Function at 0x180051e90
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb18]
sub rsp, 0xbf0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18017d040]
xor rax, rsp
mov qword [rbp + 0xad0], rax
movabs rax, 0x32049770603509ba
lea rcx, [rbp + 0x8c0]
mov qword [rsp + 0x40], rax
movabs rbx, 0x57729cc38e7b7c6a
mov rax, qword [rsp + 0x40]
movabs r14, 0x326c9700604609db
mov qword [rbp + 0x360], rax
movabs rsi, 0xf923cb057d2c8ac0
movabs rax, 0xf942cb6c7d548ab9
movabs r15, 0x6c942626d7c5be25
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x368], rax
movabs rax, 0x6cf32649d7a9be0b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x370], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x378], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x840], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x848], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x850], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x370]
movdqa xmm6, xmmword [rbp + 0x360]
xorps xmm6, xmmword [rbp + 0x840]
mov qword [rbp + 0x858], rax
xorps xmm0, xmmword [rbp + 0x850]
movdqa xmmword [rbp + 0x370], xmm0
movdqa xmmword [rbp + 0x360], xmm6
call fcn.1800519c0
test al, al
je 0x1800530ba
cmp word [rbp + 0x8c0], 0
lea rax, [rbp + 0x8c0]
je 0x180051ffa
nop dword [rax]
add rax, 2
cmp word [rax], 0
jne 0x180051ff0
movq rcx, xmm6
test cx, cx
je 0x180052020
lea rdx, [rbp + 0x360]
sub rdx, rax
nop
mov word [rax], cx
add rax, 2
movzx ecx, word [rax + rdx]
test cx, cx
jne 0x180052010
xor edi, edi
lea rcx, [rbp + 0x8c0]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov word [rax], di
lea r8d, [rdi + 1]
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x18017ded8], rax
cmp rax, 0xffffffffffffffff
je 0x1800530ba
mov r12d, 3
mov qword [rsp + 0x20], rdi
mov r8d, r12d
lea rdx, [0x180164c28]
xor r9d, r9d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180077720
movabs rax, 0x120bf969072166b7
lea rdx, [rbp + 0x230]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x230]
mov rax, qword [rsp + 0x40]
movabs r13, 0x452507117ad0c874
mov qword [rbp + 0x230], rax
mov r8d, edx
movabs rax, 0x9003a660095ff3b3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x238], rax
movabs rax, 0x16fd4a47beb1d74b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x240], rax
movabs rax, 0x3811bcade112080b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x248], rax
movabs rax, 0xfac466b8d3238282
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x250], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x258], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x5a8], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5b8], rax
movabs rax, 0xfaa003ccb64ff2ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5c0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x230]
xorps xmm2, xmmword [rbp + 0x5a0]
movdqa xmm0, xmmword [rbp + 0x240]
movdqa xmm1, xmmword [rbp + 0x250]
xorps xmm0, xmmword [rbp + 0x5b0]
mov qword [rbp + 0x5c8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5c0]
movdqa xmmword [rbp + 0x230], xmm2
movdqa xmmword [rbp + 0x240], xmm0
movdqa xmmword [rbp + 0x250], xmm1
test al, al
je 0x18005220b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180052200
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x230]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180077e20
test al, al
je 0x1800530ba
xor edx, edx
call fcn.180077720
movabs rax, 0x414cee720f2b6cb6
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x140]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x140], rax
movabs rax, 0x974aeb681858f9b9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x148], rax
movabs rax, 0xdee4f4ab6acca4c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x150], rax
movabs rax, 0x3a1dffe3e014151e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x158], rax
movabs rax, 0xfaa067a9c22a9e9f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x160], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x5d8], rax
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x5d0]
mov qword [rbp + 0x5e0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5e8], rax
movabs rax, 0xfaa003ccb64ff2ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5f0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
xorps xmm2, xmmword [rbp + 0x140]
movdqa xmm0, xmmword [rbp + 0x150]
movdqa xmm1, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x5e0]
mov qword [rbp + 0x5f8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5f0]
movdqa xmmword [rbp + 0x160], xmm1
movdqa xmmword [rbp + 0x140], xmm2
movdqa xmmword [rbp + 0x150], xmm0
test al, al
je 0x1800523b0
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800523a5
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.1800779f0
test al, al
je 0x1800530ba
xor edx, edx
call fcn.180077720
movabs rax, 0x4115e420083268b6
