Function at 0x140011d90
Capabilities:
Authenticate hmac
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7e8]
sub rsp, 0x8e8
mov word [rbp + 0x830], 0x12
lea rdx, [rbp + 0x831]
lea rcx, [rbp + 0xf8]
mov byte [rbp + 0x831], 0
call fcn.140014900
mov word [rbp + 0x830], 0x3c
lea rdx, [rbp + 0x831]
lea rcx, [rbp + 0xd8]
mov byte [rbp + 0x831], 0
call fcn.140014900
mov word [rbp + 0x830], 1
lea rdx, [rbp + 0x831]
lea rcx, [rbp + 0xb8]
mov byte [rbp + 0x831], 0
call fcn.140014900
movdqa xmm1, xmmword [str.P8___j]
mov dl, 0x23
movd ecx, xmm1
movdqa xmm0, xmm1
movdqa xmm2, xmmword [0x140050550]
movdqa xmm3, xmmword [0x1400507c0]
movdqu xmmword [rsp + 0x60], xmm2
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movdqu xmmword [rsp + 0x70], xmm3
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
movdqu xmmword [rsp + 0x50], xmm1
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp - 0x7f], 0
xor al, cl
mov byte [rsp + 0x51], al
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
movd eax, xmm3
xor al, cl
xor dl, cl
mov byte [rsp + 0x70], al
mov byte [rbp - 0x80], dl
mov r13, 0xffffffffffffffff
lea rax, [rsp + 0x51]
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x140011f34
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0xf8]
call fcn.140015f60
movdqa xmm1, xmmword [str.P8___j]
mov dl, 0x23
movd ecx, xmm1
movdqa xmm0, xmm1
movdqa xmm2, xmmword [0x140050550]
mov r8, r13
movdqa xmm3, xmmword [0x1400507d0]
movdqu xmmword [rsp + 0x60], xmm2
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movdqu xmmword [rsp + 0x70], xmm3
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
movdqu xmmword [rsp + 0x50], xmm1
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp - 0x7f], 0
xor al, cl
mov byte [rsp + 0x51], al
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
movd eax, xmm3
xor al, cl
xor dl, cl
mov byte [rsp + 0x70], al
mov byte [rbp - 0x80], dl
lea rax, [rsp + 0x51]
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140012070
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0xd8]
call fcn.140015f60
movdqa xmm1, xmmword [0x1400507b0]
mov cl, 0x27
movd r8d, xmm1
mov dl, 0x71
movdqa xmm2, xmmword [0x1400507a0]
movdqa xmm0, xmm1
movdqa xmm3, xmmword [0x140050560]
movzx r15d, cl
movdqu xmmword [rsp + 0x60], xmm2
xor byte [rsp + 0x61], r8b
xor cl, r8b
xor byte [rsp + 0x62], r8b
movzx r12d, dl
xor byte [rsp + 0x63], r8b
xor dl, r8b
xor byte [rsp + 0x64], r8b
mov r9b, 0x24
xor byte [rsp + 0x65], r8b
mov bl, 0x6d
xor byte [rsp + 0x66], r8b
mov r10b, 0x72
xor byte [rsp + 0x67], r8b
mov r11b, 0x70
xor byte [rsp + 0x68], r8b
mov dil, 0x6f
xor byte [rsp + 0x69], r8b
movzx esi, bl
xor byte [rsp + 0x6a], r8b
mov r14b, 0x3f
xor byte [rsp + 0x6b], r8b
xor byte [rsp + 0x6c], r8b
xor byte [rsp + 0x6d], r8b
xor byte [rsp + 0x6e], r8b
xor byte [rsp + 0x6f], r8b
movdqu xmmword [rsp + 0x70], xmm3
xor byte [rsp + 0x71], r8b
xor byte [rsp + 0x72], r8b
xor byte [rsp + 0x73], r8b
xor byte [rsp + 0x74], r8b
xor byte [rsp + 0x75], r8b
xor byte [rsp + 0x76], r8b
xor byte [rsp + 0x77], r8b
xor byte [rsp + 0x78], r8b
xor byte [rsp + 0x79], r8b
xor byte [rsp + 0x7a], r8b
xor byte [rsp + 0x7b], r8b
xor byte [rsp + 0x7c], r8b
xor byte [rsp + 0x7d], r8b
xor byte [rsp + 0x7e], r8b
xor byte [rsp + 0x7f], r8b
movdqu xmmword [rsp + 0x50], xmm1
xor byte [rsp + 0x52], r8b
xor byte [rsp + 0x53], r8b
xor byte [rsp + 0x54], r8b
xor byte [rsp + 0x55], r8b
xor byte [rsp + 0x56], r8b
xor byte [rsp + 0x57], r8b
xor byte [rsp + 0x58], r8b
xor byte [rsp + 0x59], r8b
xor byte [rsp + 0x5a], r8b
xor byte [rsp + 0x5b], r8b
xor byte [rsp + 0x5c], r8b
xor byte [rsp + 0x5d], r8b
xor byte [rsp + 0x5e], r8b
xor byte [rsp + 0x5f], r8b
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp - 0x80], cl
mov byte [rbp - 0x7f], dl
xor al, r8b
mov byte [rsp + 0x51], al
movd eax, xmm2
xor al, r8b
mov byte [rsp + 0x60], al
movd eax, xmm3
xor al, r8b
mov byte [rsp + 0x70], al
xor r9b, r8b
xor r10b, r8b
