Function at 0x18004d260
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x8d8]
sub rsp, 0x9b0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x180176040]
xor rax, rsp
mov qword [rbp + 0x890], rax
movabs rax, 0x7945bbd17b258950
lea rcx, [rbp + 0x680]
mov qword [rsp + 0x40], rax
movabs r12, 0x7914bba97b4c891d
mov rax, qword [rsp + 0x40]
movabs rsi, 0xd247e824e2a72946
mov qword [rbp + 0x240], rax
movabs r14, 0x74ad58979ebf1f87
movabs rax, 0xd222e856e2c62931
movabs rbx, 0xd2e3f4ca9fc7f318
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x248], rax
movabs rax, 0x748358f49edc1fa9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x250], rax
movabs rax, 0xd2e3f4ad9fa8f374
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x258], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x320], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x328], rax
movdqa xmm6, xmmword [rbp + 0x320]
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x330], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x250]
xorps xmm6, xmmword [rbp + 0x240]
mov qword [rbp + 0x338], rax
xorps xmm0, xmmword [rbp + 0x330]
movdqa xmmword [rbp + 0x250], xmm0
movdqa xmmword [rbp + 0x240], xmm6
call fcn.18004cd20
test al, al
je 0x18004e458
cmp word [rbp + 0x680], 0
lea rax, [rbp + 0x680]
je 0x18004d3d0
add rax, 2
cmp word [rax], 0
jne 0x18004d3c6
movq rcx, xmm6
test cx, cx
je 0x18004d400
lea rdx, [rbp + 0x240]
sub rdx, rax
nop dword [rax]
nop dword [rax + rax]
mov word [rax], cx
add rax, 2
movzx ecx, word [rax + rdx]
test cx, cx
jne 0x18004d3f0
xor r13d, r13d
lea rcx, [rbp + 0x680]
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov word [rax], r13w
lea r8d, [r13 + 1]
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x180176ed8], rax
cmp rax, 0xffffffffffffffff
je 0x18004e458
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea r8d, [r13 + 3]
mov rcx, rax
lea rdx, [0x18015edf0]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180071f90
movabs rax, 0x5973d5c01c2be671
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x50]
mov rax, qword [rsp + 0x40]
movabs rdi, 0x6505e18c829df3a
mov qword [rbp + 0x50], rax
movabs r15, 0x529b22fdd4ee0f51
movabs rax, 0xbb67854196d45035
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
movabs rax, 0xec434f6f7cb76e9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
movabs rax, 0xbd80d4a4f0ae8779
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
movabs rax, 0x52ff4789b1827f3c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x400], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x408], rax
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x400]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x410], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x418], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x420], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
xorps xmm2, xmmword [rbp + 0x50]
movdqa xmm0, xmmword [rbp + 0x60]
movdqa xmm1, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x410]
mov qword [rbp + 0x428], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x420]
movdqa xmmword [rbp + 0x70], xmm1
movdqa xmmword [rbp + 0x50], xmm2
movdqa xmmword [rbp + 0x60], xmm0
test al, al
je 0x18004d5bb
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004d5b0
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180072690
test al, al
je 0x18004e458
xor edx, edx
call fcn.180071f90
movabs rax, 0xa34c2db1421ec70
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x80]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x80], rax
movabs rax, 0xbc2ec84987d35a3f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x88], rax
movabs rax, 0x15d731fbffd66bee
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
movabs rax, 0xbf8c97eaf1a89a6c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0x529b4698a08b6321
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x430], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x438], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x440], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x448], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x450], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x80]
xorps xmm2, xmmword [rbp + 0x430]
movdqa xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x440]
mov qword [rbp + 0x458], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x450]
movdqa xmmword [rbp + 0x80], xmm2
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0xa0], xmm1
test al, al
je 0x18004d75b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004d750
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180072260
test al, al
je 0x18004e458
xor edx, edx
call fcn.180071f90
movabs rax, 0xa6dc8891338e870
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xb0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0xb0], rax
movabs rax, 0xa62e864dc2ca4c32
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0x1dd939edf7d37eee
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
movabs rax, 0xbe9399a5fce79d77
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc8], rax
movabs rax, 0x529b22fdb08b7b34
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x460], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x468], rax
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x460]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x470], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x478], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x480], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
xorps xmm2, xmmword [rbp + 0xb0]
movdqa xmm0, xmmword [rbp + 0xc0]
movdqa xmm1, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x470]
mov qword [rbp + 0x488], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x480]
movdqa xmmword [rbp + 0xd0], xmm1
movdqa xmmword [rbp + 0xb0], xmm2
movdqa xmmword [rbp + 0xc0], xmm0
test al, al
je 0x18004d8fb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004d8f0
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005b5f0
test al, al
