Function at 0x18004f890
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa30]
sub rsp, 0xb30
mov rax, qword [0x180175010]
xor rax, rsp
mov qword [rbp + 0xa20], rax
movabs rax, 0x4f584599082e8160
lea rcx, [rbp + 0x810]
mov qword [rsp + 0x40], rax
movabs rsi, 0x44ccc44ab0c6680c
mov rax, qword [rsp + 0x40]
movabs r14, 0x4f3145f5084d8105
mov qword [rbp + 0xb0], rax
movabs rdi, 0x6fda61f061f8fbc2
movabs rax, 0x6ff46195618bfbb2
movabs r15, 0x793650e73e742ec7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0x793650803e1b2eab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x420], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x428], rax
movdqa xmm0, xmmword [rbp + 0x420]
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x430], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0xc0]
pxor xmm0, xmmword [rbp + 0xb0]
mov qword [rbp + 0x438], rax
pxor xmm1, xmmword [rbp + 0x430]
movdqa xmmword [rbp + 0xc0], xmm1
movdqa xmmword [rbp + 0xb0], xmm0
call fcn.18004f4a0
test al, al
je 0x180050a7d
cmp word [rbp + 0x810], 0
lea rax, [rbp + 0x810]
je 0x18004f9fa
nop dword [rax + rax]
add rax, 2
cmp word [rax], 0
jne 0x18004f9f0
mov rcx, qword [rbp + 0xb0]
test cx, cx
je 0x18004fa20
lea rdx, [rbp + 0xb0]
sub rdx, rax
mov word [rax], cx
add rax, 2
movzx ecx, word [rdx + rax]
test cx, cx
jne 0x18004fa10
xor r13d, r13d
lea rcx, [rbp + 0x810]
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov word [rax], r13w
lea r8d, [r13 + 1]
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x180175e68], rax
cmp rax, 0xffffffffffffffff
je 0x180050a7d
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea r8d, [r13 + 3]
mov rcx, rax
lea rdx, [0x18015e0e8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.180071aa0
movabs rax, 0x6f562b9c6f2aee69
lea r8, [rbp + 0x280]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x280]
mov rax, qword [rsp + 0x40]
movabs rbx, 0x7fb1dc8c816ad206
mov qword [rbp + 0x280], rax
movabs r12, 0x165d7d019f27d5c9
movabs rax, 0x6fa0c95158b82b1
mov edx, r8d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x288], rax
movabs rax, 0x35f3c86570047a9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x290], rax
movabs rax, 0x2bafe424dfaf1c6d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x298], rax
movabs rax, 0x16391875fa4ba5a4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x500], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x508], rax
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x500]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x510], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x518], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x520], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
pxor xmm2, xmmword [rbp + 0x280]
movdqa xmm0, xmmword [rbp + 0x290]
movdqa xmm1, xmmword [rbp + 0x2a0]
pxor xmm0, xmmword [rbp + 0x510]
mov qword [rbp + 0x528], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x520]
movdqa xmmword [rbp + 0x2a0], xmm1
movdqa xmmword [rbp + 0x280], xmm2
movdqa xmmword [rbp + 0x290], xmm0
test al, al
je 0x18004fc0b
nop dword [rax]
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x18004fc00
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x280]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180072190
test al, al
je 0x180050a7d
xor edx, edx
call fcn.180071aa0
movabs rax, 0x3c113c876720e468
lea r8, [rbp + 0x2b0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x2b0]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x2b0], rax
movabs rax, 0x1b3419d048c88bb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b8], rax
movabs rax, 0x184c398b5f1d5aae
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x29a3a76adea90178
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x165d1964eb42b9b9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x530], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x538], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x540], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x548], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x550], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x2b0]
pxor xmm2, xmmword [rbp + 0x530]
movdqa xmm0, xmmword [rbp + 0x2c0]
movdqa xmm1, xmmword [rbp + 0x2d0]
pxor xmm0, xmmword [rbp + 0x540]
mov qword [rbp + 0x558], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x550]
movdqa xmmword [rbp + 0x2b0], xmm2
movdqa xmmword [rbp + 0x2c0], xmm0
movdqa xmmword [rbp + 0x2d0], xmm1
test al, al
je 0x18004fdac
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x18004fda1
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x2b0]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180071d70
test al, al
je 0x180050a7d
xor edx, edx
call fcn.180071aa0
movabs rax, 0x3c4836d56039e068
lea r8, [rbp + 0x2e0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x2e0]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x2e0], rax
movabs rax, 0x1bb30f9941959eb6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x1042319d57184fae
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x28bca925d3e60663
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x165d7d01fb42a1ac