mov byte [rbp - 0x7e], r9b
xor r11b, r8b
mov byte [rbp - 0x7d], r10b
xor bl, r8b
mov byte [rbp - 0x7c], r11b
xor dil, r8b
mov byte [rbp - 0x7b], bl
xor sil, r8b
mov byte [rbp - 0x7a], dil
xor r14b, r8b
mov byte [rbp - 0x79], sil
xor r15b, r8b
mov byte [rbp - 0x78], r14b
xor r12b, r8b
mov byte [rbp - 0x77], r15b
mov byte [rbp - 0x76], r12b
lea rax, [rsp + 0x51]
mov byte [rbp - 0x75], 0
inc r13
cmp byte [rax + r13], 0
jne 0x140012233
mov r8, r13
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0xb8]
call fcn.140015f60
lea rdx, [0x14004fe2b]
lea rcx, [rbp + 0x98]
call fcn.140014900
lea rcx, [rbp - 8]
call fcn.14000d160
lea rcx, [rbp - 8]
call fcn.140014810
mov cl, 0x50
mov byte [rsp + 0x30], 0x18
xor cl, 0x18
mov dl, 0x4f
xor dl, 0x18
mov byte [rsp + 0x31], cl
mov r8b, 0x51
mov byte [rsp + 0x32], dl
mov r9b, 0x5c
lea rcx, [rsp + 0x31]
mov r10b, 0x38
mov r11b, 0x3d
xor r8b, 0x18
xor r9b, 0x18
xor r10b, 0x18
mov byte [rsp + 0x33], r8b
xor r11b, 0x18
mov byte [rsp + 0x34], r9b
mov bl, 0x6b
mov byte [rsp + 0x35], r10b
mov dil, 0x12
mov byte [rsp + 0x36], r11b
xor esi, esi
xor bl, 0x18
xor dil, 0x18
mov byte [rsp + 0x37], bl
mov rdx, rax
mov byte [rsp + 0x38], dil
mov byte [rsp + 0x39], sil
call fcn.140002950
mov ebx, dword [rbp + 8]
lea rcx, [rbp - 8]
call fcn.140014810
mov r8d, ebx
lea rcx, [rbp + 0x158]
mov rdx, rax
call fcn.14000d5d0
lea rcx, [rbp + 0x158]
call fcn.140014810
lea rcx, [rbp + 0xf8]
mov rbx, rax
call fcn.140014810
mov r8, rbx
lea rcx, [rbp + 0x3e0]
mov rdx, rax
call fcn.1400029a0
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x138]
call fcn.14000c810
lea rcx, [rbp + 0x138]
call fcn.140014810
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140014900
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x18]
call fcn.14000d870
lea rcx, [rbp - 0x70]
call fcn.1400148a0
mov dl, 0x30
mov byte [rsp + 0x30], 0x59
movzx r10d, dl
mov al, 0x31
mov cl, 0x2e
mov r8b, 0x3d
mov r9b, 0x79
mov r11b, 0x37
mov bl, 0x2f
mov dil, 0x38
mov sil, 0x35
movzx r14d, dl
movzx r15d, r8b
xor cl, 0x59
xor al, 0x59
mov byte [rsp + 0x32], cl
xor dl, 0x59
xor r8b, 0x59
mov byte [rsp + 0x31], al
xor r9b, 0x59
mov byte [rsp + 0x33], dl
xor r10b, 0x59
mov byte [rsp + 0x34], r8b
xor r11b, 0x59
mov byte [rsp + 0x35], r9b
xor r14b, 0x59
mov byte [rsp + 0x36], r10b
xor r15b, 0x59
mov byte [rsp + 0x3b], r14b
xor r12d, r12d
mov byte [rsp + 0x3c], r15b
xor bl, 0x59
mov byte [rsp + 0x37], r11b
xor dil, 0x59
mov byte [rsp + 0x38], bl
xor sil, 0x59
mov byte [rsp + 0x39], dil
lea rcx, [rbp + 0x18]
mov byte [rsp + 0x3a], sil
mov byte [rsp + 0x3d], r12b
call fcn.140014810
lea r8, [rsp + 0x31]
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140012433
inc rax
test ecx, ecx
jne 0x140012420
test edx, edx
jne 0x14001250c
mov cl, 0xd2
mov byte [rsp + 0x30], 0x37
movzx r8d, cl
mov dl, 0xd5
xor cl, 0x37
xor dl, 0x37
mov al, 0xfa
mov byte [rsp + 0x32], cl
mov r9b, 0xc7
mov byte [rsp + 0x33], dl
mov r10b, 0xda
lea rcx, [0x140271d60]
mov r11b, 0xcc
lea rdx, [rsp + 0x31]
xor al, 0x37
xor r8b, 0x37
xor r9b, 0x37
mov byte [rsp + 0x31], al
xor r10b, 0x37
mov byte [rsp + 0x34], r8b
xor r11b, 0x37
mov byte [rsp + 0x35], r9b
mov bl, 0xde
mov byte [rsp + 0x36], r10b
mov dil, 0x17
mov byte [rsp + 0x37], r11b
mov sil, 0x7f
mov r14b, 0x60
mov r15b, 0x7e
mov r12b, 0x73
xor r13d, r13d
xor bl, 0x37
xor dil, 0x37
mov byte [rsp + 0x38], bl
xor sil, 0x37
mov byte [rsp + 0x39], dil
xor r14b, 0x37
mov byte [rsp + 0x3a], sil
xor r15b, 0x37
mov byte [rsp + 0x3b], r14b
xor r12b, 0x37
mov byte [rsp + 0x3c], r15b
mov byte [rsp + 0x3d], r12b
mov byte [rsp + 0x3e], r13b
call fcn.140017670
lea rdx, [fcn.1400178e0]
mov rcx, rax
call fcn.140014730
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov al, 0x4e
mov byte [rsp + 0x30], 0x27
mov r8b, 0x46
mov byte [rsp + 0x3d], r12b
movzx r10d, al
movzx edi, r8b
mov cl, 0x49
mov dl, 0x51
xor cl, 0x27
mov r9b, 0x4b
mov r11b, 0x43
mov byte [rsp + 0x32], cl
xor r10b, 0x27
lea rcx, [rbp + 0x18]
