Function at 0x1800538a0
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x328]
sub rsp, 0x400
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18017b040]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
movabs rax, 0xad98c48e52c44d5e
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x40], rax
movabs rbx, 0x8bf433a1c6f4586a
mov rax, qword [rsp + 0x40]
movabs r14, 0xadf0c4fe52b74d3f
mov qword [rsp + 0x50], rax
movabs rsi, 0x792321f7c1f9c8c8
movabs rax, 0x7942219ec181c8b1
movabs r15, 0x974cd138426754f1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x972bd157420b54df
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm6, xmmword [rsp + 0x50]
xorps xmm6, xmmword [rbp + 0x40]
mov qword [rbp + 0x58], rax
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x50], xmm6
movdqa xmmword [rsp + 0x60], xmm0
call fcn.1800532f0
test al, al
je 0x180054967
cmp word [rbp + 0xd0], 0
lea rax, [rbp + 0xd0]
je 0x1800539ea
nop word [rax + rax]
add rax, 2
cmp word [rax], 0
jne 0x1800539e0
movq rcx, xmm6
test cx, cx
je 0x180053a10
lea rdx, [rsp + 0x50]
sub rdx, rax
nop dword [rax]
mov word [rax], cx
add rax, 2
movzx ecx, word [rax + rdx]
test cx, cx
jne 0x180053a00
xor edi, edi
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov r8d, 1
mov dword [rsp + 0x20], 2
mov word [rax], di
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x18017bed8], rax
cmp rax, 0xffffffffffffffff
je 0x180054967
mov r12d, 3
mov qword [rsp + 0x20], rdi
mov r8d, r12d
lea rdx, [0x180162f48]
xor r9d, r9d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180076590
movabs rax, 0x8d97aa9735d02253
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r13, 0xf5fa90cb6c7b017c
mov qword [rsp + 0x50], rax
mov r8d, edx
movabs rax, 0x10034c92b58ab1bb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xed25bd592b133d9f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xe49713cfa99d2c0b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x47895cd662594dde
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x47ed39a207353db3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180053bcb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053bc0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180076c40
test al, al
je 0x180054967
xor edx, edx
call fcn.180076590
movabs rax, 0xded0bd8c3dda2852
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x174a019aa48dbbb1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xf636b854230e2098
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xe69b5081a89b311e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x47ed5dc7735051c3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x47ed39a207353db3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180053d3b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053d30
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180076860
test al, al
je 0x180054967
xor edx, edx
call fcn.180076590
movabs rax, 0xde89b7de3ac32c52
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xd4a4f9ee194adbc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xfe38b0422b0b3598
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xe7845ecea5d43605
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x47ed39a2635049d6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x47ed39a207353db3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180053eab
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053ea0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180061380
test al, al
je 0x180054967
xor edx, edx
call fcn.180076590
movabs rax, 0xce91a28c37c32356
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x10574899a8d9bbad
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xf825a559380e3890
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xee9843cca9977804
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x47ed39a2075158c7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x47ed39a207353db3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005401b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054010
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rcx, 0x65f1b93830ed1288
movabs rax, 0xd3813f02200c6a75
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x534ca7ea2d300d36
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xbd4f4ba1d86e9abf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0xd3f33f6720656a01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
movabs rax, 0x5320a78e2d1e0d06
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0xbd4f4ba1d86e9ad3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x58], rax
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmmword [rsp + 0x50], xmm0
call fcn.1800778b0
mov r8, rax
test rax, rax
je 0x180054967
movabs rax, 0xbc9f50244e0a293e
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
movabs rax, 0x1279e7ce4a6d4074
mov rcx, qword [rsp + 0x40]
mov qword [rbp - 0x80], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0xd12008f79a2bdb8b
mov rcx, qword [rsp + 0x40]
mov qword [rbp - 0x78], rcx
movabs rcx, 0xcff81662ff124d8a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0x21b3fc6870ad60e7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x6defb40b749dabff
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0xd3f33f6720656a01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
movabs rax, 0x5320a78e2d1e0d06
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0xbd4f4ba1d86e9ad3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
movabs rax, 0x65f1b93830ed1288
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
movabs rax, 0x6defb40b749df1a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], rcx
mov rcx, r8
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp + 0xb8], rax
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180077b80
mov qword [0x18017dc50], rax
test rax, rax
je 0x180054967
xor edx, edx
call fcn.180076590
movabs rax, 0xd999aa9772dc294c
