x64855c1a
mov dword [rsp + 0x68], 0xd9cbe95e
mov qword [rbp - 0x80], rax
call fcn.180014ea0
mov r12, qword [rbp + 0x628]
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x760], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x770], xmm0
movsd xmm1, qword [rax + 0x20]
movsd qword [rbp + 0x780], xmm1
mov ecx, dword [rax + 0x28]
mov dword [rbp + 0x788], ecx
mov rcx, r14
movzx eax, word [rax + 0x2c]
mov word [rbp + 0x78c], ax
inc rcx
cmp word [r12 + rcx*2], 0
jne 0x180135fb3
lea rdx, [rbp + 0x760]
mov rax, r14
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x180135fd0
inc rcx
add rax, rcx
mov qword [rbp + 0x220], rax
lea rbx, [rax + rax]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
jne 0x18013600f
mov r12d, ebx
jmp 0x180136054
mov rdx, qword [rbp + 0x220]
lea rax, [rbp + 0x760]
mov r9, r12
mov qword [rsp + 0x20], rax
lea r8, str._ws_ws
mov rcx, rbx
call fcn.180001080
mov rax, qword [r15 + 0xf0]
mov rcx, rbx
call rax
xor r12d, r12d
mov rcx, rbx
cmp eax, 0xffffffff
setne r12b
call fcn.180146f60
xor ebx, ebx
test r12d, r12d
jne 0x180136175
movdqa xmm0, xmmword [0x180161d10]
xor eax, eax
movdqa xmm1, xmmword [0x1801620c0]
movabs r9, 0x4863e3ae9c06d2f
mov word [rsp + 0x65], ax
mov rdx, rbx
mov byte [rsp + 0x67], al
mov rcx, rdi
mov rax, rdi
mov dword [rsp + 0x60], 0x38c4ff38
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x64], 0x69
mov r8, rsi
movdqu xmmword [rsp + 0x50], xmm1
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rdi
nop word [rax + rax]
imul rax, rcx
add r8, r9
add rax, r8
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
xor al, byte [rsp + rdx + 0x40]
mov byte [rbp + rdx + 0x410], al
inc rdx
mov rax, rcx
cmp rdx, 0x25
jb 0x1801360c0
mov eax, dword [rbp + 0x430]
lea r8, [rbp + 0x298]
movups xmm0, xmmword [rbp + 0x410]
mov dword [rbp + 0x2b8], eax
mov edx, 0x100000
movups xmm1, xmmword [rbp + 0x420]
mov byte [rbp + 0x435], 0
lea rcx, [0x18017bd90]
movzx eax, word [rbp + 0x434]
movups xmmword [rbp + 0x298], xmm0
mov word [rbp + 0x2bc], ax
movups xmmword [rbp + 0x2a8], xmm1
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x18013624e
mov rdx, qword [rbp + 0x628]
lea rax, [rbp + 0x410]
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0xe8]
lea rax, [rbp + 0x668]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x6e0]
lea rax, [rbp + 0x438]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x230]
lea rax, [rbp + 0x570]
mov qword [rsp + 0x20], rax
call fcn.18013c180
test eax, eax
je 0x18013624e
lea r9, [rbp + 0x600]
mov qword [rsp + 0x20], r13
lea r8, [rbp + 0x230]
mov rcx, r15
lea rdx, [rbp + 0x348]
call fcn.18013c6c0
mov rcx, qword [rbp + 0x248]
mov ebx, eax
call fcn.180146f60
mov rcx, qword [rbp + 0x240]
call fcn.180146f60
mov rcx, qword [rbp + 0x230]
call fcn.180146f60
mov rcx, qword [rbp + 0x238]