xor al, 0x27
mov byte [rsp + 0x36], r10b
xor dl, 0x27
mov byte [rsp + 0x31], al
xor r8b, 0x27
mov byte [rsp + 0x33], dl
xor r9b, 0x27
mov byte [rsp + 0x34], r8b
xor r11b, 0x27
mov byte [rsp + 0x35], r9b
mov bl, 7
mov byte [rsp + 0x37], r11b
mov sil, 0x52
mov r14b, 0x53
mov r15b, 0x4f
xor dil, 0x27
xor bl, 0x27
mov byte [rsp + 0x39], dil
xor sil, 0x27
mov byte [rsp + 0x38], bl
xor r14b, 0x27
mov byte [rsp + 0x3a], sil
xor r15b, 0x27
mov byte [rsp + 0x3b], r14b
mov byte [rsp + 0x3c], r15b
call fcn.140014810
lea r8, [rsp + 0x31]
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400125c3
inc rax
test ecx, ecx
jne 0x1400125b0
test edx, edx
jne 0x140012680
movdqa xmm1, xmmword [0x1400508b0]
mov r8b, 0xd3
movd ecx, xmm1
movzx r9d, r8b
movdqu xmmword [rsp + 0x30], xmm1
mov byte [rsp + 0x43], r12b
mov dl, 0xcd
xor byte [rsp + 0x32], cl
movdqa xmm0, xmm1
xor byte [rsp + 0x33], cl
xor dl, cl
xor byte [rsp + 0x34], cl
xor r8b, cl
xor byte [rsp + 0x35], cl
xor r9b, cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rsp + 0x40], dl
lea rdx, [rsp + 0x31]
mov byte [rsp + 0x41], r8b
xor al, cl
mov byte [rsp + 0x42], r9b
lea rcx, [0x140271d60]
mov byte [rsp + 0x31], al
call fcn.140017670
lea rdx, [fcn.1400178e0]
mov rcx, rax
call fcn.140014730
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movdqa xmm1, xmmword [str._YOX_nDE_nLE_DN]
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov byte [rsp + 0x3f], r12b
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
psrldq xmm0, 1
movd eax, xmm0
xor al, cl
lea rcx, [rbp + 0x18]
mov byte [rsp + 0x31], al
call fcn.140014810
lea r8, [rsp + 0x31]
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140012703
inc rax
test ecx, ecx
jne 0x1400126f0
test edx, edx
jne 0x140012bb4
movdqa xmm1, xmmword [0x140050860]
mov r8b, 0xb2
movd ecx, xmm1
movzx r10d, r8b
movdqu xmmword [rsp + 0x30], xmm1
mov byte [rsp + 0x45], r12b
mov dl, 0xb0
xor byte [rsp + 0x32], cl
movdqa xmm0, xmm1
xor byte [rsp + 0x33], cl
xor dl, cl
xor byte [rsp + 0x34], cl
xor r8b, cl
xor byte [rsp + 0x35], cl
xor r10b, cl
xor byte [rsp + 0x36], cl
mov r9b, 0xb6
xor byte [rsp + 0x37], cl
xor r9b, cl
xor byte [rsp + 0x38], cl
mov r11b, 0xb8
xor byte [rsp + 0x39], cl
xor r11b, cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rsp + 0x40], dl
lea rdx, [rsp + 0x31]
mov byte [rsp + 0x41], r8b
xor al, cl
mov byte [rsp + 0x42], r9b
lea rcx, [0x140271d60]
mov byte [rsp + 0x31], al
mov byte [rsp + 0x43], r10b
mov byte [rsp + 0x44], r11b
call fcn.140017670
mov rcx, rax
call fcn.1400178e0
lea rdx, [rbp + 0x98]
lea rcx, [0x140271fa0]
call fcn.140019260
mov ebx, dword [rbp + 8]
lea rcx, [rbp - 8]
call fcn.140014810
mov r8d, ebx
lea rcx, [rbp + 0x78]
mov rdx, rax
call fcn.14000d5d0
lea rcx, [rbp + 0x98]
call fcn.140014810
lea rcx, [rbp + 0x78]
mov rdi, rax
call fcn.140014810
lea rcx, [rbp + 0xb8]
mov rbx, rax
call fcn.140014810
mov r9, rdi
lea rcx, [rbp + 0x1e0]
mov r8, rbx
mov rdx, rax
call fcn.1400029a0
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x58]
call fcn.14000c810
lea rcx, [rbp + 0x58]
call fcn.140014810
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140014900
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x38]
call fcn.14000d870
lea rcx, [rbp - 0x70]
call fcn.1400148a0
movdqa xmm1, xmmword [0x1400507f0]
movdqu xmmword [rsp + 0x30], xmm1
movd ecx, xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
mov dl, 0x79
movd eax, xmm0
mov r8b, 0x6c
xor byte [rsp + 0x32], cl
xor dl, cl
xor byte [rsp + 0x33], cl
xor r8b, cl
xor byte [rsp + 0x34], cl
xor al, cl
xor byte [rsp + 0x35], cl
mov r9b, 0x7f
xor byte [rsp + 0x36], cl
xor r9b, cl
xor byte [rsp + 0x37], cl
mov r10b, 0x66
xor byte [rsp + 0x38], cl
xor r10b, cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
lea rcx, [rbp + 0x38]
mov byte [rsp + 0x31], al
mov byte [rsp + 0x40], dl
mov byte [rsp + 0x41], r8b
mov byte [rsp + 0x42], r9b
mov byte [rsp + 0x43], r10b
mov byte [rsp + 0x44], r12b
call fcn.140014810
