Function at 0x140040040
Capabilities:
Encode data using xor
Enumerate gui resources
Enumerate processes
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
lea rbp, [rax - 0x2c8]
sub rsp, 0x3c0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x68], xmm11
movaps xmmword [rax - 0x78], xmm12
movaps xmmword [rax - 0x88], xmm13
movaps xmmword [rax - 0x98], xmm14
mov rax, qword [0x140053040]
xor rax, rsp
mov qword [rbp + 0x220], rax
movups xmm2, xmmword [str.eR_A_Y_]
xor ebx, ebx
movzx eax, byte [0x14004b658]
movsd xmm0, qword [0x14004b650]
mov r8d, ebx
mov esi, dword [0x140053010]
movdqa xmm10, xmmword [0x14004b9d0]
movdqa xmm11, xmmword [0x14004b990]
movdqa xmm12, xmmword [0x14004b980]
movdqa xmm13, xmmword [0x14004b970]
movdqa xmm7, xmmword [0x14004b960]
movdqa xmm14, xmmword [0x14004ba20]
movdqa xmm8, xmmword [str.1111]
movdqa xmm6, xmmword [0x14004bdc0]
movsd qword [rbp - 0x50], xmm0
mov byte [rbp - 0x48], al
movups xmmword [rbp - 0x60], xmm2
cmp esi, 2
jl 0x14004035b
movdqa xmm1, xmm7
movd eax, xmm2
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
xorps xmm1, xmm0
movdqa xmm0, xmm13
movd dword [rbp - 0x60], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, dword [rbp - 0x5c]
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [rbp - 0x5c], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, dword [rbp - 0x58]
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
xorps xmm1, xmm0
movdqa xmm0, xmm11
movd dword [rbp - 0x58], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm2, xmmword [0x14004b9a0]
paddb xmm1, xmm14
movdqa xmm3, xmmword [0x14004b9b0]
mov r8d, 0x18
movd xmm0, dword [rbp - 0x54]
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movd dword [rbp - 0x54], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm8
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rbp - 0x50]
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
pmuldq xmm1, xmm6
paddb xmm2, xmm14
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rbp - 0x50], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, dword [rbp - 0x4c]
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm14
xorps xmm3, xmm0
movd dword [rbp - 0x4c], xmm3
mov eax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x19
jl 0x140040370
lea rcx, [rbp - 0x60]
call fcn.140001220
call fcn.1400382c0
test al, al
jne 0x14004053a
cmp byte [0x14004b63b], bl
movups xmm0, xmmword [0x14004b620]
mov eax, dword [0x14004b638]
mov dword [rbp - 0x48], eax
movups xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x14004b630]
movsd qword [rbp - 0x50], xmm0
je 0x140040531
mov r8d, ebx
cmp esi, 2
jl 0x1400404ed
movdqa xmmword [rbp - 0x70], xmm14
lea rcx, [rbp - 0x5c]
mov edx, dword [rbp - 0x70]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140040400
cmp r8d, 0x1c
jge 0x140040531
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1c
jl 0x140040500
lea rcx, [rbp - 0x60]
call fcn.140001220
cmp qword [0x14006d620], rbx
jne 0x1400407c6
mov qword [rsp + 0x3d0], rdi
mov qword [rsp + 0x3d8], r14
movaps xmmword [rsp + 0x380], xmm9
movdqa xmm9, xmmword [0x14004ba10]
nop dword [rax]
movups xmm0, xmmword [str.tFAXLyWUXPKm]
mov r8d, ebx
movups xmm1, xmmword [0x14004b6d0]
mov eax, dword [0x14004b700]
movups xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [str._rqk]
movups xmmword [rsp + 0x50], xmm1
movups xmm1, xmmword [0x14004b6f0]
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm1
mov dword [rbp - 0x80], eax
cmp esi, 2
jl 0x1400406b5
lea rcx, [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 8], xmm3
cmp r8d, 0x20
jl 0x1400405c0
cmp r8d, 0x22
jge 0x1400406f6
movsxd rax, r8d
lea r9, [rsp + 0x40]
lea r9, [r9 + rax*2]
mov eax, 0x5397829d
lea r9, [r9 + 2]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x32
xor word [r9 - 2], ax
cmp r8d, 0x22
jl 0x1400406c1
mov r14, qword [0x14006d668]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x238
mov rcx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140040758
nop word [rax + rax]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xc]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov rcx, rdi
test eax, eax
je 0x140040840
lea rdx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140040730
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [r14]
lea rdx, [rbp - 0x70]
mov dword [0x14006d5b0], eax
lea rcx, [0x140038580]
mov qword [rbp - 0x70], rbx
mov dword [rbp - 0x68], eax
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x14004079a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x14004079a
mov rax, qword [rbp - 0x70]
test rax, rax
jne 0x14004079d
mov rax, rbx
mov qword [0x14006d620], rax
test rax, rax
je 0x140040570
movaps xmm9, xmmword [rsp + 0x380]
mov r14, qword [rsp + 0x3d8]
mov rdi, qword [rsp + 0x3d0]
cmp byte [0x14004b717], bl
mov eax, dword [str.Q_G5eVUEYY8]
mov dword [rbp - 0x70], eax
je 0x14004088a
mov r8d, ebx
cmp esi, 2
jl 0x140040851
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
xorps xmm1, xmm0
movd dword [rbp - 0x70], xmm1
