Function at 0x180053720
Capabilities:
Enumerate gui resources
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x328]
sub rsp, 0x400
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18017b040]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
movabs rax, 0x72c8fc94dd6f92c2
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x40], rax
movabs r13, 0xea49ac2c0da76ea6
mov rax, qword [rsp + 0x40]
movabs r14, 0x72bbfcf5dd1d9285
mov qword [rbp - 0x80], rax
movabs rbx, 0x9f5b4b58b94977f2
movabs rax, 0x9f344b0bb9677781
movabs r15, 0xa4e2b037e716c607
mov qword [rsp + 0x40], rax
movabs rsi, 0x79eabc424f767334
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0xa48bb043e763c66b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0x79c4bc314f18735b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84beb6c43465
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x70]
movdqa xmm1, xmmword [rbp - 0x60]
movdqa xmm6, xmmword [rbp - 0x80]
xorps xmm6, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0xa0]
mov qword [rbp + 0xb8], rax
xorps xmm1, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x80], xmm6
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp - 0x60], xmm1
call fcn.180053330
test al, al
je 0x180054857
cmp word [rbp + 0xd0], 0
lea rax, [rbp + 0xd0]
je 0x1800538ea
nop dword [rax + rax]
add rax, 2
cmp word [rax], 0
jne 0x1800538e0
movq rcx, xmm6
test cx, cx
je 0x180053910
lea rdx, [rbp - 0x80]
sub rdx, rax
nop dword [rax + rax]
mov word [rax], cx
add rax, 2
movzx ecx, word [rdx + rax]
test cx, cx
jne 0x180053900
xor edi, edi
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov r8d, 1
mov dword [rsp + 0x20], 2
mov word [rax], di
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x18017bed8], rax
cmp rax, 0xffffffffffffffff
je 0x180054857
mov r12d, 3
mov qword [rsp + 0x20], rdi
mov r8d, r12d
lea rdx, [0x180162f48]
xor r9d, r9d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
call fcn.1800767e0
movabs rax, 0x52dc929cba7afde9
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf67b263dcd3a0e81
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xde8bdc568e62af69
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x16899c2c201f0755
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x6899e1add3c74464
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180053abb
nop
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053ab0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180076e90
test al, al
je 0x180054857
xor edx, edx
call fcn.1800767e0
movabs rax, 0x19b8587b270f7e8
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf1326b35dc3d048b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xc598d95b867fb26e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x1485df6221191a40
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x68fde0bcc2ce5879
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180053c2b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053c20
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180076ab0
test al, al
je 0x180054857
xor edx, edx
call fcn.1800767e0
movabs rax, 0x1c28fd5b569f3e8
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xeb32253199241286
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xcd96d14d8e7aa76e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x159ad12d2c561d5b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x68fd84d9d2ce406c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180053d9b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053d90
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.180061250
test al, al
je 0x180054857
xor edx, edx
call fcn.1800767e0
movabs rax, 0x11da9a87b869fcec
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf62f2236d0690497
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xcb8bc4569d7faa66
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x1c86cc2f2015535a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x68fd84d9b6cf517d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180053f0b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180053f00
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rcx, 0x9fed36ab022c5582
movabs rax, 0x4ccb82e90f197bdb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0xc531c5a5a605fe48
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x7ee035ced0b98215
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x4cb9828c0f707baf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
movabs rax, 0xc55dc5c1a62bfe78
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0x7ee035ced0b98279
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x58], rax
xorps xmm1, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
call fcn.180077b00
mov r8, rax
test rax, rax
je 0x180054857
movabs rax, 0x23d5edcf611f3890
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
movabs rax, 0x84048581c158b30a
mov rcx, qword [rsp + 0x40]
mov qword [rbp - 0x80], rcx
mov qword [rsp + 0x40], rax
movabs rax, 0x128f769892fcc321
