Function at 0x180051cd0
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xa58]
sub rsp, 0xb30
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x180179040]
xor rax, rsp
mov qword [rbp + 0xa10], rax
movabs rax, 0xdb1d275101b8451c
lea rcx, [rbp + 0x800]
mov qword [rsp + 0x40], rax
movabs rsi, 0x115589aa4aef4404
mov rax, qword [rsp + 0x40]
movabs r14, 0xdb75272101cb457d
mov qword [rbp + 0x320], rax
movabs rdi, 0x12cf7f50f696ddf2
movabs rax, 0x12ae7f39f6eedd8b
movabs r15, 0xdd267ddb7dbdd6bf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x328], rax
movabs rax, 0xdd417db47dd1d691
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x330], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x338], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x410], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x418], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x420], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x330]
movdqa xmm6, xmmword [rbp + 0x320]
xorps xmm6, xmmword [rbp + 0x410]
mov qword [rbp + 0x428], rax
xorps xmm0, xmmword [rbp + 0x420]
movdqa xmmword [rbp + 0x330], xmm0
movdqa xmmword [rbp + 0x320], xmm6
call fcn.180051870
test al, al
je 0x18005343b
cmp word [rbp + 0x800], 0
lea rax, [rbp + 0x800]
je 0x180051e3a
nop dword [rax]
add rax, 2
cmp word [rax], 0
jne 0x180051e30
movq rcx, xmm6
test cx, cx
je 0x180051e60
lea rdx, [rbp + 0x320]
sub rdx, rax
nop
mov word [rax], cx
add rax, 2
movzx ecx, word [rdx + rax]
test cx, cx
jne 0x180051e50
xor r13d, r13d
lea rcx, [rbp + 0x800]
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov word [rax], r13w
lea r8d, [r13 + 1]
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x180179ed8], rax
cmp rax, 0xffffffffffffffff
je 0x18005343b
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea r8d, [r13 + 3]
mov rcx, rax
lea rdx, [0x180161be8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.1800755f0
movabs rax, 0xfb12494866ac2a11
lea rdx, [rbp + 0x280]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x280]
mov rax, qword [rsp + 0x40]
movabs r12, 0x8783f164f67cb746
mov qword [rbp + 0x280], rax
movabs rbx, 0x931b1be5aae00881
movabs rax, 0x7bef123582e5a481
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x288], rax
movabs rax, 0xa74f11ba14c9bfd1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x290], rax
movabs rax, 0x7e36a9c425863065
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x298], rax
movabs rax, 0x937f7e91cf8c78ec
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2a8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x4f8], rax
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x4f0]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x500], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x508], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x510], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
xorps xmm2, xmmword [rbp + 0x280]
movdqa xmm0, xmmword [rbp + 0x290]
movdqa xmm1, xmmword [rbp + 0x2a0]
xorps xmm0, xmmword [rbp + 0x500]
mov qword [rbp + 0x518], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x2a0], xmm1
movdqa xmmword [rbp + 0x280], xmm2
movdqa xmmword [rbp + 0x290], xmm0
test al, al
je 0x18005204b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052040
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x280]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180075cf0
test al, al
je 0x18005343b
xor edx, edx
call fcn.1800755f0
movabs rax, 0xa8555e536ea62010
lea rdx, [rbp + 0x2b0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x2b0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x2b0], rax
movabs rax, 0x7ca65f3d93e2ae8b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2b8], rax
movabs rax, 0xbc5c14b71cd4a2d6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x7c3aea8a24802d70
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x931b7f80de8564f1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2d8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x520], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x528], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x530], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x538], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x540], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x2b0]
xorps xmm2, xmmword [rbp + 0x520]
movdqa xmm0, xmmword [rbp + 0x2c0]
movdqa xmm1, xmmword [rbp + 0x2d0]
xorps xmm0, xmmword [rbp + 0x530]
mov qword [rbp + 0x548], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x540]
movdqa xmmword [rbp + 0x2b0], xmm2
movdqa xmmword [rbp + 0x2c0], xmm0
movdqa xmmword [rbp + 0x2d0], xmm1
test al, al
je 0x1800521eb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800521e0
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x2b0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.1800758c0
test al, al
je 0x18005343b
xor edx, edx
call fcn.1800755f0
movabs rax, 0xa80c540169bf2410
lea rdx, [rbp + 0xa0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xa0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0xa0], rax
movabs rax, 0x66a61139d6fbb886
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
movabs rax, 0xb4521ca114d1b7d6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
