Function at 0x14000a0b0
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xc8]
sub rsp, 0x1a0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
mov rax, qword [0x14004c028]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov r15, rcx
mov qword [rbp - 0x28], rcx
xor r12d, r12d
mov dword [rbp - 0x60], r12d
movss xmm10, dword [rcx + 8]
movss xmm9, dword [rcx + 0xc]
mov rdi, qword [0x1400a73a0]
add rdi, 0x1ed0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm1
mulsd xmm0, qword [0x140042b48]
cvtpd2ps xmm1, xmm0
movss xmm7, dword [0x1400a7554]
addss xmm7, xmm1
movss dword [0x1400a7554], xmm7
xorps xmm8, xmm8
movss xmm6, dword [0x140042b78]
comiss xmm7, xmm6
jbe 0x14000a176
xorps xmm7, xmm7
movss dword [0x1400a7554], xmm7
mov ebx, r12d
movss xmm11, dword [0x140042b18]
nop dword [rax]
nop word [rax + rax]
movd xmm1, ebx
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm11
subss xmm1, xmm7
comiss xmm8, xmm1
jbe 0x14000a1aa
addss xmm1, xmm6
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm6
movaps xmm2, xmm6
lea rcx, [rbp - 0x40]
call fcn.140002b80
inc ebx
cmp ebx, 0xa
jl 0x14000a190
movaps xmm0, xmmword [0x140042fb0]
movups xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call fcn.140014bf0
mov ebx, eax
movss xmm11, dword [0x140042b3c]
test eax, 0xff000000
je 0x14000a27f
movaps xmm0, xmm10
mov dword [rbp - 0x58], 0x3f000000
mov dword [rbp - 0x54], 0x3f000000
mov dword [rsp + 0x20], 0xf
movaps xmm3, xmm8
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x58]
mov rcx, rdi
test byte [rdi + 0x30], 1
je 0x14000a22b
subss xmm9, xmm11
subss xmm0, xmm11
jmp 0x14000a23c
subss xmm9, dword [0x140042b38]
subss xmm0, dword [0x140042b38]
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x5c], xmm9
call fcn.14002f100
movss xmm0, dword [0x140042b88]
movss dword [rsp + 0x28], xmm0
mov byte [rsp + 0x20], 1
mov r9d, ebx
mov r8d, dword [rdi + 0x80]
mov rdx, qword [rdi + 0x88]
mov rcx, rdi
call fcn.14002d680
mov dword [rdi + 0x80], r12d
mov edx, 0x48
call fcn.14000fd80
mov rcx, rax
call fcn.14001e860
movaps xmm0, xmmword [0x1400430b0]
movdqa xmmword [rbp - 0x40], xmm0
mov rax, qword [0x1400a73a0]
mov qword [rsp + 0x30], r12
lea rbx, str.diablo
mov qword [rsp + 0x28], rbx
movss xmm12, dword [0x140042c2c]
movss dword [rsp + 0x20], xmm12
movss xmm3, dword [0x140042c20]
movss xmm2, dword [rax + 0x1930]
lea rdx, [rbp - 0x58]
mov rcx, qword [rax + 0x1928]
call fcn.140033160
movss xmm0, dword [rbp - 0x58]
addss xmm0, dword [0x140042b70]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movaps xmm6, xmm10
subss xmm6, xmm0
mulss xmm6, xmm11
lea rcx, [rbp - 0x40]
call fcn.140014bf0
movss dword [rbp - 0x60], xmm6
mov dword [rbp - 0x5c], 0x41f00000
test eax, 0xff000000
je 0x14000a374
mov rdx, qword [rdi + 0x38]
mov rcx, qword [rdx + 8]
movups xmm0, xmmword [rdi + 0x90]
movups xmmword [rbp - 0x40], xmm0
mov byte [rsp + 0x48], r12b
movss dword [rsp + 0x40], xmm8
lea r8, [0x1400420f6]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], rbx
lea r8, [rbp - 0x40]
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], eax
mov r9, qword [rbp - 0x60]
movss xmm2, dword [rdx + 0x10]
mov rdx, rdi
call fcn.140033380
mov r14, rdi
call fcn.14001e900
mov edx, 0x20
call fcn.14000fe40
mov rcx, rax
call fcn.14001e860
movaps xmm0, xmmword [0x140043050]
movdqa xmmword [rbp - 0x40], xmm0
movss xmm9, dword [rbp - 0x54]
addss xmm9, dword [0x140042bd0]
movaps xmm7, xmm9
subss xmm7, dword [0x140042bb8]
mov rax, qword [0x1400a73a0]
mov qword [rsp + 0x30], r12
lea rbx, str.play_different
mov qword [rsp + 0x28], rbx
movss dword [rsp + 0x20], xmm12
movss xmm3, dword [0x140042c20]
movss xmm2, dword [rax + 0x1930]
lea rdx, [rbp - 0x58]
mov rcx, qword [rax + 0x1928]
call fcn.140033160
movss xmm0, dword [rbp - 0x58]
addss xmm0, dword [0x140042b70]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm6, xmm10
subss xmm6, xmm1
mulss xmm6, xmm11
lea rcx, [rbp - 0x40]