call fcn.180146f60
mov rcx, qword [rbp + 0x250]
call fcn.180146f60
mov rcx, qword [rbp + 0x258]
call fcn.180146f60
mov rcx, qword [rbp + 0x260]
call fcn.180146f60
test ebx, ebx
jne 0x18013631d
movdqa xmm0, xmmword [0x180161d90]
lea rdx, [rbp + 0x230]
movdqa xmm1, xmmword [0x180160660]
lea rcx, [rbp + 0x410]
movabs rax, 0xa7ec59b91e41e411
mov qword [rbp + 0x250], rax
movabs rax, 0x9db3e3a20838a126
mov qword [rbp + 0x258], rax
movabs rax, 0x9dbe438aebd42f31
mov qword [rbp + 0x260], rax
movdqu xmmword [rbp + 0x230], xmm0
movdqu xmmword [rbp + 0x240], xmm1
call fcn.18000fa70
lea r8, [rbp + 0x28]
mov edx, 0x100000
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x28], xmm1
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp + 0x38], xmm0
mov ecx, dword [rax + 0x18]
mov dword [rbp + 0x40], ecx
movzx ecx, word [rax + 0x1c]
mov word [rbp + 0x44], cx
lea rcx, [0x18017bd90]
movzx eax, byte [rax + 0x1e]
mov byte [rbp + 0x46], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
xor r12d, r12d
mov dword [0x18017bd84], eax
mov r8d, eax
mov qword [rsp + 0x20], r12
lea rdx, [0x18017bd90]
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180136320
xor r12d, r12d
movdqa xmm0, xmmword [0x1801620b0]
lea rdx, [rbp + 0x230]
movdqa xmm1, xmmword [0x180161eb0]
lea rcx, [rbp + 0x410]
movabs rax, 0xa7ec59b91e41e411
mov qword [rbp + 0x250], rax
movabs rax, 0x9db3e3a20838a126
mov qword [rbp + 0x258], rax
movabs rax, 0x9dbe438aebd42f31
mov qword [rbp + 0x260], rax
movdqu xmmword [rbp + 0x230], xmm0
movdqu xmmword [rbp + 0x240], xmm1
call fcn.18000bce0
lea r8, [rbp + 0x28]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x28], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm0
movzx eax, byte [rax + 0x20]
mov byte [rbp + 0x48], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 0x418
mov dword [rbp + 0x220], 0x61766956
mov word [rbp + 0x318], ax
lea rdx, [rbp + 0x2c0]
xor eax, eax
mov dword [rbp + 0x224], 0x69646c
movsd xmm0, qword [rbp + 0x220]
lea rcx, [rbp + 0x368]
mov dword [rbp + 0x31a], eax
mov word [rbp + 0x31e], ax
movabs rax, 0x53a4a43623c65917
mov qword [rbp + 0x320], rax
movabs rax, 0x6adadc270a64e80c
mov qword [rbp + 0x328], rax
movabs rax, 0xd7a5ce30cb35674b
mov qword [rbp + 0x330], rax
movsd qword [rbp + 0x220], xmm0
mov byte [rbp + 0x228], 0
mov dword [rbp + 0x2c0], 0x9038ad2e
mov dword [rbp + 0x2c4], 0x563c0eb2
mov dword [rbp + 0x2c8], 0x920ae6e3
mov dword [rbp + 0x2cc], 0x79149d52
mov dword [rbp + 0x2d0], 0xe6712620
mov dword [rbp + 0x2d4], 0xdaa5fce3
mov dword [rbp + 0x2d8], 0x91390d82
mov dword [rbp + 0x2dc], 0x773b87bd
mov dword [rbp + 0x2e0], 0x651131e9
mov dword [rbp + 0x2e4], 0x84e5ff10
mov dword [rbp + 0x2e8], 0xd23a5b39
mov dword [rbp + 0x2ec], 0xc93a5bf6
mov dword [rbp + 0x2f0], 0x8b526d24
mov dword [rbp + 0x2f4], 0x1e700ee
