Function at 0x140058320
Capabilities:
Create thread
Encode data using xor
Enumerate process modules
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
push rbx
push rdi
push r13
lea rbp, [rsp - 0x308]
sub rsp, 0x408
mov rax, qword [0x14017df80]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
xor edx, edx
movaps xmmword [rsp + 0x3f0], xmm6
lea rcx, str.grcWindow
call qword [sym.imp.USER32.dll_FindWindowA]
movups xmm0, xmmword [str.tZBPh]
mov edi, dword [reloc.WS2_32.dll_accept]
xor r13d, r13d
mov qword [0x1401d3f68], rax
mov r8d, r13d
mov eax, dword [0x14013dd28]
mov dword [rsp + 0x40], eax
movzx eax, byte [0x14013dd2c]
mov byte [rsp + 0x44], al
movups xmmword [rsp + 0x30], xmm0
cmp edi, 2
jl 0x1400584d7
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x1400583d0
cmp r8d, 0x15
jge 0x140058521
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x15
jl 0x1400584f0
xorps xmm0, xmm0
mov qword [rsp + 0x60], r13
mov rbx, 0xffffffffffffffff
mov qword [rsp + 0x68], r13
movups xmmword [rsp + 0x50], xmm0
mov r8, rbx
lea rax, [rsp + 0x30]
inc r8
cmp byte [rax + r8], r13b
jne 0x140058542
mov qword [rsp + 0x438], r12
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x440], r14
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x400], r15
call fcn.1400025c0
lea rcx, [rsp + 0x50]
call fcn.140039c00
mov r8d, r13d
test al, al
je 0x140058776
mov eax, dword [0x14013dd28]
mov r14d, 0x247f840
mov dword [rsp + 0x40], eax
mov r15d, 0x1efd4c8
movzx eax, byte [0x14013dd2c]
mov r12d, 0x2087780
mov byte [rsp + 0x44], al
movups xmm0, xmmword [str.tZBPh]
movups xmmword [rsp + 0x30], xmm0
cmp edi, 2
jl 0x140058707
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x140058600
cmp r8d, 0x15
jge 0x140058751
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x15
jl 0x140058720
lea rdx, [rsp + 0x30]
call fcn.14005de60
mov qword [0x1401d26b8], 0x10d8
mov qword [0x1401d3730], 0x14b8
jmp 0x14005a47a
movzx eax, word [0x14013d4e0]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14013d4e2]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_n_r_fbyk]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013d4d8]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x1400588f7
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x1400587f0
cmp r8d, 0x1b
jge 0x140058941
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140058910
xorps xmm0, xmm0
mov qword [rsp + 0x60], r13
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x30]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140058960
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400025c0
lea rcx, [rsp + 0x50]
call fcn.140039c00
mov r8d, r13d
test al, al
je 0x140058b86
movzx eax, word [0x14013d4e0]
mov r14d, 0x24c8858
mov word [rsp + 0x48], ax
mov r15d, 0x1ec3828
movzx eax, byte [0x14013d4e2]
mov r12d, 0x1f6a7e0
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_n_r_fbyk]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013d4d8]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140058b17
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140058a10
cmp r8d, 0x1b
jge 0x140058b61
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140058b30
lea rdx, [rsp + 0x30]
call fcn.14005de60
mov qword [0x1401d26b8], 0x10d8
mov qword [0x1401d3730], 0x14e0
jmp 0x14005a47a
movzx eax, word [0x14013dd10]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14013dd12]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_v]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013dd08]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140058d07
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140058c00
cmp r8d, 0x1b
jge 0x140058d51
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140058d20
xorps xmm0, xmm0
mov qword [rsp + 0x60], r13
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x30]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140058d70
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400025c0
lea rcx, [rsp + 0x50]
call fcn.140039c00
mov r8d, r13d
test al, al
je 0x140058fbc
movzx eax, word [0x14013dd10]
mov r14d, 0x24e6d90
mov word [rsp + 0x48], ax
mov r15d, 0x1ee18a8
movzx eax, byte [0x14013dd12]
mov r12d, 0x1f888c0
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_v]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013dd08]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140058f27
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140058e20
cmp r8d, 0x1b
jge 0x140058f71
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140058f40
lea rdx, [rsp + 0x30]
call fcn.14005de60
mov rdx, qword [0x1401d3f40]
lea r8, [rbp + 0x1c0]
mov rcx, qword [0x1401d3f90]
mov r9d, 8
mov qword [0x1401d26b8], 0x10d8
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [0x1401d3730], 0x14e0
jmp 0x14005a47a
