Function at 0x180051d40
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xa68]
sub rsp, 0xb40
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18017c040]
xor rax, rsp
mov qword [rbp + 0xa20], rax
movabs rax, 0xe9fe384116c4a5e4
lea rcx, [rbp + 0x810]
mov qword [rsp + 0x40], rax
movabs rsi, 0xbe91939255bd1558
mov rax, qword [rsp + 0x40]
movabs rdi, 0xe996383116b7a585
mov qword [rbp + 0x330], rax
movabs rbx, 0x216ff70400bc85c6
movabs rax, 0x210ef76d00c485bf
movabs r14, 0xb9d6aecf14cf65e7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x338], rax
movabs rax, 0xb9b1aea014a365c9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x340], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x348], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x420], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x428], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x430], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x340]
movdqa xmm6, xmmword [rbp + 0x330]
xorps xmm6, xmmword [rbp + 0x420]
mov qword [rbp + 0x438], rax
xorps xmm0, xmmword [rbp + 0x430]
movdqa xmmword [rbp + 0x340], xmm0
movdqa xmmword [rbp + 0x330], xmm6
call fcn.180051870
test al, al
je 0x180052f2a
cmp word [rbp + 0x810], 0
lea rax, [rbp + 0x810]
je 0x180051eaa
nop dword [rax]
add rax, 2
cmp word [rax], 0
jne 0x180051ea0
movq rcx, xmm6
test cx, cx
je 0x180051ed0
lea rdx, [rbp + 0x330]
sub rdx, rax
nop
mov word [rax], cx
add rax, 2
movzx ecx, word [rdx + rax]
test cx, cx
jne 0x180051ec0
xor r13d, r13d
lea rcx, [rbp + 0x810]
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov word [rax], r13w
lea r8d, [r13 + 1]
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x18017ced8], rax
cmp rax, 0xffffffffffffffff
je 0x180052f2a
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea r8d, [r13 + 3]
mov rcx, rax
lea rdx, [0x180164858]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180076910
movabs rax, 0xc9f1565871d0cae9
lea rdx, [rbp + 0x290]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x290]
mov rax, qword [rsp + 0x40]
movabs r15, 0xe8f45940589d3f3a
mov qword [rbp + 0x290], rax
movabs r12, 0x237c60df7a22729
movabs rax, 0x484f9a6174cffcb5
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x298], rax
movabs rax, 0xc3bfc2ae7dbb0c89
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xd1f2b3fc3ad46139
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x253a37992ce5744
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b8], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x500], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x508], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x510], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x518], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x520], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x290]
xorps xmm2, xmmword [rbp + 0x500]
movdqa xmm0, xmmword [rbp + 0x2a0]
movdqa xmm1, xmmword [rbp + 0x2b0]
xorps xmm0, xmmword [rbp + 0x510]
mov qword [rbp + 0x528], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x520]
movdqa xmmword [rbp + 0x290], xmm2
movdqa xmmword [rbp + 0x2a0], xmm0
movdqa xmmword [rbp + 0x2b0], xmm1
test al, al
je 0x1800520bb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800520b0
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x290]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180077010
test al, al
je 0x180052f2a
xor edx, edx
call fcn.180076910
movabs rax, 0x9ab6414379dac0e8
lea rdx, [rbp + 0x2c0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x2c0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x2c0], rax
movabs rax, 0x4f06d76965c8f6bf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2c8], rax
movabs rax, 0xd8acc7a375a6118e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xd3fef0b23bd27c2c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x237a26883c74b59
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e8], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x530], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x538], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x540], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x548], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x550], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x2c0]
xorps xmm2, xmmword [rbp + 0x530]
movdqa xmm0, xmmword [rbp + 0x2d0]
movdqa xmm1, xmmword [rbp + 0x2e0]
xorps xmm0, xmmword [rbp + 0x540]
mov qword [rbp + 0x558], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x550]
movdqa xmmword [rbp + 0x2c0], xmm2
movdqa xmmword [rbp + 0x2d0], xmm0
movdqa xmmword [rbp + 0x2e0], xmm1
test al, al
je 0x18005225b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052250
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x2c0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180076be0
test al, al
je 0x180052f2a
xor edx, edx
call fcn.180076910
movabs rax, 0x9aef4b117ec3c4e8
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x80]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x80], rax
movabs rax, 0x5506996d20d1e0b2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x88], rax
movabs rax, 0xd0a2cfb57da3048e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
movabs rax, 0xd2e1fefd369d7b37
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0x237c60d93c7534c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x560], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x568], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x570], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x578], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x580], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x80]
xorps xmm2, xmmword [rbp + 0x560]
movdqa xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x570]
mov qword [rbp + 0x588], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x80], xmm2
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0xa0], xmm1
test al, al
je 0x1800523fb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800523f0