movabs rax, 0x7d25e4c529cf2a6b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0x931b1be5ce857ce4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x550], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x558], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x560], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x568], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x570], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xa0]
xorps xmm2, xmmword [rbp + 0x550]
movdqa xmm0, xmmword [rbp + 0xb0]
movdqa xmm1, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x560]
mov qword [rbp + 0x578], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0xa0], xmm2
movdqa xmmword [rbp + 0xb0], xmm0
movdqa xmmword [rbp + 0xc0], xmm1
test al, al
je 0x18005238b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052380
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0xa0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.1800603c0
test al, al
je 0x18005343b
xor edx, edx
call fcn.1800755f0
movabs rax, 0xb814415364bf2b14
lea rdx, [rbp + 0xd0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0xd0], rax
movabs rax, 0x7bbb163e9fb6ae97
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd8], rax
movabs rax, 0xb24f09ba07d4bade
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xe0], rax
movabs rax, 0x7439f9c7258c646a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xe8], rax
movabs rax, 0x931b1be5aa846df5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xf8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x580], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x588], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x590], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x598], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5a0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0xd0]
xorps xmm2, xmmword [rbp + 0x580]
movdqa xmm0, xmmword [rbp + 0xe0]
movdqa xmm1, xmmword [rbp + 0xf0]
xorps xmm0, xmmword [rbp + 0x590]
mov qword [rbp + 0x5a8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0xd0], xmm2
movdqa xmmword [rbp + 0xe0], xmm0
movdqa xmmword [rbp + 0xf0], xmm1
test al, al
je 0x18005252b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052520
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0xd0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xee5b1e0f38f86b4c
lea rbx, [rbp + 0x70]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x70]
mov rcx, qword [0x18017b730]
mov qword [rsp + 0x58], rax
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x70], xmm0
mov rax, qword [rcx]
mov rdx, qword [rax + 0x270]
call rdx
test rax, rax
je 0x1800525de
nop dword [rax]
movzx ecx, byte [rax]
lea rax, [rax + 1]
movzx edx, byte [rbx]
lea rbx, [rbx + 1]
test cl, cl
je 0x1800525d6
cmp cl, dl
je 0x1800525c0
cmp cl, dl
je 0x180052adc
mov dl, 2
call fcn.1800755f0
movabs rax, 0xfb1b484872b9200b
lea rdx, [rbp + 0x220]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x220]
mov rax, qword [rsp + 0x40]
movabs rbx, 0x931b1be5aae00881
mov qword [rbp + 0x220], rax
mov r8d, edx
movabs rax, 0x7aac0b319be5b49f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x228], rax
movabs rax, 0xfd4a1cb812d1f69e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x230], rax
movabs rax, 0x6227ecdc6add1747
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x238], rax
movabs rax, 0x931b1bc5908e67e8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x240], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x248], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x5b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x5b8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5c8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5d0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x220]
xorps xmm2, xmmword [rbp + 0x5b0]
movdqa xmm0, xmmword [rbp + 0x230]
movdqa xmm1, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x5c0]
mov qword [rbp + 0x5d8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x5d0]
movdqa xmmword [rbp + 0x220], xmm2
movdqa xmmword [rbp + 0x230], xmm0
movdqa xmmword [rbp + 0x240], xmm1
test al, al
je 0x18005275b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052750
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x220]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xee5b1e0f38f86b4c
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rsp + 0x68], rax
xorps xmm0, xmmword [rsp + 0x60]
movq rax, xmm0
movdqa xmmword [rbp - 0x40], xmm0
test al, al
je 0x1800527ec
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800527e1
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xb510555374a86551
lea rdx, [rbp + 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x10]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x10], rax
movabs rax, 0x77b95f62a5d5fd86
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x18], rax
movabs rax, 0xdd0647b512d4a5cd
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x20], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x28], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x430], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x438], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x440], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x10]
