Function at 0x18005cdd0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rbx
push rdi
push r15
lea rbp, [rsp - 0x738]
sub rsp, 0x838
mov rax, qword [0x18017d040]
xor rax, rsp
mov qword [rbp + 0x720], rax
xor r15d, r15d
mov ebx, 1
mov edi, r15d
xor eax, eax
lock cmpxchg dword [0x18017f3e8], ebx
je 0x18005ce31
nop dword [rax]
cmp rdi, 0x20
jae 0x18005ce1a
xor ecx, ecx
jmp 0x18005ce1c
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
xor eax, eax
lock cmpxchg dword [0x18017f3e8], ebx
jne 0x18005ce10
cmp qword [0x18017f3f0], r15
jne 0x18005ce5a
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
test rax, rax
mov qword [0x18017f3f0], rax
mov ebx, 9
cmovne ebx, r15d
mov qword [rsp + 0x860], rsi
mov eax, r15d
mov qword [rsp + 0x830], r14
xchg dword [0x18017f3e8], eax
test ebx, ebx
je 0x18005cfb2
mov dl, 3
call fcn.180077720
movabs rax, 0x464cf3650c2f68bd
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x30]
movabs rdi, 0x326c9700604609db
mov qword [rbp - 0x80], rax
movabs rsi, 0xf923cb057d2c8ac0
movabs rax, 0x984abf6c1345aaaf
movabs r14, 0x6c942626d7c5be25
mov qword [rsp + 0x30], rax
movabs rbx, 0x57729cc38e7b7c6a
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp - 0x78], rax
movabs rax, 0x2fd4b06b2bfd749
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x70], rax
movabs rax, 0x57729cc3e5141302
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x330], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x338], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x340], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0x330]
movdqa xmm0, xmmword [rbp - 0x70]
mov qword [rbp + 0x348], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmmword [rbp - 0x70], xmm0
test al, al
je 0x18005cf8f
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005cf84
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
jmp 0x18005efee
mov qword [rsp + 0x868], r12
mov dl, 1
mov qword [rsp + 0x870], r13
call fcn.180077720
movabs rax, 0x1207f86f082860b6
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x20]
mov rax, qword [rsp + 0x30]
movabs r13, 0xfaa003ccb64ff2ef
mov qword [rbp + 0x20], rax
movabs r12, 0x452507117ad0c874
movabs rax, 0x904faa6c0945e4a9
movabs rdi, 0x326c9700604609db
mov qword [rsp + 0x30], rax
movabs rsi, 0xf923cb057d2c8ac0
mov rax, qword [rsp + 0x30]
movabs r14, 0x6c942626d7c5be25
mov qword [rbp + 0x28], rax
movabs rbx, 0x57729cc38e7b7c6a
movabs rax, 0xfb44849beb1df5f
mov r8d, edx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
movabs rax, 0x3317e8a6e20b1105
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x420], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x428], rax
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x420]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x430], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x438], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x440], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
xorps xmm2, xmmword [rbp + 0x20]
movdqa xmm0, xmmword [rbp + 0x30]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x430]
mov qword [rbp + 0x448], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x20], xmm2
movdqa xmmword [rbp + 0x30], xmm0
test al, al
je 0x18005d13b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d130
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017f870]
mov rcx, qword [rax + 0x170]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x40]
call fcn.1800615f0
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x4602f273053459f9
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x60]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp - 0x60], rax
movabs rax, 0x9103a06a1244aae2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x58], rax
movabs rax, 0x4cfa4343b5e5cd44
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x50], rax
movabs rax, 0x5716f9b7ef1e0e09
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x360], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x368], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x370], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rbp + 0x360]
movdqa xmm0, xmmword [rbp - 0x50]
mov qword [rbp + 0x378], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmmword [rbp - 0x50], xmm0
test al, al
je 0x18005d26b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d260
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017f870]
mov rcx, qword [rax + 0x170]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x68]
call fcn.180061350
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x7009ed6913235bf9
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x50]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x50], rax
movabs rax, 0xd901b877184aecb5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
movabs rax, 0x1ff54e06bcaad14d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x60], rax
movabs rax, 0x2511bcadeb1e1e4a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x68], rax
movabs rax, 0xfaa003a8d33b938a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x450], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x458], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x460], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x468], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x470], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x50]
xorps xmm2, xmmword [rbp + 0x450]
movdqa xmm0, xmmword [rbp + 0x60]
movdqa xmm1, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x460]
mov qword [rbp + 0x478], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x50], xmm2
movdqa xmmword [rbp + 0x60], xmm0
movdqa xmmword [rbp + 0x70], xmm1
test al, al
je 0x18005d3ee
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d3e3
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017f6b8]
lea r8, [rsp + 0x38]
mov qword [rsp + 0x38], r15
lea rdx, [0x180163e78]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov rax, qword [rcx]
call qword [rax + 0x38]
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x48]
mov qword [rsp + 0x48], r15
lea rdx, [0x180163e98]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x50]
call fcn.1800610b0