call fcn.140014bf0
movss dword [rbp - 0x60], xmm6
movss dword [rbp - 0x5c], xmm7
test eax, 0xff000000
je 0x14000a481
mov rdx, qword [rdi + 0x38]
mov rcx, qword [rdx + 8]
movups xmm0, xmmword [rdi + 0x90]
movups xmmword [rbp - 0x40], xmm0
mov byte [rsp + 0x48], r12b
movss dword [rsp + 0x40], xmm8
lea r8, [0x140042106]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], rbx
lea r8, [rbp - 0x40]
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], eax
mov r9, qword [rbp - 0x60]
movss xmm2, dword [rdx + 0x10]
mov rdx, rdi
call fcn.140033380
call fcn.14001e900
mov edx, 0x18
call fcn.14000fe40
mov rcx, rax
call fcn.14001e860
movaps xmm0, xmmword [0x1400430b0]
lea rsi, [r15 + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x14000a4ad
mov rsi, qword [rsi]
movdqa xmmword [rbp - 0x40], xmm0
addss xmm9, dword [rbp - 0x54]
movaps xmm6, xmm9
addss xmm6, dword [0x140042bb8]
mov rax, qword [0x1400a73a0]
movss xmm7, dword [rax + 0x1930]
test rsi, rsi
jne 0x14000a4de
movaps xmm0, xmm8
jmp 0x14000a527
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm12
movss xmm3, dword [0x140042c20]
movaps xmm2, xmm7
lea rdx, [rbp - 0x60]
mov rcx, qword [rax + 0x1928]
call fcn.140033160
movss xmm0, dword [rbp - 0x60]
addss xmm0, dword [0x140042b70]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss xmm7, dword [rbp - 0x5c]
subss xmm10, xmm0
mulss xmm10, xmm11
lea rcx, [rbp - 0x40]
call fcn.140014bf0
mov r8d, eax
movss dword [rbp - 0x60], xmm10
movss dword [rbp - 0x5c], xmm6
mov rbx, 0xffffffffffffffff
test eax, 0xff000000
je 0x14000a5b9
mov rcx, rbx
nop dword [rax]
inc rcx
cmp byte [rsi + rcx], r12b
jne 0x14000a560
add rcx, rsi
cmp rsi, rcx
je 0x14000a5b9
mov rax, qword [r14 + 0x38]
movups xmm0, xmmword [rdi + 0x90]
movups xmmword [rbp - 0x40], xmm0
mov byte [rsp + 0x48], r12b
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rsi
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
mov r9, qword [rbp - 0x60]
movss xmm2, dword [rax + 0x10]
mov rdx, rdi
mov rcx, qword [rax + 8]
call fcn.140033380
call fcn.14001e900
addss xmm9, xmm7
addss xmm9, dword [0x140042bd0]
mov rcx, qword [0x1400a73a0]
mov rax, qword [rcx + 0x1a90]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1a90]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x58]
addss xmm1, xmm9
movss dword [rax + 0xdc], xmm1
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm1
movss dword [rax + 0xf4], xmm0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r12
mov r8d, 7
lea rdx, str.nullify
lea rcx, [rbp]
call fcn.140002100
nop
mov dword [rbp - 0x60], 1
call qword [0x1400a7338]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000a660
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140002100
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14000a6ba
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a6b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a6b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140039c44
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14000a6f5
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a6f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d8
call fcn.140039c44
cmp qword [0x1400a7368], 0
jne 0x14000a7b6
mov rbx, qword [0x1400a72d8]
lea r9, [0x1400a72e0]
mov r8d, 0x10a3f
lea rdx, [0x1400956c0]
mov rcx, rbx
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
lea r9, [0x1400a7380]
mov r8d, 0xb0f7
lea rdx, [0x140076740]
mov rcx, rbx
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
lea r9, [0x1400a7378]
mov r8d, 0xdfe2
lea rdx, [0x14004c050]
mov rcx, rbx
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
lea r9, [0x1400a7358]
mov r8d, 0x1077c
lea rdx, [0x140065fc0]
mov rcx, rbx
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
mov rax, qword [0x1400a72e0]
mov qword [0x1400a7368], rax
mov rax, qword [0x1400a7380]
mov qword [0x1400a72d0], rax
mov rax, qword [0x1400a7378]
mov qword [0x1400a7300], rax
mov rax, qword [0x1400a7358]