lea r8, [rsp + 0x31]
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140012913
inc rax
test ecx, ecx
jne 0x140012900
test edx, edx
jne 0x140012aca
movdqa xmm1, xmmword [0x140050840]
mov r10b, 0x82
movd ecx, xmm1
mov dil, 0x43
movdqu xmmword [rbp - 0x70], xmm1
movzx ebx, r10b
mov byte [rbp - 0x57], r12b
xor byte [rbp - 0x6e], cl
xor r10b, cl
xor byte [rbp - 0x6d], cl
xor bl, cl
xor byte [rbp - 0x6c], cl
movdqa xmm0, xmm1
xor byte [rbp - 0x6b], cl
mov dl, 0x92
xor byte [rbp - 0x6a], cl
xor dl, cl
xor byte [rbp - 0x69], cl
mov r8b, 0x8c
xor byte [rbp - 0x68], cl
xor r8b, cl
xor byte [rbp - 0x67], cl
mov r9b, 0x80
xor byte [rbp - 0x66], cl
xor r9b, cl
xor byte [rbp - 0x65], cl
mov r11b, 0x8f
xor byte [rbp - 0x64], cl
xor r11b, cl
xor byte [rbp - 0x63], cl
movzx esi, dil
xor byte [rbp - 0x62], cl
xor sil, cl
xor byte [rbp - 0x61], cl
movzx r14d, dil
xor dil, cl
psrldq xmm0, 1
xor r14b, cl
movd eax, xmm0
mov byte [rbp - 0x60], dl
lea rdx, [rbp - 0x6f]
mov byte [rbp - 0x5f], r8b
xor al, cl
mov byte [rbp - 0x5e], r9b
lea rcx, [0x140271d60]
mov byte [rbp - 0x6f], al
mov byte [rbp - 0x5d], r10b
mov byte [rbp - 0x5c], r11b
mov byte [rbp - 0x5b], bl
mov byte [rbp - 0x5a], dil
mov byte [rbp - 0x59], sil
mov byte [rbp - 0x58], r14b
call fcn.140017670
lea rdx, [fcn.1400178e0]
mov rcx, rax
call fcn.140014730
movdqa xmm1, xmmword [0x140050850]
mov r14, rax
movd ecx, xmm1
mov bl, 0x64
movdqu xmmword [rsp + 0x30], xmm1
mov dl, 0xab
mov r8b, 0xa5
xor byte [rsp + 0x32], cl
movdqa xmm0, xmm1
xor byte [rsp + 0x33], cl
mov r9b, 0xa1
xor byte [rsp + 0x34], cl
mov r10b, 0xa0
xor byte [rsp + 0x35], cl
mov r11b, 0xb5
xor byte [rsp + 0x36], cl
movzx edi, bl
xor byte [rsp + 0x37], cl
movzx esi, bl
xor byte [rsp + 0x38], cl
psrldq xmm0, 1
movd eax, xmm0
xor al, cl
xor byte [rsp + 0x39], cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x3a], cl
xor dl, cl
xor byte [rsp + 0x3b], cl
xor r8b, cl
xor byte [rsp + 0x3c], cl
xor r9b, cl
xor byte [rsp + 0x3d], cl
xor r10b, cl
xor byte [rsp + 0x3e], cl
xor r11b, cl
xor byte [rsp + 0x3f], cl
xor bl, cl
xor dil, cl
mov byte [rsp + 0x40], dl
xor sil, cl
mov byte [rsp + 0x41], r8b
lea rdx, [rsp + 0x31]
mov byte [rsp + 0x42], r9b
mov rcx, r14
mov byte [rsp + 0x43], r10b
mov byte [rsp + 0x44], r11b
mov byte [rsp + 0x45], bl
mov byte [rsp + 0x46], dil
mov byte [rsp + 0x47], sil
mov byte [rsp + 0x48], r12b
call fcn.140017670
lea rdx, [fcn.1400178e0]
mov rcx, rax
call fcn.140014730
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movdqa xmm1, xmmword [0x140050880]
lea rdx, [rsp + 0x51]
movdqa xmm2, xmmword [0x140050770]
movdqa xmm0, xmm1
movd ecx, xmm1
movdqu xmmword [rsp + 0x60], xmm2
mov byte [rsp + 0x70], r12b
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movdqu xmmword [rsp + 0x50], xmm1
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
psrldq xmm0, 1
movd eax, xmm0
xor al, cl
mov byte [rsp + 0x51], al
movd eax, xmm2
xor al, cl
lea rcx, [0x140271d60]
mov byte [rsp + 0x60], al
call fcn.140017670
lea rdx, [fcn.1400178e0]
mov rcx, rax
call fcn.140014730
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov ebx, dword [rbp + 8]
lea rcx, [rbp - 8]
call fcn.140014810
mov r8d, ebx
lea rcx, [rbp + 0x58]
mov rdx, rax
call fcn.14000d5d0
lea rcx, [rbp + 0x58]
call fcn.140014810
lea rcx, [rbp + 0xd8]
mov rbx, rax
call fcn.140014810
mov r8, rbx
lea rcx, [rbp + 0x1e0]
mov rdx, rax
call fcn.1400029a0
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x38]
call fcn.14000c810
lea rcx, [rbp + 0x38]
call fcn.140014810
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140014900
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x118]
call fcn.14000d870
lea rcx, [rbp - 0x70]
call fcn.1400148a0
mov r8b, 7
mov byte [rsp + 0x30], 0x62
movzx r10d, r8b
mov cl, 0xb
xor cl, 0x62
mov al, 0x16
mov dl, 0xf
mov byte [rsp + 0x32], cl
mov r9b, 0x42
lea rcx, [rbp + 0x118]
mov r11b, 0xc
xor r10b, 0x62
xor al, 0x62
mov byte [rsp + 0x36], r10b
xor dl, 0x62
