Function at 0x180053440
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x328]
sub rsp, 0x400
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18017b040]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
movabs rax, 0xf23cf3c14272e4dc
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x40], rax
movabs rbx, 0xd5c8df46999e1e24
mov rax, qword [rsp + 0x40]
movabs r14, 0xf254f3b14201e4bd
mov qword [rsp + 0x50], rax
movabs rsi, 0x1cfbf1a4b5f30182
movabs rax, 0x1c9af1cdb58b01fb
movabs r15, 0xa34c05630ac8008f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xa32b050c0aa400a1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm6, xmmword [rsp + 0x50]
xorps xmm6, xmmword [rbp + 0x40]
mov qword [rbp + 0x58], rax
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x50], xmm6
movdqa xmmword [rsp + 0x60], xmm0
call fcn.180052f70
test al, al
je 0x1800544d7
cmp word [rbp + 0xd0], 0
lea rax, [rbp + 0xd0]
je 0x18005358a
nop word [rax + rax]
add rax, 2
cmp word [rax], 0
jne 0x180053580
movq rcx, xmm6
test cx, cx
je 0x1800535b0
lea rdx, [rsp + 0x50]
sub rdx, rax
nop dword [rax]
mov word [rax], cx
add rax, 2
movzx ecx, word [rax + rdx]
test cx, cx
jne 0x1800535a0
xor edi, edi
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov r8d, 1
mov dword [rsp + 0x20], 2
mov word [rax], di
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x18017bed8], rax
cmp rax, 0xffffffffffffffff
je 0x1800544d7
mov r12d, 3
mov qword [rsp + 0x20], rdi
mov r8d, r12d
lea rdx, [0x180163e98]
xor r9d, r9d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180076ed0
movabs rax, 0xd2339dd825668bd1
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r13, 0xd01dd35872029c76
mov qword [rsp + 0x50], rax
mov r8d, edx
movabs rax, 0x75db9cc1c18078f1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xd925690263bc69e1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xbaabff28f6f76a45
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x926f5a410dce1c6c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x920b3f3568a26c01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005376b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053760
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180077580
test al, al
je 0x1800544d7
xor edx, edx
call fcn.180076ed0
movabs rax, 0x81748ac32d6c81d0
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x7292d1c9d08772fb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xc2366c0f6ba174e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xb8a7bc66f7f17750
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x920b5b501cc70071
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x920b3f3568a26c01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x1800538db
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800538d0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.1800771a0
test al, al
je 0x1800544d7
xor edx, edx
call fcn.180076ed0
movabs rax, 0x812d80912a7585d0
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x68929fcd959e64f6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xca38641963a461e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xb9b8b229fabe704b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x920b3f350cc71864
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x920b3f3568a26c01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180053a4b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053a40
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180061ad0
test al, al
je 0x1800544d7
xor edx, edx
call fcn.180076ed0
movabs rax, 0x913595c327758ad4
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x758f98cadcd372e7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xcc25710270a16cee
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xb0a4af2bf6fd3e4a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x920b3f3568c60975
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x920b3f3568a26c01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180053bbb
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053bb0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rcx, 0x89c3ea7424b590a0
movabs rax, 0x3e2be8e68baa9a69
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x696ce612d5b31736
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x57471091725e7ac3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x3e59e8838bc39a1d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
movabs rax, 0x6900e676d59d1706
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0x57471091725e7aaf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x58], rax
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmmword [rsp + 0x50], xmm0
call fcn.1800781f0
mov r8, rax
test rax, rax
je 0x1800544d7
movabs rax, 0x513587c0e5acd922
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
movabs rax, 0x2859a636b2ee5a74
mov rcx, qword [rsp + 0x40]
mov qword [rbp - 0x80], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0x3b2853c7301b3bf7