mov dword [rbp + 0x2f8], 0x815b8058
mov dword [rbp + 0x2fc], 0x9f61b4c0
mov dword [rbp + 0x300], 0x1242384e
mov dword [rbp + 0x304], 0x708ed83d
mov dword [rbp + 0x308], 0x9ae5045a
mov dword [rbp + 0x30c], 0x690d847
mov dword [rbp + 0x310], 0xef82caa3
mov dword [rbp + 0x314], 0x66cb4600
call fcn.180015c70
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x178], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x188], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp + 0x198], xmm1
movups xmm0, xmmword [rax + 0x30]
movups xmmword [rbp + 0x1a8], xmm0
movups xmm1, xmmword [rax + 0x40]
movups xmmword [rbp + 0x1b8], xmm1
movsd xmm0, qword [rax + 0x50]
lea rdx, [rbp + 0x570]
movsd qword [rbp + 0x1c8], xmm0
lea rcx, [rbp + 0x6e0]
mov eax, dword [rax + 0x58]
mov dword [rbp + 0x1d0], eax
movabs rax, 0x53a4a43623c65917
mov qword [rbp + 0x5d8], rax
movabs rax, 0x6adadc270a64e80c
mov qword [rbp + 0x5e0], rax
movabs rax, 0xd7a5ce30cb35674b
mov qword [rbp + 0x5e8], rax
mov dword [rbp + 0x570], 0x9038ad2e
mov dword [rbp + 0x574], 0x563c0eb2
mov dword [rbp + 0x578], 0x920ae6e3
mov dword [rbp + 0x57c], 0x79149d52
mov dword [rbp + 0x580], 0xe6712620
mov dword [rbp + 0x584], 0xdaa5fce3
mov dword [rbp + 0x588], 0x91390d82
mov dword [rbp + 0x58c], 0x773b87bd
mov dword [rbp + 0x590], 0x651131e9
mov dword [rbp + 0x594], 0x84e5ff10
mov dword [rbp + 0x598], 0xd23a5b39
mov dword [rbp + 0x59c], 0xc93a5bf6
mov dword [rbp + 0x5a0], 0x8b526d24
mov dword [rbp + 0x5a4], 0x1e700ee
mov dword [rbp + 0x5a8], 0x815b8058
mov dword [rbp + 0x5ac], 0x9f61b4c0
mov dword [rbp + 0x5b0], 0x124a384e
mov dword [rbp + 0x5b4], 0x708bd837
mov dword [rbp + 0x5b8], 0x9afc045a
mov dword [rbp + 0x5bc], 0x6b7d80b
mov dword [rbp + 0x5c0], 0xefafca8b
mov dword [rbp + 0x5c4], 0x66c9461b
mov dword [rbp + 0x5c8], 0x6fae0471
mov dword [rbp + 0x5cc], 0xcd48ce43
mov dword [rbp + 0x5d0], 0x66a62306
mov dword [rbp + 0x5d4], 0x5cbf8d6b
call fcn.180014a60
mov dword [rbp + 0x438], 0xd2b96069
mov dword [rbp + 0x43c], 0xaa9040e8
mov dword [rbp + 0x440], 0x4a1c147c
movups xmm2, xmmword [rax]
mov dword [rbp + 0x444], 0xe5b71fe3
mov dword [rbp + 0x448], 0x91131a15
movups xmmword [rbp + 0x938], xmm2
mov dword [rbp + 0x44c], 0x276402a9
movups xmm0, xmmword [rax + 0x10]
mov dword [rbp + 0x450], 0xac5835fc
mov dword [rbp + 0x454], 0x48215a08
movups xmmword [rbp + 0x948], xmm0
mov dword [rbp + 0x458], 0xc604eb33
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp + 0x45c], 0x1b9a0b46
mov dword [rbp + 0x460], 0x42738520
movups xmmword [rbp + 0x958], xmm1
mov dword [rbp + 0x464], 0x4257243f
movups xmm0, xmmword [rax + 0x30]
mov dword [rbp + 0x468], 0x8e4e147d
mov dword [rbp + 0x46c], 0xc0138fa3
movups xmmword [rbp + 0x968], xmm0
mov dword [rbp + 0x470], 0x302139db
movups xmm1, xmmword [rax + 0x40]