mov byte [rsp + 0x31], al
xor r8b, 0x62
mov byte [rsp + 0x33], dl
xor r9b, 0x62
mov byte [rsp + 0x34], r8b
xor r11b, 0x62
mov byte [rsp + 0x35], r9b
mov bl, 6
mov byte [rsp + 0x37], r11b
xor edi, edi
xor bl, 0x62
mov byte [rsp + 0x38], bl
mov byte [rsp + 0x39], dil
call fcn.140014810
lea r8, [rsp + 0x31]
sub r8, rax
nop dword [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140012cc3
inc rax
test ecx, ecx
jne 0x140012cb0
test edx, edx
je 0x1400134f1
mov edx, 0x320
lea ecx, [rdx - 0x64]
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140006850
lea rcx, [0x140271d60]
call fcn.1400178e0
call fcn.140002480
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, 2
mov rcx, rbx
mov r9d, esi
mov dword [rsp + 0x20], esi
mov edx, eax
lea r8d, [rsi - 1]
call fcn.140002210
test eax, eax
jne 0x140012d86
mov dl, 0x3d
mov byte [rsp + 0x30], 0x5e
movzx r8d, dl
mov r10b, 0x2d
xor dl, 0x5e
movzx r11d, r10b
mov cl, 0x2b
mov byte [rsp + 0x33], dl
xor cl, 0x5e
lea rdx, [rsp + 0x31]
mov al, 0xd
mov byte [rsp + 0x32], cl
mov r9b, 0x3b
lea rcx, [0x140271d60]
xor al, 0x5e
xor r8b, 0x5e
xor r9b, 0x5e
mov byte [rsp + 0x31], al
xor r10b, 0x5e
mov byte [rsp + 0x34], r8b
xor r11b, 0x5e
mov byte [rsp + 0x35], r9b
xor ebx, ebx
mov byte [rsp + 0x36], r10b
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x38], bl
call fcn.140017670
mov rcx, rax
call fcn.1400178e0
call fcn.140002480
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r9d, 4
lea r8, [rbp + 0x830]
mov edx, 0x3efe81c
mov dword [rbp + 0x830], eax
mov rcx, rbx
call fcn.140001eb0
movdqa xmm1, xmmword [0x140050760]
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov byte [rsp + 0x40], dil
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
psrldq xmm0, 1
movd eax, xmm0
xor al, cl
lea rcx, [rsp + 0x31]
mov byte [rsp + 0x31], al
call fcn.140002950
mov edi, 0x70
mov dword [rbp + 0x848], edi
movzx ecx, word [0x140050242]
mov r11d, 0x39
movzx r13d, r11w
mov word [rsp + 0x50], di
movzx edi, si
mov r10d, 0x33
mov word [rbp + 0x830], r10w
xor di, 0x70
movzx ebx, word [rbp + 0x830]
lea eax, [r11 - 2]
xor bx, word [rbp + 0x848]
lea edx, [rax + 7]
movzx r10d, word [0x14005023a]
lea r9d, [r11 - 0x30]
movzx r12d, ax
mov word [rsp + 0x52], bx
movzx eax, word [0x140050234]
lea r8d, [r11 - 4]
movzx r11d, word [str.Game.exe]
xor ax, 0x70
movzx esi, r9w
mov word [rbp + 0x838], ax
movzx eax, word [0x140050236]
movzx r14d, r8w
movzx r9d, word [0x14005023c]
xor ax, 0x70
movzx r8d, word [0x14005023e]
movzx r15d, dx
movzx edx, word [0x140050240]
xor r11w, 0x70
mov word [rbp + 0x840], ax
xor r10w, 0x70
movzx eax, word [0x140050244]
xor r9w, 0x70
xor ax, 0x70
mov word [rsp + 0x54], di
mov edi, 0x70
xor r8w, 0x70
xor si, di
xor dx, 0x70
mov word [rsp + 0x56], si
xor cx, 0x70
mov esi, 0x3e
xor ax, di
xor si, di
mov word [rsp + 0x76], ax
mov word [rsp + 0x60], si
xor r14w, di
mov esi, 0x35
mov word [rsp + 0x58], r14w
xor si, di
xor r15w, di
xor r12w, di
mov word [rsp + 0x62], si
xor r13w, di
mov word [rsp + 0x5a], r15w
xor r11w, di
mov word [rsp + 0x5c], r12w
xor r10w, di
mov word [rsp + 0x5e], r13w
xor r9w, di
mov word [rsp + 0x6a], r11w
xor r8w, di
mov word [rsp + 0x6c], r10w
xor dx, di
mov word [rsp + 0x6e], r9w
xor cx, di
mov word [rsp + 0x70], r8w
movzx ebx, di
mov word [rsp + 0x72], dx
xor bx, di
mov word [rsp + 0x74], cx
mov word [rsp + 0x64], bx
movzx ebx, word [rbp + 0x838]
xor bx, di
mov word [rsp + 0x66], bx
movzx ebx, word [rbp + 0x840]
xor bx, di
xor esi, esi
mov word [rsp + 0x68], bx
mov word [rsp + 0x78], si
xor edx, edx
lea rcx, [rsp + 0x52]
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140012fe3
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea esi, [rdi - 0x6e]
jmp 0x140012e2b
lea rcx, [0x140271d60]
call fcn.1400178e0
movzx edx, word [0x140050240]
mov ecx, 0x4e
movzx eax, word [0x140050234]
movzx r15d, cx
movzx r12d, word [0x140050236]
xor ax, cx
movzx r11d, word [str.Game.exe]
xor dx, cx
movzx r10d, word [0x14005023a]
