Function at 0x18005c8a0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rbx
push rdi
push r15
lea rbp, [rsp - 0x158]
sub rsp, 0x258
mov rax, qword [0x18017b040]
xor rax, rsp
mov qword [rbp + 0x140], rax
xor r15d, r15d
mov ebx, 1
mov edi, r15d
xor eax, eax
lock cmpxchg dword [0x18017d3e8], ebx
je 0x18005c901
nop dword [rax]
cmp rdi, 0x20
jae 0x18005c8ea
xor ecx, ecx
jmp 0x18005c8ec
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
xor eax, eax
lock cmpxchg dword [0x18017d3e8], ebx
jne 0x18005c8e0
cmp qword [0x18017d3f0], r15
jne 0x18005c92a
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
test rax, rax
mov qword [0x18017d3f0], rax
mov ebx, 9
cmovne ebx, r15d
mov qword [rsp + 0x280], rsi
mov eax, r15d
mov qword [rsp + 0x250], r14
xchg dword [0x18017d3e8], eax
test ebx, ebx
je 0x18005ca84
mov dl, 3
call fcn.1800767e0
movabs rax, 0x69b9890b174f3e3
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
movabs rdi, 0x72bbfcf5dd1d9285
mov qword [rsp + 0x50], rax
movabs rsi, 0x9f5b4b58b94977f2
movabs rax, 0xfe323f31d720579d
movabs r14, 0xa4e2b037e716c607
mov qword [rsp + 0x30], rax
movabs rbx, 0x79eabc424f767334
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x58], rax
movabs rax, 0xca8bdd17826caf6b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x79eabc4224191c5c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x88], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x18005ca60
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005ca55
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
jmp 0x18005e7b1
mov qword [rsp + 0x288], r12
mov dl, 1
mov qword [rsp + 0x290], r13
call fcn.1800767e0
movabs rax, 0x52d0939ab573fbe8
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
movabs r13, 0x68fd84d9b6ab3409
mov qword [rbp + 0x30], rax
movabs r12, 0xea49ac2c0da76ea6
movabs rax, 0xf6372a31cd20199b
movabs rdi, 0x72bbfcf5dd1d9285
mov qword [rsp + 0x30], rax
movabs rsi, 0x9f5b4b58b94977f2
mov rax, qword [rsp + 0x30]
movabs r14, 0xa4e2b037e716c607
mov qword [rbp + 0x38], rax
movabs rbx, 0x79eabc424f767334
movabs rax, 0xc7c2de588e62a77d
mov r8d, edx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0x1d8fc82723061e5b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005cc0b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005cc00
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d6d0]
mov rcx, qword [rax + 0x170]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x40]
call fcn.180060d60
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x6d59986b86fc2a7
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf77b2037d62157d0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x848cd5528536b566
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x798ed9362e130157
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x88], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x18005cd3b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005cd30
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d6d0]
mov rcx, qword [rax + 0x170]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x68]
call fcn.180060ac0
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x30de869cae78c0a7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xbf79382adc2f1187
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xd783d8178c79a96f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xb899c2c2a131114
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x68fd84bdd3df556c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x98], rax
movq rax, xmm2
movdqa xmm1, xmmword [rbp + 0x90]
xorps xmm1, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005cebb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005ceb0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017d818]
lea r8, [rsp + 0x38]
mov qword [rsp + 0x38], r15
lea rdx, [0x180162178]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov rax, qword [rcx]
call qword [rax + 0x38]
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x48]
mov qword [rsp + 0x48], r15
lea rdx, [0x180162198]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x50]
call fcn.180060820
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x21de8894b86fd1a7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xf1322a30fa391685
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xccc2db58887ee625
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0x5984d9272d560055
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x6899e1add7ce466a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d07b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d070
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x38], r15
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x40], r15
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x48], r15
movabs rax, 0x4a8fdcc6e83da2b1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
movabs rax, 0xa07b081d99784fd2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x90c28f17d836f927
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x79dbff620d4e530d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmm1, xmmword [rsp + 0x60]
mov qword [rbp + 0x88], rax
movabs rax, 0x72defc9cdd7192e6
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x9f3f4b76b93d779c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
movabs rax, 0xa4e2b037e77ac66b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x48], rax
movdqa xmm1, xmmword [rbp + 0x80]
lea rdx, [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x40]
lea rcx, [rbp + 0x70]
movdqa xmmword [rbp + 0x80], xmm1
movdqa xmmword [rbp + 0x70], xmm0
call fcn.180078350
mov rdx, rax
call fcn.180060580
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0xcf9db8a978d5a7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xfa321d2ad60f0f9b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0x8489df588f36e470
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0x178fd9206f05125c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0xc98f0b8d3d95729
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d39c
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d391
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d6c0]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x28]
call fcn.1800602e0
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x3fde8894b86fd1a7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xf03423789b2c019d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xc1809044867ee66c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xd8bd9302c561d51
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x68fd84d9b6ab506c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d50f
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d504
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d6c0]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x80]
call fcn.180060040
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x1cf29986a872dfa7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xf3392a36fc3d0282
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xcf8ddf5fc734a262
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0x1c8fde623c171b14
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0xd89e5bcc4c81467
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
movabs rax, 0xea49ac2c0da76ec2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d68f
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d684
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d880]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x120]
call fcn.18005fb00
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x6e89998bc6fd4a7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xf9323f37f72c1093
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0x8489df588f36e47e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0x178fd9206f05125c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0xc98f0b8d3d95729
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d80b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d800
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x318edccce53daab1
movabs rcx, 0xe1f0df0653c53b18
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
movabs rax, 0xa96e6b67997d45d2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0xe1c2830fc72ef227
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x41ca84766f495377
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
movabs rax, 0x57ddbbf9f29b144b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x70], rax
movabs rax, 0xca71980c32875186
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
movabs rax, 0x7e74d4f9dc514bf3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
movabs rax, 0x7e74d4cb9a7109cb
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp + 0x40]
mov qword [rbp + 0x68], rax
movabs rax, 0x72defc9cdd7192e6
