Function at 0x18005c8f0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rbx
push rdi
push r15
lea rbp, [rsp - 0x158]
sub rsp, 0x258
mov rax, qword [0x18017b040]
xor rax, rsp
mov qword [rbp + 0x140], rax
xor r15d, r15d
mov ebx, 1
mov edi, r15d
xor eax, eax
lock cmpxchg dword [0x18017d3e8], ebx
je 0x18005c951
nop dword [rax]
cmp rdi, 0x20
jae 0x18005c93a
xor ecx, ecx
jmp 0x18005c93c
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
xor eax, eax
lock cmpxchg dword [0x18017d3e8], ebx
jne 0x18005c930
cmp qword [0x18017d3f0], r15
jne 0x18005c97a
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
test rax, rax
mov qword [0x18017d3f0], rax
mov ebx, 9
cmovne ebx, r15d
mov qword [rsp + 0x280], rsi
mov eax, r15d
mov qword [rsp + 0x250], r14
xchg dword [0x18017d3e8], eax
test ebx, ebx
je 0x18005cad4
mov dl, 3
call fcn.180076590
movabs rax, 0xd9d0a09b3ede2c59
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
movabs rdi, 0xadf0c4fe52b74d3f
mov qword [rsp + 0x50], rax
movabs rsi, 0x792321f7c1f9c8c8
movabs rax, 0x184a559eaf90e8a7
movabs r14, 0x974cd138426754f1
mov qword [rsp + 0x30], rax
movabs rbx, 0x8bf433a1c6f4586a
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x58], rax
movabs rax, 0xf925bc18271d3d9d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x8bf433a1ad9b3702
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x88], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x18005cab0
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005caa5
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
jmp 0x18005e801
mov qword [rsp + 0x288], r12
mov dl, 1
mov qword [rsp + 0x290], r13
call fcn.180076590
movabs rax, 0x8d9bab913ad92452
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
movabs r13, 0x47ed39a207353db3
mov qword [rbp + 0x30], rax
movabs r12, 0xf5fa90cb6c7b017c
movabs rax, 0x104f409eb590a6a1
movabs rdi, 0xadf0c4fe52b74d3f
mov qword [rsp + 0x30], rax
movabs rsi, 0x792321f7c1f9c8c8
mov rax, qword [rsp + 0x30]
movabs r14, 0x974cd138426754f1
mov qword [rbp + 0x38], rax
movabs rbx, 0x8bf433a1c6f4586a
movabs rax, 0xf46cbf572b13358b
mov r8d, edx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xef9147c4aa843505
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005cc5b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005cc50
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d8b8]
mov rcx, qword [rax + 0x170]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x40]
call fcn.180060e90
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xd99ea18d37c51d1d
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rsp + 0x50], rax
movabs rax, 0x11034a98ae91e8ea
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0xb722b45d20472790
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x8b9056d5a7912a09
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x88], rax
movq rax, xmm1
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
test al, al
je 0x18005cd8b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005cd80
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d8b8]
mov rcx, qword [rax + 0x170]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x68]
call fcn.180060bf0
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xef95be9721d21f1d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x59015285a49faebd
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xe42db91829083b99
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xf99713cfa3913a4a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x47ed39c662415cd6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x98], rax
movq rax, xmm2
movdqa xmm1, xmmword [rbp + 0x90]
xorps xmm1, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005cf0b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005cf00
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x18017d818]
lea r8, [rsp + 0x38]
mov qword [rsp + 0x38], r15
lea rdx, [0x1801621a8]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov rax, qword [rcx]
call qword [rax + 0x38]
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x48]
mov qword [rsp + 0x48], r15
lea rdx, [0x1801621c8]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x50]
call fcn.180060950
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xfe95b09f37c50e1d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x174a409f8289a9bf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xff6cba572d0f74d3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xab9a56c4a4d42b0b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x47895cd666504fd0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d0cb
nop
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d0c0
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x38], r15
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x40], r15
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x48], r15
movabs rax, 0x95c4e4cd67977d0b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
movabs rax, 0x460362b2e1c8f0e8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0xa36cee187d476bd1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x8bc5708184cc7853
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmm1, xmmword [rsp + 0x60]
mov qword [rbp + 0x88], rax
movabs rax, 0xad95c49752db4d5c
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x794721d9c18dc8a6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
movabs rax, 0x974cd138420b549d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x48], rax
movdqa xmm1, xmmword [rbp + 0x80]
lea rdx, [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x40]
lea rcx, [rbp + 0x70]
movdqa xmmword [rbp + 0x80], xmm1
movdqa xmmword [rbp + 0x70], xmm0
call fcn.180078100
mov rdx, rax
call fcn.1800606b0
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xdf84a5b326d20a1d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x1c4a7785aebfb0a1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xb727be572a477686
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xe59156c3e6873902
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x23884dc362475e93
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d3ec