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x6109e36105344af9
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x80]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x80], rax
movabs rax, 0x974aaa6d3e5cebb7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
movabs rax, 0x4b44d49b8ad9e07
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
movabs rax, 0x771cf9a6ec5b0f0b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x98], rax
movabs rax, 0xfac466b8d72a808c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x480], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x488], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x490], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x498], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4a0], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x80]
xorps xmm2, xmmword [rbp + 0x480]
movdqa xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x490]
mov qword [rbp + 0x4a8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x80], xmm2
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0xa0], xmm1
test al, al
je 0x18005d5e0
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d5d5
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x38], r15
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x40], r15
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x48], r15
movabs rax, 0xa58b733556639ef
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x170], rax
movabs rax, 0xc60388405d1db2e0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x178], rax
movabs rax, 0x58b41906e8e58105
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x180], rax
movabs rax, 0x5743dfe3cc435c53
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x188], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x380], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x388], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x390], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x170]
movdqa xmm1, xmmword [rbp + 0x180]
xorps xmm0, xmmword [rbp + 0x380]
mov qword [rbp + 0x398], rax
movabs rax, 0x32099769602a09b8
xorps xmm1, xmmword [rbp + 0x390]
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmmword [rbp + 0x180], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x190], rax
movabs rax, 0xf947cb2b7d588aae
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x198], rax
movabs rax, 0x6c942626d7a9be49
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1a0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1a8], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x3a0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x3a8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x3b0], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x190]
xorps xmm0, xmmword [rbp + 0x3a0]
mov qword [rbp + 0x3b8], rax
movdqa xmm1, xmmword [rbp + 0x1a0]
lea rdx, [rbp + 0x170]
xorps xmm1, xmmword [rbp + 0x3b0]
lea rcx, [rbp + 0x190]
movdqa xmmword [rbp + 0x1a0], xmm1
movdqa xmmword [rbp + 0x190], xmm0
call fcn.180079370
mov rdx, rax
call fcn.180060e10
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x4018f64d14234ef9
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0xb0]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0xb0], rax
movabs rax, 0x9c4a9d77126af2a9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xb8], rax
movabs rax, 0x4cff4949bfe59c52
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc0], rax
movabs rax, 0x3917f9a1ae081d02
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc8], rax
movabs rax, 0x9ec577add33d91cf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd8], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x4b0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x4b8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x4c0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4c8], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4d0], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0xb0]
xorps xmm2, xmmword [rbp + 0x4b0]
movdqa xmm0, xmmword [rbp + 0xc0]
movdqa xmm1, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x4c0]
mov qword [rbp + 0x4d8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x4d0]
movdqa xmmword [rbp + 0xb0], xmm2
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xd0], xmm1
test al, al
je 0x18005d97b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d970
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017f830]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x28]
call fcn.180060b70
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x7f09e36105344af9
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0xe0]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0xe0], rax
movabs rax, 0x964ca3255f49fcaf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xe8], rax
movabs rax, 0x9f60655b6ad9e4e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf0], rax
movabs rax, 0x2313f9b1ed5b120f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf8], rax
movabs rax, 0xfaa003ccb64f968a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x100], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x108], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x4e0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x4e8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x4f0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4f8], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x500], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0xe0]
xorps xmm2, xmmword [rbp + 0x4e0]
movdqa xmm0, xmmword [rbp + 0xf0]
movdqa xmm1, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x4f0]
mov qword [rbp + 0x508], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x500]
movdqa xmmword [rbp + 0xe0], xmm2
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmmword [rbp + 0x100], xmm1
test al, al
je 0x18005db2b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005db20
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017f830]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x68]
call fcn.1800608d0
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x5c25f273152944f9