mov qword [0x1400a7370], rax
mov rcx, qword [0x1400a73a0]
mov rax, qword [rcx + 0x1a90]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1a90]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x54]
movss xmm9, dword [0x140042bd4]
addss xmm1, xmm9
movss dword [rax + 0xd8], xmm1
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
xor dil, dil
mov dword [rbp - 0x10], edi
xor sil, sil
mov dword [rbp - 0xc], esi
xor r12b, r12b
mov dword [rbp - 8], r12d
xor r13b, r13b
mov dword [rbp - 0x58], r13d
xor bl, bl
mov dword [rbp - 0x48], ebx
xor dl, dl
mov dword [rbp - 0x44], edx
mov byte [rbp - 0x30], dl
xor r14b, r14b
mov dword [rbp - 0x60], r14d
mov rax, qword [r15 + 0x30]
mov qword [rbp - 0x50], rax
mov rcx, qword [r15 + 0x38]
mov qword [rbp - 0x40], rcx
cmp rax, rcx
je 0x14000ae75
xor r15d, r15d
mov rdx, rax
lea rcx, [rbp]
call fcn.140001d00
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 0xb
lea rdx, str.diablo_rust
lea rcx, [rsp + 0x50]
call fcn.140002100
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rsp + 0x50]
cmovae rdx, rdi
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
setae r13b
mov r12, qword [rbp]
cmovae rcx, r12
mov rbx, qword [rbp + 0x10]
cmp rbx, qword [rsp + 0x60]
jne 0x14000a8d2
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000a8d2
mov r14b, 1
jmp 0x14000a8d5
xor r14b, r14b
test r15b, r15b
je 0x14000a90b
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000a903
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d1
mov rcx, rdi
call fcn.140039c44
mov eax, dword [rbp - 0x10]
movzx eax, al
test r14b, r14b
mov ecx, 1
cmovne eax, ecx
mov dword [rbp - 0x10], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea r8d, [rcx + 0x12]
lea rdx, str.diablo_rust_private
lea rcx, [rsp + 0x50]
call fcn.140002100
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rsp + 0x50]
cmovae rdx, rdi
lea rcx, [rbp]
test r13b, r13b
cmovne rcx, r12
cmp rbx, qword [rsp + 0x60]
jne 0x14000a986
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000a986
mov r14b, 1
jmp 0x14000a989
xor r14b, r14b
test r15b, r15b
je 0x14000a9bf
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000a9b7
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d1
mov rcx, rdi
call fcn.140039c44
mov eax, dword [rbp - 0xc]
movzx eax, al
test r14b, r14b
mov ecx, 1
cmovne eax, ecx
mov dword [rbp - 0xc], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea r8d, [rcx + 0xa]
lea rdx, str.diablo_apex
lea rcx, [rsp + 0x50]
call fcn.140002100
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rsp + 0x50]
cmovae rdx, rdi
lea rcx, [rbp]
test r13b, r13b
cmovne rcx, r12
cmp rbx, qword [rsp + 0x60]
jne 0x14000aa3a
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000aa3a
mov r14b, 1
jmp 0x14000aa3d
xor r14b, r14b
test r15b, r15b
je 0x14000aa73
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000aa6b
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d1
mov rcx, rdi
call fcn.140039c44
mov eax, dword [rbp - 8]
movzx eax, al
test r14b, r14b
mov ecx, 1
cmovne eax, ecx
mov dword [rbp - 8], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea r8d, [rcx + 0xf]
lea rdx, str.diablo_rust_test
lea rcx, [rsp + 0x50]
call fcn.140002100
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rsp + 0x50]
cmovae rdx, rdi
lea rcx, [rbp]
test r13b, r13b
cmovne rcx, r12
cmp rbx, qword [rsp + 0x60]
jne 0x14000aaee
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000aaee
mov r14b, 1
jmp 0x14000aaf1
xor r14b, r14b
test r15b, r15b
je 0x14000ab27
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000ab1f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d1
mov rcx, rdi
call fcn.140039c44
mov eax, dword [rbp - 0x58]
movzx eax, al
test r14b, r14b
mov ecx, 1
cmovne eax, ecx
mov dword [rbp - 0x58], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea r8d, [rcx + 0xf]
lea rdx, str.diablo_apex_test
lea rcx, [rsp + 0x50]
call fcn.140002100