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x300], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x308], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x560], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x568], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x570], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x578], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x580], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x2e0]
pxor xmm2, xmmword [rbp + 0x560]
movdqa xmm0, xmmword [rbp + 0x2f0]
movdqa xmm1, xmmword [rbp + 0x300]
pxor xmm0, xmmword [rbp + 0x570]
mov qword [rbp + 0x588], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x2e0], xmm2
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmmword [rbp + 0x300], xmm1
test al, al
je 0x18004ff4d
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x18004ff42
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x2e0]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005f3b0
test al, al
je 0x180050a7d
xor edx, edx
call fcn.180071aa0
movabs rax, 0x2c5023876d39ef6c
lea r8, [rbp + 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x80]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x80], rax
movabs rax, 0x6ae089e08d888a7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x88], rax
movabs rax, 0x165f2486441d42a6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
movabs rax, 0x21a0b427dfa54862
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0x165d7d019f43b0bd
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x590], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x598], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5a8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x80]
pxor xmm2, xmmword [rbp + 0x590]
movdqa xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp + 0xa0]
pxor xmm0, xmmword [rbp + 0x5a0]
mov qword [rbp + 0x5b8], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x5b0]
movdqa xmmword [rbp + 0x80], xmm2
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0xa0], xmm1
test al, al
je 0x1800500ee
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x1800500e3
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x80]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x4f43459008248171
lea rcx, [rbp + 0x350]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x350], rax
movabs rax, 0x6fb6619461d6fbf2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x358], rax
movabs rax, 0x793650e73e742eab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x360], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x368], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x440], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x448], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x450], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x350]
pxor xmm0, xmmword [rbp + 0x440]
mov qword [rbp + 0x458], rax
movdqa xmm1, xmmword [rbp + 0x450]
pxor xmm1, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x360], xmm1
movdqa xmmword [rbp + 0x350], xmm0
call fcn.180072eb0
mov r8, rax
test rax, rax
je 0x180050a7d
movabs rax, 0x205d2ab66622c23a
lea rdx, [rbp + 0x390]
mov qword [rsp + 0x40], rax
movabs rax, 0x2e8321b0068bb6b0
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x390], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0x155913b17c316f9f
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x398], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0x8e811af0861a63
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x3a0], rcx
mov rcx, r8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x165d7d019f278f93
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x5c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x5c8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5d8], rax
movdqa xmm1, xmmword [rbp + 0x5d0]
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5e0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x390]
pxor xmm0, xmmword [rbp + 0x5c0]
pxor xmm1, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp + 0x5e0]
pxor xmm0, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x3b0], xmm0
movdqa xmmword [rbp + 0x3a0], xmm1
call fcn.1800731a0
mov qword [0x180177c50], rax
test rax, rax
je 0x180050a7d
xor edx, edx
call fcn.180071aa0
movabs rax, 0x3b582b9c2826e576
lea r8, [rbp + 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x10]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x10], rax
movabs rax, 0x6ae008a08949aab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x18], rax
movabs rax, 0x15463d885d5440a8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x20], rax
movabs rax, 0x44ccc44ad4a31c69
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x28], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x460], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x468], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x470], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x10]
pxor xmm1, xmmword [rbp + 0x460]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x478], rax
movq rax, xmm1
pxor xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp + 0x20], xmm0
test al, al
je 0x18005045b
nop word [rax + rax]
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180050450
