Function at 0x1800512e0
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xa68]
sub rsp, 0xb40
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x180179040]
xor rax, rsp
mov qword [rbp + 0xa20], rax
movabs rax, 0x438e248bc39d3510
lea rcx, [rbp + 0x810]
mov qword [rsp + 0x40], rax
movabs r14, 0xa55d2bc86923f5c8
mov rax, qword [rsp + 0x40]
movabs rsi, 0x43e624fbc3ee3571
mov qword [rbp + 0x330], rax
movabs rdi, 0x609ecf469a53cbc6
movabs rax, 0x60ffcf2f9a2bcbbf
movabs r15, 0xd363af5bc62028b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x338], rax
movabs rax, 0xd513a9abc0e02a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x340], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x348], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x420], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x428], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x430], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x340]
movdqa xmm6, xmmword [rbp + 0x330]
xorps xmm6, xmmword [rbp + 0x420]
mov qword [rbp + 0x438], rax
xorps xmm0, xmmword [rbp + 0x430]
movdqa xmmword [rbp + 0x340], xmm0
movdqa xmmword [rbp + 0x330], xmm6
call fcn.180050e10
test al, al
je 0x18005253a
cmp word [rbp + 0x810], 0
lea rax, [rbp + 0x810]
je 0x18005144a
nop dword [rax]
add rax, 2
cmp word [rax], 0
jne 0x180051440
movq rcx, xmm6
test cx, cx
je 0x180051470
lea rdx, [rbp + 0x330]
sub rdx, rax
nop
mov word [rax], cx
add rax, 2
movzx ecx, word [rax + rdx]
test cx, cx
jne 0x180051460
xor r13d, r13d
lea rcx, [rbp + 0x810]
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov word [rax], r13w
lea r8d, [r13 + 1]
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x18018e560], rax
cmp rax, 0xffffffffffffffff
je 0x18005253a
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea r8d, [r13 + 3]
mov rcx, rax
lea rdx, [0x1801618a0]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180073f60
movabs rax, 0x63814a92a4895a1d
lea rdx, [rbp + 0x290]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x290]
mov rax, qword [rsp + 0x40]
movabs rbx, 0xa52f81127ea0f5ca
mov qword [rbp + 0x290], rax
movabs r12, 0x1e1bca172c87fa65
movabs rax, 0x9bea223ee20b2b5
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x298], rax
movabs rax, 0x775f5694d5166be5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xca3e0ba6064a81a9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x1e7faf6349eb8a08
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x500], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x508], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x510], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x518], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x520], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x290]
xorps xmm2, xmmword [rbp + 0x500]
movdqa xmm0, xmmword [rbp + 0x2a0]
movdqa xmm1, xmmword [rbp + 0x2b0]
xorps xmm0, xmmword [rbp + 0x510]
mov qword [rbp + 0x528], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x520]
movdqa xmmword [rbp + 0x290], xmm2
movdqa xmmword [rbp + 0x2a0], xmm0
movdqa xmmword [rbp + 0x2b0], xmm1
test al, al
je 0x18005165b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051650
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x290]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180074660
test al, al
je 0x18005253a
xor edx, edx
call fcn.180073f60
movabs rax, 0x30c65d89ac83501c
lea rdx, [rbp + 0x2c0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x2c0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x2c0], rax
movabs rax, 0xef7ef2bff27b8bf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x6c4c5399dd0b76e2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xc83248e8074c9cbc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x1e1bae7258e29615
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x530], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x538], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x540], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x548], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x550], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x2c0]
xorps xmm2, xmmword [rbp + 0x530]
movdqa xmm0, xmmword [rbp + 0x2d0]
movdqa xmm1, xmmword [rbp + 0x2e0]
xorps xmm0, xmmword [rbp + 0x540]
mov qword [rbp + 0x558], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x550]
movdqa xmmword [rbp + 0x2c0], xmm2
movdqa xmmword [rbp + 0x2d0], xmm0
movdqa xmmword [rbp + 0x2e0], xmm1
test al, al
je 0x1800517fb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800517f0
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x2c0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180074230
test al, al
je 0x18005253a
xor edx, edx
call fcn.180073f60
movabs rax, 0x309f57dbab9a541c
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x80]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x80], rax
movabs rax, 0x14f7a12fba3eaeb2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x88], rax
movabs rax, 0x64425b8fd50e63e2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
movabs rax, 0xc92d46a70a039ba7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0x1e1bca1748e28e00
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x560], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x568], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x570], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x578], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x580], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x80]
xorps xmm2, xmmword [rbp + 0x560]
movdqa xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x570]
mov qword [rbp + 0x588], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x80], xmm2
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0xa0], xmm1
test al, al
je 0x18005199b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051990
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.1800608b0
test al, al
je 0x18005253a
xor edx, edx
call fcn.180073f60