xorps xmm1, xmmword [rbp + 0x430]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x448], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp + 0x20], xmm0
test al, al
je 0x1800528eb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800528e0
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x10]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017b730]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x270]
call rdx
mov rcx, rax
mov r8d, eax
cmp byte [rax], r13b
je 0x180052930
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052925
mov rcx, qword [0x180179ed8]
sub r8d, eax
xor r9d, r9d
mov qword [rsp + 0x20], r13
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xa30c4f5172aa6553
lea rdx, [rbp + 0x130]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x130]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x130], rax
movabs rax, 0x66a718399bb6bc9b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x138], rax
movabs rax, 0xb3531bfb09d2b89f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x140], rax
movabs rax, 0x6234a9c425863067
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x148], rax
movabs rax, 0xbd777a88d88f66a1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x150], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x158], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x5e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x5e8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x5f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x5f8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x600], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x130]
xorps xmm2, xmmword [rbp + 0x5e0]
movdqa xmm0, xmmword [rbp + 0x140]
movdqa xmm1, xmmword [rbp + 0x150]
xorps xmm0, xmmword [rbp + 0x5f0]
mov qword [rbp + 0x608], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x600]
movdqa xmmword [rbp + 0x130], xmm2
movdqa xmmword [rbp + 0x140], xmm0
movdqa xmmword [rbp + 0x150], xmm1
test al, al
je 0x180052abb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052ab0
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x130]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180052ae6
movabs rbx, 0x931b1be5aae00881
movabs rax, 0xdb07274401a24509
lea rcx, [rbp + 0x340]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x340], rax
movabs rax, 0x12a37f34f6b8ddc2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x348], rax
movabs rax, 0xdd267ddb7dbdd6d3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x350], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x358], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x450], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x458], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x460], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x340]
movdqa xmm1, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x450]
mov qword [rbp + 0x468], rax
xorps xmm1, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0x350], xmm1
movdqa xmmword [rbp + 0x340], xmm0
call fcn.180076700
mov r8, rax
test rax, rax
je 0x18005343b
movabs rax, 0xb41948626fa40642
lea rdx, [rbp + 0x380]
mov qword [rsp + 0x40], rax
movabs rax, 0x53963f1091e59080
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x380], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0xb1493e8d3ff897e7
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x388], rcx
mov rcx, r8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x390], rax
movabs rax, 0x5517ccfa0aaf366b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x398], rax
movabs rax, 0x931b1be5aae052db
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3a8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x610], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x618], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x620], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x628], rax
movdqa xmm1, xmmword [rbp + 0x620]
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x630], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x380]
xorps xmm0, xmmword [rbp + 0x610]
xorps xmm1, xmmword [rbp + 0x390]
movdqa xmmword [rbp + 0x380], xmm0
mov qword [rbp + 0x638], rax
movdqa xmm0, xmmword [rbp + 0x630]
xorps xmm0, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0x3a0], xmm0
movdqa xmmword [rbp + 0x390], xmm1
call fcn.1800769e0
mov qword [0x18017bc50], rax
test rax, rax
je 0x18005343b
xor edx, edx
call fcn.1800755f0
movabs rax, 0xaf1c494821a0210e
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x7bbb1e2a9ffabc9b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x38], rax
movabs rax, 0xb15610b41e9db8d0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
movabs rax, 0x115589aa2e8a3061
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x470], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x478], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x480], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x30]
xorps xmm1, xmmword [rbp + 0x470]
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x488], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x480]
movdqa xmmword [rbp + 0x30], xmm1
movdqa xmmword [rbp + 0x40], xmm0
test al, al
je 0x180052e20
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180052e15
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017b850]
test rcx, rcx