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rsp + 0x50]
cmovae rdx, rdi
lea rcx, [rbp]
test r13b, r13b
cmovne rcx, r12
cmp rbx, qword [rsp + 0x60]
jne 0x14000aba2
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000aba2
mov r14b, 1
jmp 0x14000aba5
xor r14b, r14b
test r15b, r15b
je 0x14000abdb
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000abd3
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d1
mov rcx, rdi
call fcn.140039c44
mov eax, dword [rbp - 0x48]
movzx eax, al
test r14b, r14b
mov ecx, 1
cmovne eax, ecx
mov dword [rbp - 0x48], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea r8d, [rcx + 0xf]
lea rdx, str.diablo_csgo_test
lea rcx, [rsp + 0x50]
call fcn.140002100
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rsp + 0x50]
cmovae rdx, rdi
lea rcx, [rbp]
test r13b, r13b
cmovne rcx, r12
cmp rbx, qword [rsp + 0x60]
jne 0x14000ac56
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000ac56
mov r14b, 1
jmp 0x14000ac59
xor r14b, r14b
test r15b, r15b
je 0x14000ac8f
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000ac87
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d1
mov rcx, rdi
call fcn.140039c44
mov eax, dword [rbp - 0x44]
movzx eax, al
test r14b, r14b
mov ecx, 1
cmovne eax, ecx
mov dword [rbp - 0x44], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea r8d, [rcx + 0xa]
lea rdx, str.diablo_csgo
lea rcx, [rsp + 0x50]
call fcn.140002100
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rsp + 0x50]
cmovae rdx, rdi
lea rcx, [rbp]
test r13b, r13b
cmovne rcx, r12
cmp rbx, qword [rsp + 0x60]
jne 0x14000ad0a
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000ad0a
mov r14b, 1
jmp 0x14000ad0d
xor r14b, r14b
test r15b, r15b
je 0x14000ad43
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000ad3b
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d1
mov rcx, rdi
call fcn.140039c44
mov eax, dword [rbp - 0x30]
movzx eax, al
test r14b, r14b
mov ecx, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor r15d, r15d
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
lea r8d, [rcx + 9]
lea rdx, str.diablo_r6s
lea rcx, [rsp + 0x50]
call fcn.140002100
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
cmp rsi, 0x10
setae r14b
mov rdi, qword [rsp + 0x50]
cmovae rdx, rdi
lea rcx, [rbp]
test r13b, r13b
cmovne rcx, r12
cmp rbx, qword [rsp + 0x60]
jne 0x14000adbe
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000adbe
mov bl, 1
jmp 0x14000adc0
xor bl, bl
test r14b, r14b
je 0x14000adf6
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000adee
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d1
mov rcx, rdi
call fcn.140039c44
mov r14d, dword [rbp - 0x60]
movzx r14d, r14b
test bl, bl
mov eax, 1
cmovne r14d, eax
mov dword [rbp - 0x60], r14d
test r13b, r13b
je 0x14000ae47
mov rdx, qword [rbp + 0x18]
inc rdx
mov rax, r12
cmp rdx, 0x1000
jb 0x14000ae3f
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b2d8
mov rcx, r12
call fcn.140039c44
mov rax, qword [rbp - 0x50]
add rax, 0x20
mov qword [rbp - 0x50], rax
cmp rax, qword [rbp - 0x40]
jne 0x14000a850
mov edi, dword [rbp - 0x10]
mov esi, dword [rbp - 0xc]
mov r15, qword [rbp - 0x28]
mov r12d, dword [rbp - 8]
mov r13d, dword [rbp - 0x58]
mov ebx, dword [rbp - 0x48]
mov edx, dword [rbp - 0x44]
mov rax, qword [0x1400a73a0]
mov rcx, qword [rax + 0x1a90]
movss xmm7, dword [rcx + 0xdc]
subss xmm7, dword [rcx + 0x14]
movss xmm6, dword [rcx + 0xd8]
subss xmm6, dword [rcx + 0x10]
addss xmm7, dword [rcx + 0x58]
addss xmm6, dword [rcx + 0x54]
cmp byte [r15 + 0x4c], 0
jne 0x14000aebf
test r13b, r13b
jne 0x14000aebf
test bl, bl
jne 0x14000aebf
test dl, dl
je 0x14000b060
mov edx, 0x10
call fcn.14000fd80
mov rcx, rax
call fcn.14001e860
mov rcx, qword [0x1400a73a0]
mov rax, qword [rcx + 0x1a90]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1a90]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
movss xmm8, dword [0x140042bb8]
addss xmm0, xmm8
addss xmm2, xmm8