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x10]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x180177830]
test rcx, rcx
jne 0x1800504bb
nop word [rax + rax]
lea rdx, [0x180177830]
lea rcx, [0x180071a20]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x180177830]
test rcx, rcx
je 0x180050490
lea r8, [0x18005cb40]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x180177948], rax
test rax, rax
je 0x180050a7d
xor edx, edx
call fcn.180071aa0
movabs rax, 0x364265817d3def6c
lea r8, [rbp + 0x1f0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1f0]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x1f0], rax
movabs rax, 0x6b408d00c9d8fb1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xd572a8e521547b3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x200], rax
movabs rax, 0x34a1ab2990a80765
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x208], rax
movabs rax, 0x165d7d65fa53b0a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x210], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x218], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x5f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x5f8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x600], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x608], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x610], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1f0]
pxor xmm2, xmmword [rbp + 0x5f0]
movdqa xmm0, xmmword [rbp + 0x200]
movdqa xmm1, xmmword [rbp + 0x210]
pxor xmm0, xmmword [rbp + 0x600]
mov qword [rbp + 0x618], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x610]
movdqa xmmword [rbp + 0x1f0], xmm2
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmmword [rbp + 0x210], xmm1
test al, al
je 0x18005064f
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180050644
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x1f0]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x180177718]
mov rdx, qword [0x180177710]
mov rcx, qword [0x180177830]
call fcn.1800703a0
xor ecx, ecx
call fcn.180062ff0
cmp byte [0x180177720], r13b
jne 0x1800506b4
nop dword [rax + rax]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x180177720], r13b
je 0x1800506a0
xor edx, edx
call fcn.180071aa0
movabs rax, 0x3d5437906c23e477
lea r8, [rbp + 0x100]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x100]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x100], rax
movabs rax, 0xbb4049b029999e2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x108], rax
movabs rax, 0x15573993571a47e7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x110], rax
movabs rax, 0x64a2ab23c4a71265
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x118], rax
movabs rax, 0x7329186def4abaaa
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x120], rax
movabs rax, 0x7fb1dc8c816ad262
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x128], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x620], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x628], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x630], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x638], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x640], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x100]
pxor xmm2, xmmword [rbp + 0x620]
movdqa xmm0, xmmword [rbp + 0x110]
movdqa xmm1, xmmword [rbp + 0x120]
pxor xmm0, xmmword [rbp + 0x630]
mov qword [rbp + 0x648], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x640]
movdqa xmmword [rbp + 0x100], xmm2
movdqa xmmword [rbp + 0x110], xmm0
movdqa xmmword [rbp + 0x120], xmm1
test al, al
je 0x180050830
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180050825
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x100]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18006aa90
test al, al
jne 0x180050aaf
mov dl, 3
call fcn.180071aa0
movabs rbx, 0x3b1121906424e063
lea r8, [rbp + 0x30]
mov qword [rsp + 0x40], rbx
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x30], rax
movabs rax, 0xeb315990f91dbad
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x38], rax
movabs rax, 0x185e33c75b0e47ab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
movabs rax, 0x44ccc44ab0c61b61
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x480], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x490], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x30]
pxor xmm1, xmmword [rbp + 0x480]
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x498], rax
movq rax, xmm1
pxor xmm0, xmmword [rbp + 0x490]
movdqa xmmword [rbp + 0x30], xmm1
movdqa xmmword [rbp + 0x40], xmm0
test al, al
je 0x18005094d
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180050942
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x30]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dl, 3
call fcn.180071aa0
mov qword [rsp + 0x40], rbx
lea r8, [rbp + 0x3f0]
mov rax, qword [rsp + 0x40]
lea rcx, [rbp + 0x3f0]
mov qword [rbp + 0x3f0], rax
mov edx, r8d
movabs rax, 0x4faa1484048bdbad
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f8], rax
movabs rax, 0x79453c864b0747b1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x400], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x408], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x3f0]
pxor xmm1, xmmword [rbp - 0x60]