mov dword [rbp + 0x474], 0xf1734dfd
mov dword [rbp + 0x478], 0x24270e02
movups xmmword [rbp + 0x978], xmm1
mov dword [rbp + 0x47c], 0x4d12910e
movups xmm0, xmmword [rax + 0x50]
mov dword [rbp + 0x480], 0x304e49ef
mov dword [rbp + 0x484], 0x16231d31
movups xmmword [rbp + 0x988], xmm0
mov dword [rbp + 0x488], 0x743ad3d5
movsd xmm1, qword [rax + 0x60]
movsd qword [rbp + 0x998], xmm1
movzx eax, word [rax + 0x68]
mov word [rbp + 0x9a0], ax
xor eax, eax
mov dword [rbp + 0x48c], 0xd224feb7
mov dword [rbp + 0x490], 0x127fc4c4
mov dword [rbp + 0x494], 0xe7c5ad1c
mov dword [rbp + 0x498], 0xb1e87157
mov dword [rbp + 0x49c], eax
lea rdx, [rbp + 0x438]
movabs rax, 0x587f9cbbfb40fa25
lea rcx, [rbp + 0x7a0]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xbf0eb0fd095c248e
mov qword [rbp + 0x4a8], rax
movabs rax, 0x5f99b71ee9676212
mov qword [rbp + 0x4b0], rax
call fcn.180015850
lea rdx, [rbp - 0x68]
mov dword [rbp - 0x68], 0xd2b96069
mov dword [rbp - 0x64], 0xaa9040e8
mov dword [rbp - 0x60], 0x4a1c147c
movups xmm2, xmmword [rax]
mov dword [rbp - 0x5c], 0xe5b71fe3
mov dword [rbp - 0x58], 0x91131a15
movups xmmword [rbp + 0x8a8], xmm2
mov dword [rbp - 0x54], 0x276402a9
movups xmm0, xmmword [rax + 0x10]
mov dword [rbp - 0x50], 0xac5835fc
mov dword [rbp - 0x4c], 0x48215a08
movups xmmword [rbp + 0x8b8], xmm0
mov dword [rbp - 0x48], 0xc604eb33
movups xmm1, xmmword [rax + 0x20]
mov dword [rbp - 0x44], 0x1b9a0b46
mov dword [rbp - 0x40], 0x42738520
movups xmmword [rbp + 0x8c8], xmm1
mov dword [rbp - 0x3c], 0x4257243f
movups xmm0, xmmword [rax + 0x30]
mov dword [rbp - 0x38], 0x8e4e147d
mov dword [rbp - 0x34], 0xc0138fa3
movups xmmword [rbp + 0x8d8], xmm0
mov dword [rbp - 0x30], 0x302139db
movups xmm1, xmmword [rax + 0x40]
mov dword [rbp - 0x2c], 0xf1734dfd
mov dword [rbp - 0x28], 0x24270e02
movups xmmword [rbp + 0x8e8], xmm1
mov dword [rbp - 0x24], 0x4d12910e
movups xmm0, xmmword [rax + 0x50]
mov dword [rbp - 0x20], 0x304e49ef
mov dword [rbp - 0x1c], 0x16231d31
movups xmmword [rbp + 0x8f8], xmm0
mov ecx, dword [rax + 0x60]
mov dword [rbp + 0x908], ecx
lea rcx, [rbp + 0x668]
movzx eax, word [rax + 0x64]
mov word [rbp + 0x90c], ax
mov eax, 0xfa8c
mov word [rbp + 8], ax
xor eax, eax
mov dword [rbp + 0xa], eax
mov word [rbp + 0xe], ax
movabs rax, 0x587f9cbbfb40fa25
mov qword [rbp + 0x10], rax
movabs rax, 0xbf0eb0fd095c248e
mov qword [rbp + 0x18], rax
movabs rax, 0x5f99b71ee9676212
mov qword [rbp + 0x20], rax
mov dword [rbp - 0x18], 0x7423d3d5
mov dword [rbp - 0x14], 0xd232feb7
mov dword [rbp - 0x10], 0x1254c493
mov dword [rbp - 0xc], 0xe7daad0f
mov dword [rbp - 8], 0xb1ab716a
mov dword [rbp - 4], 0xbcfc0f72
mov dword [rbp], 0x298f7720
mov dword [rbp + 4], 0x697a14a
call fcn.180014700