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x40], rax
movabs rax, 0x1057408da895a9a1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0xfb3cbc5721473a9e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0x8bf433a1a2912c0f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x18005437f
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054374
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017d830]
test rcx, rcx
jne 0x1800543db
nop word [rax + rax]
lea rdx, [0x18017d830]
lea rcx, [0x180076510]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x18017d830]
test rcx, rcx
je 0x1800543b0
lea r8, [0x18005eb20]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18017d938], rax
test rax, rax
je 0x180054967
xor edx, edx
call fcn.180076590
movabs rax, 0xd483e48a27c72356
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x104d48d7ac9cbcbb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xe32dab512e063d85
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xfb995cc2e69a3703
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x47ed39c6624158df
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x47ed39a207353db3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005453f
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054534
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x18017d820]
mov rdx, qword [0x18017d818]
mov rcx, qword [0x18017d830]
call fcn.180074e30
xor ecx, ecx
call fcn.180065f30
cmp byte [0x18017d828], dil
jne 0x1800545a4
nop word [rax + rax]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x18017d828], dil
je 0x180054590
xor edx, edx
call fcn.180076590
movabs rax, 0xdf95b69b36d9284d
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x1d4d449ca298aae8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xfb2db84c2b093dd1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xab9a5cc8b2952203
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x22995cce775852d0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xf5fa90cb6c7b0118
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x47ed39a207353db3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x1800546f0
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800546e5
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18006dd00
test al, al
jne 0x18005499e
movzx edx, r12b
call fcn.180076590
movabs rax, 0x15cbb449afad6271
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x40], rax
movabs rax, 0x4c77594cda249d23
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0x8239a52a37e0b9d5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0xd7f92873b449808b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
movabs rax, 0x61ebd02cc3c40317
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x2d1e2d25b44dbd4c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xe351c60a529ad0b9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xd7f92873b449f3e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x18005482b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054820
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movzx edx, r12b
call fcn.180076590
movabs rcx, 0x65f1b93830ed1288
lea rdx, [rbp + 0x40]
movabs rax, 0xa7d35b024c0c0b67
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
movabs rax, 0x7350d2fa486d2d69
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0xbd3c27c0ad1df3a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
movabs rax, 0xd3f33f6720656a01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x5320a78e2d1e0d06
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xbd4f4ba1d86e9ad3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x18005494b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054940
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.1800db5c0
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.180076590
movabs rax, 0xde95b68b26d62859
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x15424883a897a1e8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xb722be5136062e98
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xee8056cdb6993709
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x47ed39a207353dd7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x47ed39a207353db3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180054ae0
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054ad5
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xc9deb09037de215c
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x20]
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x792321f7c1f9a4a4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.1800564b0
movabs rax, 0x83c2a1903bd0235a
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp]
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x792321f7c195a4ac
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.1800564b0
movabs rax, 0xd483a59337df2e4c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x20]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x154f45d9ac9cbcbb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x58], rax
xorps xmm1, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
call fcn.1800564b0
xorps xmm0, xmm0
mov ecx, 0x60
movdqu xmmword [rbp + 0x40], xmm0
call fcn.180052d10
mov r14, rax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rax
lea r13, [rbp - 0x20]
mov rbx, rax
sub r13, rax
lea rcx, [rax + 0x60]
mov edx, 0x16
lea rax, [rbp - 8]
mov qword [rbp + 0x50], rcx
sub rax, rbx
movabs rcx, 0x7fffffffffffffff
mov qword [rsp + 0x40], rax
nop dword [rax + rax]
xorps xmm0, xmm0
lea r15, [rbx + r13]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
cmp qword [rax + rbx], 0xf
mov rsi, qword [rax + rbx - 8]
jbe 0x180054cf1
mov r15, qword [r15]
cmp rsi, rcx
ja 0x1800560ed
cmp rsi, 0xf
ja 0x180054d15
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbx], xmm0
jmp 0x180054d58
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x180054d26
mov rdi, rcx
jmp 0x180054d2e
cmp rdi, 0x16
cmovb rdi, rdx
lea rcx, [rdi + 1]
call fcn.180052d10
lea r8, [rsi + 1]
mov qword [rbx], rax
mov rdx, r15
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov qword [rbx + 0x18], rdi
call fcn.180100590
xor edi, edi
mov edx, 0x16
add rbx, 0x20
lea rcx, [rbp + 0x40]
lea rax, [rbx + r13]
cmp rax, rcx
mov rax, qword [rsp + 0x40]
movabs rcx, 0x7fffffffffffffff
jne 0x180054cd0
mov rdx, rbx
mov rcx, rbx
call fcn.180056600
xor r13d, r13d
mov qword [rbp + 0x48], rbx
lea rdi, [rbp + 0x40]
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rdi - 8]
lea rdi, [rdi - 0x20]
dec r12
cmp rdx, 0xf
jbe 0x180054de1
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x180054ddc
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800560e7
mov rcx, r8
call fcn.1800db75c
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r13b
test r12, r12
jne 0x180054da0
cmp r14, rbx
movabs rdi, 0x792321f7c1f9c8c8
movabs rbx, 0x8bf433a1c6f4586a
movabs rsi, 0xadf0c4fe52b74d3f
movabs r15, 0x974cd138426754f1
je 0x180054f19
movabs rcx, 0x795721d9c198c8a5
movabs r12, 0xad95c49652d44d4c
movabs r8, 0x974cd13842135489
cmp qword [r14 + 0x18], 0xf
mov rdx, r14
jbe 0x180054e51
mov rdx, qword [r14]
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r8
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x78], rax
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
call fcn.18006b830
test al, al
je 0x1800560d4
add r14, 0x20
movabs rcx, 0x795721d9c198c8a5
movabs r8, 0x974cd13842135489
cmp r14, qword [rbp + 0x48]
jne 0x180054e44
xor edx, edx
call fcn.180076590
movabs rax, 0xded0a59337df2e4c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r14, 0xf5fa90cb6c7b017c
mov qword [rsp + 0x50], rax
movabs r12, 0x47ed39a207353db3
movabs rax, 0x174a019aa48dbbb1
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xf636b854230e2098
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xe69b5081a89b311e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x47ed5dc7735051c3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005506b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055060
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xad86c49052d84d5c
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x790d2184c18bc8a9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x974cd14c421f5485
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x78], rax
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
call fcn.18005b0f0
test al, al
je 0x1800560d4
xor edx, edx
call fcn.180076590
movabs rax, 0x8d83b69f24d9225c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x1a034592b194bdac
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xf329a55d2e17399e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xff8143d5b39b7846
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x269b57cd64171d89
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xf5d8e4b31855720e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005528e
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055283
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.18005a060
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x18017d838], rax
mov r12, rax
call fcn.18005a060
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x18017d850], rax
mov r15, rax
call fcn.18005a060
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x18017d848], rax
mov r14, rax
call fcn.18005a060
movabs rdx, 0xb231a1bea995f83b
mov qword [0x18017d858], rax
mov rsi, rax
call fcn.18005a060
movabs rdx, 0x5f0720d54e5f164
mov qword [0x18017d840], rax
mov rdi, rax
call fcn.18005a060
movabs rdx, 0x483047d5ed936395
mov qword [0x18017d860], rax
mov rbx, rax
call fcn.18005a060
test rax, rax
mov qword [0x18017d868], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x1800560d4
xor edx, edx
call fcn.180076590
movabs rax, 0x8d83b69f24d9225c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r12, 0xf5fa90cb6c7b017c
mov qword [rsp + 0x50], rax
movabs r14, 0xadf0c4fe52b74d3f
movabs rax, 0x10034c92b58ab1bb
movabs rsi, 0x792321f7c1f9c8c8
mov qword [rsp + 0x40], rax
movabs r15, 0x974cd138426754f1
mov rax, qword [rsp + 0x40]
movabs rdi, 0x8bf433a1c6f4586a
mov qword [rsp + 0x58], rax
movabs rbx, 0x47ed39a207353db3
movabs rax, 0xed25bd592b133d9f
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xe49713cfa99d2c0b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x47895cd662594dde
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005551b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055510
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005c8f0
test al, al
je 0x1800560d4
xor edx, edx
call fcn.180076590
movabs rax, 0xc399e48d39d82257
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x60]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x60], rax
movabs rax, 0x1859489ba090bca1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
movabs rax, 0xfa23b2182c083d85
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
movabs rax, 0x8bf457c4b291341a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x60]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x70]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmmword [rbp + 0x70], xmm0
test al, al
je 0x18005562b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055620
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xad91c49852d24d5b
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x79232183c195c8bd
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.180056800
test al, al
jne 0x18005587a
mov dl, 2
call fcn.180076590
movabs rax, 0xd9d0a09b3ede2c59
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
movabs rcx, 0xa47be7a58e2ab99e
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x80], rax
movabs rax, 0x59535483a48ae8a7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0xfb6ca3576d033a90
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0xea9256c5e6903905
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x218356c1274151c6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0x9a93e4aa1e0e6615
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0xaf8d587c6de84e5b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0xaf8d587c6de84e35
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmm2, xmmword [rbp - 0x80]
xorps xmm2, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
mov qword [rbp + 0xc8], rax
movq rax, xmm2
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x80], xmm2
movdqa xmmword [rbp - 0x60], xmm1
test al, al
je 0x18005586e
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055863
sub r8d, edx
lea rdx, [rbp - 0x80]
jmp 0x1800559c4
xor edx, edx
call fcn.180076590
movabs rax, 0xdf85a39734d9225c
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x500199ae90bca9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xfe22b8182f022082
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xff9549c8aa95311e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x378056c1275b52da
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xf5fa90af090f6410
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x1800559bc
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800559b1
sub r8d, edx
lea rdx, [rsp + 0x50]
mov rcx, qword [0x18017bed8]
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x9adef6d06283630e
lea rbx, [rbp - 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x30], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x30]
mov rcx, qword [0x18017d810]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x30], xmm0
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
test rax, rax
je 0x180055a6e
nop word [rax + rax]
movzx ecx, byte [rax]
lea rax, [rax + 1]
movzx edx, byte [rbx]
lea rbx, [rbx + 1]
test cl, cl
je 0x180055a66
cmp cl, dl
je 0x180055a50
cmp cl, dl
je 0x180055f19
mov dl, 2
call fcn.180076590
movabs rax, 0x8d9eab9721c52849
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x90]
mov rax, qword [rsp + 0x40]
movabs rbx, 0x47ed39a207353db3
mov qword [rbp + 0x90], rax
mov r8d, edx
movabs rax, 0x11405596ac8aa1a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0xb720b05b2d0b74d0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
movabs rax, 0xf88656d7e6c60b29
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
movabs rax, 0x47ed39823d5b52da
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x90]
xorps xmm2, xmmword [rbp + 0x60]
movdqa xmm0, xmmword [rbp + 0xa0]
movdqa xmm1, xmmword [rbp + 0xb0]
xorps xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x88], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x90], xmm2
movdqa xmmword [rbp + 0xa0], xmm0
movdqa xmmword [rbp + 0xb0], xmm1
test al, al
je 0x180055bdb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055bd0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x9adef6d06283630e
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movq rax, xmm0
movdqa xmmword [rbp - 0x40], xmm0
test al, al
je 0x180055c6b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055c60
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xc395b68c27d46d13
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x1c5501c592bae8bc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x976ceb562d0e2783
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x78], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x180055d5b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055d50
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017d810]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
mov rcx, rax
mov r8d, eax
cmp byte [rax], r13b
je 0x180055dab
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055da0
mov rcx, qword [0x18017bed8]
sub r8d, eax
xor r9d, r9d
mov qword [rsp + 0x20], r13
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xd589ac8e21d66d11
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x80], rax
movabs rax, 0xd4b469eacd9a9a1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0xf939b71836083ad1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0xf89513cfa99d2c09
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x698158cf755a5393
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x80]
xorps xmm2, xmmword [rbp + 0x60]
movdqa xmm0, xmmword [rbp - 0x70]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x88], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp - 0x80], xmm2
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp - 0x60], xmm1
test al, al
je 0x180055efb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055ef0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180055f23
movabs rbx, 0x47ed39a207353db3
xor edx, edx
call fcn.180076590
movabs rax, 0xcc99bc873ac73e5e
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x80], rax
movabs rax, 0x15424883a897a1e8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0xb722be5136062e98
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0xee8056cdb6993709
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x2e9e4bc7711511d7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0xf5fa90cb4c416f13
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x80]
xorps xmm2, xmmword [rbp + 0x90]
movdqa xmm0, xmmword [rbp - 0x70]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0xa0]
mov qword [rbp + 0xb8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x80], xmm2
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp - 0x60], xmm1
test al, al
je 0x18005607b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180056070
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov r8, rdx
inc r8
cmp byte [r8], r13b
jne 0x1800560a1
mov rcx, qword [0x18017bed8]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rcx, [rbp + 0x40]
mov bl, 1
call fcn.180056590
movzx eax, bl
jmp 0x180054969
xor bl, bl
lea rcx, [rbp + 0x40]
call fcn.180056590
movzx eax, bl
jmp 0x180054969
call fcn.1800e6fd8
int3
call fcn.1800532d0
int3