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x170]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x170], rax
movabs rax, 0x8d4aa56c5d41efb4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x178], rax
movabs rax, 0x5e0475cbea9df4c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x180], rax
movabs rax, 0x3b02f1aced5b1205
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x188], rax
movabs rax, 0xfaa003ccd22a868a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x190], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x198], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x600], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x608], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x610], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x618], rax
movabs rax, 0xfaa003ccb64ff2ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x620], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x170]
xorps xmm2, xmmword [rbp + 0x600]
movdqa xmm0, xmmword [rbp + 0x180]
movdqa xmm1, xmmword [rbp + 0x190]
xorps xmm0, xmmword [rbp + 0x610]
mov qword [rbp + 0x628], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x620]
movdqa xmmword [rbp + 0x170], xmm2
movdqa xmmword [rbp + 0x180], xmm0
movdqa xmmword [rbp + 0x190], xmm1
test al, al
je 0x18005255b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180052550
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180061ae0
test al, al
je 0x1800530ba
xor edx, edx
call fcn.180077720
movabs rax, 0x510df172053267b2
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1a0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x1a0], rax
movabs rax, 0x9057a26b140cf9a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x3fd5247adacd244
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x321eecaee1185c04
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xfaa003ccb62b979b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1c0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1c8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x630], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x638], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x640], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x648], rax
movabs rax, 0xfaa003ccb64ff2ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x650], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1a0]
xorps xmm2, xmmword [rbp + 0x630]
movdqa xmm0, xmmword [rbp + 0x1b0]
movdqa xmm1, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x640]
mov qword [rbp + 0x658], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x650]
movdqa xmmword [rbp + 0x1a0], xmm2
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmmword [rbp + 0x1c0], xmm1
test al, al
je 0x180052700
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800526f5
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x321e9765602f09af
lea rcx, [rbp + 0x380]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x380], rax
movabs rax, 0xf94fcb617d028af0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x388], rax
movabs rax, 0x6c942626d7c5be49
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x390], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x398], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x8a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x8a8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x8b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x380]
xorps xmm0, xmmword [rbp + 0x8a0]
mov qword [rbp + 0x8b8], rax
movdqa xmm1, xmmword [rbp + 0x8b0]
xorps xmm1, xmmword [rbp + 0x390]
movdqa xmmword [rbp + 0x390], xmm1
movdqa xmmword [rbp + 0x380], xmm0
call fcn.180078ad0
mov r8, rax
test rax, rax
je 0x1800530ba
movabs rax, 0x5d00f8430e294ae4
lea rdx, [rbp + 0x400]
mov qword [rsp + 0x40], rax
movabs rax, 0xb87a8b451a5fc7b2
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x400], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0xfb65709580ff7d
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x408], rcx
mov rcx, r8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x410], rax
movabs rax, 0x1330d993ce3b0e05
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x418], rax
movabs rax, 0xfaa003ccb64fa8b5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x420], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x428], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x660], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x668], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x670], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x678], rax
movabs rax, 0xfaa003ccb64ff2ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x680], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x400]
xorps xmm0, xmmword [rbp + 0x660]
movdqa xmm1, xmmword [rbp + 0x410]
xorps xmm1, xmmword [rbp + 0x670]
movdqa xmmword [rbp + 0x400], xmm0
movdqa xmm0, xmmword [rbp + 0x420]
mov qword [rbp + 0x688], rax
xorps xmm0, xmmword [rbp + 0x680]