jne 0x180052e7b
nop dword [rax + rax]
lea rdx, [0x18017b850]
lea rcx, [0x180075570]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x18017b850]
test rcx, rcx
je 0x180052e50
lea r8, [0x18005e000]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18017b948], rax
test rax, rax
je 0x18005343b
xor edx, edx
call fcn.1800755f0
movabs rax, 0xa206075574bb2b14
lea rdx, [rbp + 0x160]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x160]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x160], rax
movabs rax, 0x7ba116709bf3a981
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x168], rax
movabs rax, 0xa94707b211dcbfcb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x170], rax
movabs rax, 0x6138e6c96a812b6d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x178], rax
movabs rax, 0x931b1b81cf946ded
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x180], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x188], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x640], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x648], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x650], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x658], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x660], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x160]
xorps xmm2, xmmword [rbp + 0x640]
movdqa xmm0, xmmword [rbp + 0x170]
movdqa xmm1, xmmword [rbp + 0x180]
xorps xmm0, xmmword [rbp + 0x650]
mov qword [rbp + 0x668], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x660]
movdqa xmmword [rbp + 0x160], xmm2
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmmword [rbp + 0x180], xmm1
test al, al
je 0x18005300c
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053001
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x160]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x18017b740]
mov rdx, qword [0x18017b738]
mov rcx, qword [0x18017b850]
call fcn.180073df0
xor ecx, ecx
call fcn.1800651e0
cmp byte [0x18017b748], r13b
jne 0x180053069
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x18017b748], r13b
je 0x180053055
xor edx, edx
call fcn.1800755f0
movabs rax, 0xa910554465a5200f
lea rdx, [rbp + 0x190]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x190]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x190], rax
movabs rax, 0x76a11a3b95f7bfd2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x198], rax
movabs rax, 0xb14714af14d3bf9f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x313be6c33e8e3e6d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xf66f7e89da8d67e2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x8783f164f67cb722
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1b8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x670], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x678], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x680], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x688], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x690], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x190]
xorps xmm2, xmmword [rbp + 0x670]
movdqa xmm0, xmmword [rbp + 0x1a0]
movdqa xmm1, xmmword [rbp + 0x1b0]
xorps xmm0, xmmword [rbp + 0x680]
mov qword [rbp + 0x698], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x690]
movdqa xmmword [rbp + 0x190], xmm2
movdqa xmmword [rbp + 0x1a0], xmm0
movdqa xmmword [rbp + 0x1b0], xmm1
test al, al
je 0x1800531eb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800531e0
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x190]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18006cfc0
test al, al
jne 0x180053472
mov dl, 3
call fcn.1800755f0
movabs rdi, 0xeda1ef4b487088d1
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x40], rdi
lea rcx, [rbp + 0x50]
mov rax, qword [rsp + 0x40]
movabs rsi, 0x99818b2e2419e9b7
mov qword [rbp + 0x50], rax
movabs r14, 0x1ce0d82fa3a3120c
movabs rax, 0x7d89ac46cdca3263
movabs r15, 0x328f8444c6ca8d9
mov qword [rsp + 0x40], rax
movabs rbx, 0x835cf8e50531338e
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x58], rax
movabs rax, 0x62409b642916c1b5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
movabs rax, 0x835cf8e5053140e3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x490], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x498], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4a0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm1, xmmword [rbp + 0x490]
movdqa xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x4a8], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x50], xmm1
movdqa xmmword [rbp + 0x60], xmm0
test al, al
je 0x18005332b
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053320
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dl, 3
call fcn.1800755f0
mov qword [rsp + 0x40], rdi
lea rdx, [rbp - 0x30]
mov rax, qword [rsp + 0x40]
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x30], rax
mov r8d, edx
movabs rax, 0x3c90ad5bc6d03263
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x28], rax
movabs rax, 0x35b9425391fc1af
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x20], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x3e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3e8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x30]