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x110]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x110], rax
movabs rax, 0x9541aa6b3858ffb0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x118], rax
movabs rax, 0x7fb494ef7e7da40
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x120], rax
movabs rax, 0x3217fee3fd1a144a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x128], rax
movabs rax, 0x9fd462a9c42cd281
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x130], rax
movabs rax, 0x452507117ad0c810
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x138], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x5d0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x5d8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x5e0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x5e8], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x5f0], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x110]
xorps xmm2, xmmword [rbp + 0x5d0]
movdqa xmm0, xmmword [rbp + 0x120]
movdqa xmm1, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x5e0]
mov qword [rbp + 0x5f8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5f0]
movdqa xmmword [rbp + 0x110], xmm2
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
test al, al
je 0x18005dcde
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005dcd3
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017f840]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x120]
call fcn.180060390
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x463ff26d01344ff9
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x140]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x140], rax
movabs rax, 0x9f4abf6a3349eda1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x148], rax
movabs rax, 0x4cff4949bfe59c5c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x150], rax
movabs rax, 0x3917f9a1ae081d02
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x158], rax
movabs rax, 0x9ec577add33d91cf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x160], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x510], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x518], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x520], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x528], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x530], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x140]
xorps xmm2, xmmword [rbp + 0x510]
movdqa xmm0, xmmword [rbp + 0x150]
movdqa xmm1, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x520]
mov qword [rbp + 0x538], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x140], xmm2
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmmword [rbp + 0x160], xmm1
test al, al
je 0x18005de8b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005de80
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp + 0x140]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x7159b739586631ef
movabs rcx, 0x221620efeab253ce
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x210], rax
movabs rax, 0xcf16eb3a5d18b8e0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x218], rax
movabs rax, 0x29b4151ef7fd8a05
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x220], rax
movabs rax, 0x6f52a4f7ae445c29
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x228], rax
movabs rax, 0xc5803cecf27fd2ad
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x230], rax
movabs rax, 0x651d333145f0f754
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x238], rax
movabs rax, 0x87db54409d4a2be1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x240], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x248], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x600], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x608], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x610], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r13
mov qword [rbp + 0x618], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x620], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x628], rax
movabs rax, 0x87db5472db6a69d9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x630], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x210]
movdqa xmm1, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x600]
xorps xmm1, xmmword [rbp + 0x610]
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmm0, xmmword [rbp + 0x230]
xorps xmm0, xmmword [rbp + 0x620]
movdqa xmmword [rbp + 0x220], xmm1
movdqa xmm1, xmmword [rbp + 0x240]
mov qword [rbp + 0x638], rax
movabs rax, 0x32099769602a09b8
xorps xmm1, xmmword [rbp + 0x630]
movdqa xmmword [rbp + 0x230], xmm0
movdqa xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xf947cb2b7d588aae
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
lea rdx, [rbp + 0x210]
mov qword [rbp + 0x1b8], rax
lea rcx, [rbp + 0x1b0]
movabs rax, 0x6c942626d7a9be49
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1c0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x3c0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3c8], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3d0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x1b0]
movdqa xmm1, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x3c0]
mov qword [rbp + 0x3d8], rax
xorps xmm1, xmmword [rbp + 0x3d0]
movdqa xmmword [rbp + 0x1c0], xmm1
movdqa xmmword [rbp + 0x1b0], xmm0
call fcn.180079370
mov rdx, rax
call fcn.1800600f0
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x5c25fb65162345f9
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x40]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp - 0x40], rax
movabs rax, 0x924ca46d5d0efea9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x38], rax
movabs rax, 0x9f14406a4a4d605
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x30], rax
movabs rax, 0x3206fda6fc185c04
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x28], rax
movabs rax, 0xfaa003ccb64ff28b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x20], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x540], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x548], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x550], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x558], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x560], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp - 0x40]