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d3e1
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d880]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x28]
call fcn.180060410
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xe095b09f37c50e1d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x164c49d7e39cbea7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xf22ef14b230f749a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xff9556d3a5d4360f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x47ed39a2073559d6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d55f
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d554
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d880]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x80]
call fcn.180060170
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xc3b9a18d27d8001d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x15414099848dbdb8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xfc23be5062453094
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xee915181b595304a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x229958c775561ddd
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
movabs rax, 0xf5fa90cb6c7b0118
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d6df
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d6d4
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d888]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x120]
call fcn.18005fc30
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xd9a3a19333c50b1d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x1f4a55988f9cafa9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xb727be572a477688
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xe59156c3e6873902
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x23884dc362475e93
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005d85b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005d850
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xeec5e4c76a97750b
movabs rcx, 0xa47be7a58e2ab99e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
movabs rax, 0x4f1601c8e1cdfae8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0xd26ce200625f60d1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0xb3d40b95e6cb7829
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
movabs rax, 0x78cd068243051df1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x70], rax
movabs rax, 0xd5c2a4eb535b3e5c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
movabs rax, 0xaf8d584e2bc80c0d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
movabs rax, 0xaf8d587c6de84e35
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp + 0x40]
mov qword [rbp + 0x68], rax
movabs rax, 0xad95c49752db4d5c
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x80], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x794721d9c18dc8a6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x70]
movabs rax, 0x974cd138420b549d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x70]
movdqa xmm1, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x48], rax
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmmword [rbp + 0x80], xmm1
call fcn.180078100
mov rdx, rax
call fcn.18005f990
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xc3b9a89b24d2011d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x124c4e9fe1dbbca1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xf229b31831063cd1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xee8052c4b4977804
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x47ed39a207353dd7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005dc0b
nop word [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005dc00
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0xeeb5e4cd6a97750b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x70], rax
movabs rax, 0x3b1b01cff5d9f7e8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x68], rax
movabs rax, 0xb773f107622364d1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x60], rax
movabs rax, 0xb3d40b95e6cb7855
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x58], rax
movabs rax, 0x78cd068232041df7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x50], rax
movabs rax, 0xd5cfa4eb535b3e5c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x48], rax
movabs rax, 0x9ab978452ec87d06
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x40], rax
movabs rax, 0x905bd7e6ae198abe
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x38], rax
movabs rax, 0xa0d653766d1b201f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x30], rax
movabs rax, 0x53c4661ffe486d76
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x28], rax
movabs rax, 0xfd3089a5cfd4d82d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x20], rax
movabs rax, 0x12b098e6bf758372
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x18], rax
movabs rax, 0xd736304a67c3d77b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x10], rax
movabs rax, 0xed4f4fe35542d5a4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 8], rax
movabs rax, 0xeffb3a94178fcc05
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp], rax
movabs rax, 0xc7518adf9b6919f2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 8], rax
movabs rax, 0x66009d68dff4baef
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x10], rax
movabs rax, 0x79a9bf936806a468
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x18], rax
movabs rax, 0x9d378fe85676a232
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x20], rax
movabs rcx, 0x91def251d3eca9fa
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x28], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov qword [rbp + 0xa0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0xa8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rbp + 0xb0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r13
mov qword [rbp + 0xb8], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r12
mov qword [rbp + 0xc0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc8], rax