movdqa xmm0, xmmword [rbp + 0x400]
mov qword [rbp - 0x48], rax
movq rax, xmm1
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x3f0], xmm1
movdqa xmmword [rbp + 0x400], xmm0
test al, al
je 0x180050a5b
nop word [rax + rax]
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180050a50
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x3f0]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0xa20]
xor rcx, rsp
call fcn.1800d6d50
lea r11, [rsp + 0xb30]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.180071aa0
movabs rax, 0x3c5437807c2ce463
lea r8, [rbp + 0x130]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x130]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x130], rax
movabs rax, 0x3bb0884089692e2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x138], rax
movabs rax, 0x59583f8e4a1554ae
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x140], rax
movabs rax, 0x21b8a126c0ab076f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x148], rax
movabs rax, 0x165d7d019f27d5ad
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x150], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x158], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x650], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x658], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x660], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x668], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x670], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x130]
pxor xmm2, xmmword [rbp + 0x650]
movdqa xmm0, xmmword [rbp + 0x140]
movdqa xmm1, xmmword [rbp + 0x150]
pxor xmm0, xmmword [rbp + 0x660]
mov qword [rbp + 0x678], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x670]
movdqa xmmword [rbp + 0x130], xmm2
movdqa xmmword [rbp + 0x140], xmm0
movdqa xmmword [rbp + 0x150], xmm1
test al, al
je 0x180050c2b
nop word [rax + rax]
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180050c20
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x130]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x2b1f319b6d24ed66
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x3c0]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0x6fda61f061f897ae
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x58], rax
movabs rax, 0x4f54459d082e8176
pxor xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x50], xmm0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x6fb961af6199fbaf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c8], rax
movabs rax, 0x795850823e1d2eab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d0], rax
movabs rax, 0x44b4c43eb0e86878
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d8], rax
movabs rax, 0x165d7d019f27d5bd
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x680], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x688], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x690], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x698], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6a0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x3c0]
pxor xmm0, xmmword [rbp + 0x680]
movdqa xmm1, xmmword [rbp + 0x3d0]
pxor xmm1, xmmword [rbp + 0x690]
movdqa xmmword [rbp + 0x3c0], xmm0
movdqa xmm0, xmmword [rbp + 0x3e0]
mov qword [rbp + 0x6a8], rax
pxor xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x3e0], xmm0
movdqa xmmword [rbp + 0x3d0], xmm1
call fcn.1800687a0
test al, al
je 0x180050a7d
xor edx, edx
call fcn.180071aa0
movabs rax, 0x3c1124986d25e276
lea r8, [rbp + 0x160]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x160]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x160], rax
movabs rax, 0x1b3419d048c88bb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x168], rax
movabs rax, 0x184c398b5f1d5aae
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x170], rax
movabs rax, 0x29a3a76adea90178
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x178], rax
movabs rax, 0x165d1964eb42b9b9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x180], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x188], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x6b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x6b8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x6c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6c8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6d0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x160]
pxor xmm2, xmmword [rbp + 0x6b0]
movdqa xmm0, xmmword [rbp + 0x170]
movdqa xmm1, xmmword [rbp + 0x180]
pxor xmm0, xmmword [rbp + 0x6c0]
mov qword [rbp + 0x6d8], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x6d0]
movdqa xmmword [rbp + 0x160], xmm2
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmmword [rbp + 0x180], xmm1
test al, al
je 0x180050f7b
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180050f70
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x160]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x4f47459b08228166
lea rcx, [rbp + 0x370]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x370], rax
movabs rax, 0x6ff46183618afba3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x378], rax