xorps xmm2, xmmword [rbp + 0x540]
movdqa xmm0, xmmword [rbp - 0x30]
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm0, xmmword [rbp + 0x550]
mov qword [rbp + 0x568], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x560]
movdqa xmmword [rbp - 0x40], xmm2
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmmword [rbp - 0x20], xmm1
test al, al
je 0x18005e2ac
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005e2a1
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x7129b733586631ef
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x290], rax
movabs rax, 0xbb1beb3d490cb5e0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x298], rax
movabs rax, 0x4cab0619f7818e05
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x6f52a4f7ae445c55
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xc5803cec837ed2ab
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2b0], rax
movabs rax, 0x6510333145f0f754
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2b8], rax
movabs rax, 0xb2ef744b984a5aea
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x163610acca8160ee
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x132c54885c61825b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xba4afdf077bdee
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xebd5065b8b084819
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2e0], rax
movabs rax, 0xbce6f7f429605552
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x2c4a484f51aab77
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x329c7dd9cf52b7fc
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2f8], rax
movabs rax, 0xe0bf8e3a49d44c39
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x300], rax
movabs rax, 0xfdad8bf53f767c42
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x308], rax
movabs rax, 0x7a9454f6df781e4b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x310], rax
movabs rax, 0x119d3f01e91e61e0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x318], rax
movabs rax, 0x9d2d62561144ac86
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x320], rax
movabs rcx, 0x35f2aaf307621bfa
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x328], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x680], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x688], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x690], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r13
mov qword [rbp + 0x698], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x6a0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6a8], rax
movabs rax, 0x87db5472db6a69d9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6b0], rax
movabs rax, 0x221620efeab253ce
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6b8], rax
movabs rax, 0x331d64a81e59a263
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6c0], rax
movabs rax, 0x20856acdc557fba8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6c8], rax
movabs rax, 0xdb96266eb328702d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6d0], rax
movabs rax, 0x84d2d7cb09546272
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6d8], rax
movabs rax, 0x3de4e0b4d5589357
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6e0], rax
movabs rax, 0x6bc42f9f07288dc
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6e8], rax
movabs rax, 0xc08fca1a0bec6c01
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6f0], rax
movabs rax, 0xcc9dabb707563f76
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x6f8], rax
movabs rax, 0x4fb412b0ff492a6b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x700], rax
movabs rax, 0x29bd0735c92141d0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x708], rax
movabs rax, 0x9d2d625625078cb5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rbp + 0x710], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x290]
xorps xmm0, xmmword [rbp + 0x680]
movdqa xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x718], rax
movdqa xmm1, xmmword [rbp + 0x2a0]
lea rdx, [rbp + 0x290]
xorps xmm1, xmmword [rbp + 0x690]
lea rcx, [rbp + 0x1d0]
movdqa xmm0, xmmword [rbp + 0x2b0]
movabs rax, 0x32099769602a09b8
xorps xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x2a0], xmm1
movdqa xmm1, xmmword [rbp + 0x2c0]
xorps xmm1, xmmword [rbp + 0x6b0]
movdqa xmmword [rbp + 0x2c0], xmm1
movdqa xmm1, xmmword [rbp + 0x2e0]
xorps xmm1, xmmword [rbp + 0x6d0]
movdqa xmmword [rbp + 0x2b0], xmm0
movdqa xmm0, xmmword [rbp + 0x2d0]
xorps xmm0, xmmword [rbp + 0x6c0]
movdqa xmmword [rbp + 0x2e0], xmm1
movdqa xmm1, xmmword [rbp + 0x300]
xorps xmm1, xmmword [rbp + 0x6f0]
movdqa xmmword [rbp + 0x2d0], xmm0
movdqa xmm0, xmmword [rbp + 0x2f0]
xorps xmm0, xmmword [rbp + 0x6e0]
movdqa xmmword [rbp + 0x300], xmm1
movdqa xmm1, xmmword [rbp + 0x320]
xorps xmm1, xmmword [rbp + 0x710]
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmm0, xmmword [rbp + 0x310]
xorps xmm0, xmmword [rbp + 0x700]
movdqa xmmword [rbp + 0x320], xmm1
movdqa xmmword [rbp + 0x310], xmm0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xf947cb2b7d588aae
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x6c942626d7a9be49
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1e0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1e8], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x3e0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3e8], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x3f0], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x1d0]
movdqa xmm1, xmmword [rbp + 0x1e0]
xorps xmm0, xmmword [rbp + 0x3e0]
mov qword [rbp + 0x3f8], rax
xorps xmm1, xmmword [rbp + 0x3f0]
movdqa xmmword [rbp + 0x1e0], xmm1
movdqa xmmword [rbp + 0x1d0], xmm0
call fcn.180079370
mov rdx, rax
call fcn.18005fe50
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x5a3ffb65162345f9
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x10]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp - 0x10], rax
movabs rax, 0xd901a5721248feb5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 8], rax