movabs rax, 0xaf8d587c6de84e35
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd0], rax
movabs rax, 0xa47be7a58e2ab99e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd8], rax
movabs rax, 0x80e763562f230027
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xe0], rax
movabs rax, 0x73fb462fcb682b30
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xe8], rax
movabs rax, 0xcd73a990f7f4e019
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf0], rax
movabs rax, 0x2a84b8d99f41b452
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf8], rax
movabs rax, 0xe816747a4781ef5b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x100], rax
movabs rax, 0xd96f70c36a62ea84
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x108], rax
movabs rax, 0xcfcb7eb455b7ec3d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x110], rax
movabs rax, 0xf661aa9da3495ac6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x118], rax
movabs rax, 0x5320db2effc58ecf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x120], rax
movabs rax, 0x418987a748398458
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x128], rax
movabs rax, 0x9d378fe862358201
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rbp + 0x130], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp + 0x138], rax
movdqa xmm1, xmmword [rbp - 0x60]
lea rdx, [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0xb0]
lea rcx, [rbp + 0x70]
movdqa xmm0, xmmword [rbp - 0x50]
movabs rax, 0xad95c49752db4d5c
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm1, xmmword [rbp + 0xd0]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rbp + 0xf0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp + 0x110]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm1
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp + 0x130]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x794721d9c18dc8a6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
movabs rax, 0x974cd138420b549d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x70]
movdqa xmm1, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x48], rax
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmmword [rbp + 0x80], xmm1
call fcn.180078100
mov rdx, rax
call fcn.18005f6f0
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xc5a3a89b24d2011d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x59014f80ae9dbcbd
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xe42db91829083b99
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xf99713cfa3913a4a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x47ed39c662415cd6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005e29b
nop dword [rax + rax]
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005e290
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
movabs rax, 0x99b3e4bc6a97750b
movabs rcx, 0xa47be7a58e2ab99e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
movabs rax, 0x4c0310c3e1cafde8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0xb779e418735374c5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0xc8b11390fed4605e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
movabs rax, 0x78cd068238150293
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x70], rax
movabs rax, 0xb0daa3fd4c3f355c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
movabs rax, 0xaf8d587c6de84e04
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
movabs rax, 0xaf8d587c6de84e35
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp + 0x40]
mov qword [rbp + 0x68], rax
movabs rax, 0xad9ec49b52d44d4c
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x80], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
movabs rax, 0x7950218ec18ac8ad
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x70]
movabs rax, 0x9762d15542025485
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
movabs rax, 0x8bf433cdc698580e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x70]
movdqa xmm1, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x48], rax
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmmword [rbp + 0x80], xmm1
call fcn.180078100
mov rdx, rax
call fcn.18005f450
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xc7928b8933c5091d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x164c49d7e38dabad
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xf22ef14b230f749a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xff9556d3a5d4360f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x47ed39a2073559d6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005e64f
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005e644
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [0x18017d8a8]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x270]
call fcn.18005fed0
test al, al
je 0x18005e7ef
mov dl, 1
call fcn.180076590
movabs rax, 0xd991a89b00c4041d
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x30]
mov rax, qword [rsp + 0x30]
mov r8d, edx
mov qword [rbp + 0x30], rax
movabs rax, 0x1c5054988c9cbea1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
movabs rax, 0xf824f11a27033bbc
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
movabs rax, 0xe9d440c0aed43305
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x48], rax
movabs rax, 0x26884bc1275b58d6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
movabs rax, 0xf5fa90cb6c1f6408
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rbp + 0x30]
xorps xmm2, xmmword [rbp + 0x70]
movdqa xmm0, xmmword [rbp + 0x40]
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movq rax, xmm2
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
test al, al
je 0x18005e7cf
inc rcx
mov r8, rcx
cmp byte [rcx], r15b
jne 0x18005e7c4
mov rcx, qword [0x18017bed8]
sub r8d, edx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x20], r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 1
jmp 0x18005e7f1
xor al, al
mov r12, qword [rsp + 0x288]
mov r13, qword [rsp + 0x290]
mov r14, qword [rsp + 0x250]
mov rsi, qword [rsp + 0x280]
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.1800db5c0
add rsp, 0x258
pop r15
pop rdi
pop rbx
pop rbp
ret