movabs rax, 0x793650933e0c2eb3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x380], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x388], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4e8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4f0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x370]
movdqa xmm1, xmmword [rbp + 0x380]
pxor xmm0, xmmword [rbp + 0x4e0]
mov qword [rbp + 0x4f8], rax
pxor xmm1, xmmword [rbp + 0x4f0]
movdqa xmmword [rbp + 0x380], xmm1
movdqa xmmword [rbp + 0x370], xmm0
call fcn.1800584b0
test al, al
je 0x180050a7d
xor edx, edx
call fcn.180071aa0
movabs rax, 0x6f4237947e23ee66
lea r8, [rbp + 0x190]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x190]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x190], rax
movabs rax, 0xcfa059511958ea6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x198], rax
movabs rax, 0x1d532482520443a8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x30b9b43ec5a94820
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x772b136efc05f5f3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x7f93a8f4f544a174
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x6e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x6e8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x6f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6f8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x700], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x190]
pxor xmm2, xmmword [rbp + 0x6e0]
movdqa xmm0, xmmword [rbp + 0x1a0]
movdqa xmm1, xmmword [rbp + 0x1b0]
pxor xmm0, xmmword [rbp + 0x6f0]
mov qword [rbp + 0x708], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x700]
movdqa xmmword [rbp + 0x190], xmm2
movdqa xmmword [rbp + 0x1a0], xmm0
movdqa xmmword [rbp + 0x1b0], xmm1
test al, al
je 0x18005120b
nop dword [rax + rax]
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180051200
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x190]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.1800570e0
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x180177838], rax
mov r12, rax
call fcn.1800570e0
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x180177850], rax
mov r15, rax
call fcn.1800570e0
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x180177848], rax
mov r14, rax
call fcn.1800570e0
movabs rdx, 0xb231a1bea995f83b
mov qword [0x180177858], rax
mov rsi, rax
call fcn.1800570e0
movabs rdx, 0x5f0720d54e5f164
mov qword [0x180177840], rax
mov rdi, rax
call fcn.1800570e0
movabs rdx, 0x483047d5ed936395
mov qword [0x180177860], rax
mov rbx, rax
call fcn.1800570e0
test rax, rax
mov qword [0x180177868], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x180050a7d
xor edx, edx
call fcn.180071aa0
movabs rax, 0x6f4237947e23ee66
lea r8, [rbp + 0x1c0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1c0]
mov rax, qword [rsp + 0x40]
movabs r12, 0x7fb1dc8c816ad206
mov qword [rbp + 0x1c0], rax
movabs r14, 0x4f3145f5084d8105
movabs rax, 0x6fa0c95158b82b1
movabs rdi, 0x6fda61f061f8fbc2
mov qword [rsp + 0x40], rax
movabs r15, 0x793650e73e742ec7
mov rax, qword [rsp + 0x40]
movabs rsi, 0x44ccc44ab0c6680c
mov qword [rbp + 0x1c8], rax
movabs rbx, 0x165d7d019f27d5c9
movabs rax, 0x35f3c86570047a9
mov edx, r8d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x2bafe424dfaf1c6d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x16391875fa4ba5a4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x710], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x718], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x720], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x728], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x730], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1c0]
pxor xmm2, xmmword [rbp + 0x710]
movdqa xmm0, xmmword [rbp + 0x1d0]
movdqa xmm1, xmmword [rbp + 0x1e0]
pxor xmm0, xmmword [rbp + 0x720]
mov qword [rbp + 0x738], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x730]
movdqa xmmword [rbp + 0x1c0], xmm2
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmmword [rbp + 0x1e0], xmm1
test al, al
je 0x1800514db
nop dword [rax]
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x1800514d0
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x1c0]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005a410
test al, al
je 0x180050a7d
xor edx, edx
call fcn.180071aa0
movabs rax, 0x215865866322ee6d
lea r8, [rbp - 0x30]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x30]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp - 0x30], rax
movabs rax, 0xea0089c00918fab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x28], rax
movabs rax, 0x145933c7501b47b3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x20], rax
movabs rax, 0x44cca02fc4a3047c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4a8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4b0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x30]
pxor xmm1, xmmword [rbp + 0x4a0]
movdqa xmm0, xmmword [rbp - 0x20]
mov qword [rbp + 0x4b8], rax
movq rax, xmm1
pxor xmm0, xmmword [rbp + 0x4b0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x20], xmm0
test al, al
je 0x1800515fb
nop dword [rax]
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x1800515f0