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180060fa0
test al, al
je 0x180052f2a
xor edx, edx
call fcn.180076910
movabs rax, 0x8af75e4373c3cbec
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xb0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0xb0], rax
movabs rax, 0x481b9e6a699cf6a3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0xd6bfdaae6ea60986
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
movabs rax, 0xdbfde3ff3ade3536
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc8], rax
movabs rax, 0x237c60df7c6425d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd8], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x590], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x598], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5a8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5b0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xb0]
xorps xmm2, xmmword [rbp + 0x590]
movdqa xmm0, xmmword [rbp + 0xc0]
movdqa xmm1, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x5a0]
mov qword [rbp + 0x5b8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5b0]
movdqa xmmword [rbp + 0xb0], xmm2
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xd0], xmm1
test al, al
je 0x18005259b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052590
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xe9e4385416dea5f1
lea rcx, [rbp + 0x350]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x350], rax
movabs rax, 0x2103f760009285f6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x358], rax
movabs rax, 0xb9d6aecf14cf658b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x360], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x368], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x440], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x448], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x450], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x440]
mov qword [rbp + 0x458], rax
movdqa xmm1, xmmword [rbp + 0x450]
xorps xmm1, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x360], xmm1
movdqa xmmword [rbp + 0x350], xmm0
call fcn.180078140
mov r8, rax
test rax, rax
je 0x180052f2a
movabs rax, 0x86fa577278d8e6ba
lea rdx, [rbp + 0x390]
mov qword [rsp + 0x40], rax
movabs rax, 0x6036b74467cfc8b4
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x390], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0xd5b9ed99568a24bf
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x398], rcx
mov rcx, r8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a0], rax
movabs rax, 0xfad3d6c215fd6737
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x237c60df7a27d73
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b8], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x5c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x5c8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5d8], rax
movdqa xmm1, xmmword [rbp + 0x5d0]
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5e0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x390]
xorps xmm0, xmmword [rbp + 0x5c0]
xorps xmm1, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp + 0x5e0]
xorps xmm0, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x3b0], xmm0
movdqa xmmword [rbp + 0x3a0], xmm1
call fcn.180078420
mov qword [0x18017eca0], rax
test rax, rax
je 0x180052f2a
xor edx, edx
call fcn.180076910
movabs rax, 0x9dff565836dcc1f6
lea rdx, [rbp + 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x10]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x10], rax
movabs rax, 0x481b967e69d0e4af
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x18], rax
movabs rax, 0xd5a6c3a077ef0b88
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x20], rax
movabs rax, 0xbe91939231d8613d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x28], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x460], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x468], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x470], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x10]
xorps xmm1, xmmword [rbp + 0x460]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x478], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp + 0x20], xmm0
test al, al
je 0x1800528fb
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800528f0
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x10]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017e880]
test rcx, rcx
jne 0x18005295b
nop dword [rax]
nop word [rax + rax]
lea rdx, [0x18017e880]
lea rcx, [0x180076890]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x18017e880]
test rcx, rcx
je 0x180052930
lea r8, [0x18005eaa0]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18017e998], rax
test rax, rax
je 0x180052f2a
xor edx, edx
call fcn.180076910
movabs rax, 0x90e5184563c7cbec
lea rdx, [rbp + 0x200]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x200]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x200], rax
movabs rax, 0x48019e246dd9f1b5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x208], rax
movabs rax, 0xcdb7d4a678ae0c93
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x210], rax
movabs rax, 0xcefcfcf175d37a31
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x218], rax
movabs rax, 0x237c66992d64245
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x220], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x228], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x5f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x5f8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x600], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x608], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x610], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x200]
xorps xmm2, xmmword [rbp + 0x5f0]
movdqa xmm0, xmmword [rbp + 0x210]
movdqa xmm1, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x600]