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x80], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x9f3f4b76b93d779c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x70]
movabs rax, 0xa4e2b037e77ac66b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x70]
movdqa xmm1, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x48], rax
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmmword [rbp + 0x80], xmm1
call fcn.180078350
mov rdx, rax
call fcn.18005f860
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x1cf29090ab78dea7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xf4342430996b039b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xc187d2179477ae27
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0x1c9edd273d15535a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x68fd84d9b6ab346d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005dbbb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005dbb0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x31fedcc6e53daab1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x70], rax
movabs rax, 0xdd636b608d6948d2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x68], rax
movabs rax, 0x84dd9008c752f627
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x60], rax
movabs rax, 0x41ca84766f49530b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x58], rax
movabs rax, 0x57ddbbf9839a144d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x50], rax
movabs rax, 0xca7c980c32875186
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x48], rax
movabs rax, 0x4b40f4f2d9513af8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x40], rax
movabs rax, 0xd5d0ef4573f60838
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x38], rax
movabs rax, 0xd1e046d058c2ff5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x30], rax
movabs rax, 0x7832e0200332e13c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x28], rax
movabs rax, 0xce9f169abc3337fb
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x20], rax
movabs rax, 0x4b4b0485f38cdedc
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x18], rax
movabs rax, 0xd3669c21d34e1af1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x10], rax
movabs rax, 0x7b1fadc40551342e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 8], rax
movabs rax, 0x6c84f0357ab012b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp], rax
movabs rax, 0x58a79d1cb8d34f74
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 8], rax
movabs rax, 0x183ba063fba2dcb5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x10], rax
movabs rax, 0x698210bc768250b2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x18], rax
movabs rax, 0x822589e76c020824
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x20], rax
movabs rcx, 0xb5aac772f78dcdc4
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x28], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0xa0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0xa8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0xb0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r13
mov qword [rbp + 0xb8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0xc0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc8], rax
movabs rax, 0x7e74d4cb9a7109cb
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd0], rax
movabs rax, 0xe1f0df0653c53b18
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd8], rax
movabs rax, 0x2d2f344d47b40fcd
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xe0], rax
movabs rax, 0x580dc0103612a77a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xe8], rax
movabs rax, 0xfedc36af84130fcf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf0], rax
movabs rax, 0x737f24bad3b8e9fc
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf8], rax
movabs rax, 0xec46d811f30c22d1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x100], rax
movabs rax, 0x4f3f92e43a710b0e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x108], rax
movabs rax, 0x26f80b2315932113
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x110], rax
movabs rax, 0x6997bd5e80f30c40
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x118], rax
movabs rax, 0x2d1be625db93e895
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x120], rax
movabs rax, 0x51a2288856bd7082
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x128], rax
movabs rax, 0x822589e758412817
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rbp + 0x130], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp + 0x138], rax
movdqa xmm1, xmmword [rbp - 0x60]
lea rdx, [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0xb0]
lea rcx, [rbp + 0x70]
movdqa xmm0, xmmword [rbp - 0x50]
movabs rax, 0x72defc9cdd7192e6
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm1, xmmword [rbp + 0xd0]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rbp + 0xf0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp + 0x110]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm1
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp + 0x130]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x9f3f4b76b93d779c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
movabs rax, 0xa4e2b037e77ac66b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x70]
movdqa xmm1, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x48], rax
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmmword [rbp + 0x80], xmm1
call fcn.180078350
mov rdx, rax
call fcn.18005f5c0
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x1ae89090ab78dea7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xbf79252fd62d0387
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xd783d8178c79a96f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xb899c2c2a131114
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x68fd84bdd3df556c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005e24b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005e240
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x46f8dcb7e53daab1
movabs rcx, 0xe1f0df0653c53b18
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
movabs rax, 0xaa7b7a6c997a42d2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x84d78517d622e633
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x3aaf9c7377564b00
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
movabs rax, 0x57ddbbf9898b0b29
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x70], rax
movabs rax, 0xaf699f1a2de35a86
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
movabs rax, 0x7e74d4cb9a7109fa
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
movabs rax, 0x7e74d4cb9a7109cb
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp + 0x40]
mov qword [rbp + 0x68], rax
movabs rax, 0x72d5fc90dd7e92f6
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x80], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x9f284b21b93a7797
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x70]
movabs rax, 0xa4ccb05ae773c673
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
movabs rax, 0x79eabc2e4f1a7350
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x70]
movdqa xmm1, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x48], rax
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmmword [rbp + 0x80], xmm1
call fcn.180078350
mov rdx, rax
call fcn.18005f320
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x18d9b382bc6fd6a7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xf03423789b3d1497
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xc1809044867ee66c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xd8bd9302c561d51
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x68fd84d9b6ab506c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005e5ff
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005e5f4
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d8a0]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x270]
call fcn.18005fda0
test al, al
je 0x18005e79f
mov dl, 1
call fcn.1800767e0
movabs rax, 0x6da90908f6edba7
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0xfa283e37f42c019b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xcb8a90158272a94a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0x1bcacf232756185b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x998f6ba96c5516c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
movabs rax, 0xea49ac2c0dc30bd2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005e77f
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005e774
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x18005e7a1
xor al, al
mov r12, qword [rsp + 0x288]
mov r13, qword [rsp + 0x290]
mov r14, qword [rsp + 0x250]
mov rsi, qword [rsp + 0x280]
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.1800db810
add rsp, 0x258
pop r15
pop rdi
pop rbx
pop rbp
ret