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x830], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x840], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp + 0x850], xmm1
movups xmm0, xmmword [rax + 0x30]
movups xmmword [rbp + 0x860], xmm0
movups xmm1, xmmword [rax + 0x40]
movups xmmword [rbp + 0x870], xmm1
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rbp + 0x880], xmm0
movups xmm1, xmmword [rax + 0x60]
movabs r12, 0xf5c508cf63b89306
mov dword [rbp + 0xe8], 0x7906ee01
movups xmmword [rbp + 0x890], xmm1
mov eax, dword [rax + 0x70]
movabs r11, 0xf437ff3808c16f2b
mov dword [rbp + 0x8a0], eax
mov r8, r12
mov eax, 0x25e6
mov dword [rbp + 0xec], 0x8d6ee346
mov word [rbp + 0x148], ax
mov rcx, r12
xor eax, eax
mov dword [rbp + 0xf0], 0x1651c306
mov dword [rbp + 0x14a], eax
xor ebx, ebx
mov word [rbp + 0x14e], ax
movabs rax, 0x57b184a6e8603d76
mov qword [rbp + 0x158], rax
mov r9, rax
mov eax, ebx
mov dword [rbp + 0xf4], 0x9d949bfc
mov dword [rbp + 0xf8], 0x2c5b5cfc
mov dword [rbp + 0xfc], 0x3a3302f5
mov dword [rbp + 0x100], 0xee7d38b1
mov dword [rbp + 0x104], 0x59d30afb
mov dword [rbp + 0x108], 0xa102441b
mov dword [rbp + 0x10c], 0x648c5c1f
mov dword [rbp + 0x110], 0xd9a2e942
mov dword [rbp + 0x114], 0x92a28607
mov dword [rbp + 0x118], 0x7f899d3d
mov dword [rbp + 0x11c], 0x455a1f52
mov dword [rbp + 0x120], 0xf0ac5e22
mov dword [rbp + 0x124], 0x61f66181
mov dword [rbp + 0x128], 0xc2fafa8b
mov dword [rbp + 0x12c], 0xc0d15550
mov dword [rbp + 0x130], 0x6989d9fa
mov dword [rbp + 0x134], 0xf4b0c2b3
mov dword [rbp + 0x138], 0x59623b90
mov dword [rbp + 0x13c], 0x1d8223bf
mov dword [rbp + 0x140], 0x72c574c4
mov dword [rbp + 0x144], 0xd531de40
mov qword [rbp + 0x150], r11
mov qword [rbp + 0x160], r12
nop
imul rcx, r8
lea rdx, [r9 + r11]
add rcx, rdx
lea r8, [rdx + r11]
mov r9, rcx
lea rdx, [r8 + r11]
shr r9, 0x20
shl rcx, 0x20
or r9, rcx
movzx ecx, r9w
xor cx, word [rbp + rax + 0xe8]
imul r9, r9
mov word [rbp + rax + 0x230], cx
add r9, r8
lea r8, [rdx + r11]
mov r10, r9
shl r9, 0x20
shr r10, 0x20
or r10, r9
movzx ecx, r10w
xor cx, word [rbp + rax + 0xea]
mov word [rbp + rax + 0x232], cx
imul r10, r10
add r10, rdx
lea rdx, [r8 + r11]
mov r9, r10
shl r10, 0x20
shr r9, 0x20
or r9, r10
movzx ecx, r9w
xor cx, word [rbp + rax + 0xec]
imul r9, r9
mov word [rbp + rax + 0x234], cx
add r9, r8
lea r8, [rdx + r11]
mov r10, r9
shl r9, 0x20
shr r10, 0x20
or r10, r9
movzx ecx, r10w
xor cx, word [rbp + rax + 0xee]
mov word [rbp + rax + 0x236], cx
imul r10, r10
add r10, rdx
mov r9, r10
shl r10, 0x20
shr r9, 0x20
or r9, r10
movzx ecx, r9w
xor cx, word [rbp + rax + 0xf0]
mov word [rbp + rax + 0x238], cx
imul r9, r9
add r9, r8
mov rdx, r9
shl r9, 0x20
shr rdx, 0x20
or rdx, r9
lea r9, [r8 + r11]
movzx ecx, dx
xor cx, word [rbp + rax + 0xf2]
mov word [rbp + rax + 0x23a], cx
imul rdx, rdx
add rdx, r9
mov r8, rdx