movdqa xmmword [rbp + 0x420], xmm0
movdqa xmmword [rbp + 0x410], xmm1
call fcn.180078db0
mov qword [0x18017fc20], rax
test rax, rax
je 0x1800530ba
xor edx, edx
call fcn.180077720
movabs rax, 0x4605f969402d6da8
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x40], rax
movabs rax, 0x9057aa7f1440eba9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0xe44b49b4e5d04a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0x57729cc3ea1e080f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x580], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x588], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x590], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rbp + 0x580]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rbp + 0x598], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x180052a6b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180052a60
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017f7d0]
test rcx, rcx
jne 0x180052acb
nop dword [rax]
nop word [rax + rax]
lea rdx, [0x18017f7d0]
lea rcx, [0x1800776a0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x18017f7d0]
test rcx, rcx
je 0x180052aa0
lea r8, [0x18005f310]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18017f8f8], rax
test rax, rax
je 0x1800530ba
xor edx, edx
call fcn.180077720
movabs rax, 0x4b1fb774153667b2
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1d0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x1d0], rax
movabs rax, 0x904da2251049feb3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x18f55c4fbba4d751
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x271ff3a0ae151303
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xfaa003a8d33b9783
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x690], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x698], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6a0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6a8], rax
movabs rax, 0xfaa003ccb64ff2ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6b0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1d0]
xorps xmm2, xmmword [rbp + 0x690]
movdqa xmm0, xmmword [rbp + 0x1e0]
movdqa xmm1, xmmword [rbp + 0x1f0]
xorps xmm0, xmmword [rbp + 0x6a0]
mov qword [rbp + 0x6b8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x6b0]
movdqa xmmword [rbp + 0x1d0], xmm2
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmmword [rbp + 0x1f0], xmm1
test al, al
je 0x180052c6b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180052c60
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x18017f6c0]
mov rdx, qword [0x18017f6b8]
mov rcx, qword [0x18017f7d0]
call fcn.180075f60
xor ecx, ecx
call fcn.180066dc0
cmp byte [0x18017f6c8], dil
jne 0x180052cc8
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x18017f6c8], dil
je 0x180052cb4
xor edx, edx
call fcn.180077720
movabs rax, 0x4009e56504286ca9
lea rdx, [rbp + 0x200]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x200]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x200], rax
movabs rax, 0x9d4dae6e1e4de8e0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x208], rax
movabs rax, 0xf54f52beabd705
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x210], rax
movabs rax, 0x771cf3aafa1a0603
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x218], rax
movabs rax, 0x9fd466a0c6229d8c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x220], rax
movabs rax, 0x452507117ad0c810
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x228], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x6c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x6c8], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6d0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6d8], rax
movabs rax, 0xfaa003ccb64ff2ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6e0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x200]
xorps xmm2, xmmword [rbp + 0x6c0]
movdqa xmm0, xmmword [rbp + 0x210]
movdqa xmm1, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x6d0]
mov qword [rbp + 0x6e8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x6e0]
movdqa xmmword [rbp + 0x200], xmm2
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmmword [rbp + 0x220], xmm1
test al, al
je 0x180052e4b
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180052e40
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x200]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18006ef70
test al, al
jne 0x1800530f1
movzx edx, r12b
call fcn.180077720
movabs rax, 0x2c4f750c66706cf3
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x60]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x60], rax
movabs rax, 0xb24824f5abe6e019
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
movabs rax, 0xf3fec3afc503547b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
movabs rax, 0x3170225a5f0dc535
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
