Function at 0x180003620
Capabilities:
Encode data using xor
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x230
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x180030040]
xor rax, rsp
mov qword [rbp + 0x100], rax
movdqa xmm0, xmmword [0x18002bab0]
movdqu xmmword [rbp + 0x48], xmm0
mov dword [rbp + 0x58], 0x666a7663
mov dword [rbp + 0x5c], 0x7a626e
xor r15d, r15d
mov edx, r15d
movsxd rax, edx
lea rcx, [rbp + 0x48]
add rcx, rax
lea eax, [rdx - 0xe]
xor byte [rcx], al
inc edx
cmp edx, 0x17
jb 0x180003680
mov byte [rbp + 0x5f], r15b
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], r15b
mov r12d, r15d
movabs r14, 0x7fffffffffffffff
nop word [rax + rax]
mov edx, r12d
lea rcx, [rbp + 0x10]
call fcn.1800061f0
movdqa xmm0, xmmword [0x18002bbe0]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rbp - 0x78], 0x67
mov eax, r15d
nop dword [rax]
nop word [rax + rax]
movsxd rcx, eax
lea rdx, [rsp + 0x78]
add rdx, rcx
lea ecx, [rax - 0xe]
xor byte [rdx], cl
inc eax
cmp eax, 0x11
jb 0x180003730
mov byte [rbp - 0x77], 0
lea r8, [rbp + 0x10]
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xc0]
call fcn.180006520
mov r8, rax
lea rdx, [rbp + 0x80]
call fcn.1800023c0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x1800037aa
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800037a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800048b1
call fcn.180009a2c
mov rdi, qword [rbp + 0x90]
test rdi, rdi
jne 0x180003800
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x18000399b
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800037f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
jmp 0x18000399b
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], 1
mov qword [rbp + 0x28], 0xf
mov word [rbp + 0x10], 0x31
movups xmmword [rbp - 0x70], xmm0
lea r15, [rbp + 0x80]
mov rsi, qword [rbp + 0x80]
mov r13, qword [rbp + 0x98]
cmp r13, 0xf
cmova r15, rsi
cmp rdi, r14
ja 0x1800048a5
cmp rdi, 0xf
ja 0x180003866
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x70], xmm0
jmp 0x1800038f7
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
jbe 0x180003885
mov rbx, r14
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1800038ac
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800038ce
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180004893
mov rcx, rax
call fcn.180009680
mov rcx, rax
test rax, rax
je 0x18000488d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800038dc
test rcx, rcx
je 0x1800038da
call fcn.180009680
jmp 0x1800038dc
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call fcn.1800204a0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x30]
call fcn.1800028b0
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0xa0]
call fcn.180006160
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x180003961
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000395c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
cmp r13, 0xf
jbe 0x180003998
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180003990
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
mov rcx, rsi
call fcn.180009a2c
xor r15d, r15d
inc r12d
cmp r12d, 5
jl 0x180003700
lea rdx, [rbp + 0xe0]
call fcn.180002690
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x18002ba40]
movdqu xmmword [rbp], xmm1
mov word [rbp - 0x10], 0x32
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0xc0]
call fcn.180006040
lea r9, [rbp - 0x10]
mov r8, rax
lea rdx, [rbp + 0x10]
call fcn.1800028b0
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rdx, qword [rbp + 0x10]
mov r8, qword [rbp + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.180006160
lea rdx, str.ComputerHardwareId
lea rcx, [rbp - 0x50]
call fcn.180005ce0
lea rdx, str.SYSTEMCurrentControlSetControlSystemInformation
lea rcx, [rbp - 0x10]
call fcn.180005ce0
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
lea rdx, [rsp + 0x58]
call fcn.180002100
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x180003a86
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003a81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800048ab
call fcn.180009a2c
movdqa xmm0, xmmword [0x18002ba20]
movdqu xmmword [rbp], xmm0
mov word [rbp - 0x10], r15w
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x180003ad8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003ad3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800048ab
call fcn.180009a2c
mov rbx, qword [rsp + 0x68]
cmp rbx, 0xa
jbe 0x180003d34
lea rdi, [rsp + 0x58]
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