movss dword [rax + 0xd8], xmm2
movss dword [rax + 0xdc], xmm0
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
call fcn.140037f50
call fcn.14001e900
cmp byte [rbp - 0x44], 0
je 0x14000b060
mov rcx, qword [0x1400a73a0]
mov rax, qword [rcx + 0x1a90]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1a90]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
addss xmm0, xmm9
addss xmm2, xmm8
movss dword [rax + 0xd8], xmm2
movss dword [rax + 0xdc], xmm0
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
movss xmm0, dword [0x140042be4]
movss dword [rbp - 0x50], xmm0
movss xmm1, dword [0x140042bc8]
movss dword [rbp - 0x4c], xmm1
lea rdx, [rbp - 0x50]
call fcn.140036d00
test al, al
je 0x14000b060
mov ecx, 0x88
call fcn.140039c00
mov rcx, rax
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x70], xmm0
mov qword [rcx + 0x80], rax
movzx edx, bl
movzx eax, r13b
add edx, eax
movzx eax, r12b
add edx, eax
movzx eax, sil
add edx, eax
movzx eax, dil
add edx, eax
mov r8, r15
call fcn.140009600
nop
mov qword [0x1400a72e8], rax
mov rbx, qword [0x1400a73a0]
mov rax, qword [rbx + 0x1a90]
mov byte [rax + 0x88], 1
mov rax, qword [rbx + 0x1a90]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x58]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x54]
addss xmm2, xmm7
addss xmm6, xmm0
movss dword [rax + 0xd8], xmm6
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm6
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
movaps xmm6, xmmword [0x140042fb0]
mov dword [rbp - 0x28], 0x15
movups xmm0, xmmword [rbx + 0x1774]
movups xmmword [rbp - 0x24], xmm0
lea rcx, [rbx + 0x1bc0]
lea rdx, [rbp - 0x28]
call fcn.140024d20
movups xmmword [rbx + 0x1774], xmm6
movaps xmm0, xmmword [0x1400430b0]
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x50], 0x3f800000
mov dword [rbp - 0x4c], 0x3f800000
mov qword [rbp - 0x60], 0
mov dword [rbp - 0x58], 0x43160000
mov dword [rbp - 0x54], 0x43480000
lea rax, [rbp - 0x28]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x58]
mov rcx, qword [0x1400a7368]
call fcn.140037e40
test al, al
je 0x14000b483
lea rcx, str.mpnotify.exe
call fcn.140009cb0
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [0x140043100]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x1400430f0]
movdqu xmmword [rsp + 0x60], xmm2
mov dl, 0x5b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor dl, cl
mov byte [rsp + 0x70], dl
mov byte [rsp + 0x71], 0
mov dword [rsp + 0x28], 0xa
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rsp + 0x51]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
test r13b, r13b
je 0x14000b2df
cmp byte [0x1400a7509], bl
je 0x14000b2df
mov ecx, 0x88
call fcn.140039c00
mov rcx, rax
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x70], xmm0
mov qword [rcx + 0x80], rax
movzx edx, r12b
movzx eax, sil
add edx, eax
movzx eax, dil
add edx, eax
mov r8, r15
call fcn.140009600
nop
mov qword [0x1400a72e8], rax
jmp 0x14000b485
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test sil, sil
je 0x14000b339
mov ecx, 0x88
call fcn.140039c00
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
movzx edx, dil
mov r8, r15
mov rcx, rax
call fcn.140009600
nop
mov qword [0x1400a72e8], rax
jmp 0x14000b485
test dil, dil
je 0x14000b391
mov ecx, 0x88
call fcn.140039c00
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
mov r8, r15
xor edx, edx
mov rcx, rax
call fcn.140009600
nop
mov qword [0x1400a72e8], rax
jmp 0x14000b485
movdqa xmm0, xmmword [0x1400430c0]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x140042d70]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [0x140042d00]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x140042d90]
movdqa xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x70], 0x401b
xor eax, eax
mov byte [rbp - 0x6e], al
mov rcx, rbx
nop word [rax + rax]
