Function at 0x180044d30
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
mov rax, qword [0x18015f040]
xor rax, rsp
mov qword [rbp + 0x4e0], rax
xor edx, edx
call fcn.18005c2c0
movabs rax, 0xd7eaf874ebb2d449
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0xb0]
mov rax, qword [rsp + 0x30]
movabs rbx, 0x72571744034c42a6
mov qword [rbp + 0xb0], rax
movabs rdi, 0xf78d961d8cd5bb25
movabs rax, 0x68a16d4dacc628c1
movabs rsi, 0x1810028d8b551b2
mov qword [rsp + 0x30], rax
movabs r12, 0x7c6ca73f048d6687
mov rax, qword [rsp + 0x30]
movabs r14, 0x9a998e928d225c5c
mov qword [rbp + 0xb8], rax
movabs r15, 0xeb226a599e4a6509
movabs rax, 0x605cb5e6df90fe9
mov r8d, edx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc0], rax
movabs rax, 0xf5faaefce24b283d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc8], rax
movabs rax, 0xeb460f2dfb261564
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd8], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x2a0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x2a8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x2b0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2b8], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2c0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0xb0]
xorps xmm2, xmmword [rbp + 0x2a0]
movdqa xmm0, xmmword [rbp + 0xc0]
movdqa xmm1, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x2b0]
mov qword [rbp + 0x2c8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0xb0], xmm2
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xd0], xmm1
test al, al
je 0x180044f1b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], 0
jne 0x180044f10
xor r13d, r13d
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0xb0]
lea rcx, [r13 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005c9c0
test al, al
je 0x180045da5
xor edx, edx
call fcn.18005c2c0
movabs rax, 0x84adef6fe3b8de48
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0xe0]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0xe0], rax
movabs rax, 0x6fe82045bdc122cb
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xe8], rax
movabs rax, 0x1d16ce5365e412ee
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf0], rax
movabs rax, 0xf7f6edb2e34d3528
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf8], rax
movabs rax, 0xeb220e3cea2f0979
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x100], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x108], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x2d0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x2d8], rax
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x2d0]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x2e0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2e8], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2f0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
xorps xmm2, xmmword [rbp + 0xe0]
movdqa xmm0, xmmword [rbp + 0xf0]
movdqa xmm1, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x2e0]
mov qword [rbp + 0x2f8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0x100], xmm1
movdqa xmmword [rbp + 0xe0], xmm2
movdqa xmmword [rbp + 0xf0], xmm0
test al, al
je 0x1800450bb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800450b0
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0xe0]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005c590
test al, al
je 0x180045da5
xor edx, edx
call fcn.18005c2c0
movabs rax, 0x84f4e53de4a1da48
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x110]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x110], rax
movabs rax, 0x75e86e41f8d834c6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x118], rax
movabs rax, 0x1518c6456de107ee
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x120], rax
movabs rax, 0xf6e9e3fdee023233
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x128], rax
movabs rax, 0xeb226a59fa2f116c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x130], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x138], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x300], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x308], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x310], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x318], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x320], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x110]
xorps xmm2, xmmword [rbp + 0x300]
movdqa xmm0, xmmword [rbp + 0x120]
movdqa xmm1, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x310]
mov qword [rbp + 0x328], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x320]
movdqa xmmword [rbp + 0x110], xmm2
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
test al, al
je 0x18004525b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180045250
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x110]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18004d710
test al, al
je 0x180045da5
xor edx, edx
call fcn.18005c2c0
movabs rax, 0x94ecf06fe9a1d54c
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x140]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x140], rax
movabs rax, 0x68f56946b19522d7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x148], rax
movabs rax, 0x1305d35e7ee40ae6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x150], rax
movabs rax, 0xfff5feffe2417c32
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x158], rax
movabs rax, 0xeb226a599e2e007d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x160], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x330], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x338], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x340], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x348], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x350], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x140]
xorps xmm2, xmmword [rbp + 0x330]
movdqa xmm0, xmmword [rbp + 0x150]
movdqa xmm1, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x340]
mov qword [rbp + 0x358], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x140], xmm2
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmmword [rbp + 0x160], xmm1