je 0x18004e458
xor edx, edx
call fcn.180071f90
movabs rax, 0x1a75dddb1e38e774
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xe0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0xe0], rax
movabs rax, 0xbb33814a8b875a23
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xe8], rax
movabs rax, 0x1bc42cf6e4d673e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf0], rax
movabs rax, 0xb78f84a7f0a4d376
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf8], rax
movabs rax, 0x529b22fdd48a6a25
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x100], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x108], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x490], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x498], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x4a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4a8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4b0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xe0]
xorps xmm2, xmmword [rbp + 0x490]
movdqa xmm0, xmmword [rbp + 0xf0]
movdqa xmm1, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x4a0]
mov qword [rbp + 0x4b8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x4b0]
movdqa xmmword [rbp + 0xe0], xmm2
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmmword [rbp + 0x100], xmm1
test al, al
je 0x18004da9b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004da90
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xe0de4e7202fd6849
lea rcx, [rbp + 0x260]
mov qword [rsp + 0x40], rax
movabs rdi, 0xe614306c6d964150
mov rax, qword [rsp + 0x40]
movabs rsi, 0xe0ac4e170294683d
mov qword [rbp + 0x260], rax
movabs r14, 0x822101be0eb951b6
movabs rax, 0x824d01da0e975186
movabs r15, 0xed5c814ddfb8a31f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x268], rax
movabs rax, 0xed5c814ddfb8a373
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x270], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x278], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x340], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x348], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x350], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x260]
xorps xmm0, xmmword [rbp + 0x340]
mov qword [rbp + 0x358], rax
movdqa xmm1, xmmword [rbp + 0x350]
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x270], xmm1
movdqa xmmword [rbp + 0x260], xmm0
call fcn.1800730a0
mov r8, rax
test rax, rax
je 0x18004e458
movabs rax, 0x8fc021546cfb2b02
lea rdx, [rbp + 0x2c0]
mov qword [rsp + 0x40], rax
movabs rax, 0xc37841fe69ca1cc4
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x2c0], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0x8133c21b9dfde247
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x2c8], rcx
movabs rcx, 0x40cf7872f07af55a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xa256753c2dd6333f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xa84d1abb1b5e4c6b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e0], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x4c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x4c8], rax
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x4c0]
mov qword [rbp + 0x4d0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4d8], rax
movabs rax, 0xa84d1abb1b5e1631
movdqa xmm1, xmmword [rbp + 0x4d0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov rcx, r8
mov qword [rbp + 0x4e0], rax
mov rax, qword [rsp + 0x40]
xorps xmm0, xmmword [rbp + 0x2c0]
xorps xmm1, xmmword [rbp + 0x2d0]
movdqa xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x4e8], rax
movdqa xmm0, xmmword [rbp + 0x4e0]
xorps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp + 0x2e0], xmm0
movdqa xmmword [rbp + 0x2d0], xmm1
call fcn.180073380
mov qword [0x180178c98], rax
test rax, rax
je 0x18004e458
xor edx, edx
call fcn.180071f90
movabs rax, 0xd7dd5c05b27ed6e
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x70]
mov rax, qword [rsp + 0x40]
movabs rdi, 0xd247e824e2a72946
mov qword [rbp - 0x70], rax
movabs rsi, 0x74ad58979ebf1f87
movabs rax, 0xbb33895e8bcb482f
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x18dd35f8fd9f71e8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0xd2e3f4cafba2877d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x360], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x368], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x370], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0x360]
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp + 0x378], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmmword [rbp - 0x60], xmm0
test al, al
je 0x18004de4b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004de40
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x180178880]
test rcx, rcx
jne 0x18004deab
nop dword [rax]
nop word [rax + rax]
lea rdx, [0x180178880]
lea rcx, [0x180071f10]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x180178880]
test rcx, rcx
je 0x18004de80
lea r8, [0x1800591e0]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x180178988], rax
test rax, rax
je 0x18004e458
xor edx, edx
call fcn.180071f90
movabs rax, 0x679bdd0e3ce774
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x20]
mov rax, qword [rsp + 0x40]
movabs r14, 0x6505e18c829df3a
mov qword [rbp + 0x20], rax
movabs r15, 0x529b22fdd4ee0f51
movabs rax, 0xbb2981048fc25d35
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x28], rax
movabs rax, 0xcc22fef2de76f3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x30], rax
movabs rax, 0xa28e9ba9bfa99c71
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x38], rax
movabs rax, 0x529b2299b19a6a3d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x4f8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x500], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x508], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x510], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x20]
xorps xmm2, xmmword [rbp + 0x4f0]
movdqa xmm0, xmmword [rbp + 0x30]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x500]