xorps xmm1, xmmword [rbp + 0x3e0]
movdqa xmm0, xmmword [rbp - 0x20]
mov qword [rbp + 0x3f8], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x3f0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x20], xmm0
test al, al
je 0x18005341f
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053414
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0xa10]
xor rcx, rsp
call fcn.1800da510
lea r11, [rsp + 0xb30]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.1800755f0
movabs rax, 0xa810555475aa201b
lea rdx, [rbp + 0x1c0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1c0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x1c0], rax
movabs rax, 0x7eae16249ff8b4d2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1c8], rax
movabs rax, 0xfd4812b209dcacd6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x7421ecc63a822b67
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x931b1be5aae008e5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1e8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x6a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x6a8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x6b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6b8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6c0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1c0]
xorps xmm2, xmmword [rbp + 0x6a0]
movdqa xmm0, xmmword [rbp + 0x1d0]
movdqa xmm1, xmmword [rbp + 0x1e0]
xorps xmm0, xmmword [rbp + 0x6b0]
mov qword [rbp + 0x6c8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x6c0]
movdqa xmmword [rbp + 0x1c0], xmm2
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmmword [rbp + 0x1e0], xmm1
test al, al
je 0x1800535eb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800535e0
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x1c0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xbf5b534f64a2291e
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x3b0]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x80], rax
movabs rax, 0x12cf7f50f696b19e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x80]
mov qword [rsp + 0x78], rax
movabs rax, 0xdb10274901a8450e
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x80], xmm0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b0], rax
movabs rax, 0x12ac7f0ff6f7dd9f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3b8], rax
movabs rax, 0xdd487dbe7dd4d6d3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x112d89de4ac14470
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3c8], rax
movabs rax, 0x931b1be5aae008f5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3d8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x6d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x6d8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x6e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6e8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x6f0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x3b0]
xorps xmm0, xmmword [rbp + 0x6d0]
movdqa xmm1, xmmword [rbp + 0x3c0]
xorps xmm1, xmmword [rbp + 0x6e0]
movdqa xmmword [rbp + 0x3b0], xmm0
movdqa xmm0, xmmword [rbp + 0x3d0]
mov qword [rbp + 0x6f8], rax
xorps xmm0, xmmword [rbp + 0x6f0]
movdqa xmmword [rbp + 0x3d0], xmm0
movdqa xmmword [rbp + 0x3c0], xmm1
call fcn.18006aee0
test al, al
je 0x18005343b
xor edx, edx
call fcn.1800755f0
movabs rax, 0xa855464c64a3260e
lea rdx, [rbp + 0x1f0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x1f0]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x1f0], rax
movabs rax, 0x7ca65f3d93e2ae8b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xbc5c14b71cd4a2d6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x200], rax
movabs rax, 0x7c3aea8a24802d70
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x208], rax
movabs rax, 0x931b7f80de8564f1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x210], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x218], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x700], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x708], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x710], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x718], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x720], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x1f0]
xorps xmm2, xmmword [rbp + 0x700]
movdqa xmm0, xmmword [rbp + 0x200]
movdqa xmm1, xmmword [rbp + 0x210]
xorps xmm0, xmmword [rbp + 0x710]
mov qword [rbp + 0x728], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x720]
movdqa xmmword [rbp + 0x1f0], xmm2
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmmword [rbp + 0x210], xmm1
test al, al
je 0x180053940
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053935
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x1f0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xdb03274f01a4451e
lea rcx, [rbp + 0x360]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x360], rax
movabs rax, 0x12e17f23f6e4dd93
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x368], rax
movabs rax, 0xdd267daf7dc5d6cb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x370], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x378], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x4b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4b8], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4c0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x360]