test al, al
je 0x1800453fb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800453f0
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x140]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xd1f91bd1cc12f9ab
lea rcx, [rbp + 0x1a0]
mov qword [rsp + 0x30], rax
movabs r15, 0xc09c08fba61418b2
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x27ef7af5505cdf38
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x566a2cd653feb6ad
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1b0], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xd18b1bb4cc7bf9df
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x240], rax
movabs rax, 0x27837a915072df08
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x248], rax
movabs rax, 0x566a2cd653feb6c1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x250], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x1a0]
xorps xmm0, xmmword [rbp + 0x240]
mov qword [rbp + 0x258], rax
movdqa xmm1, xmmword [rbp + 0x250]
xorps xmm1, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x1b0], xmm1
movdqa xmmword [rbp + 0x1a0], xmm0
call fcn.18005daf0
mov r8, rax
test rax, rax
je 0x180045da5
movabs rax, 0xbee774f7a214bae0
lea rdx, [rbp + 0x1c0]
mov qword [rsp + 0x30], rax
movabs rax, 0x66da3ad13701927a
mov rcx, qword [rsp + 0x30]
mov qword [rbp + 0x1c0], rcx
mov qword [rsp + 0x30], rax
movabs rax, 0x3a056f8011bbf799
mov rcx, qword [rsp + 0x30]
mov qword [rbp + 0x1c8], rcx
movabs rcx, 0x985991ad097960ec
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x84de4dabe6546add
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1d8], rax
movabs rax, 0xc51feff054239b49
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1e0], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xd18b1bb4cc7bf9df
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x360], rax
movabs rax, 0x27837a915072df08
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x368], rax
movabs rax, 0x566a2cd653feb6c1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x370], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x378], rax
movabs rax, 0xc51feff05423c113
movdqa xmm1, xmmword [rbp + 0x370]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rcx
mov rcx, r8
mov qword [rbp + 0x380], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x360]
xorps xmm1, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x388], rax
movdqa xmm0, xmmword [rbp + 0x380]
xorps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmmword [rbp + 0x1d0], xmm1
call fcn.18005ddd0
mov qword [0x180161898], rax
test rax, rax
je 0x180045da5
xor edx, edx
call fcn.18005c2c0
movabs rax, 0x83e4f874acbedf56
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x70]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x70], rax
movabs rax, 0x68f56152b1d930db
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
movabs rax, 0x101cca5067ad08e8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x80], rax
movabs rax, 0x9a998e92e9472839
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x260], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x268], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x270], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp + 0x260]
movdqa xmm0, xmmword [rbp - 0x80]
mov qword [rbp + 0x278], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmmword [rbp - 0x80], xmm0
test al, al
je 0x1800457bb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800457b0
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rsp + 0x70]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x1801615f0]
test rcx, rcx
jne 0x18004580c
lea rdx, [0x1801615f0]
lea rcx, [0x18005c180]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x1801615f0]
test rcx, rcx
je 0x1800457e1
lea r8, [0x18004b210]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x180161708], rax
test rax, rax
je 0x180045da5
xor edx, edx
call fcn.18005c2c0
movabs rax, 0x8efeb669f9a5d54c
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x170]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x170], rax
movabs rax, 0x68ef6908b5d025c1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x178], rax
movabs rax, 0x80ddd5668ec0ff3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x180], rax
movabs rax, 0xeaf4e1f1ad4c3335
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x188], rax
movabs rax, 0xeb226a3dfb3e0065
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x190], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x198], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x390], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x398], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3a0], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3a8], rax
movabs rax, 0xeb226a599e4a6509
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3b0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x170]
xorps xmm2, xmmword [rbp + 0x390]
movdqa xmm0, xmmword [rbp + 0x180]
movdqa xmm1, xmmword [rbp + 0x190]
xorps xmm0, xmmword [rbp + 0x3a0]
mov qword [rbp + 0x3b8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x170], xmm2
movdqa xmmword [rbp + 0x180], xmm0
movdqa xmmword [rbp + 0x190], xmm1
test al, al
je 0x1800459ab
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800459a0
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x170]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x1801614d8]
mov rdx, qword [0x1801614d0]
mov rcx, qword [0x1801615f0]
call fcn.18005ad40
xor ecx, ecx
call fcn.180050b50
cmp byte [0x1801614e0], r13b
jne 0x180045a05
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1801614e0], r13b
je 0x1800459f1
xor edx, edx
call fcn.18005c2c0
movabs rax, 0x85e8e478e8bbde57
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x40]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp - 0x40], rax
movabs rax, 0x65ef6543bbd43392
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x38], rax
movabs rax, 0x100dce4b6de30fa7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x30], rax
movabs rax, 0xbaf7e1fbf9432635
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x28], rax