mov qword [rbp + 0x618], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x610]
movdqa xmmword [rbp + 0x200], xmm2
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmmword [rbp + 0x220], xmm1
test al, al
je 0x180052aec
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052ae1
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x200]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x18017e770]
mov rdx, qword [0x18017e768]
mov rcx, qword [0x18017e880]
call fcn.180075110
xor ecx, ecx
call fcn.180065e10
cmp byte [0x18017e778], r13b
jne 0x180052b49
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x18017e778], r13b
je 0x180052b35
xor edx, edx
call fcn.180076910
movabs rax, 0x9bf34a5472d9c0f7
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x110]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x110], rax
movabs rax, 0x4501926f63dde7e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x118], rax
movabs rax, 0xd5b7c7bb7da10cc7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x120], rax
movabs rax, 0x9efffcfb21dc6f31
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x128], rax
movabs rax, 0x6743a36187cf484a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x130], rax
movabs rax, 0xe8f45940589d3f5e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x138], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x620], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x628], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x630], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x638], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x640], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x110]
xorps xmm2, xmmword [rbp + 0x620]
movdqa xmm0, xmmword [rbp + 0x120]
movdqa xmm1, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x630]
mov qword [rbp + 0x648], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x640]
movdqa xmmword [rbp + 0x110], xmm2
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
test al, al
je 0x180052ccb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052cc0
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18006e040
test al, al
jne 0x180052f61
mov dl, 3
call fcn.180076910
movabs rdi, 0xb7b3d9ad3fce0c9d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x40], rdi
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x40]
movabs rsi, 0xc393bdc853a76dfb
mov qword [rbp + 0x30], rax
movabs r14, 0x4772716d110646e0
movabs rax, 0x261b05047f6f668f
movabs r15, 0x93d43466f524074d
mov qword [rsp + 0x40], rax
movabs rbx, 0xe4940dfbcec6d522
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x38], rax
movabs rax, 0xf2bc5746905e6e21
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
movabs rax, 0xe4940dfbcec6a64f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x480], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x490], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x30]
xorps xmm1, xmmword [rbp + 0x480]
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x498], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x490]
movdqa xmmword [rbp + 0x30], xmm1
movdqa xmmword [rbp + 0x40], xmm0
test al, al
je 0x180052e0b
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052e00
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dl, 3
call fcn.180076910
mov qword [rsp + 0x40], rdi
lea rdx, [rbp + 0x3f0]
mov rax, qword [rsp + 0x40]
lea rcx, [rbp + 0x3f0]
mov qword [rbp + 0x3f0], rax
mov r8d, edx
movabs rax, 0x670204197475668f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f8], rax
movabs rax, 0x93a7580780576e3b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x400], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x408], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x3f0]
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmm0, xmmword [rbp + 0x400]
mov qword [rbp - 0x48], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x3f0], xmm1
movdqa xmmword [rbp + 0x400], xmm0
test al, al
je 0x180052f0b
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052f00
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x3f0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0xa20]
xor rcx, rsp
call fcn.1800dbf50
lea r11, [rsp + 0xb40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.180076910
movabs rax, 0x9af34a4462d6c0e3
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x140]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x140], rax
movabs rax, 0x4d0e9e7069d2ece6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x148], rax
movabs rax, 0x99b8c1a660ae1f8e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x150], rax
movabs rax, 0xdbe5f6fe25d07a3b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x158], rax
movabs rax, 0x237c60df7a2274d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x160], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x650], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x658], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x660], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x668], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x670], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x140]
xorps xmm2, xmmword [rbp + 0x650]
movdqa xmm0, xmmword [rbp + 0x150]
movdqa xmm1, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x660]
mov qword [rbp + 0x678], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x670]
movdqa xmmword [rbp + 0x140], xmm2
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmmword [rbp + 0x160], xmm1
test al, al
je 0x1800530d0
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800530c5
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x8db84c5f73dec9e6
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x3c0]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0x216ff70400bce9aa
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x58], rax
movabs rax, 0xe9f3385916d4a5f6
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x50], xmm0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x210cf75b00dd85ab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c8], rax