movabs rax, 0x586f11690a190d95
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4c0], rax
movabs rax, 0xd321509cc58fc076
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x9296a08fa0793d17
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4d0], rax
movabs rax, 0x3170225a5f0db658
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x60]
xorps xmm1, xmmword [rbp + 0x4c0]
movdqa xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x4d8], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x4d0]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmmword [rbp + 0x70], xmm0
test al, al
je 0x180052f8d
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180052f82
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movzx edx, r12b
call fcn.180077720
movabs rax, 0x464cf3650c2f68bd
lea rdx, [rbp + 0x490]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x490]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x490], rax
movabs rax, 0xd953be71185faaaf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x498], rax
movabs rax, 0x6ce74a47a2b6d753
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4a0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4a8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x30], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x490]
xorps xmm1, xmmword [rbp - 0x40]
movdqa xmm0, xmmword [rbp + 0x4a0]
mov qword [rbp - 0x28], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x490], xmm1
movdqa xmmword [rbp + 0x4a0], xmm0
test al, al
je 0x18005309b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053090
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x490]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0xad0]
xor rcx, rsp
call fcn.1800dc8e0
lea r11, [rsp + 0xbf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.180077720
movabs rax, 0x4109e57514276cbd
lea rdx, [rbp + 0x260]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x260]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x260], rax
movabs rax, 0x9542a2711442e3e0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x268], rax
movabs rax, 0x4cfa494fa3a4c44c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x270], rax
movabs rax, 0x3206f9affe161309
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x278], rax
movabs rax, 0xfaa003ccb64ff28b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x280], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x288], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x6f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x6f8], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x700], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x708], rax
movabs rax, 0xfaa003ccb64ff2ef
movdqa xmm0, xmmword [rbp + 0x700]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x710], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x260]
xorps xmm2, xmmword [rbp + 0x6f0]
xorps xmm0, xmmword [rbp + 0x270]
mov qword [rbp + 0x718], rax
movq rax, xmm2
movdqa xmm1, xmmword [rbp + 0x710]
xorps xmm1, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x280], xmm1
movdqa xmmword [rbp + 0x260], xmm2
movdqa xmmword [rbp + 0x270], xmm0
test al, al
je 0x18005326b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053260
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x260]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x5642e36e052f65b8
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x430]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x80], rax
movabs rax, 0xf923cb057d2ce6ac
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x80]
mov qword [rsp + 0x68], rax
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x80], xmm0
call fcn.180054e70
movabs rax, 0x1c5ef26e092167be
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x450]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
movabs rax, 0xf923cb057d40e6a4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x90]
mov qword [rsp + 0x78], rax
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x90], xmm0
call fcn.180054e70
movabs rax, 0x4b1ff66d052e6aa8
lea rdx, [rbp + 0x3a0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x470]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a0], rax
movabs rax, 0x954faf2b1049feb3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x4e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4e8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4f0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x3a0]
xorps xmm0, xmmword [rbp + 0x4e0]
mov qword [rbp + 0x4f8], rax
movdqa xmm1, xmmword [rbp + 0x4f0]
xorps xmm1, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x3b0], xmm1
movdqa xmmword [rbp + 0x3a0], xmm0
call fcn.180054e70
mov ecx, 0x60
call fcn.180055ac0
mov r14, rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
lea r13, [rbp + 0x430]
mov rbx, rax
sub r13, rax
lea rcx, [rax + 0x60]
mov edx, 0x16
lea rax, [rbp + 0x448]
mov qword [rsp + 0x58], rcx