cmova rdi, r8
add rdi, rbx
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, r8
add rbx, rax
lea rcx, [rsp + 0x58]
cmp rdx, 0xf
cmova rcx, r8
mov r8b, 0x7b
mov rdx, rbx
call fcn.180009230
mov r8, rax
cmp rax, rbx
je 0x180003b56
inc rax
cmp rax, rbx
je 0x180003b56
nop dword [rax]
movzx ecx, byte [rax]
cmp cl, 0x7b
je 0x180003b4e
mov byte [r8], cl
inc r8
inc rax
cmp rax, rbx
jne 0x180003b40
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rax, qword [rsp + 0x58]
mov r9, r8
sub r9, rax
sub rdi, r8
mov rbx, qword [rsp + 0x68]
mov rax, rbx
sub rax, r9
cmp rax, rdi
cmovb rdi, rax
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rcx, qword [rsp + 0x58]
add rcx, r9
sub rbx, rdi
mov r8, rbx
sub r8, r9
inc r8
lea rdx, [rcx + rdi]
call fcn.1800204a0
mov qword [rsp + 0x68], rbx
lea rdi, [rsp + 0x58]
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
cmova rdi, r8
add rdi, rbx
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, r8
add rbx, rax
lea rcx, [rsp + 0x58]
cmp rdx, 0xf
cmova rcx, r8
mov r8b, 0x7d
mov rdx, rbx
call fcn.180009230
mov r8, rax
cmp rax, rbx
je 0x180003c18
inc rax
cmp rax, rbx
je 0x180003c18
movzx ecx, byte [rax]
cmp cl, 0x7d
je 0x180003c10
mov byte [r8], cl
inc r8
inc rax
cmp rax, rbx
jne 0x180003c02
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rax, qword [rsp + 0x58]
mov r9, r8
sub r9, rax
sub rdi, r8
mov rbx, qword [rsp + 0x68]
mov rax, rbx
sub rax, r9
cmp rax, rdi
cmovb rdi, rax
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rcx, qword [rsp + 0x58]
add rcx, r9
sub rbx, rdi
mov r8, rbx
sub r8, r9
inc r8
lea rdx, [rcx + rdi]
call fcn.1800204a0
mov qword [rsp + 0x68], rbx
lea rdi, [rsp + 0x58]
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
cmova rdi, r8
add rdi, rbx
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, r8
add rbx, rax
lea rcx, [rsp + 0x58]
cmp rdx, 0xf
cmova rcx, r8
mov r8b, 0x2d
mov rdx, rbx
call fcn.180009230
mov r8, rax
cmp rax, rbx
je 0x180003cda
inc rax
cmp rax, rbx
je 0x180003cda
movzx ecx, byte [rax]
cmp cl, 0x2d
je 0x180003cd2
mov byte [r8], cl
inc r8
inc rax
cmp rax, rbx
jne 0x180003cc4
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rax, qword [rsp + 0x58]
mov r9, r8
sub r9, rax
sub rdi, r8
mov rbx, qword [rsp + 0x68]
mov rax, rbx
sub rax, r9
cmp rax, rdi
cmovb rdi, rax
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rcx, qword [rsp + 0x58]
add rcx, r9
sub rbx, rdi
mov r8, rbx
sub r8, r9
inc r8
lea rdx, [rcx + rdi]
call fcn.1800204a0
mov qword [rsp + 0x68], rbx
test rbx, rbx
jne 0x180003d79
mov rsi, qword [rsp + 0x70]
cmp rsi, 5
jb 0x180003fc2
lea rbx, [rsp + 0x58]
cmp rsi, 0xf
cmova rbx, qword [rsp + 0x58]
mov qword [rsp + 0x68], 5
mov r8d, 5
lea rdx, str.empty
mov rcx, rbx
call fcn.1800204a0
mov byte [rbx + 5], 0
movabs r13, 0x8000000000000000
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x18002ba40]
movdqu xmmword [rbp - 0x40], xmm1
mov word [rbp - 0x50], 0x33
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0xc0]
call fcn.180006040
lea r9, [rbp - 0x50]
mov r8, rax
lea rdx, [rbp - 0x10]
call fcn.1800028b0
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
lea rcx, [rbp + 0xa0]
call fcn.180006160
lea rdx, str.MachineGuid
lea rcx, [rbp + 0x60]
call fcn.180005ce0
lea rdx, str.SOFTWAREMicrosoftCryptography
lea rcx, [rbp - 0x50]
call fcn.180005ce0
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x50]
lea rdx, [rbp - 0x30]
call fcn.180002100
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x180003e52
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003e4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800048b7
call fcn.180009a2c
movdqa xmm0, xmmword [0x18002ba20]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x50], r15w
mov rdx, qword [rbp + 0x78]
cmp rdx, 7
jbe 0x180003ea4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003e9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800048b7
call fcn.180009a2c
mov rsi, qword [rbp - 0x20]
cmp rsi, 0xa
jbe 0x180003f78
lea rdi, [rsp + 0x58]
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
cmova rdi, r8
add rdi, qword [rsp + 0x68]
lea rbx, [rsp + 0x58]
cmp rdx, 0xf
cmova rbx, r8
add rbx, qword [rsp + 0x68]
lea rcx, [rsp + 0x58]
cmp rdx, 0xf
cmova rcx, r8
mov r8b, 0x2d
mov rdx, rbx
call fcn.180009230
mov r8, rax
cmp rax, rbx
je 0x180003f1e
inc rax
cmp rax, rbx
je 0x180003f1e
movzx ecx, byte [rax]
cmp cl, 0x2d
je 0x180003f16
mov byte [r8], cl
inc r8
inc rax
cmp rax, rbx
jne 0x180003f08
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rax, qword [rsp + 0x58]