movdqa xmm1, xmmword [rbp + 0x370]
xorps xmm0, xmmword [rbp + 0x4b0]
mov qword [rbp + 0x4c8], rax
xorps xmm1, xmmword [rbp + 0x4c0]
movdqa xmmword [rbp + 0x370], xmm1
movdqa xmmword [rbp + 0x360], xmm0
call fcn.18005a690
test al, al
je 0x18005343b
xor edx, edx
call fcn.1800755f0
movabs rax, 0xfb06554077a52a1e
lea rdx, [rbp + 0x250]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x250]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x250], rax
movabs rax, 0x71ef1b3586fba896
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x258], rax
movabs rax, 0xb94309be11cdbbd0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x260], rax
movabs rax, 0x6520f9de3f806428
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x268], rax
movabs rax, 0xf26d758ac9c228bb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x270], rax
movabs rax, 0x87a1851c8252c434
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x278], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x730], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x738], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x740], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x748], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x750], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x250]
xorps xmm2, xmmword [rbp + 0x730]
movdqa xmm0, xmmword [rbp + 0x260]
movdqa xmm1, xmmword [rbp + 0x270]
xorps xmm0, xmmword [rbp + 0x740]
mov qword [rbp + 0x758], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x750]
movdqa xmmword [rbp + 0x250], xmm2
movdqa xmmword [rbp + 0x260], xmm0
movdqa xmmword [rbp + 0x270], xmm1
test al, al
je 0x180053bc0
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053bb5
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x250]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.1800592e0
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x18017b858], rax
mov r12, rax
call fcn.1800592e0
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x18017b870], rax
mov r15, rax
call fcn.1800592e0
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x18017b868], rax
mov r14, rax
call fcn.1800592e0
movabs rdx, 0xb231a1bea995f83b
mov qword [0x18017b878], rax
mov rsi, rax
call fcn.1800592e0
movabs rdx, 0x5f0720d54e5f164
mov qword [0x18017b860], rax
mov rdi, rax
call fcn.1800592e0
movabs rdx, 0x483047d5ed936395
mov qword [0x18017b880], rax
mov rbx, rax
call fcn.1800592e0
test rax, rax
mov qword [0x18017b888], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x18005343b
xor edx, edx
call fcn.1800755f0
movabs rax, 0xfb06554077a52a1e
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x100]
mov rax, qword [rsp + 0x40]
movabs r15, 0x8783f164f67cb746
mov qword [rbp + 0x100], rax
movabs rsi, 0xdb75272101cb457d
movabs rax, 0x7bef123582e5a481
movabs rbx, 0x12cf7f50f696ddf2
mov qword [rsp + 0x40], rax
movabs r14, 0xdd267ddb7dbdd6bf
mov rax, qword [rsp + 0x40]
movabs rdi, 0x115589aa4aef4404
mov qword [rbp + 0x108], rax
movabs r12, 0x931b1be5aae00881
movabs rax, 0xa74f11ba14c9bfd1
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x110], rax
movabs rax, 0x7e36a9c425863065
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x118], rax
movabs rax, 0x937f7e91cf8c78ec
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x120], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x128], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x760], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x768], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x770], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x778], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x780], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x100]
xorps xmm2, xmmword [rbp + 0x760]
movdqa xmm0, xmmword [rbp + 0x110]
movdqa xmm1, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x770]
mov qword [rbp + 0x788], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x780]
movdqa xmmword [rbp + 0x100], xmm2
movdqa xmmword [rbp + 0x110], xmm0
movdqa xmmword [rbp + 0x120], xmm1
test al, al
je 0x180053e8b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053e80
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005bbc0
test al, al
je 0x18005343b
xor edx, edx
call fcn.1800755f0
movabs rax, 0xb51c07526aa42a15
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x10]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x10], rax
movabs rax, 0x73b5163c97ffa99b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 8], rax
movabs rax, 0xb0491efb13d2bfcb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp], rax
movabs rax, 0x1155edcf3e8a2874
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 8], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x4d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4d8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x4e0], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp - 0x10]
xorps xmm1, xmmword [rbp + 0x4d0]
movdqa xmm0, xmmword [rbp]
mov qword [rbp + 0x4e8], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x4e0]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp], xmm0
test al, al
je 0x180053fab
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180053fa0