sub rax, rbx
movabs rcx, 0x7fffffffffffffff
mov qword [rsp + 0x40], rax
nop word [rax + rax]
xorps xmm0, xmm0
lea r15, [rbx + r13]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
cmp qword [rax + rbx], 0xf
mov rsi, qword [rax + rbx - 8]
jbe 0x1800534d1
mov r15, qword [r15]
cmp rsi, rcx
ja 0x180054aaf
mov qword [rbx + 0x18], 0xf
cmp rsi, 0xf
ja 0x1800534f5
mov qword [rbx + 0x10], rsi
movups xmm0, xmmword [r15]
movups xmmword [rbx], xmm0
jmp 0x180053536
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x180053506
mov rdi, rcx
jmp 0x18005350e
cmp rdi, 0x16
cmovb rdi, rdx
lea rcx, [rdi + 1]
call fcn.180055ac0
lea r8, [rsi + 1]
mov qword [rbx], rax
mov rdx, r15
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov qword [rbx + 0x18], rdi
call fcn.180102770
xor edi, edi
lea edx, [rdi + 0x16]
add rbx, 0x20
lea rcx, [rbp + 0x490]
lea rax, [rbx + r13]
cmp rax, rcx
mov rax, qword [rsp + 0x40]
movabs rcx, 0x7fffffffffffffff
jne 0x1800534b0
mov rdx, rbx
mov rcx, rbx
call fcn.1800556c0
xor r13d, r13d
mov qword [rsp + 0x50], rbx
lea rdi, [rbp + 0x490]
nop word [rax + rax]
mov rdx, qword [rdi - 8]
lea rdi, [rdi - 0x20]
dec r12
cmp rdx, 0xf
jbe 0x1800535c1
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1800535bc
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180054aa9
mov rcx, r8
call fcn.1800dca7c
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r13b
test r12, r12
jne 0x180053580
movabs rdi, 0x57729cc38e7b7c6a
movabs rsi, 0xf923cb057d2c8ac0
movabs r15, 0x326c9700604609db
movabs r12, 0x6c942626d7c5be25
cmp r14, rbx
je 0x180053726
movabs rax, 0x32099768602509a8
movabs rcx, 0xf957cb2b7d4d8aad
movabs r8, 0x6c942626d7b1be5d
cmp qword [r14 + 0x18], 0xf
mov rdx, r14
jbe 0x180053631
mov rdx, qword [r14]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c0], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x3c0]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c8], rax
mov qword [rsp + 0x40], r8
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x500], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x508], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x510], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x3c0]
movdqa xmm1, xmmword [rbp + 0x3d0]
xorps xmm0, xmmword [rbp + 0x500]
mov qword [rbp + 0x518], rax
xorps xmm1, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x3d0], xmm1
movdqa xmmword [rbp + 0x3c0], xmm0
call fcn.18006cac0
test al, al
je 0x180054a95
add r14, 0x20
movabs rax, 0x32099768602509a8
movabs rcx, 0xf957cb2b7d4d8aad
movabs r8, 0x6c942626d7b1be5d
cmp r14, rbx
jne 0x180053624
xor edx, edx
call fcn.180077720
movabs rax, 0x414cf66d052e6aa8
lea rdx, [rbp + 0x290]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x290]
mov rax, qword [rsp + 0x40]
movabs rbx, 0x452507117ad0c874
mov qword [rbp + 0x290], rax
movabs r14, 0xfaa003ccb64ff2ef
movabs rax, 0x974aeb681858f9b9
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x298], rax
movabs rax, 0xdee4f4ab6acca4c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x3a1dffe3e014151e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xfaa067a9c22a9e9f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x720], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r12
mov qword [rbp + 0x728], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x730], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x738], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x740], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x290]
xorps xmm2, xmmword [rbp + 0x720]
movdqa xmm0, xmmword [rbp + 0x2a0]
movdqa xmm1, xmmword [rbp + 0x2b0]
xorps xmm0, xmmword [rbp + 0x730]
mov qword [rbp + 0x748], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x740]
movdqa xmmword [rbp + 0x290], xmm2
movdqa xmmword [rbp + 0x2a0], xmm0
movdqa xmmword [rbp + 0x2b0], xmm1
test al, al
je 0x1800538ab
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800538a0
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x290]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x321a976e602909b8
lea rcx, [rbp + 0x3e0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e0], rax
movabs rax, 0xf90dcb767d5e8aa1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e8], rax
movabs rax, 0x6c942652d7bdbe51
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x520], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x528], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x530], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x3e0]
movdqa xmm1, xmmword [rbp + 0x3f0]
xorps xmm0, xmmword [rbp + 0x520]
mov qword [rbp + 0x538], rax
xorps xmm1, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x3f0], xmm1
movdqa xmmword [rbp + 0x3e0], xmm0
call fcn.18005ae30
test al, al
je 0x180054a95
xor edx, edx
call fcn.180077720
movabs rax, 0x121fe561162866b8
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x110]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x110], rax
movabs rax, 0x9a03af600d41ffa4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x118], rax
movabs rax, 0x8f15243bbb5d34a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x120], rax
movabs rax, 0x2307ecb7fb145c46
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x128], rax
movabs rax, 0x9bd66da3d56dd2d5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x130], rax
movabs rax, 0x450773690efebb06
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x138], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x750], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r12
mov qword [rbp + 0x758], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x760], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x768], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x770], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x110]
xorps xmm2, xmmword [rbp + 0x750]
movdqa xmm0, xmmword [rbp + 0x120]
movdqa xmm1, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x760]
mov qword [rbp + 0x778], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x770]
movdqa xmmword [rbp + 0x110], xmm2
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
test al, al
je 0x180053b2b
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053b20
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.180059a80
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x18017f7d8], rax
mov r12, rax
call fcn.180059a80
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x18017f7f0], rax
mov r15, rax
call fcn.180059a80
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x18017f7e8], rax
mov r14, rax
call fcn.180059a80
movabs rdx, 0xb231a1bea995f83b
mov qword [0x18017f7f8], rax
mov rsi, rax
call fcn.180059a80
movabs rdx, 0x5f0720d54e5f164
mov qword [0x18017f7e0], rax
mov rdi, rax
call fcn.180059a80
movabs rdx, 0x483047d5ed936395
mov qword [0x18017f800], rax
mov rbx, rax
call fcn.180059a80
test rax, rax
mov qword [0x18017f808], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x180054a95
xor edx, edx
call fcn.180077720
movabs rax, 0x121fe561162866b8
lea rdx, [rbp + 0x2c0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x2c0]
mov rax, qword [rsp + 0x40]
movabs r12, 0x452507117ad0c874
mov qword [rbp + 0x2c0], rax
movabs r14, 0x326c9700604609db
movabs rax, 0x9003a660095ff3b3
movabs rsi, 0xf923cb057d2c8ac0
mov qword [rsp + 0x40], rax
movabs r15, 0x6c942626d7c5be25
mov rax, qword [rsp + 0x40]
movabs rdi, 0x57729cc38e7b7c6a
mov qword [rbp + 0x2c8], rax
movabs rbx, 0xfaa003ccb64ff2ef
movabs rax, 0x16fd4a47beb1d74b
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x3811bcade112080b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xfac466b8d3238282
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x780], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x788], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x790], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x798], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7a0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x2c0]
xorps xmm2, xmmword [rbp + 0x780]
movdqa xmm0, xmmword [rbp + 0x2d0]
movdqa xmm1, xmmword [rbp + 0x2e0]
xorps xmm0, xmmword [rbp + 0x790]
mov qword [rbp + 0x7a8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x7a0]
movdqa xmmword [rbp + 0x2c0], xmm2
movdqa xmmword [rbp + 0x2d0], xmm0
movdqa xmmword [rbp + 0x2e0], xmm1
test al, al
je 0x180053dee
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053de3
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x2c0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005cdd0
test al, al
je 0x180054a95
xor edx, edx
call fcn.180077720
movabs rax, 0x5c05b7730b2966b3
lea rdx, [rbp]
mov qword [rsp + 0x40], rax
lea rcx, [rbp]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp], rax
movabs rax, 0x9859a2691c45fea9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 8], rax
movabs rax, 0x1fb4506b9aad751
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x10], rax
movabs rax, 0x5772f8a6fa1e101a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x540], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x548], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x550], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp + 0x540]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0x558], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x550]
movdqa xmmword [rbp], xmm1
movdqa xmmword [rbp + 0x10], xmm0
test al, al
je 0x180053f0b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053f00
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x320d9766602309bf
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
movabs rax, 0xf923cb717d408ab5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0xa0]
mov qword [rbp - 0x78], rax
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0xa0], xmm0
call fcn.180056200
test al, al
jne 0x1800541aa
mov dl, 2
call fcn.180077720
movabs rax, 0x464cf3650c2f68bd
lea rdx, [rbp + 0x320]
mov qword [rsp + 0x40], rax
movabs rcx, 0x221620efeab253ce
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x320], rax
movabs rax, 0xd953be71185faaaf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x328], rax
movabs rax, 0xb45449f8a1d044
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x330], rax
movabs rax, 0x3614f9a7ae1f1d05
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x338], rax
movabs rax, 0x9cce6caf963b9e9a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x340], rax
movabs rax, 0x2a4c737008a5af1d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x348], rax
movabs rax, 0x87db5472db6a69b7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x350], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x358], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x860], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x868], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x870], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x878], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x880], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x888], rax
movabs rax, 0x87db5472db6a69d9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x890], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x320]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x330]
xorps xmm0, xmmword [rbp + 0x870]
movdqa xmm2, xmmword [rbp + 0x320]
xorps xmm2, xmmword [rbp + 0x860]
movdqa xmm1, xmmword [rbp + 0x340]
xorps xmm1, xmmword [rbp + 0x880]
movdqa xmmword [rbp + 0x330], xmm0
movdqa xmm0, xmmword [rbp + 0x350]
mov qword [rbp + 0x898], rax
movq rax, xmm2
xorps xmm0, xmmword [rbp + 0x890]
movdqa xmmword [rbp + 0x350], xmm0
movdqa xmmword [rbp + 0x320], xmm2
movdqa xmmword [rbp + 0x340], xmm1
test al, al
je 0x18005419b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054190
sub r8d, edx
lea rdx, [rbp + 0x320]
jmp 0x180054335
xor edx, edx
call fcn.180077720
movabs rax, 0x4019f069062866b8
lea rdx, [rbp + 0x2f0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x2f0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x2f0], rax
movabs rax, 0x8050eb6b1245fea1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x5fa4f06baa0ca56
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x300], rax
movabs rax, 0x2313e6aae21a151e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x308], rax
movabs rax, 0x8acd6caf96219d86
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x310], rax
movabs rax, 0x452507751fa4ad18
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x318], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x7b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x7b8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7c8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7d0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x2f0]
xorps xmm2, xmmword [rbp + 0x7b0]
movdqa xmm0, xmmword [rbp + 0x300]
movdqa xmm1, xmmword [rbp + 0x310]
xorps xmm0, xmmword [rbp + 0x7c0]
mov qword [rbp + 0x7d8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x7d0]
movdqa xmmword [rbp + 0x2f0], xmm2
movdqa xmmword [rbp + 0x300], xmm0
movdqa xmmword [rbp + 0x310], xmm1
test al, al
je 0x18005432b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054320
sub r8d, edx
lea rdx, [rbp + 0x2f0]
mov rcx, qword [0x18017ded8]
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x142a52e507227ea
lea rbx, [rbp - 0x10]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x10], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x10]
mov rcx, qword [0x18017f6b0]
mov qword [rbp - 0x68], rax
xorps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x10], xmm0
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
test rax, rax
je 0x1800543db
lea rcx, [rbp - 0x10]
sub rax, rcx
nop dword [rax]
movzx ecx, byte [rbx + rax]
movzx edx, byte [rbx]
lea rbx, [rbx + 1]
test cl, cl
je 0x1800543d3
cmp cl, dl
je 0x1800543c0
cmp cl, dl
je 0x1800548dc
mov dl, 2
call fcn.180077720
movabs rax, 0x1202f86913346cad
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xb0]
mov rax, qword [rsp + 0x40]
movabs rbx, 0xfaa003ccb64ff2ef
mov qword [rbp + 0xb0], rax
mov r8d, edx
movabs rax, 0x9140bf64105fe3ad
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0x4cf84745b8a99e04
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
movabs rax, 0x2400f9b5ae492f29
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc8], rax
movabs rax, 0xfaa003ec8c219d86
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x7e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x7e8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7f8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x800], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xb0]
xorps xmm2, xmmword [rbp + 0x7e0]
movdqa xmm0, xmmword [rbp + 0xc0]
movdqa xmm1, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x7f0]
mov qword [rbp + 0x808], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x800]
movdqa xmmword [rbp + 0xb0], xmm2
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xd0], xmm1
test al, al
je 0x18005455b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054550
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x142a52e507227ea
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x50]
mov qword [rbp - 0x58], rax
xorps xmm0, xmmword [rbp - 0x60]
movq rax, xmm0
movdqa xmmword [rbp - 0x50], xmm0
test al, al
je 0x1800545eb
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800545e0
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x5c09e572152529f7
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x20]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x20], rax
movabs rax, 0x9c55eb372e6faab4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x28], rax
movabs rax, 0x6cb41c48b8accd57
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x560], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x568], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x570], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp + 0x560]
movdqa xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x578], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmmword [rbp + 0x30], xmm0
test al, al
je 0x1800546eb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800546e0
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017f6b0]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
mov rcx, rax
mov r8d, eax
cmp byte [rax], r13b
je 0x180054730
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054725
mov rcx, qword [0x18017ded8]
sub r8d, eax
xor r9d, r9d
mov qword [rsp + 0x20], r13
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x4a15ff70132729f5
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xe0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0xe0], rax
movabs rax, 0x8d4bac6c100ceba9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xe8], rax
movabs rax, 0x2e14006a3aad005
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf0], rax
movabs rax, 0x2413bcade1120809
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf8], rax
movabs rax, 0xd4cc62a1c4209ccf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x100], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x108], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x810], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x818], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x820], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x828], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x830], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xe0]
xorps xmm2, xmmword [rbp + 0x810]
movdqa xmm0, xmmword [rbp + 0xf0]
movdqa xmm1, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x820]
mov qword [rbp + 0x838], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x830]
movdqa xmmword [rbp + 0xe0], xmm2
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmmword [rbp + 0x100], xmm1
test al, al
je 0x1800548bb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800548b0
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x1800548e6
movabs rbx, 0xfaa003ccb64ff2ef
xor edx, edx
call fcn.180077720
movabs rax, 0x5305ef7908367aba
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x40], rax
movabs rax, 0x9542a2711442e3e0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
movabs rax, 0x4cfa494fa3a4c44c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0x3206f9affe161309
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x28], rax
movabs rax, 0x93d371a9c06fde8b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x20], rax
movabs rax, 0x452507115aeaa61b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x490], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x498], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4a0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4a8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4b0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x40]
xorps xmm2, xmmword [rbp + 0x490]
movdqa xmm0, xmmword [rbp - 0x30]
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm0, xmmword [rbp + 0x4a0]
mov qword [rbp + 0x4b8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x4b0]
movdqa xmmword [rbp - 0x40], xmm2
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmmword [rbp - 0x20], xmm1
test al, al
je 0x180054a3b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054a30
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov r8, rdx
inc r8
cmp byte [r8], r13b
jne 0x180054a61
mov rcx, qword [0x18017ded8]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rcx, [rsp + 0x48]
mov bl, 1
call fcn.180054f50
movzx eax, bl
jmp 0x1800530bc
xor bl, bl
lea rcx, [rsp + 0x48]
call fcn.180054f50
movzx eax, bl
jmp 0x1800530bc
call fcn.1800e91c8
int3
call fcn.180051950
int3