movabs rax, 0x20874289a69a5b18
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xb0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0xb0], rax
movabs rax, 0x9eaa628f373b8a3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0x625f4e94c60b6eea
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
movabs rax, 0xc0315ba50640d5a6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc8], rax
movabs rax, 0x1e1bca172ce39f11
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x590], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x598], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x5a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5a8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xb0]
xorps xmm2, xmmword [rbp + 0x590]
movdqa xmm0, xmmword [rbp + 0xc0]
movdqa xmm1, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x5a0]
mov qword [rbp + 0x5b8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5b0]
movdqa xmmword [rbp + 0xb0], xmm2
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xd0], xmm1
test al, al
je 0x180051b3b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051b30
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xd257a1651203549b
lea rcx, [rbp + 0x350]
mov qword [rsp + 0x40], rax
movabs r12, 0x96b406177039b68e
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x350], rax
movabs rax, 0x580ee3dddaae427c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x358], rax
movabs rax, 0xabb13f1e3466187d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x360], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x368], rax
movabs rax, 0xd225a100126a54ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x440], rax
movabs rax, 0x5862e3b9da80424c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x448], rax
movabs rax, 0xabb13f1e34661811
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x450], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x440]
mov qword [rbp + 0x458], rax
movdqa xmm1, xmmword [rbp + 0x450]
xorps xmm1, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x360], xmm1
movdqa xmmword [rbp + 0x350], xmm0
call fcn.180075310
mov r8, rax
test rax, rax
je 0x18005253a
movabs rax, 0xbd49ce437c0517d0
lea rdx, [rbp + 0x390]
mov qword [rsp + 0x40], rax
movabs rax, 0x193ba3f9bdf30f3e
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x390], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0xc7de7c4876235949
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x398], rcx
movabs rcx, 0xd4f54a45ee315e80
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a0], rax
movabs rax, 0xd2f643473079c4e1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x12fb49fc04222c29
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b0], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b8], rax
movabs rax, 0xd225a100126a54ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5c0], rax
movabs rax, 0x5862e3b9da80424c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5c8], rax
movabs rax, 0xabb13f1e34661811
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5d0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5d8], rax
movabs rax, 0x12fb49fc04227673
movdqa xmm1, xmmword [rbp + 0x5d0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov rcx, r8
mov qword [rbp + 0x5e0], rax
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x390]
xorps xmm0, xmmword [rbp + 0x5c0]
xorps xmm1, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp + 0x5e0]
xorps xmm0, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x3b0], xmm0
movdqa xmmword [rbp + 0x3a0], xmm1
call fcn.1800755f0
mov qword [0x1801901f0], rax
test rax, rax
je 0x18005253a
xor edx, edx
call fcn.180073f60
movabs rax, 0x378f4a92e3855102
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x20]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x20], rax
movabs rax, 0x9eaae3cf33faaaf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x28], rax
movabs rax, 0x6146579adf426ce4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x30], rax
movabs rax, 0xa55d2bc80d4681ad
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x460], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x468], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x470], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp + 0x460]
movdqa xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x478], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmmword [rbp + 0x30], xmm0
test al, al
je 0x180051eee
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180051ee3
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18018fe10]
test rcx, rcx
jne 0x180051f4b
nop word [rax + rax]
lea rdx, [0x18018fe10]
lea rcx, [0x180073ee0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x18018fe10]
test rcx, rcx
je 0x180051f20
lea r8, [0x18005e0f0]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18018ff28], rax
test rax, rax
je 0x18005253a
xor edx, edx
call fcn.180073f60
movabs rax, 0x3a95048fb69e5b18
lea rdx, [rbp + 0x200]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x200]
mov rax, qword [rsp + 0x40]
movabs r12, 0x1e1bca172c87fa65
mov qword [rbp + 0x200], rax
mov r8d, edx
movabs rax, 0x9f0a666f736bfb5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x208], rax
movabs rax, 0x7957409cd0036bff
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x210], rax
movabs rax, 0xd53044ab494d9aa1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x218], rax
movabs rax, 0x1e1bca7349f39f09
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x220], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x228], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x5f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x5f8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x600], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x608], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x610], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x200]
xorps xmm2, xmmword [rbp + 0x5f0]
movdqa xmm0, xmmword [rbp + 0x210]