mov rcx, qword [rsp + 0x40]
mov qword [rbp - 0x78], rcx
movabs rcx, 0x1c22c82ac475bdca
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0xcd81af2464f5e2cf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0xde103407c52ef50b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0x3e59e8838bc39a1d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
movabs rax, 0x6900e676d59d1706
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0x57471091725e7aaf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
movabs rax, 0x89c3ea7424b590a0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
movabs rax, 0xde103407c52eaf51
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], rcx
mov rcx, r8
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp + 0xb8], rax
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800784c0
mov qword [0x18017dd68], rax
test rax, rax
je 0x1800544d7
xor edx, edx
call fcn.180076ed0
movabs rax, 0x863d9dd8626a80ce
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x40], rax
movabs rax, 0x758f90dedc9f60eb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0xcf3c680c69e86ee0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0xd5c8df46fdfb6a41
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x180053f1f
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053f14
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017d8e0]
test rcx, rcx
jne 0x180053f7b
nop word [rax + rax]
lea rdx, [0x18017d8e0]
lea rcx, [0x180076e50]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x18017d8e0]
test rcx, rcx
je 0x180053f50
lea r8, [0x18005ed60]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18017da60], rax
test rax, rax
je 0x1800544d7
xor edx, edx
call fcn.180076ed0
movabs rax, 0x8b27d3c537718ad4
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x75959884d89675f1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xd72d7f0a66a969fb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xa5a5b025b9f0714d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x920b3f510dd6096d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x920b3f3568a26c01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x1800540df
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800540d4
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x18017d7c8]
mov rdx, qword [0x18017d7c0]
mov rcx, qword [0x18017d8e0]
call fcn.180075770
xor ecx, ecx
call fcn.180065960
cmp byte [0x18017d7d0], dil
jne 0x180054144
nop word [rax + rax]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x18017d7d0], dil
je 0x180054130
xor edx, edx
call fcn.180076ed0
movabs rax, 0x803181d4266f81cf
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x789594cfd69263a2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xcf2d6c1763a669af
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xf5a6b02fedff644d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0xf77f5a5918cf0362
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xd01dd35872029c12
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x920b3f3568a26c01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180054290
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054285
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18006dd30
test al, al
jne 0x18005450e
movzx edx, r12b
call fcn.180076ed0
movabs rsi, 0x6c770a7f74d74965
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x40], rsi
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
movabs r14, 0x18576e1a18be2803
mov qword [rbp + 0x40], rax
movabs r15, 0x8f0360dff0a71260
movabs rax, 0xee6a14b69ece320f
movabs r12, 0x31449628cf5f0ffd
mov qword [rsp + 0x40], rax
movabs rbx, 0xafc664dd2bd8b0f2
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x48], rax
movabs rax, 0x502cf508aa256691
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0xafc664dd2bd8c39f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x1800543cb
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800543c0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dl, 3
call fcn.180076ed0
mov qword [rsp + 0x40], rsi
lea rdx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
lea rcx, [rbp + 0x40]
mov qword [rbp + 0x40], rax
mov r8d, edx
movabs rax, 0xaf7315ab95d4320f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0x3137fa49ba2c668b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x1800544bb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800544b0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.1800dbf00
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.180076ed0
movabs rax, 0x813181c4366081db
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x709a98d0dc9d68a2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x83226a0a7ea97ae6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xb0bcba2ae9f37147
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x920b3f3568a26c65
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x920b3f3568a26c01