lea edi, [rcx - 0x45]
movzx r9d, word [0x14005023c]
lea r14d, [rcx - 0x43]
movzx r8d, word [0x14005023e]
xor r12w, cx
mov dword [rbp + 0x838], ecx
xor r11w, cx
xor r10w, cx
mov word [rsp + 0x50], cx
xor r9w, cx
mov word [rbp + 0x830], ax
movzx eax, word [0x140050244]
xor r8w, cx
movzx ecx, word [0x140050242]
xor ax, r15w
xor cx, r15w
mov r13d, 0xd
xor r13w, word [rbp + 0x838]
movzx ebx, si
mov word [rsp + 0x52], r13w
mov r13d, 0x3c
xor r13w, word [rbp + 0x838]
mov word [rsp + 0x54], r13w
mov r13d, 0x37
xor r13w, word [rbp + 0x838]
mov word [rsp + 0x56], r13w
mov r13d, r14d
xor r13w, word [rbp + 0x838]
mov word [rsp + 0x58], r13w
mov r13d, 0x4e
xor di, r13w
xor bx, r13w
mov word [rsp + 0x5c], di
mov edi, r13d
xor dx, di
mov word [rsp + 0x5a], bx
movzx ebx, word [rbp + 0x830]
xor cx, di
xor si, di
mov word [rsp + 0x72], dx
xor r14w, di
mov word [rsp + 0x74], cx
xor r15w, di
mov word [rsp + 0x60], si
xor bx, di
mov word [rsp + 0x62], r14w
xor r12w, di
mov word [rsp + 0x64], r15w
xor r11w, di
mov word [rsp + 0x66], bx
xor r10w, di
mov word [rsp + 0x68], r12w
xor r9w, di
mov word [rsp + 0x6a], r11w
xor r8w, di
mov word [rsp + 0x6c], r10w
xor ax, di
mov word [rsp + 0x6e], r9w
mov r13d, 7
mov word [rsp + 0x70], r8w
xor r13w, di
mov word [rsp + 0x76], ax
xor edi, edi
mov word [rsp + 0x5e], r13w
xor edx, edx
mov word [rsp + 0x78], di
lea rcx, [rsp + 0x52]
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [0x140273d58], rax
lea rcx, [0x140271d60]
call fcn.1400178e0
mov rdx, qword [0x140273d58]
test rdx, rdx
je 0x14001326b
mov r8b, 1
lea rcx, [0x140271480]
call fcn.140005380
mov rbx, qword [0x140273d58]
lea edx, [rdi + 9]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
lea rcx, [rsp + 0x50]
call fcn.1400056d0
lea r8, [0x140273d58]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x830]
call fcn.140017bf0
mov rdx, rax
lea rcx, [0x140273e18]
call fcn.140017c30
lea rcx, [rbp + 0x830]
call fcn.140014750
call fcn.1400059c0
lea rcx, [0x140271d60]
mov qword [0x140273d68], rax
call fcn.1400178e0
lea rcx, [rsp + 0x50]
call fcn.140005930
cmp qword [0x140273d58], rdi
je 0x14001326b
mov qword [rsp + 0x28], rdi
lea r8, [0x1400110a0]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x1400112b0]
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, 0x1b
mov dword [rbp + 0x848], edi
movzx edx, word [0x140050240]
mov r13d, 0x52
mov word [rsp + 0x50], di
mov r8d, 0x58
mov word [rbp + 0x830], r8w
xor dx, 0x1b
movzx ebx, word [rbp + 0x830]
xor bx, word [rbp + 0x848]
lea eax, [r13 + 3]
movzx r8d, word [0x14005023e]
lea ecx, [rax + 9]
movzx r15d, ax
mov word [rsp + 0x52], bx
movzx eax, word [0x140050234]
lea r9d, [r13 + 0x17]
xor ax, 0x1b
lea r10d, [r13 + 0x10]
mov word [rbp + 0x838], ax
lea r11d, [r13 + 0xa]
movzx eax, word [0x140050236]
movzx edi, r9w
movzx r9d, word [0x14005023c]
movzx esi, r10w
movzx r10d, word [0x14005023a]
xor ax, 0x1b
mov word [rbp + 0x840], ax
movzx r14d, cx
movzx eax, word [0x140050244]
movzx r12d, r11w
movzx r11d, word [str.Game.exe]
xor di, 0x1b
movzx ecx, word [0x140050242]
xor ax, 0x1b
xor r11w, 0x1b
mov word [rsp + 0x54], di
mov edi, 0x1b
xor r10w, 0x1b
xor si, di
xor r9w, 0x1b
mov word [rsp + 0x56], si
xor r8w, 0x1b
mov esi, 0x55
xor cx, 0x1b
xor si, di
xor ax, di
mov word [rsp + 0x60], si
xor r14w, di
xor r15w, di
mov word [rsp + 0x76], ax
xor r12w, di
mov word [rsp + 0x58], r14w
xor r13w, di
mov word [rsp + 0x5a], r15w
xor r11w, di
mov word [rsp + 0x5c], r12w
xor r10w, di
mov word [rsp + 0x5e], r13w
xor r9w, di
mov word [rsp + 0x6a], r11w
xor r8w, di
mov word [rsp + 0x6c], r10w
xor dx, di
mov word [rsp + 0x6e], r9w
xor cx, di
mov word [rsp + 0x70], r8w
movzx ebx, di
mov word [rsp + 0x72], dx
xor bx, di
mov word [rsp + 0x74], cx
mov word [rsp + 0x64], bx
mov esi, 0x5e
movzx ebx, word [rbp + 0x838]
xor si, di
xor bx, di
mov word [rsp + 0x62], si
mov word [rsp + 0x66], bx
movzx ebx, word [rbp + 0x840]
xor bx, di
xor eax, eax
mov word [rsp + 0x68], bx
mov word [rsp + 0x78], ax
xor edx, edx
lea rcx, [rsp + 0x52]
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140013459
lea ecx, [rdi + 8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140013449
mov rcx, qword [0x140273e18]
call fcn.140006750
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140013276
lea rcx, [rbp + 0x118]
call fcn.1400148a0
lea rcx, [rbp + 0x38]
call fcn.1400148a0
lea rcx, [rbp + 0x58]
call fcn.1400148a0
mov rcx, qword [0x140273e18]
call fcn.140006750
lea rcx, [rbp + 0x18]
call fcn.1400148a0
lea rcx, [rbp + 0x138]
call fcn.1400148a0
lea rcx, [rbp + 0x158]
call fcn.1400148a0
lea rcx, [rbp - 8]
call fcn.1400148a0
lea rcx, [rbp + 0x98]
call fcn.1400148a0
lea rcx, [rbp + 0xb8]
call fcn.1400148a0
lea rcx, [rbp + 0xd8]
call fcn.1400148a0
lea rcx, [rbp + 0xf8]
call fcn.1400148a0
add rsp, 0x8e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movdqa xmm1, xmmword [0x140050720]
mov r10b, 0x81
movd r8d, xmm1
movzx r14d, r10b
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x55], 0
mov cl, 0x88
xor byte [rbp - 0x6e], r8b
movdqa xmm0, xmm1
xor byte [rbp - 0x6d], r8b
xor cl, r8b
xor byte [rbp - 0x6c], r8b
mov dl, 0x8f
xor byte [rbp - 0x6b], r8b
xor dl, r8b
xor byte [rbp - 0x6a], r8b
mov r9b, 0x85
xor byte [rbp - 0x69], r8b
mov r11b, 0x82
xor byte [rbp - 0x68], r8b
xor r9b, r8b
xor byte [rbp - 0x67], r8b
xor r10b, r8b
xor byte [rbp - 0x66], r8b
xor r11b, r8b
xor byte [rbp - 0x65], r8b
xor r14b, r8b
xor byte [rbp - 0x64], r8b
mov bl, 0x98
xor byte [rbp - 0x63], r8b
xor bl, r8b
xor byte [rbp - 0x62], r8b
mov dil, 0x87
xor byte [rbp - 0x61], r8b
xor dil, r8b
psrldq xmm0, 1
mov sil, 0x84
movd eax, xmm0
xor sil, r8b
mov byte [rbp - 0x60], cl
mov r15b, 0x9e
mov byte [rbp - 0x5f], dl
lea rcx, [0x140271d60]
xor al, r8b
mov byte [rbp - 0x5e], r9b
xor r15b, r8b
mov byte [rbp - 0x6f], al
mov r12b, 0x93
mov byte [rbp - 0x5d], r10b
xor r12b, r8b
mov byte [rbp - 0x5c], r11b
lea rdx, [rbp - 0x6f]
mov byte [rbp - 0x5b], bl
mov byte [rbp - 0x5a], dil
mov byte [rbp - 0x59], sil
mov byte [rbp - 0x58], r14b
mov byte [rbp - 0x57], r15b
mov byte [rbp - 0x56], r12b
call fcn.140017670
mov rcx, rax
call fcn.1400178e0
lea rcx, [rbp + 0x78]
call fcn.140014940
lea rcx, [rsp + 0x50]
call fcn.140014940
movdqa xmm1, xmmword [0x140050870]
mov r8b, 0xbd
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov dl, 0xa3
mov r9b, 0xbf
psrldq xmm0, 1
movzx r10d, r8b
movd eax, xmm0
mov r11b, 0xb9
movzx ebx, r8b
mov dil, 0xb7
xor al, cl
xor byte [rsp + 0x32], cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x33], cl
xor dl, cl
xor byte [rsp + 0x34], cl
xor r8b, cl
xor byte [rsp + 0x35], cl
xor r9b, cl
xor byte [rsp + 0x36], cl
xor r10b, cl
xor byte [rsp + 0x37], cl
xor r11b, cl
xor byte [rsp + 0x38], cl
xor bl, cl
xor byte [rsp + 0x39], cl
xor dil, cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
lea rcx, [0x140271d60]
mov byte [rsp + 0x40], dl
lea rdx, [rsp + 0x31]
mov byte [rsp + 0x41], r8b
mov byte [rsp + 0x42], r9b
mov byte [rsp + 0x43], r10b
mov byte [rsp + 0x44], r11b
mov byte [rsp + 0x45], bl
mov byte [rsp + 0x46], dil
mov byte [rsp + 0x47], 0
call fcn.140017670
mov rcx, rax
call fcn.1400178e0
lea rdx, [rbp + 0x78]
lea rcx, [0x140271fa0]
call fcn.140019260
mov ebx, dword [rbp + 8]
lea rcx, [rbp - 8]
call fcn.140014810
mov r8d, ebx
lea rcx, [rbp + 0x178]
mov rdx, rax
call fcn.14000d5d0
lea rcx, [rbp + 0x78]
call fcn.140014810
lea rcx, [rbp + 0x178]
mov rbx, rax
call fcn.140014810
movdqa xmm1, xmmword [0x1400504f0]
mov r8, rax
movdqa xmm2, xmmword [0x1400504d0]
movdqa xmm0, xmm1
movdqa xmm3, xmmword [0x1400504e0]
mov dl, 0x13
movdqa xmm4, xmmword [0x140050700]
movd ecx, xmm1
movdqu xmmword [rbp - 0x50], xmm1
xor byte [rbp - 0x4e], cl
xor byte [rbp - 0x4d], cl
xor byte [rbp - 0x4c], cl
xor byte [rbp - 0x4b], cl
xor byte [rbp - 0x4a], cl
xor byte [rbp - 0x49], cl
xor byte [rbp - 0x48], cl
xor byte [rbp - 0x47], cl
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
psrldq xmm0, 1