mov r9, r8
sub r9, rax
sub rdi, r8
mov rbx, qword [rsp + 0x68]
mov rax, rbx
sub rax, r9
cmp rax, rdi
cmovb rdi, rax
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rcx, qword [rsp + 0x58]
add rcx, r9
sub rbx, rdi
mov r8, rbx
sub r8, r9
inc r8
lea rdx, [rcx + rdi]
call fcn.1800204a0
mov qword [rsp + 0x68], rbx
test rsi, rsi
jne 0x18000418f
mov rsi, qword [rbp - 0x18]
cmp rsi, 5
jb 0x1800040bc
lea rbx, [rbp - 0x30]
cmp rsi, 0xf
cmova rbx, qword [rbp - 0x30]
mov qword [rbp - 0x20], 5
mov r8d, 5
lea rdx, str.empty
mov rcx, rbx
call fcn.1800204a0
mov byte [rbx + 5], 0
jmp 0x18000418f
mov rcx, rsi
shr rcx, 1
mov rax, r14
sub rax, rcx
cmp rsi, rax
jbe 0x180003fe6
mov rdi, r14
movabs r13, 0x8000000000000000
lea rax, [r13 + 0x27]
jmp 0x18000401a
lea rax, [rsi + rcx]
mov edi, 0xf
cmp rax, rdi
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180004039
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180004893
movabs r13, 0x8000000000000000
mov rcx, rax
call fcn.180009680
test rax, rax
je 0x18000488d
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180004055
test rcx, rcx
je 0x180004048
call fcn.180009680
mov rbx, rax
jmp 0x18000404b
mov rbx, r15
movabs r13, 0x8000000000000000
mov qword [rsp + 0x68], 5
mov qword [rsp + 0x70], rdi
mov eax, dword [str.empty]
mov dword [rbx], eax
movzx eax, byte [0x18002b8b0]
mov byte [rbx + 4], al
mov byte [rbx + 5], 0
cmp rsi, 0xf
jbe 0x1800040b2
lea rdx, [rsi + 1]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800040ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
mov qword [rsp + 0x58], rbx
jmp 0x180003d83
mov rcx, rsi
shr rcx, 1
mov rax, r14
sub rax, rcx
cmp rsi, rax
jbe 0x1800040f3
mov rdi, r14
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.180009680
test rax, rax
je 0x18000488d
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180004131
lea rax, [rsi + rcx]
mov edi, 0xf
cmp rax, rdi
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18000411f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180004893
jmp 0x1800040d4
test rcx, rcx
je 0x18000412e
call fcn.180009680
mov rbx, rax
jmp 0x180004131
mov rbx, r15
mov qword [rbp - 0x20], 5
mov qword [rbp - 0x18], rdi
mov eax, dword [str.empty]
mov dword [rbx], eax
movzx eax, byte [0x18002b8b0]
mov byte [rbx + 4], al
mov byte [rbx + 5], 0
cmp rsi, 0xf
jbe 0x18000418b
lea rdx, [rsi + 1]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004186
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
mov qword [rbp - 0x30], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x18002ba40]
movdqu xmmword [rbp + 0x70], xmm1
mov word [rbp + 0x60], 0x34
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0xc0]
call fcn.180006040
lea r9, [rbp + 0x60]
mov r8, rax
lea rdx, [rbp - 0x50]
call fcn.180002c10
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova rdx, qword [rbp - 0x50]
mov r8, qword [rbp - 0x40]
lea rcx, [rbp + 0xa0]
call fcn.180006160
cmp qword [rsp + 0x48], 0xffffffffffffffff
je 0x180004681
mov dword [rsp + 0x78], 0x94909480
mov dword [rsp + 0x7c], 0xd6c28d8f
mov dword [rbp - 0x80], 0x8e998fd5
mov word [rbp - 0x7c], 0xd08a
xor eax, eax
mov byte [rbp - 0x7a], al
mov edx, r15d
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x78]
add rcx, rax
lea eax, [rdx - 0xe]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x180004220
mov byte [rbp - 0x7a], 0
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x80]
call fcn.180005f00
mov word [rsp + 0x40], 0x8eaf
xor eax, eax
mov byte [rsp + 0x42], al
mov edx, r15d
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0xe]
xor byte [rcx], al
inc edx
cmp edx, 2
jb 0x180004260
mov byte [rsp + 0x42], 0
movdqa xmm0, xmmword [0x18002bad0]
movdqu xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x40], 0x253e2171
mov word [rbp + 0x44], 0x5d
mov edx, r15d
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0x30]
add rcx, rax
lea eax, [rdx - 0xe]
xor byte [rcx], al
inc edx
cmp edx, 0x15
jb 0x1800042a0
mov byte [rbp + 0x45], 0
lea rax, [rbp + 0x30]
mov rdi, 0xffffffffffffffff
mov rbx, rdi
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1800042d0
mov r13, qword [rbp + 0xb0]
mov rax, r14
sub rax, r13
cmp rax, rbx
jb 0x1800048bd
lea rax, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova rax, qword [rbp + 0xa0]
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea r12, [rbx + r13]
mov esi, 0xf
lea r15, [rbp - 0x70]
cmp r12, rsi
jbe 0x1800043a6
mov rsi, r12
or rsi, 0xf
cmp rsi, r14
jbe 0x180004368
mov rsi, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.180009680
test rax, rax