mov rcx, qword [rsp + 0x40]
mov qword [rbp - 0x78], rcx
movabs rcx, 0x104c2695cdc839fc
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0xdbaf73fb426c27ed
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x42fb0a70920b2ed9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0x4cb9828c0f707baf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
movabs rax, 0xc55dc5c1a62bfe78
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0x7ee035ced0b98279
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
movabs rax, 0x9fed36ab022c5582
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
movabs rax, 0x42fb0a70920b7483
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], rcx
mov rcx, r8
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp + 0xb8], rax
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180077dd0
mov qword [0x18017dc40], rax
test rax, rax
je 0x180054857
xor edx, edx
call fcn.1800767e0
movabs rax, 0x6d2929cfd76f6f6
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x40], rax
movabs rax, 0xf62f2a22d025169b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0xc892dd588436a868
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0x79eabc422b130751
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x18005426f
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054264
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017d830]
test rcx, rcx
jne 0x1800542cb
nop word [rax + rax]
lea rdx, [0x18017d830]
lea rcx, [0x180076760]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x18017d830]
test rcx, rcx
je 0x1800542a0
lea r8, [0x18005ead0]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18017d928], rax
test rax, rax
je 0x180054857
xor edx, edx
call fcn.1800767e0
movabs rax, 0xbc8dc81a86dfcec
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf6352278d42c0381
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xd083ca5e8b77af73
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x987d3216f181c5d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x68fd84bdd3df5165
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005442f
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054424
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8, qword [0x18017d820]
mov rdx, qword [0x18017d818]
mov rcx, qword [0x18017d830]
call fcn.180074f50
xor ecx, ecx
call fcn.180065f90
cmp byte [0x18017d828], dil
jne 0x180054494
nop word [rax + rax]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x18017d828], dil
je 0x180054480
xor edx, edx
call fcn.1800767e0
movabs rax, 0xde8e90b973f7f7
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xfb352e33da2815d2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xc883d9438e78af27
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x5984d32b3b17095d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0xd89e1b5c6c65b6a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xea49ac2c0da76ec2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x1800545e0
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800545d5
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18006def0
test al, al
jne 0x18005488e
movzx edx, r12b
call fcn.1800767e0
movabs rax, 0x52976c46e5cb5d83
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x40], rax
movabs rax, 0xe2035da79ad1a2e9
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0xa1bbb2e12f30d23b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
movabs rax, 0xc5efb114d25457c5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
movabs rax, 0x26b7082389a23ce5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x836a29cef4b88286
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xc0d3d1c14a4abb57
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xc5efb114d25424a8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x18005471b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054710
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movzx edx, r12b
call fcn.1800767e0
movabs rcx, 0x9fed36ab022c5582
lea rdx, [rbp + 0x40]
movabs rax, 0x3899e6e963191ac9
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
movabs rax, 0xe52db0b5c358de17
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movabs rax, 0x7e9359afa5caeb0f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x58], rax
movabs rax, 0x4cb9828c0f707baf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0xc55dc5c1a62bfe78
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x7ee035ced0b98279
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x40]
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmmword [rbp + 0x50], xmm0
test al, al
je 0x18005483b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x180054830
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.1800db810
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
call fcn.1800767e0
movabs rax, 0x1de8e80a97cf7e3
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xf33a222cd0271ed2
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0x848cdf5e9377bc6e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x1c9ed92e3f1b1c57