movdqa xmm1, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x600]
mov qword [rbp + 0x618], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x610]
movdqa xmmword [rbp + 0x200], xmm2
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmmword [rbp + 0x220], xmm1
test al, al
je 0x1800520eb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800520e0
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x200]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x18018fcf8]
mov rdx, qword [0x18018fcf0]
mov rcx, qword [0x18018fe10]
call fcn.180072970
mov rax, qword [0x180190438]
mov rdx, qword [0x18018f9d8]
shl rax, 5
add rax, qword [0x18018e5d0]
cmp qword [rax + 0x10], 8
lea rcx, [rax + 0x18]
jbe 0x18005214b
mov rcx, qword [rcx]
cmp byte [0x18018fd00], r13b
movss xmm0, dword [rcx]
divss xmm0, dword [0x180161a94]
movss dword [rdx + 0x3c64], xmm0
jne 0x180052184
nop dword [rax + rax]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x18018fd00], r13b
je 0x180052170
xor edx, edx
call fcn.180073f60
movabs rax, 0x3183569ea7805003
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x110]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x110], rax
movabs rax, 0x4f0aa2df932a9e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x118], rax
movabs rax, 0x61575381d50c6bab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x120], rax
movabs rax, 0x853344a11d428fa1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x128], rax
movabs rax, 0x7b6faf7b5cea9506
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x130], rax
movabs rax, 0xa52f81127ea0f5ae
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x138], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x620], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x628], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x630], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x638], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x640], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x110]
xorps xmm2, xmmword [rbp + 0x620]
movdqa xmm0, xmmword [rbp + 0x120]
movdqa xmm1, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x630]
mov qword [rbp + 0x648], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x640]
movdqa xmmword [rbp + 0x110], xmm2
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
test al, al
je 0x1800522fd
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800522f2
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18006cb60
test al, al
jne 0x180052571
mov dl, 3
call fcn.180073f60
movabs rbx, 0x37c6409eaf875417
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x40], rbx
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x40], rax
movabs rax, 0x1f7bb2ff43aeba9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0x6c5e59d5d9186be7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0xa55d2bc8692386a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x480], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x490], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rbp + 0x480]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rbp + 0x498], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x490]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x18005241b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052410
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dl, 3
call fcn.180073f60
mov qword [rsp + 0x40], rbx
lea rdx, [rbp + 0x3f0]
mov rax, qword [rsp + 0x40]
lea rcx, [rbp + 0x3f0]
mov qword [rbp + 0x3f0], rax
mov r8d, edx
movabs rax, 0x40eeba32ff20eba9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f8], rax
movabs rax, 0xd455694c9116bfd
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x400], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x408], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x3f0]
xorps xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x48], rax
movq rax, xmm1
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp + 0x400]
movdqa xmmword [rbp + 0x3f0], xmm1
movdqa xmmword [rbp + 0x400], xmm0
test al, al
je 0x18005251b
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052510
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x3f0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0xa20]
xor rcx, rsp
call fcn.1800d9120
lea r11, [rsp + 0xb40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.180073f60
movabs rax, 0x3083568eb78f5017
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x140]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x140], rax
movabs rax, 0xcffa632f33da2e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x148], rax
movabs rax, 0x2d58559cc80378e2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x150], rax
movabs rax, 0xc0294ea4194e9aab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x158], rax
movabs rax, 0x1e1bca172c87fa01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x160], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x650], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x658], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x660], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x668], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x670], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x140]
xorps xmm2, xmmword [rbp + 0x650]
movdqa xmm0, xmmword [rbp + 0x150]
movdqa xmm1, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x660]
mov qword [rbp + 0x678], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x670]
movdqa xmmword [rbp + 0x140], xmm2
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmmword [rbp + 0x160], xmm1
test al, al
je 0x1800526e0
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800526d5
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x27c85095a6875912
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x3c0]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
movabs rax, 0x609ecf469a53a7aa
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x60]
mov qword [rsp + 0x58], rax