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp - 0x30]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x4f50459308288161
lea rcx, [rbp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
movabs rax, 0x6fda61846194fbb7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x60]
mov qword [rsp + 0x68], rax
pxor xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x60], xmm0
call fcn.180053700
test al, al
jne 0x18005189d
mov dl, 2
call fcn.180071aa0
movabs rcx, 0x84b041c6afff0df0
lea r8, [rbp + 0x310]
movabs rbx, 0x3b1121906424e063
mov edx, r8d
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x310], rax
movabs rax, 0x4faa1484048bdbad
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x318], rax
movabs rax, 0x15162288111040a6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x320], rax
movabs rax, 0x25aaa12e90a20963
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x328], rax
movabs rax, 0x70331262bf53b9bc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x330], rax
movabs rax, 0x10d8a8edf31fb56f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x338], rax
movabs rax, 0x181cc1d314bf3665
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x340], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x348], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x7d8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x7e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7e8], rax
movabs rax, 0x165d7d019f27d5c9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7f0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7f8], rax
movabs rax, 0x181cc1d314bf360b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x800], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x310]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x320]
pxor xmm0, xmmword [rbp + 0x7e0]
movdqa xmm2, xmmword [rbp + 0x310]
pxor xmm2, xmmword [rbp + 0x7d0]
movdqa xmm1, xmmword [rbp + 0x330]
pxor xmm1, xmmword [rbp + 0x7f0]
movdqa xmmword [rbp + 0x320], xmm0
movdqa xmm0, xmmword [rbp + 0x340]
mov qword [rbp + 0x808], rax
movq rax, xmm2
pxor xmm0, xmmword [rbp + 0x800]
movdqa xmmword [rbp + 0x340], xmm0
movdqa xmmword [rbp + 0x310], xmm2
movdqa xmmword [rbp + 0x330], xmm1
test al, al
je 0x18005188b
nop
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180051880
sub edx, r8d
mov r8d, edx
lea rdx, [rbp + 0x310]
jmp 0x180051a28
xor edx, edx
call fcn.180071aa0
movabs rax, 0x3d44229c6e23ee66
lea r8, [rbp + 0x220]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x220]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x220], rax
movabs rax, 0x16a9419e0e918fa3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x228], rax
movabs rax, 0x105839c753115ab4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x230], rax
movabs rax, 0x30adbe23dca70178
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x238], rax
movabs rax, 0x66301262bf49baa0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x240], rax
movabs rax, 0x7fb1dce8e41eb76a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x248], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x740], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x748], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x750], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x758], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x760], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x220]
pxor xmm2, xmmword [rbp + 0x740]
movdqa xmm0, xmmword [rbp + 0x230]
movdqa xmm1, xmmword [rbp + 0x240]
pxor xmm0, xmmword [rbp + 0x750]
mov qword [rbp + 0x768], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x760]
movdqa xmmword [rbp + 0x220], xmm2
movdqa xmmword [rbp + 0x230], xmm0
movdqa xmmword [rbp + 0x240], xmm1
test al, al
je 0x180051a1b
nop
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180051a10
sub edx, r8d
mov r8d, edx
lea rdx, [rbp + 0x220]
mov rcx, qword [0x180175e68]
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x7f1f77db3879af34
lea rbx, [rbp + 0x70]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x70]
mov rcx, qword [0x180177708]
mov qword [rsp + 0x78], rax
pxor xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x70], xmm0
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
test rax, rax
je 0x180051ace
nop dword [rax]
movzx ecx, byte [rax]
lea rax, [rax + 1]
movzx edx, byte [rbx]
lea rbx, [rbx + 1]
test cl, cl
je 0x180051ac6
cmp cl, dl
je 0x180051ab0
cmp cl, dl
je 0x180051fdf
mov dl, 2
call fcn.180071aa0
movabs rax, 0x6f5f2a9c7b3fe473
lea r8, [rbp + 0xd0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd0]
mov rax, qword [rsp + 0x40]
movabs rbx, 0x165d7d019f27d5c9
mov qword [rbp + 0xd0], rax
mov edx, r8d
movabs rax, 0x7b915910c8b92af
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd8], rax
movabs rax, 0x595a318451180ee6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xe0], rax
movabs rax, 0x37bea13c90f43b4f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xe8], rax
movabs rax, 0x165d7d21a549baa0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x770], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x778], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x780], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x788], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x790], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xd0]