movabs rax, 0x1ff54e06bcaad14d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp], rax
movabs rax, 0x2511bcadeb1e1e4a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 8], rax
movabs rax, 0xfaa003a8d33b938a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x570], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x578], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x580], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x588], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x590], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp - 0x10]
xorps xmm2, xmmword [rbp + 0x570]
movdqa xmm0, xmmword [rbp]
movdqa xmm1, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x580]
mov qword [rbp + 0x598], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp], xmm0
movdqa xmmword [rbp + 0x10], xmm1
test al, al
je 0x18005e9dc
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005e9d1
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x62fb742586631ef
movabs rcx, 0x221620efeab253ce
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x250], rax
movabs rax, 0xcc03fa315d1fbfe0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x258], rax
movabs rax, 0x4ca11306e6f19e11
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x260], rax
movabs rax, 0x1437bcf2b65b445e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x268], rax
movabs rax, 0xc5803cec896fcdcf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x270], rax
movabs rax, 0x534275a94fc54
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x278], rax
movabs rax, 0x87db5472db6a69e8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x280], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x288], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x640], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x648], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x650], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r13
mov qword [rbp + 0x658], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x660], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x668], rax
movabs rax, 0x87db5472db6a69d9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x670], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x250]
movdqa xmm1, xmmword [rbp + 0x260]
xorps xmm0, xmmword [rbp + 0x640]
xorps xmm1, xmmword [rbp + 0x650]
movdqa xmmword [rbp + 0x250], xmm0
movdqa xmm0, xmmword [rbp + 0x270]
xorps xmm0, xmmword [rbp + 0x660]
movdqa xmmword [rbp + 0x260], xmm1
movdqa xmm1, xmmword [rbp + 0x280]
mov qword [rbp + 0x678], rax
movabs rax, 0x32029765602509a8
xorps xmm1, xmmword [rbp + 0x670]
movdqa xmmword [rbp + 0x270], xmm0
movdqa xmmword [rbp + 0x280], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1f0], rax
movabs rax, 0xf950cb7c7d5f8aa5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
lea rdx, [rbp + 0x250]
mov qword [rbp + 0x1f8], rax
lea rcx, [rbp + 0x1f0]
movabs rax, 0x6cba264bd7a0be51
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x200], rax
movabs rax, 0x57729caf8e177c0e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x208], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x400], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x408], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x410], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x1f0]
movdqa xmm1, xmmword [rbp + 0x200]
xorps xmm0, xmmword [rbp + 0x400]
mov qword [rbp + 0x418], rax
xorps xmm1, xmmword [rbp + 0x410]
movdqa xmmword [rbp + 0x200], xmm1
movdqa xmmword [rbp + 0x1f0], xmm0
call fcn.180079370
mov rdx, rax
call fcn.18005fbb0
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x580ed87701344df9
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x964ca3255f58e9a5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x9f60655b6ad9e4e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x2313f9b1ed5b120f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
movabs rax, 0xfaa003ccb64f968a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x5a0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x5a8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x5b0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x5b8], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x5c0], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp + 0x5a0]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x5b0]
mov qword [rbp + 0x5c8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5c0]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005ee1b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005ee10
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017f860]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x270]
call fcn.180060630
test al, al
je 0x18005efdc
mov dl, 1
call fcn.180077720
movabs rax, 0x460dfb65323540f9
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x9c50be6a3049fca9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x3fc0604b2a1d168
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x3552efa2e65b1705
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
movabs rax, 0x9bc571af9621978a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x70], rax
movabs rax, 0x452507117ab4ad00
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0x330], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x338], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0x340], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x348], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x350], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp + 0x330]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x340]
mov qword [rbp + 0x358], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x350]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005efbb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005efb0
mov rcx, qword [0x18017ded8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x18005efde
xor al, al
mov r12, qword [rsp + 0x868]
mov r13, qword [rsp + 0x870]
mov r14, qword [rsp + 0x830]
mov rsi, qword [rsp + 0x860]
mov rcx, qword [rbp + 0x720]
xor rcx, rsp
call fcn.1800dc8e0
add rsp, 0x838
pop r15
pop rdi
pop rbx
pop rbp
ret