movabs rax, 0x8e560f35ee270a6a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x20], rax
movabs rax, 0x72571744034c42c2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x3c0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x3c8], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3d0], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3d8], rax
movabs rax, 0xeb226a599e4a6509
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3e0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp - 0x40]
xorps xmm2, xmmword [rbp + 0x3c0]
movdqa xmm0, xmmword [rbp - 0x30]
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm0, xmmword [rbp + 0x3d0]
mov qword [rbp + 0x3e8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp - 0x40], xmm2
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmmword [rbp - 0x20], xmm1
test al, al
je 0x180045b5e
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180045b53
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp - 0x40]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180055310
test al, al
jne 0x180045dd7
mov dl, 3
call fcn.18005c2c0
movabs rbx, 0xa5ab7fd1a01298b9
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x70]
mov rax, qword [rsp + 0x30]
movabs rdi, 0xd18b1bb4cc7bf9df
mov qword [rbp - 0x70], rax
movabs rsi, 0x27837a915072df08
movabs rax, 0x46ea0ef83e1bff67
movabs r14, 0x566a2cd653feb6c1
mov qword [rsp + 0x30], rax
mov r8d, edx
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x68], rax
movabs rax, 0x37024ff63684dfad
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x60], rax
movabs rax, 0xc09c08fba6146bdf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x280], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x288], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x290], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0x280]
mov qword [rbp + 0x298], rax
movq rax, xmm1
movdqa xmm0, xmmword [rbp + 0x290]
xorps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmmword [rbp - 0x70], xmm1
test al, al
je 0x180045c8e
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180045c83
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp - 0x70]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dl, 3
call fcn.18005c2c0
mov qword [rsp + 0x30], rbx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov r8d, ecx
movabs rax, 0x7f30fe53501ff67
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x561940b7268ddfb7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x220], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x228], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x230], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x220]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x238], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x230]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x180045d8b
nop
inc rdx
mov r8, rdx
cmp byte [rdx], r13b
jne 0x180045d80
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, ecx
lea rdx, [rsp + 0x50]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0x4e0]
xor rcx, rsp
call fcn.1800c16d0
lea r11, [rsp + 0x5f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.18005c2c0
movabs rax, 0x84e8e468f8b4de43
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x10]
mov rax, qword [rsp + 0x30]
movabs r15, 0xeb226a599e4a6509
mov qword [rbp - 0x10], rax
mov r8d, edx
movabs rax, 0x6de0695cb1db3892
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 8], rax
movabs rax, 0x5c02c85670ec1cee
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp], rax
movabs rax, 0xffedebfefd4f333f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 8], rax
movabs rax, 0xeb226a599e4a656d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x3f0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x3f8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x400], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x408], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x410], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp - 0x10]
xorps xmm2, xmmword [rbp + 0x3f0]
movdqa xmm0, xmmword [rbp]
movdqa xmm1, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x400]
mov qword [rbp + 0x418], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x410]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp], xmm0
movdqa xmmword [rbp + 0x10], xmm1
test al, al
je 0x180045f2b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180045f20
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp - 0x10]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x93a3e273e9bcd746
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x1f0]
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x50], rax
movabs rax, 0x1810028d8b53dde
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp - 0x50]
mov qword [rsp + 0x48], rax
movabs rax, 0xf7e896758cb6bb56
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x50], xmm0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x1e20077d8d451df
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x7c02a75a04e466eb
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x200], rax
movabs rax, 0x9ae18ee68d0c5c28
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x208], rax
movabs rax, 0xeb226a599e4a657d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x210], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x218], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x420], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x428], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x430], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x438], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x440], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x1f0]
xorps xmm0, xmmword [rbp + 0x420]
movdqa xmm1, xmmword [rbp + 0x200]
xorps xmm1, xmmword [rbp + 0x430]
movdqa xmmword [rbp + 0x1f0], xmm0
movdqa xmm0, xmmword [rbp + 0x210]
mov qword [rbp + 0x448], rax
xorps xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmmword [rbp + 0x200], xmm1
call fcn.180052610
test al, al
je 0x180045da5
xor edx, edx
call fcn.18005c2c0
movabs rax, 0x84adf770e9bdd856
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x20]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x20], rax