jmp 0x14004088a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp - 0x18]
mov dword [r14], eax
jmp 0x140040764
lea r9, [rbp - 0x70]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x140040860
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x14006d668]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x38], rbx
mov r9d, 0x10
mov qword [rsp + 0x30], rbx
mov edx, 0x2207d0
mov dword [rsp + 0x28], ebx
mov eax, dword [rcx]
mov rcx, qword [rcx + 0x10]
mov dword [rbp - 0x5c], eax
lea rax, [rbp - 0x28]
mov qword [rbp - 0x58], rax
mov byte [rbp - 0x28], bl
mov dword [rbp - 0x60], 0x4823fa
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp byte [rbp - 0x28], bl
jne 0x140040bba
movsd xmm0, qword [0x14004b3d8]
mov r8d, ebx
movzx eax, byte [0x14004b3e0]
movsd qword [rbp - 0x50], xmm0
mov byte [rbp - 0x48], al
movups xmm2, xmmword [0x14004b3c8]
movups xmmword [rbp - 0x60], xmm2
cmp esi, 2
jl 0x140040b74
movd eax, xmm2
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
movdqa xmm2, xmm13
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd ecx, xmm14
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, ecx
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
movd dword [rbp - 0x60], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x5c]
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm12
xorps xmm2, xmm1
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
movd dword [rbp - 0x5c], xmm2
movdqa xmm2, xmm12
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x58]
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm11
xorps xmm2, xmm1
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm6
movd dword [rbp - 0x58], xmm2
movdqa xmm2, xmm11
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm3, xmmword [0x14004b9a0]
psubd xmm2, xmm0
movd xmm1, dword [rbp - 0x54]
andps xmm2, xmm10
packuswb xmm2, xmm2
mov r8d, 0x18
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rbp - 0x54], xmm2
movdqa xmm2, xmmword [0x14004b9b0]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x50]
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
xorps xmm3, xmm1
movdqa xmm1, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rbp - 0x50], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x4c]
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rbp - 0x4c], xmm2
mov eax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x19
jl 0x140040b80
lea rcx, [rbp - 0x60]
call fcn.140001220
call fcn.140037ba0
test al, al
jne 0x140040d39
lea rdx, [rbp - 0x60]
call fcn.140041880
mov r9, rax
cmp byte [rax + 0x1d], bl
je 0x140040d1d
cmp esi, 2
jl 0x140040ce8
movdqa xmmword [rbp - 0x70], xmm14
mov rcx, rax
mov edx, dword [rbp - 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x18
jl 0x140040c00
cmp ebx, 0x1e
jge 0x140040d1d
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, bl
inc ebx
sub al, cl
add al, 0x32
xor byte [r8 - 1], al
cmp ebx, 0x1e
jl 0x140040cf0
mov rcx, r9
call fcn.140001220
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140039b90
test al, al
jne 0x140041019
lea rdx, [rbp - 0x60]
call fcn.1400418b0
mov r9, rax
cmp byte [rax + 0x18], bl
je 0x140040ffd
cmp esi, 2
jl 0x140040fc5
movdqa xmm1, xmm7
movd eax, xmm14
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm7, xmm0
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
andps xmm7, xmm10
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, eax
paddb xmm7, xmm0
movd xmm0, dword [r9]
xorps xmm7, xmm0
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
movd dword [r9], xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm13, xmm0
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
andps xmm13, xmm10
packuswb xmm13, xmm13
packuswb xmm13, xmm13
movd xmm0, eax
paddb xmm13, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm13, xmm0
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
movd dword [r9 + 4], xmm13
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm12, xmm0
punpckldq xmm1, xmm11
andps xmm12, xmm10
movd xmm0, eax
packuswb xmm12, xmm12
packuswb xmm12, xmm12
paddb xmm12, xmm0
pmuldq xmm1, xmm6
movd xmm0, dword [r9 + 8]
xorps xmm12, xmm0
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
movd dword [r9 + 8], xmm12
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm11, xmm0
movd xmm0, eax
andps xmm11, xmm10
packuswb xmm11, xmm11
packuswb xmm11, xmm11
movdqa xmm2, xmmword [0x14004b9a0]
paddb xmm11, xmm0
movd xmm0, dword [r9 + 0xc]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x14004b9b0]
xorps xmm11, xmm0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov ebx, 0x18
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd dword [r9 + 0xc], xmm11
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm8
psubd xmm2, xmm0
punpckldq xmm1, xmm3
andps xmm2, xmm10
movd xmm0, eax
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
pmuldq xmm1, xmm6
movd xmm0, dword [r9 + 0x10]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [r9 + 0x10], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, eax