movabs rax, 0x43832493c38d3502
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x60fdcf199a32cbab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c8], rax
movabs rax, 0xd583a90bc0b02e7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d0], rax
movabs rax, 0xa5252bbc690df5bc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d8], rax
movabs rax, 0x1e1bca172c87fa11
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x680], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x688], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x690], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x698], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6a0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x3c0]
xorps xmm0, xmmword [rbp + 0x680]
movdqa xmm1, xmmword [rbp + 0x3d0]
xorps xmm1, xmmword [rbp + 0x690]
movdqa xmmword [rbp + 0x3c0], xmm0
movdqa xmm0, xmmword [rbp + 0x3e0]
mov qword [rbp + 0x6a8], rax
xorps xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x3e0], xmm0
movdqa xmmword [rbp + 0x3d0], xmm1
call fcn.18006a6b0
test al, al
je 0x18005253a
xor edx, edx
call fcn.180073f60
movabs rax, 0x30c64596a6865602
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x170]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x170], rax
movabs rax, 0xef7ef2bff27b8bf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x178], rax
movabs rax, 0x6c4c5399dd0b76e2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x180], rax
movabs rax, 0xc83248e8074c9cbc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x188], rax
movabs rax, 0x1e1bae7258e29615
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x190], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x198], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x6b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x6b8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x6c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6c8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6d0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x170]
xorps xmm2, xmmword [rbp + 0x6b0]
movdqa xmm0, xmmword [rbp + 0x180]
movdqa xmm1, xmmword [rbp + 0x190]
xorps xmm0, xmmword [rbp + 0x6c0]
mov qword [rbp + 0x6d8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x6d0]
movdqa xmmword [rbp + 0x170], xmm2
movdqa xmmword [rbp + 0x180], xmm0
movdqa xmmword [rbp + 0x190], xmm1
test al, al
je 0x180052a2b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052a20
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x43902495c3813512
lea rcx, [rbp + 0x370]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x370], rax
movabs rax, 0x60b0cf359a21cba7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x378], rax
movabs rax, 0xd363a81bc1a02ff
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x380], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x388], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4e8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4f0], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x370]
movdqa xmm1, xmmword [rbp + 0x380]
xorps xmm0, xmmword [rbp + 0x4e0]
mov qword [rbp + 0x4f8], rax
xorps xmm1, xmmword [rbp + 0x4f0]
movdqa xmmword [rbp + 0x380], xmm1
movdqa xmmword [rbp + 0x370], xmm0
call fcn.180059c30
test al, al
je 0x18005253a
xor edx, edx
call fcn.180073f60
movabs rax, 0x6395569ab5805a12
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1a0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x1a0], rax
movabs rax, 0x3beab23ea3ebea2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x69534e90d0126fe4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xd1285bbc1c4cd5e4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x7f6da4784fa5da5f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xa50df56a0a8e86b8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1c8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x6e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x6e8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x6f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6f8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x700], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1a0]
xorps xmm2, xmmword [rbp + 0x6e0]
movdqa xmm0, xmmword [rbp + 0x1b0]
movdqa xmm1, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x6f0]
mov qword [rbp + 0x708], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x700]
movdqa xmmword [rbp + 0x1a0], xmm2
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmmword [rbp + 0x1c0], xmm1
test al, al
je 0x180052cab
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052ca0
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.180058880
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x18018fe18], rax
mov r12, rax
call fcn.180058880
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x18018fe30], rax
mov r15, rax
call fcn.180058880
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x18018fe28], rax
mov r14, rax
call fcn.180058880
movabs rdx, 0xb231a1bea995f83b
mov qword [0x18018fe38], rax
mov rsi, rax
call fcn.180058880
movabs rdx, 0x5f0720d54e5f164
mov qword [0x18018fe20], rax
mov rdi, rax
call fcn.180058880
movabs rdx, 0x483047d5ed936395
mov qword [0x18018fe40], rax
mov rbx, rax
call fcn.180058880
test rax, rax
mov qword [0x18018fe48], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x18005253a
xor edx, edx
call fcn.180073f60
movabs rax, 0x6395569ab5805a12
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1d0]
mov rax, qword [rsp + 0x40]
movabs r12, 0xa52f81127ea0f5ca
mov qword [rbp + 0x1d0], rax
movabs rsi, 0x43e624fbc3ee3571
movabs rax, 0x9bea223ee20b2b5
movabs rdi, 0x609ecf469a53cbc6
mov qword [rsp + 0x40], rax
movabs r15, 0xd363af5bc62028b
mov rax, qword [rsp + 0x40]
movabs r14, 0xa55d2bc86923f5c8
mov qword [rbp + 0x1d8], rax
movabs rbx, 0x1e1bca172c87fa65
movabs rax, 0x775f5694d5166be5
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xca3e0ba6064a81a9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x1e7faf6349eb8a08