shl rdx, 0x20
shr r8, 0x20
or r8, rdx
movzx ecx, r8w
xor cx, word [rbp + rax + 0xf4]
mov word [rbp + rax + 0x23c], cx
add rax, 0xe
mov rcx, r8
cmp rax, 0x62
jb 0x180136b80
movups xmm0, xmmword [rbp + 0x230]
mov word [rbp + 0x292], bx
lea rdx, [rsp + 0x40]
movups xmm1, xmmword [rbp + 0x240]
mov eax, dword [rbp + 0x290]
lea rcx, [rbp + 0x760]
movups xmmword [rbp + 0x4c8], xmm0
mov dword [rbp + 0x528], eax
movabs rax, 0x57b184a6e8603d76
movups xmm0, xmmword [rbp + 0x250]
mov dword [rsp + 0x40], 0x7906ee01
movups xmmword [rbp + 0x4d8], xmm1
mov dword [rsp + 0x44], 0x8d6ee346
movups xmm1, xmmword [rbp + 0x260]
mov dword [rsp + 0x48], 0x1651c306
movups xmmword [rbp + 0x4e8], xmm0
mov dword [rsp + 0x4c], 0x9d949bfc
movups xmm0, xmmword [rbp + 0x270]
mov dword [rsp + 0x50], 0x2c5b5cfc
movups xmmword [rbp + 0x4f8], xmm1
mov dword [rsp + 0x54], 0x3a3302f5
movups xmm1, xmmword [rbp + 0x280]
mov dword [rsp + 0x58], 0xee7d38b1
movups xmmword [rbp + 0x508], xmm0
mov dword [rsp + 0x5c], 0x59d30afb
movups xmmword [rbp + 0x518], xmm1
mov dword [rsp + 0x60], 0xa102441b
mov dword [rsp + 0x64], 0x648c5c1f
mov dword [rsp + 0x68], 0xd9a2e942
mov dword [rsp + 0x6c], 0x865b
mov qword [rsp + 0x70], r11
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], r12
call fcn.1800154c0
mov r12, qword [rbp + 0x628]
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x630], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x640], xmm0
movups xmm1, xmmword [rax + 0x20]
mov rax, r14
movups xmmword [rbp + 0x650], xmm1
inc rax
cmp word [r12 + rax*2], bx
jne 0x180136de5
lea rcx, [rbp + 0x630]
inc r14
cmp word [rcx + r14*2], bx
jne 0x180136df6
inc rax
add r14, rax
lea rbx, [r14 + r14]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
jne 0x180136e31
xor r12d, r12d
mov r14d, r12d
jmp 0x180136e73
lea rax, [rbp + 0x630]
mov r9, r12
lea r8, str._ws_ws
mov qword [rsp + 0x20], rax
mov rdx, r14
mov rcx, rbx
call fcn.180001080
mov rax, qword [r15 + 0xf0]
mov rcx, rbx
call rax
xor r12d, r12d
mov rcx, rbx
cmp eax, 0xffffffff
mov r14d, r12d
setne r14b
call fcn.180146f60
test r14d, r14d
mov r14, qword [rsp + 0xad0]
jne 0x180136f84
movdqa xmm0, xmmword [0x180161d10]
xor eax, eax
movdqa xmm1, xmmword [0x1801620c0]
movabs rdx, 0x4863e3ae9c06d2f
mov word [rsp + 0x65], ax
mov rcx, r12
mov byte [rsp + 0x67], al
mov rax, rdi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x60], 0x38c4ff38
movdqu xmmword [rsp + 0x50], xmm1
mov byte [rsp + 0x64], 0x69
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rdi
nop word [rax + rax]
imul rax, rdi
add rsi, rdx
add rax, rsi
mov rdi, rax
shl rax, 0x20
shr rdi, 0x20
or rdi, rax
movzx eax, dil
xor al, byte [rsp + rcx + 0x40]
mov byte [rbp + rcx + 0x28], al
inc rcx
mov rax, rdi
cmp rcx, 0x25
jb 0x180136ee0
mov eax, dword [rbp + 0x48]
lea r8, [rbp + 0x298]