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [r9 + 0x14]
xorps xmm3, xmm0
movd dword [r9 + 0x14], xmm3
mov r8d, ebx
add r8, r9
nop dword [rax + rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, bl
inc ebx
sub al, cl
add al, 0x32
xor byte [r8 - 1], al
cmp ebx, 0x19
jl 0x140040fd0
mov rcx, r9
call fcn.140001220
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x14006d668]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x38], rbx
mov r9d, 0x10
mov qword [rsp + 0x30], rbx
mov edx, 0x221708
mov dword [rsp + 0x28], ebx
mov eax, dword [rcx]
mov rcx, qword [rcx + 0x10]
mov dword [rbp - 0x5c], eax
lea rax, [rbp - 0x70]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x70], rbx
mov dword [rbp - 0x60], 0x4823fa
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp - 0x70]
mov qword [0x14006d618], rax
test rax, rax
jne 0x1400411e1
lea rdx, [rbp - 0x60]
call fcn.1400418e0
mov r9, rax
cmp byte [rax + 0x31], bl
je 0x1400411cd
cmp esi, 2
jl 0x140041198
movdqa xmmword [rbp - 0x70], xmm14
mov rcx, rax
mov edx, dword [rbp - 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x30
jl 0x1400410b0
cmp ebx, 0x32
jge 0x1400411cd
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, bl
inc ebx
sub al, cl
add al, 0x32
xor byte [r8 - 1], al
cmp ebx, 0x32
jl 0x1400411a0
mov rcx, r9
call fcn.140001220
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140038770
lea rdx, [rbp - 0x60]
call fcn.140041910
mov r10, rax
cmp byte [rax + 0x11], bl
je 0x1400413e1
mov r8d, ebx
cmp esi, 2
jl 0x1400413a3
movd eax, xmm14
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movdqa xmm0, xmm13
movd dword [r10], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [r10 + 4], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 8]
xorps xmm1, xmm0
movdqa xmm0, xmm11
movd dword [r10 + 8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
movd xmm0, eax
packuswb xmm1, xmm1
mov r8d, 0x10
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 0xc]
xorps xmm1, xmm0
movd dword [r10 + 0xc], xmm1
mov r9d, r8d
add r9, r10
nop dword [rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x1400413b0
mov edx, dword [0x14006d5b0]
mov rcx, r10
call fcn.140001220
lea rdx, [rbp - 0x60]
call fcn.140041930
mov r10, rax
cmp byte [rax + 0x15], bl
je 0x140041651
mov r8d, ebx
cmp esi, 2
jl 0x140041611
movd eax, xmm14
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movdqa xmm0, xmm13
movd dword [r10], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [r10 + 4], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 8]
xorps xmm1, xmm0
movdqa xmm0, xmm11
movd dword [r10 + 8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm1, xmm0
movdqa xmm2, xmmword [0x14004b9a0]
andps xmm1, xmm10
packuswb xmm1, xmm1
mov r8d, 0x14
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10 + 0xc]
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movd dword [r10 + 0xc], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, eax
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [r10 + 0x10]
xorps xmm2, xmm0
movd dword [r10 + 0x10], xmm2
mov r9d, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x16
jl 0x140041620
mov rdx, qword [0x14006d618]
mov rcx, r10
call fcn.140001220
mov rax, qword [0x14006d668]
lea rdx, [rbp - 0x60]
mov r10, qword [rax + 8]
call fcn.140041960
mov r9, rax
cmp byte [rax + 0x12], bl
je 0x14004185d
cmp esi, 2
jl 0x140041820
movdqa xmm1, xmm7
movd eax, xmm14
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm7, xmm0
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
andps xmm7, xmm10
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, eax
paddb xmm7, xmm0
movd xmm0, dword [r9]
xorps xmm7, xmm0
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
movd dword [r9], xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm13, xmm0
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
andps xmm13, xmm10
packuswb xmm13, xmm13
packuswb xmm13, xmm13
movd xmm0, eax
paddb xmm13, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm13, xmm0
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
movd dword [r9 + 4], xmm13
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm12, xmm0
punpckldq xmm1, xmm11
andps xmm12, xmm10
movd xmm0, eax
packuswb xmm12, xmm12
packuswb xmm12, xmm12
paddb xmm12, xmm0
pmuldq xmm1, xmm6
movd xmm0, dword [r9 + 8]
xorps xmm12, xmm0
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
movd dword [r9 + 8], xmm12
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm11, xmm0
movd xmm0, eax
andps xmm11, xmm10
packuswb xmm11, xmm11
packuswb xmm11, xmm11
paddb xmm11, xmm0
mov ebx, 0x10
movd xmm0, dword [r9 + 0xc]
xorps xmm11, xmm0
movd dword [r9 + 0xc], xmm11
mov r8d, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, bl
inc ebx
sub al, cl
add al, 0x32
xor byte [r8 - 1], al
cmp ebx, 0x13
jl 0x140041830
mov rdx, r10
mov rcx, r9
call fcn.140001220
call fcn.14003a690
call fcn.14003a310
call fcn.14003fa40
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3