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x68fd84d9b6ab346d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x1800549d0
inc rcx
mov r8, rcx
cmp byte [rcx], dil
jne 0x1800549c5
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x1695889bb874fee6
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x20]
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x9f5b4b58b9491b9e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.180056420
movabs rax, 0x5c89999bb47afce0
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp]
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x9f5b4b58b9251b96
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.180056420
movabs rax, 0xbc89d98b875f1f6
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x20]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0xf3372f76d42c0381
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x58], rax
xorps xmm1, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
call fcn.180056420
xorps xmm0, xmm0
mov ecx, 0x60
movdqu xmmword [rbp + 0x40], xmm0
call fcn.180052d50
mov r14, rax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rax
lea r13, [rbp - 0x20]
mov rbx, rax
sub r13, rax
lea rcx, [rax + 0x60]
mov edx, 0x16
lea rax, [rbp - 8]
mov qword [rbp + 0x50], rcx
sub rax, rbx
movabs rcx, 0x7fffffffffffffff
mov qword [rsp + 0x40], rax
nop dword [rax + rax]
xorps xmm0, xmm0
lea r15, [rbx + r13]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
cmp qword [rax + rbx], 0xf
mov rsi, qword [rax + rbx - 8]
jbe 0x180054be1
mov r15, qword [r15]
cmp rsi, rcx
ja 0x180056062
cmp rsi, 0xf
ja 0x180054c05
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbx], xmm0
jmp 0x180054c48
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x180054c16
mov rdi, rcx
jmp 0x180054c1e
cmp rdi, 0x16
cmovb rdi, rdx
lea rcx, [rdi + 1]
call fcn.180052d50
lea r8, [rsi + 1]
mov qword [rbx], rax
mov rdx, r15
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov qword [rbx + 0x18], rdi
call fcn.1801008a0
xor edi, edi
mov edx, 0x16
add rbx, 0x20
lea rcx, [rbp + 0x40]
lea rax, [rbx + r13]
cmp rax, rcx
mov rax, qword [rsp + 0x40]
movabs rcx, 0x7fffffffffffffff
jne 0x180054bc0
mov rdx, rbx
mov rcx, rbx
call fcn.180056570
xor r13d, r13d
mov qword [rbp + 0x48], rbx
lea rdi, [rbp + 0x40]
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rdi - 8]
lea rdi, [rdi - 0x20]
dec r12
cmp rdx, 0xf
jbe 0x180054cd1
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x180054ccc
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18005605c
mov rcx, r8
call fcn.1800db9ac
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r13b
test r12, r12
jne 0x180054c90
cmp r14, rbx
movabs rdi, 0x79eabc424f767334
movabs rbx, 0x9f5b4b58b94977f2
movabs rsi, 0x72bbfcf5dd1d9285
movabs r15, 0xa4e2b037e716c607
je 0x180054e09
movabs rcx, 0x9f2f4b76b928779f
movabs r12, 0x72defc9ddd7e92f6
movabs r8, 0xa4e2b037e762c67f
cmp qword [r14 + 0x18], 0xf
mov rdx, r14
jbe 0x180054d41
mov rdx, qword [r14]
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r8
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x78], rax
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
call fcn.18006b7e0
test al, al
je 0x180056049
add r14, 0x20
movabs rcx, 0x9f2f4b76b928779f
movabs r8, 0xa4e2b037e762c67f
cmp r14, qword [rbp + 0x48]
jne 0x180054d34
xor edx, edx
call fcn.1800767e0
movabs rax, 0x19b9d98b875f1f6
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r14, 0xea49ac2c0da76ea6
mov qword [rsp + 0x50], rax
movabs r12, 0x68fd84d9b6ab3409
movabs rax, 0xf1326b35dc3d048b
mov r8d, edx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xc598d95b867fb26e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x1485df6221191a40
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x68fde0bcc2ce5879
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x180054f5b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180054f50
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x72cdfc9bdd7292e6
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x9f754b2bb93b7793
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xa4e2b043e76ec673
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x78], rax
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
call fcn.18005b0a0
test al, al
je 0x180056049
xor edx, edx
call fcn.1800767e0
movabs rax, 0x52c88e94ab73fde6
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xfc7b2f3dc9240296
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xc087c4528b66ab68
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xd9fcc363a195318
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x98beab6d5891433
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xea6bd85479891dd4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005517e
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055173
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rdx, 0x68045f57217a8e71
call fcn.18005a010
movabs rdx, 0x8b4a6c039af717a8