movups xmm0, xmmword [rbp + 0x28]
mov dword [rbp + 0x2b8], eax
mov edx, 0x100000
movups xmm1, xmmword [rbp + 0x38]
mov byte [rbp + 0x4d], 0
lea rcx, [0x18017bd90]
movzx eax, word [rbp + 0x4c]
movups xmmword [rbp + 0x298], xmm0
mov word [rbp + 0x2bc], ax
movups xmmword [rbp + 0x2a8], xmm1
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x18013705d
mov rdx, qword [rbp + 0x628]
lea rax, [rbp + 0x220]
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x830]
lea rax, [rbp + 0x178]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x4c8]
lea rax, [rbp + 0x938]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x230]
lea rax, [rbp + 0x8a8]
mov qword [rsp + 0x20], rax
call fcn.18013c180
test eax, eax
je 0x18013705d
lea r9, [rbp + 0x600]
mov qword [rsp + 0x20], r13
lea r8, [rbp + 0x230]
mov rcx, r15
lea rdx, [rbp + 0x348]
call fcn.18013c6c0
mov rcx, qword [rbp + 0x248]
mov ebx, eax
call fcn.180146f60
mov rcx, qword [rbp + 0x240]
call fcn.180146f60
mov rcx, qword [rbp + 0x230]
call fcn.180146f60
mov rcx, qword [rbp + 0x238]
call fcn.180146f60
mov rcx, qword [rbp + 0x250]
call fcn.180146f60
mov rcx, qword [rbp + 0x258]
call fcn.180146f60
mov rcx, qword [rbp + 0x260]
call fcn.180146f60
test ebx, ebx
jne 0x180137127
movdqa xmm0, xmmword [0x180160df0]
lea rdx, [rbp + 0x230]
movdqa xmm1, xmmword [0x180160670]
lea rcx, [rbp + 0x410]
movabs rax, 0xf5d06b73146ce1d
mov qword [rbp + 0x250], rax
movabs rax, 0x3166d599c42f3118
mov qword [rbp + 0x258], rax
movabs rax, 0xf1084821f64594e9
mov qword [rbp + 0x260], rax
movdqu xmmword [rbp + 0x230], xmm0
movdqu xmmword [rbp + 0x240], xmm1
call fcn.18000fa70
lea r8, [rbp + 0x28]
mov edx, 0x100000
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x28], xmm1
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp + 0x38], xmm0
mov ecx, dword [rax + 0x18]
mov dword [rbp + 0x40], ecx
movzx ecx, word [rax + 0x1c]
mov word [rbp + 0x44], cx
lea rcx, [0x18017bd90]
movzx eax, byte [rax + 0x1e]
mov byte [rbp + 0x46], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
movdqa xmm0, xmmword [0x180160ff0]
lea rdx, [rsp + 0x40]
movdqa xmm1, xmmword [0x1801617b0]
lea rcx, [rbp + 0x410]
xor eax, eax
mov byte [rsp + 0x60], 0x17
movabs rbx, 0xfb15fb380cc1731b
mov dword [rsp + 0x61], eax
movabs rdi, 0x989f58b5d4fa3bbc
mov word [rsp + 0x65], ax
movabs rsi, 0x6dc8d4bcf0e3954a
mov byte [rsp + 0x67], al
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x68], rbx
movdqu xmmword [rsp + 0x50], xmm1
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rsi
call fcn.18000cdb0
lea r8, [rbp + 0x28]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x28], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm0
movzx eax, word [rax + 0x20]
mov word [rbp + 0x48], ax
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r9, r13