movabs rax, 0xb9b8aeaa14a6658b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d0], rax
movabs rax, 0xbee993e65593152c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d8], rax
movabs rax, 0x237c60df7a2275d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e8], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x680], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x688], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x690], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x698], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6a0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x3c0]
xorps xmm0, xmmword [rbp + 0x680]
movdqa xmm1, xmmword [rbp + 0x3d0]
xorps xmm1, xmmword [rbp + 0x690]
movdqa xmmword [rbp + 0x3c0], xmm0
movdqa xmm0, xmmword [rbp + 0x3e0]
mov qword [rbp + 0x6a8], rax
xorps xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x3e0], xmm0
movdqa xmmword [rbp + 0x3d0], xmm1
call fcn.18006bb40
test al, al
je 0x180052f2a
xor edx, edx
call fcn.180076910
movabs rax, 0x9ab6595c73dfc6f6
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x170]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x170], rax
movabs rax, 0x4f06d76965c8f6bf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x178], rax
movabs rax, 0xd8acc7a375a6118e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x180], rax
movabs rax, 0xd3fef0b23bd27c2c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x188], rax
movabs rax, 0x237a26883c74b59
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x190], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x198], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x6b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x6b8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x6c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6c8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6d0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x170]
xorps xmm2, xmmword [rbp + 0x6b0]
movdqa xmm0, xmmword [rbp + 0x180]
movdqa xmm1, xmmword [rbp + 0x190]
xorps xmm0, xmmword [rbp + 0x6c0]
mov qword [rbp + 0x6d8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x6d0]
movdqa xmmword [rbp + 0x170], xmm2
movdqa xmmword [rbp + 0x180], xmm0
movdqa xmmword [rbp + 0x190], xmm1
test al, al
je 0x18005341b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053410
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xe9e0385f16d8a5e6
lea rcx, [rbp + 0x370]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x370], rax
movabs rax, 0x2141f77700ce85a7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x378], rax
movabs rax, 0xb9d6aebb14b76593
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x380], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x388], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x4e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4e8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4f0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x370]
movdqa xmm1, xmmword [rbp + 0x380]
xorps xmm0, xmmword [rbp + 0x4e0]
mov qword [rbp + 0x4f8], rax
xorps xmm1, xmmword [rbp + 0x4f0]
movdqa xmmword [rbp + 0x380], xmm1
movdqa xmmword [rbp + 0x370], xmm0
call fcn.18005a770
test al, al
je 0x180052f2a
xor edx, edx
call fcn.180076910
movabs rax, 0xc9e54a5060d9cae6
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1a0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x1a0], rax
movabs rax, 0x424f936170d1f0a2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xddb3daaa78bf0888
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xcae4e3e620d23574
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x6341a86294800713
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xe8d62d382cb34c48
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1c8], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x6e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x6e8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x6f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6f8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x700], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1a0]
xorps xmm2, xmmword [rbp + 0x6e0]
movdqa xmm0, xmmword [rbp + 0x1b0]
movdqa xmm1, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x6f0]
mov qword [rbp + 0x708], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x700]
movdqa xmmword [rbp + 0x1a0], xmm2
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmmword [rbp + 0x1c0], xmm1
test al, al
je 0x18005369b
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053690
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.1800593c0
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x18017e888], rax
mov r12, rax
call fcn.1800593c0
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x18017e8a0], rax
mov r15, rax
call fcn.1800593c0
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x18017e898], rax
mov r14, rax
call fcn.1800593c0
movabs rdx, 0xb231a1bea995f83b
mov qword [0x18017e8a8], rax
mov rsi, rax
call fcn.1800593c0
movabs rdx, 0x5f0720d54e5f164
mov qword [0x18017e890], rax
mov rdi, rax
call fcn.1800593c0
movabs rdx, 0x483047d5ed936395
mov qword [0x18017e8b0], rax
mov rbx, rax
call fcn.1800593c0
test rax, rax
mov qword [0x18017e8b8], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x180052f2a
xor edx, edx
call fcn.180076910
movabs rax, 0xc9e54a5060d9cae6
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1d0]
mov rax, qword [rsp + 0x40]
movabs r12, 0xe8f45940589d3f3a
mov qword [rbp + 0x1d0], rax
movabs rsi, 0xe996383116b7a585
movabs rax, 0x484f9a6174cffcb5
movabs rdi, 0x216ff70400bc85c6
mov qword [rsp + 0x40], rax
movabs r15, 0xb9d6aecf14cf65e7
mov rax, qword [rsp + 0x40]
movabs r14, 0xbe91939255bd1558
mov qword [rbp + 0x1d8], rax
movabs rbx, 0x237c60df7a22729
movabs rax, 0xc3bfc2ae7dbb0c89
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xd1f2b3fc3ad46139