mov qword [0x18017d838], rax
mov r12, rax
call fcn.18005a010
movabs rdx, 0xe2d2563b91bdc56c
mov qword [0x18017d850], rax
mov r15, rax
call fcn.18005a010
movabs rdx, 0xd5db34823d6f1c40
mov qword [0x18017d848], rax
mov r14, rax
call fcn.18005a010
movabs rdx, 0xb231a1bea995f83b
mov qword [0x18017d858], rax
mov rsi, rax
call fcn.18005a010
movabs rdx, 0x5f0720d54e5f164
mov qword [0x18017d840], rax
mov rdi, rax
call fcn.18005a010
movabs rdx, 0x483047d5ed936395
mov qword [0x18017d860], rax
mov rbx, rax
call fcn.18005a010
test rax, rax
mov qword [0x18017d868], rax
mov edx, r13d
mov r8d, r13d
setne cl
test rbx, rbx
setne al
and cl, al
test rdi, rdi
movzx eax, cl
mov ecx, r13d
cmovne edx, eax
test rsi, rsi
setne al
and dl, al
test r14, r14
movzx eax, dl
cmovne r8d, eax
test r15, r15
setne al
and r8b, al
test r12, r12
movzx eax, r8b
cmovne ecx, eax
test cl, cl
je 0x180056049
xor edx, edx
call fcn.1800767e0
movabs rax, 0x52c88e94ab73fde6
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
movabs r12, 0xea49ac2c0da76ea6
mov qword [rsp + 0x50], rax
movabs r14, 0x72bbfcf5dd1d9285
movabs rax, 0xf67b263dcd3a0e81
movabs rdi, 0x9f5b4b58b94977f2
mov qword [rsp + 0x40], rax
movabs r15, 0xa4e2b037e716c607
mov rax, qword [rsp + 0x40]
movabs rsi, 0x79eabc424f767334
mov qword [rsp + 0x58], rax
mov r8d, edx
movabs rax, 0xde8bdc568e62af69
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x16899c2c201f0755
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x6899e1add3c74464
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x18005540b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055400
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.18005c8a0
test al, al
je 0x180056049
xor edx, edx
call fcn.1800767e0
movabs rax, 0x1cd2dc86b672fded
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x60]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp + 0x60], rax
movabs rax, 0xfe212234d820039b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
movabs rax, 0xc98dd3178979af73
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
movabs rax, 0x79ead8273b131f44
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rbp + 0x60]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [rbp + 0x70]
mov qword [rsp + 0x68], rax
movq rax, xmm1
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmmword [rbp + 0x70], xmm0
test al, al
je 0x18005551b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055510
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x72dafc93dd7892e1
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x40], rax
movabs rax, 0x9f5b4b2cb9257787
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.180056770
movabs rbx, 0xe1f0df0653c53b18
test al, al
jne 0x180055777
mov dl, 2
call fcn.1800767e0
movabs rax, 0x69b9890b174f3e3
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x80], rax
movabs rax, 0xbf2b3e2cdc3a579d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0xc8c2c258c872a866
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0x188cd9266f12125b
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0xe93ebba96df587c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0x8520d84d7fd209cf
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0x7e74d4cb9a7109a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0x7e74d4cb9a7109cb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmm2, xmmword [rbp - 0x80]
xorps xmm2, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
mov qword [rbp + 0xc8], rax
movq rax, xmm2
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x80], xmm2
movdqa xmmword [rbp - 0x60], xmm1
test al, al
je 0x18005576b
nop dword [rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055760
sub r8d, edx
lea rdx, [rbp - 0x80]
jmp 0x1800558d3
xor edx, edx
call fcn.1800767e0
movabs rax, 0xce9b9cbb73fde6
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xe6286b36d6200393
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xcd8cd9178a73b274
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0xd8bc62b23171a40
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x1890ebba96c55b60
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movabs rax, 0xea49ac4868d30bca
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x68fd84d9b6ab3409
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rsp + 0x50]
xorps xmm2, xmmword [rbp - 0x80]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x70], xmm1
test al, al
je 0x1800558cb
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x1800558c0
sub r8d, edx
lea rdx, [rsp + 0x50]
mov rcx, qword [0x18017bed8]
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x4495cedbed29bcb4
lea rbx, [rbp - 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x30], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x30]
mov rcx, qword [0x18017d810]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x30], xmm0
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
test rax, rax
je 0x18005597e
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rax]