mov qword [rbp + 0x518], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x20], xmm2
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x40], xmm1
test al, al
je 0x18004e02b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004e020
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x180178768]
mov rdx, qword [0x180178760]
mov rcx, qword [0x180178880]
call fcn.1800708f0
xor ecx, ecx
call fcn.180060780
cmp byte [0x180178770], r13b
jne 0x18004e085
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x180178770], r13b
je 0x18004e071
xor edx, edx
call fcn.180071f90
movabs rax, 0xb71c9cc1f22ec6f
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x140]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x140], rax
movabs rax, 0xb6298d4f81c64b66
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x148], rax
movabs rax, 0x18cc31e3f7d176a7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x150], rax
movabs rax, 0xf28d9ba3eba68971
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x158], rax
movabs rax, 0x37ef4791a4836032
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x160], rax
movabs rax, 0x6505e18c829df5e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x520], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x528], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x530], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x538], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x540], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x140]
xorps xmm2, xmmword [rbp + 0x520]
movdqa xmm0, xmmword [rbp + 0x150]
movdqa xmm1, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x530]
mov qword [rbp + 0x548], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x540]
movdqa xmmword [rbp + 0x140], xmm2
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmmword [rbp + 0x160], xmm1
test al, al
je 0x18004e1fe
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004e1f3
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180069060
test al, al
jne 0x18004e48f
mov dl, 3
call fcn.180071f90
movabs rax, 0xf2c1837c8c3752c3
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x50], rax
movabs rax, 0x4cc773f995ff6845
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
movabs rax, 0x885b06c3e40d8c3b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x9502f612aa829809
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
movabs rax, 0x86e1e719e05e33a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x380], rax
movabs rax, 0x2dae0790fb96482a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x388], rax
movabs rax, 0xe93365e38177e557
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x390], rax
movabs rax, 0x9502f612aa82eb64
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x50]
xorps xmm1, xmmword [rbp + 0x380]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x398], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x390]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmmword [rbp - 0x40], xmm0
test al, al
je 0x18004e33e
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004e333
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dl, 3
call fcn.180071f90
movabs rax, 0xd34dfcc1725e87b
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x30]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x30], rax
movabs rax, 0xf2379d5087d40929
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x28], rax
movabs rax, 0x74de34f6ebcc76f1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x20], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x2f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2f8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x300], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x30]
xorps xmm1, xmmword [rbp + 0x2f0]
movdqa xmm0, xmmword [rbp - 0x20]
mov qword [rbp + 0x308], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x20], xmm0
test al, al
je 0x18004e43c
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004e431
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0x890]
xor rcx, rsp
call fcn.1800d6ea0
lea r11, [rsp + 0x9b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.180071f90
movabs rax, 0xa71c9dc0f2dec7b
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x170]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x170], rax
movabs rax, 0xbe2681508bc94066
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x178], rax
movabs rax, 0x54c337feeade65ee
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x180], rax
movabs rax, 0xb79791a6efaa9c7b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x188], rax
movabs rax, 0x529b22fdd4ee0f35
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x190], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x198], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x550], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x558], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x560], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x568], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x570], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x170]
xorps xmm2, xmmword [rbp + 0x550]
movdqa xmm0, xmmword [rbp + 0x180]
movdqa xmm1, xmmword [rbp + 0x190]
xorps xmm0, xmmword [rbp + 0x560]
mov qword [rbp + 0x578], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0x170], xmm2
movdqa xmmword [rbp + 0x180], xmm0
movdqa xmmword [rbp + 0x190], xmm1
test al, al
je 0x18004e5fe
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004e5f3
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x7971bbc17b2f896e
lea rcx, [rbp + 0x280]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x280], rax
movabs rax, 0xd233e80ae2c6292b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x288], rax
movabs rax, 0x74ad58979ecb1fff
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x290], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x298], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x3a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x280]