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x710], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x718], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x720], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x728], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x730], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1d0]
xorps xmm2, xmmword [rbp + 0x710]
movdqa xmm0, xmmword [rbp + 0x1e0]
movdqa xmm1, xmmword [rbp + 0x1f0]
xorps xmm0, xmmword [rbp + 0x720]
mov qword [rbp + 0x738], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x730]
movdqa xmmword [rbp + 0x1d0], xmm2
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmmword [rbp + 0x1f0], xmm1
test al, al
je 0x180052f6e
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052f63
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005bbb0
test al, al
je 0x18005253a
xor edx, edx
call fcn.180073f60
movabs rax, 0x2d8f0488a8815a19
lea rdx, [rbp - 0x20]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x20]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x20], rax
movabs rax, 0x1e4a62afb3abfaf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x18], rax
movabs rax, 0x605959d5d20d6bff
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x10], rax
movabs rax, 0xa55d4fad1d4699b8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4a8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4b0], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rbp + 0x4a0]
movdqa xmm0, xmmword [rbp - 0x10]
mov qword [rbp + 0x4b8], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x4b0]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmmword [rbp - 0x10], xmm0
test al, al
je 0x18005308b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053080
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp - 0x20]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x4387249dc38b3515
lea rcx, [rbp + 0x70]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
movabs rax, 0x609ecf329a3fcbb3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x70]
mov qword [rsp + 0x68], rax
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x70], xmm0
call fcn.1800550d0
test al, al
jne 0x18005332a
mov dl, 2
call fcn.180073f60
movabs rcx, 0x547d03f4f4c330cc
lea rdx, [rbp + 0x2f0]
movabs rbx, 0x37c6409eaf875417
mov r8d, edx
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x40eeba32ff20eba9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x6116489a93066cea
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x300], rax
movabs rax, 0xc43b4eac494794a7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x308], rax
movabs rax, 0x7875a5740cf39610
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x310], rax
movabs rax, 0xca46f5730cd592a3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x318], rax
movabs rax, 0x3ec4766100aaed11
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x320], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x328], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x7d8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x7e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7e8], rax
movabs rax, 0x1e1bca172c87fa65
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7f0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7f8], rax
movabs rax, 0x3ec4766100aaed7f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x800], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x2f0]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x300]
xorps xmm0, xmmword [rbp + 0x7e0]
movdqa xmm2, xmmword [rbp + 0x2f0]
xorps xmm2, xmmword [rbp + 0x7d0]
movdqa xmm1, xmmword [rbp + 0x310]
xorps xmm1, xmmword [rbp + 0x7f0]
movdqa xmmword [rbp + 0x300], xmm0
movdqa xmm0, xmmword [rbp + 0x320]
mov qword [rbp + 0x808], rax
movq rax, xmm2
xorps xmm0, xmmword [rbp + 0x800]
movdqa xmmword [rbp + 0x320], xmm0
movdqa xmmword [rbp + 0x2f0], xmm2
movdqa xmmword [rbp + 0x310], xmm1
test al, al
je 0x18005331b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053310
sub r8d, edx
lea rdx, [rbp + 0x2f0]
jmp 0x1800534b5
xor edx, edx
call fcn.180073f60
movabs rax, 0x31934392a5805a12
lea rdx, [rbp + 0x230]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x230]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x230], rax
movabs rax, 0x19edef28f53abfa7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x238], rax
movabs rax, 0x645853d5d10776f8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x240], rax
movabs rax, 0xd13c51a105429cbc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x248], rax
movabs rax, 0x6e76a5740ce9950c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x250], rax
movabs rax, 0xa52f81761bd490a6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x258], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x740], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x748], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x750], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x758], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x760], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x230]
xorps xmm2, xmmword [rbp + 0x740]
movdqa xmm0, xmmword [rbp + 0x240]
movdqa xmm1, xmmword [rbp + 0x250]
xorps xmm0, xmmword [rbp + 0x750]
mov qword [rbp + 0x768], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x760]
movdqa xmmword [rbp + 0x230], xmm2
movdqa xmmword [rbp + 0x240], xmm0
movdqa xmmword [rbp + 0x250], xmm1
test al, al
je 0x1800534ab
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800534a0
sub r8d, edx
lea rdx, [rbp + 0x230]
mov rcx, qword [0x18018e560]
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x73c816d5f3da1b40
lea rbx, [rbp - 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x30], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x30]
mov rcx, qword [0x18018fce8]
mov qword [rsp + 0x78], rax
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x30], xmm0
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
test rax, rax