lea rax, [rax + 1]
movzx edx, byte [rbx]
lea rbx, [rbx + 1]
test cl, cl
je 0x180055976
cmp cl, dl
je 0x180055960
cmp cl, dl
je 0x180055e2a
mov dl, 2
call fcn.1800767e0
movabs rax, 0x52d5939cae6ff7f3
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x90]
mov rax, qword [rsp + 0x40]
movabs rbx, 0x68fd84d9b6ab3409
mov qword [rbp + 0x90], rax
mov r8d, edx
movabs rax, 0xf7383f39d43a1e9f
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
movabs rax, 0x848ed154887ae626
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
movabs rax, 0xa98d9346f442077
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
movabs rax, 0x68fd84f98cc55b60
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp + 0x90]
xorps xmm2, xmmword [rbp + 0x60]
movdqa xmm0, xmmword [rbp + 0xa0]
movdqa xmm1, xmmword [rbp + 0xb0]
xorps xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x88], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x90], xmm2
movdqa xmmword [rbp + 0xa0], xmm0
movdqa xmmword [rbp + 0xb0], xmm1
test al, al
je 0x180055aeb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055ae0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x4495cedbed29bcb4
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x40]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movq rax, xmm0
movdqa xmmword [rbp - 0x40], xmm0
test al, al
je 0x180055b7b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055b70
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x1cde8e87a87eb2a9
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0xfa2d6b6aea0a5786
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rax, 0xa4c28a59887fb575
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x78], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x180055c6b
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055c60
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017d810]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x290]
call rdx
mov rcx, rax
mov r8d, eax
cmp byte [rax], r13b
je 0x180055cbb
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055cb0
mov rcx, qword [0x18017bed8]
sub r8d, eax
xor r9d, r9d
mov qword [rsp + 0x20], r13
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x5cc88f94af5ab2ab
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x80], rax
movabs rax, 0xf134222ccc2518a1
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0x8496d8508e7be674
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0x1a84c9246f021c5a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0x488ee5f9d8c45d7d
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0xea67c04d60d501c8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
movdqa xmm2, xmmword [rbp - 0x80]
xorps xmm2, xmmword [rbp + 0x60]
movdqa xmm0, xmmword [rbp - 0x70]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x88], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp - 0x80], xmm2
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp - 0x60], xmm1
test al, al
je 0x180055e0c
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055e01
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x180055e34
movabs rbx, 0x68fd84d9b6ab3409
xor edx, edx
call fcn.1800767e0
movabs rax, 0x1de8d286ae7ce0c2
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x40], rax
movabs rcx, 0xe1f0df0653c53b18
mov rax, qword [rsp + 0x40]
mov r8d, edx
mov qword [rbp - 0x80], rax
movabs rax, 0xbf282537d03d029e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x78], rax
movabs rax, 0xcd8ed15e937fa86e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
movabs rax, 0x1acad22d2602124e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x68], rax
movabs rax, 0xc98f0bcdadb5966
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x60], rax
movabs rax, 0x8520df5e68d14e8a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x58], rax
movabs rax, 0x7e74d4cb9a5133a5
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x40], r12
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xb8], rax
movabs rax, 0x7e74d4cb9a7109cb
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xc0], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmm2, xmmword [rbp - 0x80]
xorps xmm2, xmmword [rbp + 0x90]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
mov qword [rbp + 0xc8], rax
movq rax, xmm2
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x80], xmm2
movdqa xmmword [rbp - 0x60], xmm1
test al, al
je 0x180055ff0
inc rcx
mov r8, rcx
cmp byte [rcx], r13b
jne 0x180055fe5
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x20], r13
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, str.1000
mov r8, rdx
inc r8
cmp byte [r8], r13b
jne 0x180056016
mov rcx, qword [0x18017bed8]
sub r8d, edx
xor r9d, r9d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rcx, [rbp + 0x40]
mov bl, 1
call fcn.180056500
movzx eax, bl
jmp 0x180054859
xor bl, bl
lea rcx, [rbp + 0x40]
call fcn.180056500
movzx eax, bl
jmp 0x180054859
call fcn.1800e7228
int3
call fcn.180053310
int3