pxor xmm2, xmmword [rbp + 0x770]
movdqa xmm0, xmmword [rbp + 0xe0]
movdqa xmm1, xmmword [rbp + 0xf0]
pxor xmm0, xmmword [rbp + 0x780]
mov qword [rbp + 0x798], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x790]
movdqa xmmword [rbp + 0xd0], xmm2
movdqa xmmword [rbp + 0xe0], xmm0
movdqa xmmword [rbp + 0xf0], xmm1
test al, al
je 0x180051c4b
nop
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180051c40
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0xd0]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x7f1f77db3879af34
lea r8, [rbp - 0x70]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x70]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x78], rax
pxor xmm0, xmmword [rbp - 0x80]
movq rax, xmm0
movdqa xmmword [rbp - 0x70], xmm0
test al, al
je 0x180051cdd
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180051cd2
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp - 0x70]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x215437877d2ea129
lea r8, [rbp - 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x10]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp - 0x10], rax
movabs rax, 0xaac41c232bbdbb6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 8], rax
movabs rax, 0x79166a89511d5db5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4c8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4d0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x10]
pxor xmm1, xmmword [rbp + 0x4c0]
movdqa xmm0, xmmword [rbp]
mov qword [rbp + 0x4d8], rax
movq rax, xmm1
pxor xmm0, xmmword [rbp + 0x4d0]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp], xmm0
test al, al
je 0x180051ddb
nop
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180051dd0
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp - 0x10]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x180177708]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
mov rcx, rax
mov edx, eax
cmp byte [rax], r13b
je 0x180051e2b
nop word [rax + rax]
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180051e20
mov rcx, qword [0x180175e68]
sub edx, eax
mov r8d, edx
mov qword [rsp + 0x20], r13
mov rdx, rax
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x3c412c996b28a12b
lea r8, [rbp + 0x250]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x250]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp + 0x250], rax
movabs rax, 0x4fae09970895dba7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x258], rax
movabs rax, 0x1a5825811e0041a9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x260], rax
movabs rax, 0x64bfa56adea90178
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x268], rax
movabs rax, 0x16731160f255baa7
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x270], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x278], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x7a8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x7b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7b8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7c0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x250]
pxor xmm2, xmmword [rbp + 0x7a0]
movdqa xmm0, xmmword [rbp + 0x260]
movdqa xmm1, xmmword [rbp + 0x270]
pxor xmm0, xmmword [rbp + 0x7b0]
mov qword [rbp + 0x7c8], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x7c0]
movdqa xmmword [rbp + 0x250], xmm2
movdqa xmmword [rbp + 0x260], xmm0
movdqa xmmword [rbp + 0x270], xmm1
test al, al
je 0x180051fbb
nop dword [rax + rax]
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180051fb0
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x250]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180051fe9
movabs rbx, 0x165d7d019f27d5c9
xor edx, edx
call fcn.180071aa0
movabs rax, 0x6f5436856121e260
lea r8, [rbp - 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x60]
mov rax, qword [rsp + 0x40]
mov edx, r8d
mov qword [rbp - 0x60], rax
movabs rax, 0x6b60099159195ab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0x1a163e8857004fbd
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
movabs rax, 0x20a9b02fdcb60563
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
movabs rax, 0x79340e73fa51f5e5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x7fb1dc8c814ae868
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x400], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x408], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x410], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x60]
pxor xmm2, xmmword [rbp + 0x3f0]
movdqa xmm0, xmmword [rbp - 0x50]
movdqa xmm1, xmmword [rbp - 0x40]
pxor xmm0, xmmword [rbp + 0x400]
mov qword [rbp + 0x418], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x410]
movdqa xmmword [rbp - 0x60], xmm2
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x40], xmm1
test al, al
je 0x18005213b
inc rcx
mov rdx, rcx
cmp byte [rcx], r13b
jne 0x180052130
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], r13
lea rdx, [rbp - 0x60]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov rax, rdx
inc rax
cmp byte [rax], r13b
jne 0x180052164
mov rcx, qword [0x180175e68]
sub eax, edx
mov r8d, eax
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x180050a7f