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x52], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x53], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x54], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x55], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x56], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x57], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x58], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x59], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5a], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5b], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5c], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5d], al
add rcx, 0xd
cmp rcx, 0x41
jb 0x14000b3e0
mov byte [rbp - 0x6e], bl
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rsp + 0x51]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x14000b485
xor ebx, ebx
mov rdx, qword [0x1400a73a0]
mov rax, qword [rdx + 0x1a90]
mov byte [rax + 0x88], 1
mov rcx, qword [rdx + 0x1a90]
cmp byte [rcx + 0x8b], 0
jne 0x14000b4ea
movss xmm0, dword [rdx + 0x15b0]
addss xmm0, dword [rcx + 0xe0]
movss dword [rcx + 0xd8], xmm0
mov eax, dword [rcx + 0xe4]
mov dword [rcx + 0xdc], eax
movsd xmm0, qword [rcx + 0x100]
movsd qword [rcx + 0xf8], xmm0
mov eax, dword [rcx + 0x10c]
mov dword [rcx + 0x108], eax
movaps xmm0, xmmword [0x1400430b0]
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x50], 0x3f800000
mov dword [rbp - 0x4c], 0x3f800000
mov qword [rbp - 0x60], 0
mov dword [rbp - 0x58], 0x43160000
mov dword [rbp - 0x54], 0x43480000
lea rax, [rbp - 0x28]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x58]
mov rcx, qword [0x1400a72d0]
call fcn.140037e40
test al, al
je 0x14000b76e
lea rcx, str.mpnotify.exe
call fcn.140009cb0
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [0x140043120]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x140043130]
movdqu xmmword [rsp + 0x60], xmm2
mov dl, 0x47
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor dl, cl
mov byte [rsp + 0x70], dl
mov byte [rsp + 0x71], 0
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rsp + 0x51]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ebx, dword [rbp - 0x48]
test bl, bl
je 0x14000b6c2
cmp byte [0x1400a7509], 0
je 0x14000b6c2
mov ecx, 0x88
call fcn.140039c00
mov rcx, rax
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x70], xmm0
mov qword [rcx + 0x80], rax
movzx edx, r13b
movzx eax, r12b
add edx, eax
movzx eax, sil
add edx, eax
movzx eax, dil
add edx, eax
mov r8, r15
call fcn.140009600
nop
mov qword [0x1400a72e8], rax
jmp 0x14000b771
test r12b, r12b
je 0x14000ba25
movzx ebx, sil
movzx eax, dil
add ebx, eax
mov ecx, 0x88
cmp byte [r15 + 0x4c], 0
je 0x14000b725
call fcn.140039c00
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
mov r8, r15
mov edx, ebx
mov rcx, rax
call fcn.140009600
nop
jmp 0x14000b767
call fcn.140039c00
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
mov r8, r15
mov edx, ebx
mov rcx, rax
call fcn.140009600
nop
mov qword [0x1400a72e8], rax
mov ebx, dword [rbp - 0x48]
mov rdx, qword [0x1400a73a0]
mov rax, qword [rdx + 0x1a90]
mov byte [rax + 0x88], 1
mov rcx, qword [rdx + 0x1a90]
cmp byte [rcx + 0x8b], 0
jne 0x14000b7d6
movss xmm0, dword [rdx + 0x15b0]
addss xmm0, dword [rcx + 0xe0]
movss dword [rcx + 0xd8], xmm0
mov eax, dword [rcx + 0xe4]
mov dword [rcx + 0xdc], eax
movsd xmm0, qword [rcx + 0x100]
movsd qword [rcx + 0xf8], xmm0
mov eax, dword [rcx + 0x10c]
mov dword [rcx + 0x108], eax
movaps xmm0, xmmword [0x1400430b0]
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x50], 0x3f800000
mov dword [rbp - 0x4c], 0x3f800000
mov qword [rbp - 0x60], 0
mov dword [rbp - 0x58], 0x43160000
mov dword [rbp - 0x54], 0x43480000
lea rax, [rbp - 0x28]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x58]
mov rcx, qword [0x1400a7300]
call fcn.140037e40
test al, al
je 0x14000bc06
lea rcx, str.msinfo32.exe
call fcn.140009cb0
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [rbp - 0x30], 0
je 0x14000bb1b