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x253a37992ce5744
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x710], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x718], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x720], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x728], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x730], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1d0]
xorps xmm2, xmmword [rbp + 0x710]
movdqa xmm0, xmmword [rbp + 0x1e0]
movdqa xmm1, xmmword [rbp + 0x1f0]
xorps xmm0, xmmword [rbp + 0x720]
mov qword [rbp + 0x738], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x730]
movdqa xmmword [rbp + 0x1d0], xmm2
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmmword [rbp + 0x1f0], xmm1
test al, al
je 0x18005395e
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053953
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005c710
test al, al
je 0x180052f2a
xor edx, edx
call fcn.180076910
movabs rax, 0x87ff18427dd8caed
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x30]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x30], rax
movabs rax, 0x40159e6861d5f1af
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x28], rax
movabs rax, 0xd4b9cdef7aa00c93
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x20], rax
movabs rax, 0xbe91f7f721d87928
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4a8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4b0], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x30]
xorps xmm1, xmmword [rbp + 0x4a0]
movdqa xmm0, xmmword [rbp - 0x20]
mov qword [rbp + 0x4b8], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x4b0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x20], xmm0
test al, al
je 0x180053a7b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053a70
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xe9f7385716d2a5e1
lea rcx, [rbp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
movabs rax, 0x216ff77000d085b3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x60]
mov qword [rsp + 0x68], rax
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x60], xmm0
call fcn.180055b40
test al, al
jne 0x180053d0a
mov dl, 2
call fcn.180076910
movabs rax, 0x9db65c547adec4e3
lea rdx, [rbp + 0x2f0]
mov qword [rsp + 0x40], rax
movabs rcx, 0x3c4e1e0478db8c
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x2f0], rax
movabs rax, 0x11f827065cfa5a9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2f8], rax
movabs rax, 0xd5f6dca03bab0b86
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x300], rax
movabs rax, 0xdff7f6f675d97437
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x308], rax
movabs rax, 0x6459a96ed7d64b5c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x310], rax
movabs rax, 0x879d2d212ae85853
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x318], rax
movabs rax, 0x41b0327b35dff565
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x320], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x328], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x7d8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x7e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x7e8], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7f0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7f8], rax
movabs rax, 0x41b0327b35dff50b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x800], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x2f0]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x300]
xorps xmm0, xmmword [rbp + 0x7e0]
movdqa xmm2, xmmword [rbp + 0x2f0]
xorps xmm2, xmmword [rbp + 0x7d0]
movdqa xmm1, xmmword [rbp + 0x310]
xorps xmm1, xmmword [rbp + 0x7f0]
movdqa xmmword [rbp + 0x300], xmm0
movdqa xmm0, xmmword [rbp + 0x320]
mov qword [rbp + 0x808], rax
movq rax, xmm2
xorps xmm0, xmmword [rbp + 0x800]
movdqa xmmword [rbp + 0x320], xmm0
movdqa xmmword [rbp + 0x2f0], xmm2
movdqa xmmword [rbp + 0x310], xmm1
test al, al
je 0x180053cfb
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053cf0
sub r8d, edx
lea rdx, [rbp + 0x2f0]
jmp 0x180053e95
xor edx, edx
call fcn.180076910
movabs rax, 0x9be35f5870d9cae6
lea rdx, [rbp + 0x230]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x230]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x230], rax
movabs rax, 0x581cd76a6fd5f1a7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x238], rax
movabs rax, 0xd0b8c7ef79aa1194
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x240], rax
movabs rax, 0xcaf0e9fb39dc7c2c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x248], rax
movabs rax, 0x725aa96ed7cc4840
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x250], rax
movabs rax, 0xe8f459243de95a56
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x258], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x740], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x748], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x750], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x758], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x760], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x230]
xorps xmm2, xmmword [rbp + 0x740]
movdqa xmm0, xmmword [rbp + 0x240]
movdqa xmm1, xmmword [rbp + 0x250]
xorps xmm0, xmmword [rbp + 0x750]
mov qword [rbp + 0x768], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x760]
movdqa xmmword [rbp + 0x230], xmm2
movdqa xmmword [rbp + 0x240], xmm0
movdqa xmmword [rbp + 0x250], xmm1
test al, al
je 0x180053e8b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053e80
sub r8d, edx
lea rdx, [rbp + 0x230]
mov rcx, qword [0x18017ced8]
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xdcb8091f26838bb4
lea rbx, [rbp + 0x70]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x70]
mov rcx, qword [0x18017e760]
mov qword [rsp + 0x78], rax
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x70], xmm0
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
test rax, rax
je 0x180053f3e
nop dword [rax]