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180054650
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054645
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x967a87df276888de
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x20]
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x1cfbf1a4b5f36dee
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.180056110
movabs rax, 0xdc6696df2b668ad8
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp]
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x1cfbf1a4b59f6de6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.180056110
movabs rax, 0x8b2792dc276987ce
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x20]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x7097958ad89675f1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x58], rax
xorps xmm1, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
call fcn.180056110
xorps xmm0, xmm0
mov ecx, 0x60
movdqu xmmword [rbp + 0x40], xmm0
call fcn.1800529c0
mov r14, rax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rax
lea r13, [rbp - 0x20]
mov rbx, rax
sub r13, rax
lea rcx, [rax + 0x60]
mov edx, 0x16
lea rax, [rbp - 8]
mov qword [rbp + 0x50], rcx
sub rax, rbx
movabs rcx, 0x7fffffffffffffff
mov qword [rsp + 0x40], rax
nop dword [rax + rax]
xorps xmm0, xmm0
lea r15, [rbx + r13]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
cmp qword [rbx + rax], 0xf
mov rsi, qword [rbx + rax - 8]
jbe 0x180054861
mov r15, qword [r15]
cmp rsi, rcx
ja 0x180055d3d
cmp rsi, 0xf
ja 0x180054885
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbx], xmm0
jmp 0x1800548c8
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x180054896
mov rdi, rcx
jmp 0x18005489e
cmp rdi, 0x16
cmovb rdi, rdx
lea rcx, [rdi + 1]
call fcn.1800529c0
lea r8, [rsi + 1]
mov qword [rbx], rax
mov rdx, r15
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov qword [rbx + 0x18], rdi
call fcn.1801014b0
xor edi, edi
mov edx, 0x16
add rbx, 0x20
lea rcx, [rbp + 0x40]
lea rax, [rbx + r13]
cmp rax, rcx
mov rax, qword [rsp + 0x40]
movabs rcx, 0x7fffffffffffffff
jne 0x180054840
mov rdx, rbx
mov rcx, rbx
call fcn.180056280
xor esi, esi
mov qword [rbp + 0x48], rbx
lea rdi, [rbp + 0x40]
mov rdx, qword [rdi - 8]
lea rdi, [rdi - 0x20]
dec r12
cmp rdx, 0xf
jbe 0x180054942
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x18005493d
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180055d37
mov rcx, r8
call fcn.1800dc1c0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 0xf
mov byte [rdi], sil
test r12, r12
jne 0x180054901
cmp r14, rbx
movabs rdi, 0x1cfbf1a4b5f30182
movabs rbx, 0xd5c8df46999e1e24
movabs r15, 0xf254f3b14201e4bd
movabs r12, 0xa34c05630ac8008f
je 0x180054a7a
movabs rcx, 0x1c8ff18ab59201ef
movabs r13, 0xf231f3d94262e4ce
movabs r8, 0xa34c05630abc00f7
cmp qword [r14 + 0x18], 0xf
mov rdx, r14
jbe 0x1800549b2
mov rdx, qword [r14]
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r8
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x78], rax
movdqa xmm1, xmmword [rbp + 0x70]
xorps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmmword [rsp + 0x50], xmm0
call fcn.18006b790
test al, al
je 0x180055d24
add r14, 0x20
movabs rcx, 0x1c8ff18ab59201ef
movabs r8, 0xa34c05630abc00f7
cmp r14, qword [rbp + 0x48]
jne 0x1800549a5
xor edx, edx
call fcn.180076ed0
movabs rax, 0x817492dc276987ce
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r14, 0xd01dd35872029c76
mov qword [rsp + 0x50], rax
movabs r13, 0x920b3f3568a26c01
movabs rax, 0x7292d1c9d08772fb
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xc2366c0f6ba174e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xb8a7bc66f7f17750
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x920b5b501cc70071
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180054bcb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], sil
jne 0x180054bc0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xf222f3df426ee4de
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x1cd5f1d7b58101e3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xa34c05170ab000fb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x78], rax
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
call fcn.18005ad70
test al, al
je 0x180055d24
xor edx, edx
call fcn.180076ed0
movabs rax, 0xd22781d0346f8bde
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x7fdb95c1c59e74e6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xc729710666b86de0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xa1bdaf32ecf13e08
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0xf37d515a0b804c3b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xd03fa720062cef04
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180054dee
inc rcx
mov r8, rcx
cmp byte [rcx], sil
jne 0x180054de3
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.180059ce0
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x18017d900], rax
call fcn.180059ce0