movdqa xmm1, xmmword [0x140042e00]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [str._9XZ2]
movdqu xmmword [rsp + 0x60], xmm2
mov dl, 0xb
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor dl, cl
mov byte [rsp + 0x70], dl
mov byte [rsp + 0x71], 0
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x51]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, str.System_Information
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
jne 0x14000b977
nop dword [rax]
lea rdx, str.System_Information
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
je 0x14000b960
mov ecx, 0x1e
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x30], 0x82
xor eax, eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowPos]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x88
call fcn.140039c00
mov rcx, rax
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x70], xmm0
mov qword [rcx + 0x80], rax
movzx edx, byte [rbp - 0x44]
mov ebx, dword [rbp - 0x48]
movzx eax, bl
add edx, eax
movzx eax, r13b
add edx, eax
movzx eax, r12b
add edx, eax
movzx eax, sil
add edx, eax
movzx eax, dil
add edx, eax
mov r8, r15
call fcn.140009600
nop
mov qword [0x1400a72e8], rax
jmp 0x14000bc06
movdqa xmm0, xmmword [0x140043150]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x140042cf0]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [0x140042d50]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x140042cd0]
movdqa xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x70], 0x5e05
xor eax, eax
mov byte [rbp - 0x6e], al
xor ecx, ecx
nop dword [rax]
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x52], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x53], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x54], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x55], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x56], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x57], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x58], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x59], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5a], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5b], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5c], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5d], al
add rcx, 0xd
cmp rcx, 0x41
jb 0x14000ba70
mov byte [rbp - 0x6e], 0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x51]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x14000b771
movdqa xmm0, xmmword [0x140042d20]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x140043140]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [0x1400430d0]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x140043110]
movdqa xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x70], 0xa51
xor eax, eax
mov byte [rbp - 0x6e], al
xor ecx, ecx
nop
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x52], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x53], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x54], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x55], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x56], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x57], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x58], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x59], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5a], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5b], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5c], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x5d], al
add rcx, 0xd
cmp rcx, 0x41
jb 0x14000bb60
mov byte [rbp - 0x6e], 0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x51]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [0x1400a73a0]
mov rax, qword [rdx + 0x1a90]
mov byte [rax + 0x88], 1
mov rcx, qword [rdx + 0x1a90]
cmp byte [rcx + 0x8b], 0
jne 0x14000bc6b
movss xmm0, dword [rdx + 0x15b0]
addss xmm0, dword [rcx + 0xe0]
movss dword [rcx + 0xd8], xmm0
mov eax, dword [rcx + 0xe4]
mov dword [rcx + 0xdc], eax