je 0x1800048c3
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x1800043a2
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x180004391
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180004899
jmp 0x180004349
test rcx, rcx
je 0x18000439d
call fcn.180009680
jmp 0x18000439f
xor eax, eax
mov r15, rax
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], rsi
mov r8, rbx
lea rdx, [rbp + 0x30]
mov rcx, r15
call fcn.1800204a0
lea rcx, [r15 + rbx]
mov r8, r13
mov rdx, qword [rsp + 0x78]
call fcn.1800204a0
mov byte [r15 + r12], 0
lea rax, [rsp + 0x40]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800043e0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.180006160
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm6
xor r8d, r8d
mov qword [rax + 0x10], r8
mov qword [rax + 0x18], 0xf
mov byte [rax], r8b
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18000445d
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004455
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800048c3
call fcn.180009a2c
xor r8d, r8d
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
lea r15, [rbp + 0xc0]
movq rsi, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r13, xmm0
cmp r13, 0xf
cmova r15, rsi
movq rbx, xmm6
cmp rbx, r14
ja 0x1800048c9
cmp rbx, 0xf
ja 0x1800044b3
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x70], xmm0
jmp 0x180004545
mov rax, rbx
or rax, 0xf
cmp rax, r14
jbe 0x1800044ef
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.180009680
mov rcx, rax
test rax, rax
je 0x1800048cf
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18000452a
mov r14, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x18000451b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000489f
jmp 0x1800044cd
test rcx, rcx
je 0x180004527
call fcn.180009680
jmp 0x18000452a
mov rax, r8
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], r14
lea r8, [rbx + 1]
mov rdx, r15
mov rcx, rax
call fcn.1800204a0
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x60]
call fcn.180001e50
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x70]
lea rcx, [rbp + 0x80]
call fcn.180006160
lea rax, [rbp + 0x80]
mov rcx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x98]
cmp r8, 0xf
cmova rax, rcx
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180004590
lea rdx, [rbp + 0x80]
cmp r8, 0xf
cmova rdx, rcx
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x50]
mov r8d, edi
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x180004609
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004604
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800048cf
call fcn.180009a2c
cmp r13, 0xf
jbe 0x180004640
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180004638
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800048cf
mov rcx, rsi
call fcn.180009a2c
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x180004681
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000467c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800048cf
call fcn.180009a2c
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1800046bc
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800046b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x1800046f7
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800046f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x180004732
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000472d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x18000476f
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000476a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x1800047bd
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800047b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x1800047fe
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800047f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
movdqa xmm0, xmmword [0x18002ba30]
movdqu xmmword [rbp + 0xf0], xmm0
mov byte [rbp + 0xe0], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x180004853
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000484d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000488d
call fcn.180009a2c
nop
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.180009660
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180010798
int3
call fcn.180001d90
int3
call fcn.180001d90
int3
call fcn.180001d90
int3
call fcn.180001e30
int3
call fcn.180010798
int3
call fcn.180010798
int3
call fcn.180010798
int3
call fcn.180001e30
int3
call fcn.180010798
int3
call fcn.180001e30
int3
call fcn.180010798
int3