movabs rax, 0x6fe82045bdc122cb
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x28], rax
movabs rax, 0x1d16ce5365e412ee
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
movabs rax, 0xf7f6edb2e34d3528
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xeb220e3cea2f0979
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x450], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x458], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x460], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x468], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x470], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x20]
xorps xmm2, xmmword [rbp + 0x450]
movdqa xmm0, xmmword [rbp + 0x30]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x460]
mov qword [rbp + 0x478], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x20], xmm2
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x40], xmm1
test al, al
je 0x18004624b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180046240
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x20]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xf7fb96738cbabb46
xor edx, edx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
movabs rax, 0x1af005bd8c751d3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
movabs rax, 0x7c6ca74b04f566f3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
call fcn.18005c2c0
movabs rax, 0xd7fee47cfabbd446
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x50]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x50], rax
movabs rax, 0x62a1644da8d824d6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
movabs rax, 0x1809d35a68fd0be8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x60], rax
movabs rax, 0xeeecfee6f84d7c70
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x68], rax
movabs rax, 0x8a540436fd684533
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x7275633c776231d4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x480], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x488], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x490], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rbp + 0x498], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4a0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x50]
movdqa xmm0, xmmword [rbp + 0x60]
movdqa xmm1, xmmword [rbp + 0x70]
xorps xmm2, xmmword [rbp + 0x480]
xorps xmm0, xmmword [rbp + 0x490]
mov qword [rbp + 0x4a8], rax
xorps xmm1, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x70], xmm1
movdqa xmmword [rbp + 0x50], xmm2
movdqa xmmword [rbp + 0x60], xmm0
movq rax, xmm2
test al, al
je 0x18004642b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180046420
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x50]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.180047d00
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x1801615f8], rax
mov r12, rax
call fcn.180047d00
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x180161610], rax
mov r15, rax
call fcn.180047d00
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x180161608], rax
mov r14, rax
call fcn.180047d00
movabs rdx, 0xb231a1bea995f83b
mov qword [0x180161618], rax
mov rsi, rax
call fcn.180047d00
movabs rdx, 0x5f0720d54e5f164
mov qword [0x180161600], rax
mov rdi, rax
call fcn.180047d00
movabs rdx, 0x483047d5ed936395
mov qword [0x180161620], rax
mov rbx, rax
call fcn.180047d00
test rax, rax
mov qword [0x180161628], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x180045da5
xor edx, edx
call fcn.18005c2c0
movabs rax, 0xd7fee47cfabbd446
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x30], rax
movabs rcx, 0x72571744034c42a6
mov rax, qword [rsp + 0x30]
movabs rbx, 0xf78d961d8cd5bb25
mov qword [rbp + 0x80], rax
movabs rdi, 0x1810028d8b551b2
movabs rax, 0x68a16d4dacc628c1
movabs r14, 0x7c6ca73f048d6687
mov qword [rsp + 0x30], rax
movabs rsi, 0x9a998e928d225c5c
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x88], rax
movabs rax, 0x605cb5e6df90fe9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
movabs rax, 0xf5faaefce24b283d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x98], rax
movabs rax, 0xeb460f2dfb261564
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rdi
mov qword [rbp + 0x4b0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x4b8], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4c0], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4c8], rax
movabs rax, 0xeb226a599e4a6509
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4d0], rax
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x80]
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x80]
xorps xmm2, xmmword [rbp + 0x4b0]
movdqa xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x4c0]
mov qword [rbp + 0x4d8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x4d0]
movdqa xmmword [rbp + 0x80], xmm2
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0xa0], xmm1
test al, al
je 0x1800466eb
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800466e0
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rbp + 0x80]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180048e90
test al, al
je 0x180045da5
xor edx, edx
call fcn.18005c2c0
movabs rax, 0x99e4b66ee7bad44d
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x60fb6944b9dc25db
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x1103c41f6ae20ff3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x9a99eaf7f947302c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rdi
mov qword [rbp + 0x220], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x228], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x230], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x220]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x238], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x230]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x18004680b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180046800
xor r9d, r9d
mov qword [rsp + 0x20], r13
sub r8d, edx
lea rdx, [rsp + 0x50]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x180045da7