movsd xmm0, qword [rcx + 0x100]
movsd qword [rcx + 0xf8], xmm0
mov eax, dword [rcx + 0x10c]
mov dword [rcx + 0x108], eax
movaps xmm0, xmmword [0x1400430b0]
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x50], 0x3f800000
mov dword [rbp - 0x4c], 0x3f800000
mov qword [rbp - 0x60], 0
mov dword [rbp - 0x58], 0x43160000
mov dword [rbp - 0x54], 0x43480000
lea rax, [rbp - 0x28]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x58]
mov rcx, qword [0x1400a7370]
call fcn.140037e40
test al, al
je 0x14000c015
lea rcx, str.mpnotify.exe
call fcn.140009cb0
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [str.g___0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x140042d80]
movdqu xmmword [rsp + 0x60], xmm2
mov r9b, 2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r8d, xmm1
xor al, r8b
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], r8b
xor byte [rsp + 0x53], r8b
xor byte [rsp + 0x54], r8b
xor byte [rsp + 0x55], r8b
xor byte [rsp + 0x56], r8b
xor byte [rsp + 0x57], r8b
xor byte [rsp + 0x58], r8b
xor byte [rsp + 0x59], r8b
xor byte [rsp + 0x5a], r8b
xor byte [rsp + 0x5b], r8b
xor byte [rsp + 0x5c], r8b
xor byte [rsp + 0x5d], r8b
xor byte [rsp + 0x5e], r8b
xor byte [rsp + 0x5f], r8b
movd eax, xmm2
xor al, r8b
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], r8b
xor byte [rsp + 0x62], r8b
xor byte [rsp + 0x63], r8b
xor byte [rsp + 0x64], r8b
xor byte [rsp + 0x65], r8b
xor byte [rsp + 0x66], r8b
xor byte [rsp + 0x67], r8b
xor byte [rsp + 0x68], r8b
xor byte [rsp + 0x69], r8b
xor byte [rsp + 0x6a], r8b
xor byte [rsp + 0x6b], r8b
xor byte [rsp + 0x6c], r8b
xor byte [rsp + 0x6d], r8b
xor byte [rsp + 0x6e], r8b
xor byte [rsp + 0x6f], r8b
xor r9b, r8b
mov byte [rsp + 0x70], r9b
mov byte [rsp + 0x71], 0
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x51]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
test r14b, r14b
je 0x14000be77
mov ecx, 0x88
call fcn.140039c00
mov rcx, rax
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x70], xmm0
mov qword [rcx + 0x80], rax
movzx edx, byte [rbp - 0x30]
movzx eax, byte [rbp - 0x44]
add edx, eax
movzx eax, bl
add edx, eax
movzx eax, r13b
add edx, eax
movzx eax, r12b
add edx, eax
movzx eax, sil
add edx, eax
movzx eax, dil
add edx, eax
mov r8, r15
call fcn.140009600
nop
mov byte [rax + 0x80], 1
mov qword [0x1400a72e8], rax
jmp 0x14000c015
movdqa xmm1, xmmword [0x140042db0]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x140043180]
movdqa xmmword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x140043160]
movdqa xmmword [rsp + 0x70], xmm3
movdqa xmm4, xmmword [0x140043170]
movdqa xmmword [rbp - 0x80], xmm4
mov dl, 0x74
mov r8b, 0x6f
mov r9b, 0x76
mov r10b, 0x72
mov r11b, 0x29
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x70], al
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
movd eax, xmm4
xor al, cl
mov byte [rbp - 0x80], al
xor byte [rbp - 0x7f], cl
xor byte [rbp - 0x7e], cl
xor byte [rbp - 0x7d], cl
xor byte [rbp - 0x7c], cl
xor byte [rbp - 0x7b], cl
xor byte [rbp - 0x7a], cl
xor byte [rbp - 0x79], cl
xor byte [rbp - 0x78], cl
xor byte [rbp - 0x77], cl
xor byte [rbp - 0x76], cl
xor byte [rbp - 0x75], cl
xor byte [rbp - 0x74], cl
xor byte [rbp - 0x73], cl
xor byte [rbp - 0x72], cl
xor byte [rbp - 0x71], cl
xor dl, cl
mov byte [rbp - 0x70], dl
xor r8b, cl
mov byte [rbp - 0x6f], r8b
xor r9b, cl
mov byte [rbp - 0x6e], r9b
xor r10b, cl
mov byte [rbp - 0x6d], r10b
xor r11b, cl
mov byte [rbp - 0x6c], r11b
mov byte [rbp - 0x6b], 0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x51]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8, qword [0x1400a73a0]
movsxd rax, dword [r8 + 0x1bc0]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1bc8]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x1624], xmm0
dec dword [r8 + 0x1bc0]
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.140039be0
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret