Function at 0x18013b7a8
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r15
mov eax, 0x1518
call fcn.1801585f0
sub rsp, rax
mov qword [rsp + 0x310], 0xfffffffffffffffe
movaps xmmword [rsp + 0x1500], xmm6
movaps xmmword [rsp + 0x14f0], xmm7
mov rbx, rdx
mov rsi, rcx
xor edi, edi
mov eax, dword [0x1801901a4]
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x94], eax
mov dword [rsp + 0x2a0], edi
xor edx, edx
lea r8d, [rdi + 0x68]
lea rcx, [rsp + 0x2a8]
call sub.VCRUNTIME140.dll_memset
or r13, 0xffffffffffffffff
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0xc8], r13
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x140], rax
xor edx, edx
lea r8d, [rdi + 0x70]
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov dword [rsp + 0x2a0], 0x70
lea r15d, [rdi + 1]
mov dword [rsp + 0x2dc], r15d
mov word [rsp + 0x2e0], di
mov qword [rsp + 0xd0], rdi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], rax
movups xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], 7
mov word [rsp + 0xa8], di
lea rax, [rbx + 0x10]
mov qword [rsp + 0x70], rax
cmp qword [rax], rdi
sete byte [rsp + 0x1568]
je 0x18013ba33
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0xcf0]
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov r9d, 0x800
lea r8, [rsp + 0xcf0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0xcf0]
mov r8, r13
inc r8
cmp word [rax + r8*2], di
jne 0x18013b929
lea rdx, [rsp + 0xcf0]
lea rcx, [rsp + 0x148]
call fcn.18000c67c
mov r9, qword [rsp + 0x158]
lea rax, [rsp + 0x148]
mov r8, qword [rsp + 0x148]
mov r12, qword [rsp + 0x160]
cmp r12, 8
cmovae rax, r8
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x18013b97d
mov rdx, qword [rbx]
mov r10, qword [rsp + 0x70]
mov rcx, qword [r10]
cmp r9, rcx
cmovb rcx, r9
test rcx, rcx
je 0x18013b9ad
sub rdx, rax
movzx r10d, word [rax + rdx]
cmp r10w, word [rax]
jne 0x18013b9b7
add rax, 2
sub rcx, r15
jne 0x18013b994
mov r10, qword [rsp + 0x70]
cmp qword [r10], r9
jae 0x18013b9c1
mov eax, r13d
jmp 0x18013b9c6
sbb eax, eax
and eax, 0xfffffffe
add eax, r15d
jmp 0x18013b9c6
mov eax, edi
seta al
test eax, eax
sete byte [rsp + 0x1568]
cmp r12, 8
jb 0x18013ba12
lea rdx, [r12*2 + 2]
mov rax, r8
mov r12d, 0x1000
cmp rdx, r12
jb 0x18013ba08
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013ba08
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.180157a14
jmp 0x18013ba18
mov r12d, 0x1000
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rsp + 0x158], xmm0
mov word [rsp + 0x148], di
jmp 0x18013ba39
mov r12d, 0x1000
cmp dword [rsp + 0x54], 0x12345
jne 0x18013bb15
mov byte [rsp + 0x50], dil
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800db624
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x94], eax
cmp eax, 0xffffffff
je 0x18013ba72
cmp eax, 0x12345
mov al, r15b
jne 0x18013ba75
mov al, dil
mov byte [rsp + 0x50], al
jmp 0x18013baaa
test al, al
jne 0x18013bb15
xor eax, eax
mov qword [rsp + 0xe8], rax
xorps xmm6, xmm6
mov rdx, qword [rsp + 0xc0]
cmp rdx, 8
jb 0x18013baff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
cmp rdx, r12
mov rax, rcx
jb 0x18013bafa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18013cbb2
call fcn.180157a14
movups xmmword [rsi], xmm6
movsd xmm0, qword [rsp + 0xe8]
movsd qword [rsi + 0x10], xmm0
jmp 0x18013cbc6
mov cl, byte [rsp + 0x1568]
test cl, cl
je 0x18013bf7a
mov qword [rsp + 0x168], 0x18
mov qword [rsp + 0x178], 1
mov qword [rsp + 0x170], rdi
mov edx, dword [0x180195f94]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1801a12f4], ecx
jle 0x18013be5a
lea rcx, [0x1801a12f4]
call fcn.180157af0
cmp dword [0x1801a12f4], r13d
jne 0x18013be5a
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0x98], 0x5a
mov byte [rsp + 0x9c], 0x19
mov byte [rsp + 0x9d], 0x28
mov byte [rsp + 0x9e], 0x3f
mov byte [rsp + 0x9f], 0x3b
mov byte [rsp + 0xa0], 0x2e
mov byte [rsp + 0xa1], 0x3f
mov byte [rsp + 0xa2], 0xa
mov byte [rsp + 0xa3], 0x33
mov byte [rsp + 0xa4], 0x2a
mov byte [rsp + 0xa5], 0x3f
xor eax, eax
mov byte [rsp + 0xa6], al
mov al, byte [rsp + 0x9c]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x9c]
mov ecx, dword [rsp + 0x98]
xor cl, al
mov byte [rsp + rdx + 0x9c], cl
add rdx, r15
cmp rdx, 0xa
jb 0x18013bc02
mov byte [rsp + 0xa6], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x1f8], xmm0
mov qword [rsp + 0x208], rdi
mov qword [rsp + 0x210], rdi
lea rax, [rsp + 0x9c]
mov r8, r13
inc r8
cmp byte [rax + r8], dil
jne 0x18013bc50
lea rdx, [rsp + 0x9c]
lea rcx, [rsp + 0x1f8]
call fcn.18000c7ac
nop
mov dword [rsp + 0x84], 0x58
mov eax, dword [rsp + 0x84]
xor al, 0x6b
mov byte [rsp + 0x88], al
mov eax, dword [rsp + 0x84]
add al, r15b
xor al, 0x65
mov byte [rsp + 0x89], al
mov eax, dword [rsp + 0x84]
add al, 2
xor al, 0x72
mov byte [rsp + 0x8a], al
mov eax, dword [rsp + 0x84]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x8b], al
mov eax, dword [rsp + 0x84]
add al, 4
xor al, 0x65
mov byte [rsp + 0x8c], al
mov eax, dword [rsp + 0x84]
add al, 5
xor al, 0x6c
mov byte [rsp + 0x8d], al
mov eax, dword [rsp + 0x84]
add al, 6
xor al, 0x33
mov byte [rsp + 0x8e], al
mov eax, dword [rsp + 0x84]
add al, 7
xor al, 0x32
mov byte [rsp + 0x8f], al
xor eax, eax
mov byte [rsp + 0x90], al
mov al, byte [rsp + 0x88]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x88]
mov ecx, dword [rsp + 0x84]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x88], cl
add rdx, r15
cmp rdx, 8
jb 0x18013bd1c
mov byte [rsp + 0x90], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
lea rax, [rsp + 0x88]
mov r8, r13
inc r8
cmp byte [rax + r8], dil
jne 0x18013bd68
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x180]
call fcn.18000c7ac
nop
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x358]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], rdi
mov r9b, r15b
lea r8, [rsp + 0x1f8]
mov rdx, rax
lea rcx, [0x1801a2300]
call fcn.180141ffc
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x18013bdff
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, r12
jb 0x18013bdfa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013bdfa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rsp + 0x190], xmm0
mov byte [rsp + 0x180], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x88]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xb]
lea rcx, [rsp + 0x9c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163f48]
call fcn.1801579fc
nop
lea rcx, [0x1801a12f4]
call fcn.180157a84
lea rcx, [0x1801a2310]
cmp qword [0x1801a2328], 0x10
cmovae rcx, qword [0x1801a2310]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x18013beaf
lea rcx, [0x1801a2310]
cmp qword [0x1801a2328], 0x10
cmovae rcx, qword [0x1801a2310]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1801a2308], rax
mov r8, rax
lea rdx, [0x1801a2310]
call fcn.1800150f8
xor r9d, r9d
lea r8, [rsp + 0x168]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0xf8]
call qword [0x1801a2300]
test eax, eax
jne 0x18013bf35
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov qword [rsp + 0xe8], rax
xorps xmm6, xmm6
mov rdx, qword [rsp + 0xc0]
cmp rdx, 8
jb 0x18013baff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
cmp rdx, r12
mov rax, rcx
jb 0x18013bafa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013bafa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor r8d, r8d
mov edx, r15d
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x18013bed4
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x2f0], rax
bts dword [rsp + 0x2dc], 8
mov qword [rsp + 0x1e0], rax
mov rax, r15
mov cl, byte [rsp + 0x1568]
jmp 0x18013bf82
mov rax, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0x1560]
cmp rdx, r13
je 0x18013bfb3
mov qword [rsp + 0x2f8], rdx
mov qword [rsp + 0x300], rdx
bts dword [rsp + 0x2dc], 8
mov qword [rsp + rax*8 + 0x1e0], rdx
add rax, r15
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x100]
mov r8b, cl
lea rdx, [rsp + 0x2a0]
mov ecx, dword [rsp + 0x54]
call fcn.180139680
test al, al
jne 0x18013c017
cmp dword [rsp + 0x54], edi
je 0x18013c017
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [rsp + 0x54]
lea rcx, [rsp + 0xd8]
call fcn.1800d619c
mov rcx, rax
call fcn.18000bd8c
jmp 0x18013baae
mov word [rsp + 0x4f0], di
xor edx, edx
mov r8d, 0x7fe
lea rcx, [rsp + 0x4f2]
call sub.VCRUNTIME140.dll_memset
mov al, byte [rsp + 0x1568]
mov byte [0x180190187], al
test al, al
je 0x18013c3f3
lea rdx, [rsp + 0x378]
lea rcx, [0x180190180]
call fcn.18000abe8
mov rbx, rax
lea rax, [rsp + 0xa8]
cmp rax, rbx
je 0x18013c0fa
mov rdx, qword [rsp + 0xc0]
cmp rdx, 8
jb 0x18013c0b8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, r12
jb 0x18013c0b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013c0b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], 7
mov word [rsp + 0xa8], di
mov r8d, 0x20
mov rdx, rbx
lea rcx, [rsp + 0xa8]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rcx, [rsp + 0x378]
call fcn.18000bd8c
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x398]
call fcn.18000be28
mov rcx, rax
call fcn.18000bd8c
lea rcx, [rsp + 0x400]
call fcn.18000b7c4
nop
mov eax, 0x2b
mov word [rsp + 0x70], ax
mov eax, 0x29
mov word [rsp + 0x72], ax
mov eax, 0x36
mov word [rsp + 0x74], ax
mov word [rsp + 0x76], di
movzx eax, word [rsp + 0x70]
mov rcx, rdi
mov edx, 9
movzx eax, word [rsp + rcx*2 + 0x70]
sub ax, dx
mov word [rsp + rcx*2 + 0x70], ax
add rcx, r15
cmp rcx, 3
jb 0x18013c162
lea rdx, [0x1801911f0]
lea rcx, [rsp + 0x3b8]
call fcn.1800d6468
mov rdx, rax
mov eax, 0x28
mov word [rsp + 0x1558], ax
mov word [rsp + 0x155a], di
movzx ecx, word [rsp + 0x1558]
movzx ecx, word [rsp + 0x1558]
sub cx, 6
mov word [rsp + 0x1558], cx
lea rax, [rsp + 0x1558]
mov rcx, r13
inc rcx
cmp word [rax + rcx*2], di
jne 0x18013c1cb
mov r8, qword [rdx + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, r8
cmp rax, rcx
jb 0x18013cbe8
cmp qword [rdx + 0x18], 8
jb 0x18013c1f8
mov rdx, qword [rdx]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x1558]
lea rcx, [rsp + 0x318]
call fcn.1800a8224
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x318]
call fcn.1800a8194
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x120], xmm1
mov r8d, 0x20
mov rdx, rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rdx, [rsp + 0x110]
cmp qword [rsp + 0x128], 8
cmovae rdx, qword [rsp + 0x110]
mov r8, qword [rsp + 0x120]
lea rcx, [rsp + 0x400]
call fcn.18000cce4
nop
mov rdx, qword [rsp + 0x128]
cmp rdx, 8
jb 0x18013c2e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, r12
jb 0x18013c2e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013c2e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rsp + 0x120], xmm0
mov word [rsp + 0x110], di
lea rcx, [rsp + 0x318]
call fcn.18000bd8c
nop
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rsp + 0x1558]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
lea rcx, [rsp + 0x3b8]
call fcn.18000bd8c
nop
xor edx, edx
lea r8d, [rdx + 8]
lea rcx, [rsp + 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x408]
call fcn.18000c140
lea r8, [rsp + 0x278]
cmp qword [rsp + 0x290], 8
cmovae r8, qword [rsp + 0x278]
mov edx, 0x400
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rcx, [rsp + 0x278]
call fcn.18000bd8c
nop
mov rax, qword [rsp + 0x400]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__.0
mov qword [rsp + rcx + 0x400], rax
mov rax, qword [rsp + 0x400]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x3fc], edx
lea rcx, [rsp + 0x408]
call fcn.18000b6fc
lea rcx, [rsp + 0x410]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::destructor_void____ptr64]
lea rcx, [rsp + 0x488]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::destructor_void____ptr64]
jmp 0x18013c635
mov rdx, rbx
lea rcx, [rsp + 0x218]
call fcn.18000be28
nop
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x18013c411
mov rcx, qword [rbx]
mov qword [rsp + 0x20], r15
lea r9, [0x180164ae8]
xor r8d, r8d
mov rdx, qword [rsp + 0x70]
mov rdx, qword [rdx]
call fcn.18000c5c0
cmp rax, r13
je 0x18013c5fa
mov eax, 0x2f
mov word [rsp + 0x1568], ax
mov word [rsp + 0x156a], di
movzx eax, word [rsp + 0x1568]
movzx eax, word [rsp + 0x1568]
sub ax, 0xd
mov word [rsp + 0x1568], ax
mov eax, 0x23
mov word [rsp + 0x1550], ax
mov word [rsp + 0x1552], di
movzx eax, word [rsp + 0x1550]
movzx eax, word [rsp + 0x1550]
sub ax, r15w
mov word [rsp + 0x1550], ax
lea rax, [rsp + 0x1550]
mov rcx, r13
inc rcx
cmp word [rax + rcx*2], di
jne 0x18013c4a3
mov rax, qword [rsp + 0x70]
mov rdx, qword [rax]
movabs rax, 0x7ffffffffffffffe
sub rax, rdx
cmp rax, rcx
jb 0x18013cbee
cmp qword [rbx + 0x18], 8
jb 0x18013c4d4
mov rbx, qword [rbx]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x1550]
lea rcx, [rsp + 0x338]
call fcn.1800a8224
nop
lea rdx, [rsp + 0x1568]
lea rcx, [rsp + 0x338]
call fcn.1800a8194
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b0], xmm1
mov r8d, 0x20
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x218]
call fcn.180015424
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 8
jb 0x18013c5aa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, r12
jb 0x18013c5a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013c5a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rsp + 0x1b0], xmm0
mov word [rsp + 0x1a0], di
lea rcx, [rsp + 0x338]
call fcn.18000bd8c
nop
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rsp + 0x1550]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rsp + 0x1568]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea r8, [rsp + 0x218]
cmp qword [rsp + 0x230], 8
cmovae r8, qword [rsp + 0x218]
mov edx, 0x400
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
nop
lea rcx, [rsp + 0x218]
call fcn.18000bd8c
mov edx, dword [0x180195f94]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1801a1630], ecx
jle 0x18013c8f4
lea rcx, [0x1801a1630]
call fcn.180157af0
cmp dword [0x1801a1630], r13d
jne 0x18013c8f4
lea rax, [rsp + 0x238]
mov qword [rsp + 0x108], rax
mov dword [rsp + 0x58], 0x3c
mov eax, dword [rsp + 0x58]
xor al, 0x43
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x58]
add al, r15b
xor al, 0x72
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x58]
add al, 2
xor al, 0x65
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x58]
add al, 3
xor al, 0x61
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x58]
add al, 4
xor al, 0x74
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x58]
add al, 5
xor al, 0x65
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x58]
add al, 6
xor al, 0x50
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x58]
add al, 7
xor al, 0x72
mov byte [rsp + 0x63], al
mov eax, dword [rsp + 0x58]
add al, 8
xor al, 0x6f
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x58]
mov ebx, 9
add al, bl
xor al, 0x63
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x58]
add al, 0xa
xor al, 0x65
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x58]
add al, 0xb
xor al, 0x73
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x58]
add al, 0xc
xor al, 0x73
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x58]
add al, 0xd
xor al, 0x57
mov byte [rsp + 0x69], al
xor eax, eax
mov byte [rsp + 0x6a], al
mov al, byte [rsp + 0x5c]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x5c]
mov ecx, dword [rsp + 0x58]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x5c], cl
add rdx, r15
cmp rdx, 0xe
jb 0x18013c746
mov byte [rsp + 0x6a], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
mov qword [rsp + 0x248], rdi
mov qword [rsp + 0x250], rdi
lea rax, [rsp + 0x5c]
mov r8, r13
inc r8
cmp byte [rax + r8], dil
jne 0x18013c787
lea rdx, [rsp + 0x5c]
lea rcx, [rsp + 0x238]
call fcn.18000c7ac
nop
mov byte [rsp + 0x78], 0x75
mov byte [rsp + 0x79], 0x6f
mov byte [rsp + 0x7a], 0x7c
mov byte [rsp + 0x7b], 0x78
mov byte [rsp + 0x7c], 0x6f
mov byte [rsp + 0x7d], 0x76
mov byte [rsp + 0x7e], 0x3d
mov byte [rsp + 0x7f], 0x3c
mov byte [rsp + 0x80], dil
mov al, byte [rsp + 0x78]
mov rcx, rdi
mov al, byte [rsp + rcx + 0x78]
sub al, 0xa
mov byte [rsp + rcx + 0x78], al
add rcx, r15
cmp rcx, 8
jb 0x18013c7da
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1d0], xmm1
lea rax, [rsp + 0x78]
mov r8, r13
inc r8
cmp byte [rax + r8], dil
jne 0x18013c80c
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x1c0]
call fcn.18000c7ac
nop
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x3d8]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], rdi
mov r9b, r15b
lea r8, [rsp + 0x238]
mov rdx, rax
lea rcx, [0x1801a0c10]
call fcn.180141994
nop
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0x10
jb 0x18013c8a0
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, r12
jb 0x18013c89b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013c89b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rsp + 0x1d0], xmm0
mov byte [rsp + 0x1c0], dil
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x78]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xf]
lea rcx, [rsp + 0x5c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163f3c]
call fcn.1801579fc
nop
lea rcx, [0x1801a1630]
call fcn.180157a84
lea rbx, [0x1801a0c20]
mov rcx, rbx
cmp qword [0x1801a0c38], 0x10
cmovae rcx, qword [0x1801a0c20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x18013c944
mov rcx, rbx
cmp qword [0x1801a0c38], 0x10
cmovae rcx, qword [0x1801a0c20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1801a0c18], rax
mov r8, rax
mov rdx, rbx
call fcn.1800150f8
lea rax, [rsp + 0x130]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x8080004
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x4f0]
xor ecx, ecx
call qword [0x1801a0c10]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xb8], rdi
je 0x18013ca9e
cmp qword [rsp + 0xc8], r13
je 0x18013ca9e
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xe8], xmm1
mov r8d, 6
lea rdx, str._t_n_v_f_r
lea rcx, [rsp + 0xd8]
call fcn.18000c67c
nop
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x258]
call fcn.1800ab28c
lea rcx, [rsp + 0x258]
call fcn.18000bd8c
nop
mov rdx, qword [rsp + 0xf0]
cmp rdx, 8
jb 0x18013ca53
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, r12
jb 0x18013ca4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013ca4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
mov dword [rsp + 0x94], edi
mov eax, dword [rsp + 0xb8]
lea r8d, [rax*2 + 2]
lea rdx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 8
cmovae rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x94]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x18013cabc
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x308], rdi
je 0x18013cae6
cmp dword [rsp + 0x54], 0xffffffff
je 0x18013cae6
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rsp + 0x308]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0xf8]
cmp rcx, r13
je 0x18013caf9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xc8]
cmp rcx, r13
je 0x18013cb0c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x18013baae
cmp dword [rsp + 0x54], edi
je 0x18013cb4a
mov edx, dword [rsp + 0x140]
lea rcx, [rsp + 0x258]
call fcn.1800d619c
nop
mov r8b, r15b
xor edx, edx
mov rcx, rax
call fcn.1800d8ec4
nop
lea rcx, [rsp + 0x258]
call fcn.18000bd8c
mov edx, dword [rsp + 0x140]
lea rcx, [rsp + 0x258]
call fcn.1800d619c
mov rcx, rax
call fcn.18000bd8c
movups xmm6, xmmword [rsp + 0x130]
movsd xmm7, qword [rsp + 0x140]
mov rdx, qword [rsp + 0xc0]
cmp rdx, 8
jb 0x18013cbbe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, r12
jb 0x18013cbb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013cbb9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movups xmmword [rsi], xmm6
movsd qword [rsi + 0x10], xmm7
mov rax, rsi
lea r11, [rsp + 0x1518]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.18000a128
nop
call fcn.18000a128
int3