lea r8, [rbp + 0x600]
lea rdx, [rbp + 0x348]
mov rcx, r15
call fcn.180137ac0
test eax, eax
jne 0x1801372b0
movdqa xmm0, xmmword [0x180160d00]
lea rdx, [rsp + 0x40]
movdqa xmm1, xmmword [0x180160c20]
lea rcx, [rbp + 0x410]
xor eax, eax
mov word [rsp + 0x60], 0xeb39
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x63], eax
movdqu xmmword [rsp + 0x50], xmm1
mov byte [rsp + 0x67], al
mov byte [rsp + 0x62], 0x6b
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rsi
call fcn.180008f90
lea r8, [rbp + 0x28]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x28], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm0
mov eax, dword [rax + 0x20]
mov dword [rbp + 0x48], eax
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea r8, [rbp + 0x600]
mov rcx, r15
lea rdx, [rbp + 0x348]
call fcn.1801464d0
mov rsi, qword [rsp + 0xb08]
test eax, eax
jne 0x180137399
movdqa xmm0, xmmword [0x180160fb0]
lea rdx, [rsp + 0x40]
movdqa xmm1, xmmword [0x180161c20]
lea rcx, [rbp + 0x410]
xor eax, eax
mov byte [rsp + 0x60], 0x48
mov dword [rsp + 0x61], eax
mov word [rsp + 0x65], ax
mov byte [rsp + 0x67], al
movabs rax, 0xa8ce5db91a41f821
mov qword [rsp + 0x68], rax
movabs rax, 0x99bd04a33aa037c8
mov qword [rsp + 0x70], rax
movabs rax, 0x4e0effb15aa2da28
mov qword [rsp + 0x78], rax
movdqu xmmword [rsp + 0x40], xmm0
movdqu xmmword [rsp + 0x50], xmm1
call fcn.18000cdb0
lea r8, [rbp + 0x28]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x28], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm0
movzx eax, word [rax + 0x20]
mov word [rbp + 0x48], ax
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rbp + 0x348]
mov rcx, qword [rcx]
call fcn.180146f60
mov rcx, qword [rbp + 0x350]
mov rcx, qword [rcx]
call fcn.180146f60
mov rcx, qword [rbp + 0x358]
mov rcx, qword [rcx]
call fcn.180146f60
mov rcx, qword [rbp + 0x360]
mov rcx, qword [rcx]
call fcn.180146f60
mov rcx, qword [rbp + 0x348]
call fcn.180146f60
mov rcx, qword [rbp + 0x350]
call fcn.180146f60
mov rcx, qword [rbp + 0x358]
call fcn.180146f60
mov rcx, qword [rbp + 0x360]
call fcn.180146f60
mov rcx, qword [rbp + 0x618]
call fcn.180146f60
mov rcx, qword [rbp + 0x610]
call fcn.180146f60
mov rcx, qword [rbp + 0x600]
call fcn.180146f60
mov rcx, qword [rbp + 0x608]
call fcn.180146f60
mov r12, qword [rsp + 0xad8]
mov eax, 1
jmp 0x18013749f
call fcn.180146f60
mov rcx, qword [rbp + 0x350]
call fcn.180146f60
mov rcx, qword [rbp + 0x358]
call fcn.180146f60
mov rcx, qword [rbp + 0x360]
call fcn.180146f60
mov rcx, qword [rbp + 0x618]
call fcn.180146f60
mov rcx, qword [rbp + 0x610]
call fcn.180146f60
mov rcx, qword [rbp + 0x600]
call fcn.180146f60
mov rcx, qword [rbp + 0x608]
call fcn.180146f60
xor eax, eax
mov rbx, qword [rsp + 0xb00]
mov rdi, qword [rsp + 0xb10]
add rsp, 0xae0
pop r15
pop r13
pop rbp
ret