movd eax, xmm0
movdqu xmmword [rbp - 0x40], xmm2
xor al, cl
mov byte [rbp - 0x4f], al
movd eax, xmm2
movdqu xmmword [rbp - 0x30], xmm3
xor al, cl
mov byte [rbp - 0x40], al
movdqu xmmword [rbp - 0x20], xmm4
xor byte [rbp - 0x3f], cl
xor dl, cl
xor byte [rbp - 0x3e], cl
mov r9, rbx
xor byte [rbp - 0x3d], cl
xor byte [rbp - 0x3c], cl
xor byte [rbp - 0x3b], cl
xor byte [rbp - 0x3a], cl
xor byte [rbp - 0x39], cl
xor byte [rbp - 0x38], cl
xor byte [rbp - 0x37], cl
xor byte [rbp - 0x36], cl
xor byte [rbp - 0x35], cl
xor byte [rbp - 0x34], cl
xor byte [rbp - 0x33], cl
xor byte [rbp - 0x32], cl
xor byte [rbp - 0x31], cl
xor byte [rbp - 0x2f], cl
xor byte [rbp - 0x2e], cl
xor byte [rbp - 0x2d], cl
xor byte [rbp - 0x2c], cl
xor byte [rbp - 0x2b], cl
xor byte [rbp - 0x2a], cl
xor byte [rbp - 0x29], cl
xor byte [rbp - 0x28], cl
xor byte [rbp - 0x27], cl
xor byte [rbp - 0x26], cl
xor byte [rbp - 0x25], cl
xor byte [rbp - 0x24], cl
xor byte [rbp - 0x23], cl
xor byte [rbp - 0x22], cl
xor byte [rbp - 0x21], cl
xor byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
xor byte [rbp - 0x19], cl
xor byte [rbp - 0x18], cl
xor byte [rbp - 0x17], cl
xor byte [rbp - 0x16], cl
xor byte [rbp - 0x15], cl
xor byte [rbp - 0x14], cl
xor byte [rbp - 0x13], cl
xor byte [rbp - 0x12], cl
xor byte [rbp - 0x11], cl
movd eax, xmm3
mov byte [rbp - 0x10], dl
lea rdx, [rbp - 0x4f]
mov byte [rbp - 0xf], 0
xor al, cl
mov byte [rbp - 0x30], al
movd eax, xmm4
xor al, cl
lea rcx, [rbp + 0x5e0]
mov byte [rbp - 0x20], al
call fcn.1400029a0
lea rdx, [rbp + 0x5e0]
lea rcx, [rbp + 0x198]
call fcn.14000c810
lea rcx, [rbp + 0x198]
call fcn.140014810
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140014900
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x1b8]
call fcn.14000d870
lea rcx, [rbp - 0x70]
call fcn.1400148a0
movdqa xmm1, xmmword [0x140050740]
mov r10b, 0x26
movdqu xmmword [rsp + 0x30], xmm1
movzx edi, r10b
mov dl, 0x2f
movdqa xmm0, xmm1
mov r8b, 0x2a
mov r9b, 0x20
mov r11b, 0x2d
mov bl, 0x30
movd ecx, xmm1
psrldq xmm0, 1
movd eax, xmm0
xor byte [rsp + 0x32], cl
xor dl, cl
xor byte [rsp + 0x33], cl
xor r8b, cl
xor byte [rsp + 0x34], cl
xor al, cl
xor byte [rsp + 0x35], cl
xor r9b, cl
xor byte [rsp + 0x36], cl
xor r10b, cl
xor byte [rsp + 0x37], cl
xor r11b, cl
xor byte [rsp + 0x38], cl
xor bl, cl
xor byte [rsp + 0x39], cl
xor dil, cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
lea rcx, [rbp + 0x1b8]
mov byte [rsp + 0x31], al
mov byte [rsp + 0x40], dl
mov byte [rsp + 0x41], r8b
mov byte [rsp + 0x42], r9b
mov byte [rsp + 0x43], r10b
mov byte [rsp + 0x44], r11b
mov byte [rsp + 0x45], bl
mov byte [rsp + 0x46], dil
mov byte [rsp + 0x47], 0
call fcn.140014810
lea r8, [rsp + 0x31]
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140013943
inc rax
test ecx, ecx
jne 0x140013930
test edx, edx
jne 0x1400139f4
movdqa xmm1, xmmword [0x140050830]
mov dl, 0x88
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8b, 0x85
mov byte [rsp + 0x42], 0
xor dl, cl
psrldq xmm0, 1
xor byte [rsp + 0x32], cl
xor r8b, cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
movd eax, xmm0
mov byte [rsp + 0x40], dl
lea rdx, [rsp + 0x31]
mov byte [rsp + 0x41], r8b
xor al, cl
lea rcx, [0x140271d60]
mov byte [rsp + 0x31], al
call fcn.140017670
lea rdx, [fcn.1400178e0]
mov rcx, rax
call fcn.140014730
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov cl, 0xce
mov byte [rbp + 0x830], 0x36
xor cl, 0x36
mov dl, 0xde
xor dl, 0x36
mov byte [rbp + 0x832], cl
mov al, 0xf8
mov byte [rbp + 0x833], dl
mov r8b, 0xd7
lea rdx, [rbp + 0x831]
mov r9b, 0xdc
lea rcx, [0x140271d60]
mov r10b, 0xd6
xor r11d, r11d
xor al, 0x36
mov byte [rbp + 0x837], r11b
xor r8b, 0x36
mov byte [rbp + 0x831], al
xor r9b, 0x36
mov byte [rbp + 0x834], r8b
xor r10b, 0x36
mov byte [rbp + 0x835], r9b
mov byte [rbp + 0x836], r10b
call fcn.140017670
lea rdx, [fcn.1400178e0]
mov rcx, rax
call fcn.140014730
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]