je 0x18005355b
lea rcx, [rbp - 0x30]
sub rax, rcx
movzx ecx, byte [rax + rbx]
movzx edx, byte [rbx]
lea rbx, [rbx + 1]
test cl, cl
je 0x180053553
cmp cl, dl
je 0x180053540
cmp cl, dl
je 0x180053a5c
mov dl, 2
call fcn.180073f60
movabs rax, 0x63884b92b09c5007
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xe0]
mov rax, qword [rsp + 0x40]
movabs rbx, 0x1e1bca172c87fa65
mov qword [rbp + 0xe0], rax
mov r8d, edx
movabs rax, 0x8fdbb27f720a2ab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xe8], rax
movabs rax, 0x2d5a5b96d30e22aa
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf0], rax
movabs rax, 0xd62f4ebe4911a68b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf8], rax
movabs rax, 0x1e1bca3716e9950c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x100], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x108], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x770], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x778], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x780], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x788], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x790], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xe0]
xorps xmm2, xmmword [rbp + 0x770]
movdqa xmm0, xmmword [rbp + 0xf0]
movdqa xmm1, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x780]
mov qword [rbp + 0x798], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x790]
movdqa xmmword [rbp + 0xe0], xmm2
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmmword [rbp + 0x100], xmm1
test al, al
je 0x1800536db
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800536d0
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x73c816d5f3da1b40
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x70]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x78], rax
xorps xmm0, xmmword [rbp - 0x80]
movq rax, xmm0
movdqa xmmword [rbp - 0x70], xmm0
test al, al
je 0x18005376b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053760
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x2d835689b68d155d
lea rdx, [rbp]
mov qword [rsp + 0x40], rax
lea rcx, [rbp]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp], rax
movabs rax, 0x5e8ef74c910ebb2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 8], rax
movabs rax, 0xd16009bd30b71f9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4c8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4d0], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp + 0x4c0]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0x4d8], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x4d0]
movdqa xmmword [rbp], xmm1
movdqa xmmword [rbp + 0x10], xmm0
test al, al
je 0x18005386b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053860
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18018fce8]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
mov rcx, rax
mov r8d, eax
cmp byte [rax], r13b
je 0x1800538b0
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800538a5
mov rcx, qword [0x18018e560]
sub r8d, eax
xor r9d, r9d
mov qword [rsp + 0x20], r13
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x3b9f4c8bb08f155f
lea rdx, [rbp + 0x260]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x260]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x260], rax
movabs rax, 0x14f6a82ff773aaaf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x268], rax
movabs rax, 0x63435cd5c80d6cab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x270], rax
movabs rax, 0xd63c0ba6064a81ab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x278], rax
movabs rax, 0x3077ab7a5ee89445
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x280], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x288], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x7a8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x7b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7b8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7c0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x260]
xorps xmm2, xmmword [rbp + 0x7a0]
movdqa xmm0, xmmword [rbp + 0x270]
movdqa xmm1, xmmword [rbp + 0x280]
xorps xmm0, xmmword [rbp + 0x7b0]
mov qword [rbp + 0x7c8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x7c0]
movdqa xmmword [rbp + 0x260], xmm2
movdqa xmmword [rbp + 0x270], xmm0
movdqa xmmword [rbp + 0x280], xmm1
test al, al
je 0x180053a3b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053a30
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp + 0x260]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180053a66
movabs rbx, 0x1e1bca172c87fa65
xor edx, edx
call fcn.180073f60
movabs rax, 0x228f5c82ab9e4610
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x60]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x60], rax
movabs rax, 0xcffa632f33da2e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0x2d58559cc80378e2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
movabs rax, 0xc0294ea4194e9aab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
movabs rax, 0x7768b8725aa7d601
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0xa52f81125e9a9ba5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x400], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x408], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x410], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x60]
xorps xmm2, xmmword [rbp + 0x3f0]
movdqa xmm0, xmmword [rbp - 0x50]
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp + 0x400]
mov qword [rbp + 0x418], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x410]
movdqa xmmword [rbp - 0x60], xmm2
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x40], xmm1
test al, al
je 0x180053bbb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053bb0
mov rcx, qword [0x18018e560]
sub r8d, edx
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov r8, rdx
inc r8
cmp byte [r8], r13b
jne 0x180053be1
mov rcx, qword [0x18018e560]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x18005253c