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x18017d920], rax
call fcn.180059ce0
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x18017d910], rax
call fcn.180059ce0
movabs rdx, 0xb231a1bea995f83b
mov qword [0x18017d928], rax
call fcn.180059ce0
movabs rdx, 0x5f0720d54e5f164
mov qword [0x18017d908], rax
call fcn.180059ce0
movabs rdx, 0x483047d5ed936395
mov qword [0x18017d938], rax
call fcn.180059ce0
movabs rdx, 0x94d954197d4bc213
mov qword [0x18017d940], rax
mov r13, rax
call fcn.180059ce0
movabs rdx, 0x4a0a9bd8802467a8
mov qword [0x18017d930], rax
mov r12, rax
call fcn.180059ce0
movabs rdx, 0xa34e0b3f97b5a63d
mov qword [0x18017d950], rax
mov r15, rax
call fcn.180059ce0
movabs rdx, 0x2e4dcbf039781362
mov qword [0x18017d948], rax
mov r14, rax
call fcn.180059ce0
movabs rdx, 0xca86d2b41ac3a291
mov qword [0x18017d8e8], rax
mov rsi, rax
call fcn.180059ce0
movabs rdx, 0xee539fb35e4140a
mov qword [0x18017d8f0], rax
mov rdi, rax
call fcn.180059ce0
movabs rdx, 0x509a9f84a49bc592
mov qword [0x18017d918], rax
mov rbx, rax
call fcn.180059ce0
test rax, rax
mov qword [0x18017d8f8], rax
setne cl
test rbx, rbx
setne al
xor edx, edx
and cl, al
test rdi, rdi
movzx eax, cl
cmovne edx, eax
test rsi, rsi
setne al
xor edi, edi
and dl, al
mov ecx, edi
movzx eax, dl
test r14, r14
mov edx, edi
cmovne ecx, eax
test r15, r15
setne al
and cl, al
test r12, r12
movzx eax, cl
cmovne edx, eax
test r13, r13
setne al
and dl, al
mov ecx, edi
cmp qword [0x18017d938], rcx
movzx eax, dl
mov edx, edi
cmovne ecx, eax
cmp qword [0x18017d908], rdi
setne al
and cl, al
cmp qword [0x18017d928], rdx
movzx eax, cl
mov ecx, edi
cmovne edx, eax
cmp qword [0x18017d910], rdi
setne al
and dl, al
cmp qword [0x18017d920], rcx
movzx eax, dl
cmovne ecx, eax
cmp qword [0x18017d900], rdi
setne al
test al, cl
je 0x180055d24
xor edx, edx
call fcn.180076ed0
movabs rax, 0xd22781d0346f8bde
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r13, 0xd01dd35872029c76
mov qword [rsp + 0x50], rax
movabs r15, 0xf254f3b14201e4bd
movabs rax, 0x75db9cc1c18078f1
movabs r14, 0x1cfbf1a4b5f30182
mov qword [rsp + 0x40], rax
movabs r12, 0xa34c05630ac8008f
mov rax, qword [rsp + 0x40]
movabs rsi, 0xd5c8df46999e1e24
mov qword [rsp + 0x58], rax
movabs rbx, 0x920b3f3568a26c01
movabs rax, 0xd925690263bc69e1
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xbaabff28f6f76a45
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x926f5a410dce1c6c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005516b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180055160
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005c570
test al, al
je 0x180055d24
xor edx, edx
call fcn.180076ed0
movabs rax, 0x9c3dd3c2296e8bd5
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x60]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x60], rax
movabs rax, 0x7d8198c8d49a75eb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
movabs rax, 0xce23664364a769fb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
movabs rax, 0xd5c8bb23edfb7254
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x60]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x70]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmmword [rbp + 0x70], xmm0
test al, al
je 0x18005527b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180055270
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xf235f3d74264e4d9
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x1cfbf1d0b59f01f7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.180056480
test al, al
jne 0x1800554ca
mov dl, 2
call fcn.180076ed0
movabs rax, 0x867497d42e6885db
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
movabs rcx, 0x23dd900a64f3c618
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x80], rax
movabs rax, 0x3c8b84d0d08021ed
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0xcf6c770c25ac6eee
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0xb4aeba22b9fa7f4b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0xf465505648d60074
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0xbf74a7390077fb1f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0xda59fe57e23178fd
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0xda59fe57e2317893
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmm2, xmmword [rbp - 0x80]
xorps xmm2, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
mov qword [rbp + 0xc8], rax
movq rax, xmm2
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x80], xmm2
movdqa xmmword [rbp - 0x60], xmm1
test al, al
je 0x1800554be
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800554b3
sub r8d, edx
lea rdx, [rbp - 0x80]
jmp 0x180055614
xor edx, edx
call fcn.180076ed0
movabs rax, 0x802194d8246f8bde
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x6588d1cada9a75e3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xca226c4367ad74fc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xa1a9a52ff5ff7750
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0xe266505648cc0368