movzx ecx, byte [rax]
lea rax, [rax + 1]
movzx edx, byte [rbx]
lea rbx, [rbx + 1]
test cl, cl
je 0x180053f36
cmp cl, dl
je 0x180053f20
cmp cl, dl
je 0x18005443c
mov dl, 2
call fcn.180076910
movabs rax, 0xc9f8575865c5c0f3
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xe0]
mov rax, qword [rsp + 0x40]
movabs rbx, 0x237c60df7a22729
mov qword [rbp + 0xe0], rax
mov r8d, edx
movabs rax, 0x490c83656dcfecab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xe8], rax
movabs rax, 0x99bacfac7ba345c6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf0], rax
movabs rax, 0xcde3f6e4758f461b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf8], rax
movabs rax, 0x237c62dcdcc4840
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x100], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x108], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x770], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x778], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x780], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x788], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x790], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xe0]
xorps xmm2, xmmword [rbp + 0x770]
movdqa xmm0, xmmword [rbp + 0xf0]
movdqa xmm1, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x780]
mov qword [rbp + 0x798], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x790]
movdqa xmmword [rbp + 0xe0], xmm2
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmmword [rbp + 0x100], xmm1
test al, al
je 0x1800540bb
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800540b0
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xdcb8091f26838bb4
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x70]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x78], rax
xorps xmm0, xmmword [rbp - 0x80]
movq rax, xmm0
movdqa xmmword [rbp - 0x70], xmm0
test al, al
je 0x18005414b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054140
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x87f34a4363d485a9
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x10]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x10], rax
movabs rax, 0x4419d73653ffa5b2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 8], rax
movabs rax, 0xb9f694a17ba61695
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4c8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4d0], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x10]
xorps xmm1, xmmword [rbp + 0x4c0]
movdqa xmm0, xmmword [rbp]
mov qword [rbp + 0x4d8], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x4d0]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp], xmm0
test al, al
je 0x18005424b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054240
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017e760]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
mov rcx, rax
mov r8d, eax
cmp byte [rax], r13b
je 0x180054290
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054285
mov rcx, qword [0x18017ced8]
sub r8d, eax
xor r9d, r9d
mov qword [rsp + 0x20], r13
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x91ef504165d685ab
lea rdx, [rbp + 0x260]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x260]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x260], rax
movabs rax, 0x5507906d6d9ce4af
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x268], rax
movabs rax, 0xd7a3c8ef60a00bc7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x270], rax
movabs rax, 0xcdf0b3fc3ad4613b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x278], rax
movabs rax, 0x2c5ba76085cd4909
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x280], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x288], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x7a8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x7b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7b8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7c0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x260]
xorps xmm2, xmmword [rbp + 0x7a0]
movdqa xmm0, xmmword [rbp + 0x270]
movdqa xmm1, xmmword [rbp + 0x280]
xorps xmm0, xmmword [rbp + 0x7b0]
mov qword [rbp + 0x7c8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x7c0]
movdqa xmmword [rbp + 0x260], xmm2
movdqa xmmword [rbp + 0x270], xmm0
movdqa xmmword [rbp + 0x280], xmm1
test al, al
je 0x18005441b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054410
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp + 0x260]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180054446
movabs rbx, 0x237c60df7a22729
xor edx, edx
call fcn.180076910
movabs rax, 0x88ff40487ec7d6e4
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x60]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x60], rax
movabs rax, 0x4d0e9e7069d2ece6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0x99b8c1a660ae1f8e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
movabs rax, 0xdbe5f6fe25d07a3b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
movabs rax, 0x6b44b46881820b4d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0xe8f4594078a75155
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x400], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x408], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x410], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x60]
xorps xmm2, xmmword [rbp + 0x3f0]
movdqa xmm0, xmmword [rbp - 0x50]
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp + 0x400]
mov qword [rbp + 0x418], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x410]
movdqa xmmword [rbp - 0x60], xmm2
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x40], xmm1
test al, al
je 0x18005459b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054590
mov rcx, qword [0x18017ced8]
sub r8d, edx
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov r8, rdx
inc r8
cmp byte [r8], r13b
jne 0x1800545c1
mov rcx, qword [0x18017ced8]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x180052f2c