movdqa xmm1, xmmword [rbp + 0x290]
xorps xmm0, xmmword [rbp + 0x3a0]
mov qword [rbp + 0x3b8], rax
xorps xmm1, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x290], xmm1
movdqa xmmword [rbp + 0x280], xmm0
call fcn.1800669d0
test al, al
je 0x18004e458
xor edx, edx
call fcn.180071f90
movabs rax, 0xa34dac41e24ea6e
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1a0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x1a0], rax
movabs rax, 0xbc2ec84987d35a3f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x15d731fbffd66bee
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xbf8c97eaf1a89a6c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x529b4698a08b6321
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1c0], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1c8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x580], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x588], rax
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x580]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x590], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x598], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5a0], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
xorps xmm2, xmmword [rbp + 0x1a0]
movdqa xmm0, xmmword [rbp + 0x1b0]
movdqa xmm1, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x590]
mov qword [rbp + 0x5a8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0x1c0], xmm1
movdqa xmmword [rbp + 0x1a0], xmm2
movdqa xmmword [rbp + 0x1b0], xmm0
test al, al
je 0x18004e87b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004e870
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x7962bbc77b23897e
lea rcx, [rbp + 0x2a0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xd269e857e2d52927
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x74ad58e39ec71ff3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x3e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e8], rax
movdqa xmm0, xmmword [rbp + 0x3e0]
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x2b0]
xorps xmm0, xmmword [rbp + 0x2a0]
mov qword [rbp + 0x3f8], rax
xorps xmm1, xmmword [rbp + 0x3f0]
movdqa xmmword [rbp + 0x2b0], xmm1
movdqa xmmword [rbp + 0x2a0], xmm0
call fcn.180055840
test al, al
je 0x18004e458
xor edx, edx
call fcn.180071f90
movabs rax, 0x5967c9c80d22e67e
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1d0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x1d0], rax
movabs rax, 0xb1678c4192ca5c22
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x10c82cf2f2cf72e8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xa69684beeaa8d334
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x33ed4c92b7cc2f6b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x6722a60bc07ac48
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x5b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5b8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x5c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5c8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5d0], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1d0]
xorps xmm2, xmmword [rbp + 0x5b0]
movdqa xmm0, xmmword [rbp + 0x1e0]
movdqa xmm1, xmmword [rbp + 0x1f0]
xorps xmm0, xmmword [rbp + 0x5c0]
mov qword [rbp + 0x5d8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5d0]
movdqa xmmword [rbp + 0x1d0], xmm2
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmmword [rbp + 0x1f0], xmm1
test al, al
je 0x18004eafb
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004eaf0
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.180054490
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x180178888], rax
mov r12, rax
call fcn.180054490
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x1801788a0], rax
mov r15, rax
call fcn.180054490
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x180178898], rax
mov r14, rax
call fcn.180054490
movabs rdx, 0xb231a1bea995f83b
mov qword [0x1801788a8], rax
mov rsi, rax
call fcn.180054490
movabs rdx, 0x5f0720d54e5f164
mov qword [0x180178890], rax
mov rdi, rax
call fcn.180054490
movabs rdx, 0x483047d5ed936395
mov qword [0x1801788b0], rax
mov rbx, rax
call fcn.180054490
test rax, rax
mov qword [0x1801788b8], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x18004e458
xor edx, edx
call fcn.180071f90
movabs rax, 0x5967c9c80d22e67e
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x110]
mov rax, qword [rsp + 0x40]
movabs r15, 0x6505e18c829df3a
mov qword [rbp + 0x110], rax
movabs rdi, 0x7914bba97b4c891d
movabs rax, 0xbb67854196d45035
movabs rsi, 0xd247e824e2a72946
mov qword [rsp + 0x40], rax
movabs r14, 0x74ad58979ebf1f87
mov rax, qword [rsp + 0x40]
movabs rbx, 0xd2e3f4ca9fc7f318
mov qword [rbp + 0x118], rax
movabs r12, 0x529b22fdd4ee0f51
movabs rax, 0xec434f6f7cb76e9
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x120], rax
movabs rax, 0xbd80d4a4f0ae8779
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x128], rax
movabs rax, 0x52ff4789b1827f3c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x130], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x138], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x5e8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x5f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5f8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x600], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x110]
xorps xmm2, xmmword [rbp + 0x5e0]
movdqa xmm0, xmmword [rbp + 0x120]
movdqa xmm1, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x5f0]
mov qword [rbp + 0x608], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x600]
movdqa xmmword [rbp + 0x110], xmm2
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
test al, al
je 0x18004edbe
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004edb3
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180056da0
test al, al
je 0x18004e458
xor edx, edx
call fcn.180071f90
movabs rax, 0x177d9bda1023e675
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x10]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x10], rax