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xd01dd33c1776f91a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005560c
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180055601
sub r8d, edx
lea rdx, [rsp + 0x50]
mov rcx, qword [0x18017bed8]
xor r9d, r9d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xc37ac19f7235ca8c
lea rbx, [rbp - 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x30], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x30]
mov rcx, qword [0x18017d790]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x30], xmm0
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
test rax, rax
je 0x1800556be
nop word [rax + rax]
movzx ecx, byte [rax]
lea rax, [rax + 1]
movzx edx, byte [rbx]
lea rbx, [rbx + 1]
test cl, cl
je 0x1800556b6
cmp cl, dl
je 0x1800556a0
cmp cl, dl
je 0x180055b69
mov dl, 2
call fcn.180076ed0
movabs rax, 0xd23a9cd8317381cb
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x90]
mov rax, qword [rsp + 0x40]
movabs rbx, 0x920b3f3568a26c01
mov qword [rbp + 0x90], rax
mov r8d, edx
movabs rax, 0x749885c5d88068ef
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0x8320640065a420ae
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
movabs rax, 0xa6baba30b9ac4d67
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
movabs rax, 0x920b3f1552cc0368
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x90]
xorps xmm2, xmmword [rbp + 0x60]
movdqa xmm0, xmmword [rbp + 0xa0]
movdqa xmm1, xmmword [rbp + 0xb0]
xorps xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x88], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x90], xmm2
movdqa xmmword [rbp + 0xa0], xmm0
movdqa xmmword [rbp + 0xb0], xmm1
test al, al
je 0x18005582b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180055820
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xc37ac19f7235ca8c
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movq rax, xmm0
movdqa xmmword [rbp - 0x40], xmm0
test al, al
je 0x1800558bb
nop
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800558b0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x9c3181c33762c491
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x798dd196e6b021f6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xa36c3f0d65a173fd
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x78], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x1800559ab
nop
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800559a0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017d790]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
mov rcx, rax
mov r8d, eax
cmp byte [rax], dil
je 0x1800559fb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800559f0
mov rcx, qword [0x18017bed8]
sub r8d, eax
xor r9d, r9d
mov qword [rsp + 0x20], rdi
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x8a2d9bc13160c493
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x80], rax
movabs rax, 0x689396cdd8d360eb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0xcd3963437ea76eaf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0xa6a9ff28f6f76a47
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0xbc675e581acd0221
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x80]
xorps xmm2, xmmword [rbp + 0x60]
movdqa xmm0, xmmword [rbp - 0x70]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x88], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp - 0x80], xmm2
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp - 0x60], xmm1
test al, al
je 0x180055b4b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180055b40
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180055b73
movabs rbx, 0x920b3f3568a26c01
xor edx, edx
call fcn.180076ed0
movabs rax, 0x933d8bc82a7197dc
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x80], rax
movabs rax, 0x709a98d0dc9d68a2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0x83226a0a7ea97ae6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0xb0bcba2ae9f37147
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0xfb784d501e824065
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0xd01dd3585238f219
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x80]
xorps xmm2, xmmword [rbp + 0x90]
movdqa xmm0, xmmword [rbp - 0x70]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0xa0]
mov qword [rbp + 0xb8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x80], xmm2
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp - 0x60], xmm1
test al, al
je 0x180055ccb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180055cc0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov r8, rdx
inc r8
cmp byte [r8], dil
jne 0x180055cf1
mov rcx, qword [0x18017bed8]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rcx, [rbp + 0x40]
mov bl, 1
call fcn.1800561f0
movzx eax, bl
jmp 0x1800544d9
xor bl, bl
lea rcx, [rbp + 0x40]
call fcn.1800561f0
movzx eax, bl
jmp 0x1800544d9
call fcn.1800e7d48
int3
call fcn.180052f50
int3