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xdb14274701ae4519
lea rcx, [rbp + 0x90]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
movabs rax, 0x12cf7f24f6fadd87
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x90]
mov qword [rbp - 0x78], rax
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0x90], xmm0
call fcn.180055a60
test al, al
jne 0x18005424a
mov dl, 2
call fcn.1800755f0
movabs rax, 0xaf5543446da2241b
lea rdx, [rbp + 0x2e0]
mov qword [rsp + 0x40], rax
movabs rcx, 0xd2a534e36c376b8
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x2e0], rax
movabs rax, 0x32bf0a2493e5fd9d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2e8], rax
movabs rax, 0xb1060fb452d9b8de
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x7033ecce6a8b256b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x2f8], rax
movabs rax, 0xf57574868a9464f4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x300], rax
movabs rax, 0xe8ea85058409d02f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x308], rax
movabs rax, 0x7157f30f312449ad
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x310], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x318], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x7c0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x7c8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r12
mov qword [rbp + 0x7d8], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7e0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7e8], rax
movabs rax, 0x7157f30f312449c3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7f0], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x2e0]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp + 0x2f0]
xorps xmm0, xmmword [rbp + 0x7d0]
movdqa xmm2, xmmword [rbp + 0x2e0]
xorps xmm2, xmmword [rbp + 0x7c0]
movdqa xmm1, xmmword [rbp + 0x300]
xorps xmm1, xmmword [rbp + 0x7e0]
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmm0, xmmword [rbp + 0x310]
mov qword [rbp + 0x7f8], rax
movq rax, xmm2
xorps xmm0, xmmword [rbp + 0x7f0]
movdqa xmmword [rbp + 0x310], xmm0
movdqa xmmword [rbp + 0x2e0], xmm2
movdqa xmmword [rbp + 0x300], xmm1
test al, al
je 0x18005423b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054230
sub r8d, edx
lea rdx, [rbp + 0x2e0]
jmp 0x1800543a2
xor edx, edx
call fcn.1800755f0
movabs rax, 0xa900404867a52a1e
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x70]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x70], rax
movabs rax, 0x6bbc5f3e99ffa993
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0xb44814fb10d8a2cc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0x6534f3c3268e2d70
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0xe37674868a8e67e8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
movabs rax, 0x8783f1009308d22a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x790], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x798], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x7a0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7a8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x7b0], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x70]
xorps xmm2, xmmword [rbp + 0x790]
movdqa xmm0, xmmword [rbp - 0x60]
movdqa xmm1, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp + 0x7a0]
mov qword [rbp + 0x7b8], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x7b0]
movdqa xmmword [rbp - 0x70], xmm2
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmmword [rbp - 0x50], xmm1
test al, al
je 0x18005439b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054390
sub r8d, edx
lea rdx, [rbp - 0x70]
mov rcx, qword [0x180179ed8]
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.1800755f0
movabs rax, 0xba1c5f5869bb361c
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x70]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x70], rax
movabs rax, 0x7eae16249ff8b4d2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0xfd4812b209dcacd6
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0x7421ecc63a822b67
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0xfa686980dcc024e5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
movabs rax, 0x8783f164d646d929
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rbx
mov qword [rbp + 0x3e0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov qword [rbp + 0x3e8], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0x3f0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x3f8], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x400], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x70]
xorps xmm2, xmmword [rbp + 0x3e0]
movdqa xmm0, xmmword [rbp - 0x60]
movdqa xmm1, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp + 0x3f0]
mov qword [rbp + 0x408], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x400]
movdqa xmmword [rbp - 0x70], xmm2
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmmword [rbp - 0x50], xmm1
test al, al
je 0x18005450b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054500
mov rcx, qword [0x180179ed8]
sub r8d, edx
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov r8, rdx
inc r8
cmp byte [r8], r13b
jne 0x180054531
mov rcx, qword [0x180179ed8]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x18005343d