movabs rax, 0xb33d814883ce5d2f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 8], rax
movabs rax, 0x19c23bb7f0d076f3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp], rax
movabs rax, 0xd2e390afeba29f68
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 8], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x3c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c8], rax
movdqa xmm1, xmmword [rbp + 0x3c0]
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
xorps xmm1, xmmword [rbp - 0x10]
movdqa xmm0, xmmword [rbp]
mov qword [rbp + 0x3d8], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x3d0]
movdqa xmmword [rbp], xmm0
movdqa xmmword [rbp - 0x10], xmm1
test al, al
je 0x18004eedb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004eed0
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x7975bbcf7b298979
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x10], rax
movabs rax, 0xd247e850e2cb2933
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rsp + 0x58], rax
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x10], xmm0
call fcn.180050c10
test al, al
jne 0x18004f16a
mov dl, 2
call fcn.180071f90
movabs rax, 0xd34dfcc1725e87b
lea rdx, [rbp + 0x200]
mov qword [rsp + 0x40], rax
movabs rcx, 0xe75d41fedf86b3ac
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x200], rax
movabs rax, 0xf2379d5087d40929
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x208], rax
movabs rax, 0x188d2af8b1db71e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x210], rax
movabs rax, 0xb38591aebfa39277
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x218], rax
movabs rax, 0x34f54d9ef49a6324
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x220], rax
movabs rax, 0x69392a79ba5cb853
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x228], rax
movabs rax, 0xb881d11be3ec35e5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x230], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x238], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x640], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x648], rax
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x640]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x650], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r12
mov qword [rbp + 0x658], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x660], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x668], rax
movabs rax, 0xb881d11be3ec358b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x670], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x200]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x210]
xorps xmm0, xmmword [rbp + 0x650]
xorps xmm2, xmmword [rbp + 0x200]
movdqa xmm1, xmmword [rbp + 0x220]
xorps xmm1, xmmword [rbp + 0x660]
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmm0, xmmword [rbp + 0x230]
mov qword [rbp + 0x678], rax
movq rax, xmm2
xorps xmm0, xmmword [rbp + 0x670]
movdqa xmmword [rbp + 0x230], xmm0
movdqa xmmword [rbp + 0x200], xmm2
movdqa xmmword [rbp + 0x220], xmm1
test al, al
je 0x18004f15b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004f150
sub r8d, edx
lea rdx, [rbp + 0x200]
jmp 0x18004f2d3
xor edx, edx
call fcn.180071f90
movabs rax, 0xb61dcc01d22e67e
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x60], rax
movabs rax, 0xab34c84a8dce5d27
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x1dc331b7f3da6bf4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xa6828ea3f3a69a6c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
movabs rax, 0x22f64d9ef4806038
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
movabs rax, 0x6505e7cad5dba56
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x610], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x618], rax
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x610]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x620], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x628], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x630], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
xorps xmm2, xmmword [rsp + 0x60]
movdqa xmm0, xmmword [rsp + 0x70]
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x620]
mov qword [rbp + 0x638], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x630]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmmword [rsp + 0x60], xmm2
movdqa xmmword [rsp + 0x70], xmm0
test al, al
je 0x18004f2cb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004f2c0
sub r8d, edx
lea rdx, [rsp + 0x60]
mov rcx, qword [0x180176ed8]
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180071f90
movabs rax, 0x1c66dade2a34e050
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x60], rax
movabs rax, 0xa62e864dc2c44a68
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x1dd939edf7d37eee
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xbe9399a5fce79d77
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
movabs rax, 0x37ed02d1b08b7b34
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
movabs rax, 0x6706476a740ac48
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x2f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x2f8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x300], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x308], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x310], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x60]
xorps xmm2, xmmword [rbp + 0x2f0]
movdqa xmm0, xmmword [rsp + 0x70]
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x300]
mov qword [rbp + 0x318], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x310]
movdqa xmmword [rsp + 0x60], xmm2
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x80], xmm1
test al, al
je 0x18004f44b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x18004f440
mov rcx, qword [0x180176ed8]
sub r8d, edx
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov r8, rdx
inc r8
cmp byte [r8], r13b
jne 0x18004f472
mov rcx, qword [0x180176ed8]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x18004e45a