movzx eax, word [0x14013dfc0]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14013dfc2]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_t_f]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [str.0__54f_2.L]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140059137
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140059030
cmp r8d, 0x1b
jge 0x140059181
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140059150
xorps xmm0, xmm0
mov qword [rsp + 0x60], r13
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x30]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400591a0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400025c0
lea rcx, [rsp + 0x50]
call fcn.140039c00
mov r8d, r13d
test al, al
je 0x1400593cb
movzx eax, word [0x14013dfc0]
mov r14d, 0x252dcd8
mov word [rsp + 0x48], ax
mov r15d, 0x1f05208
movzx eax, byte [0x14013dfc2]
mov r12d, 0x1f9e9f0
mov qword [0x1401d26b8], 0x10d8
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_t_f]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [str.0__54f_2.L]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140059367
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140059260
cmp r8d, 0x1b
jge 0x1400593b1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140059380
lea rdx, [rsp + 0x30]
call fcn.14005de60
mov qword [0x1401d3730], 0x14e0
jmp 0x14005a47a
movzx eax, word [0x14013dd48]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14013dd4a]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013dd40]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140059547
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140059440
cmp r8d, 0x1b
jge 0x140059591
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140059560
xorps xmm0, xmm0
mov qword [rsp + 0x60], r13
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x30]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400595b0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400025c0
lea rcx, [rsp + 0x50]
call fcn.140039c00
mov r8d, r13d
test al, al
je 0x1400597d6
movzx eax, word [0x14013dd48]
mov r14d, 0x25667e8
mov word [rsp + 0x48], ax
mov r15d, 0x1f2e7a8
movzx eax, byte [0x14013dd4a]
mov r12d, 0x1fd6f70
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013dd40]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140059767
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140059660
cmp r8d, 0x1b
jge 0x1400597b1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140059780
lea rdx, [rsp + 0x30]
call fcn.14005de60
mov qword [0x1401d26b8], 0x10d8
mov qword [0x1401d3730], 0x1530
jmp 0x14005a47a
movzx eax, word [0x14013d448]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14013d44a]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_f_n]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013d440]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140059957
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140059850
cmp r8d, 0x1b
jge 0x1400599a1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140059970
xorps xmm0, xmm0
mov qword [rsp + 0x60], r13
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x30]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400599c0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400025c0
lea rcx, [rsp + 0x50]
call fcn.140039c00
mov r8d, r13d
test al, al
je 0x140059c18
movzx eax, word [0x14013d448]
mov r14d, 0x2567db0
mov word [rsp + 0x48], ax
mov r15d, 0x1f77ef0
movzx eax, byte [0x14013d44a]
mov r12d, 0x1fd8570
mov qword [0x1401d26b8], 0x10d8
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_f_n]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013d440]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140059b87
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140059a80
cmp r8d, 0x1b
jge 0x140059bd1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140059ba0
lea rdx, [rsp + 0x30]
call fcn.14005de60
mov rdx, qword [0x1401d3f40]
lea r8, [rbp + 0x1d0]
mov rcx, qword [0x1401d3f90]
add rdx, 0x20d9868
mov r9d, 8
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [0x1401d3730], 0x1530
jmp 0x14005a47a
movzx eax, word [0x14013dde8]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14013ddea]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_f]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013dde0]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140059d97
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140059c90
cmp r8d, 0x1b
jge 0x140059de1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140059db0
xorps xmm0, xmm0
mov qword [rsp + 0x60], r13
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x30]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140059e00
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400025c0
lea rcx, [rsp + 0x50]
call fcn.140039c00
mov r8d, r13d
test al, al
je 0x14005a02b
movzx eax, word [0x14013dde8]
mov r14d, 0x26684d8
mov word [rsp + 0x48], ax
mov r15d, 0x20304c8
movzx eax, byte [0x14013ddea]
mov r12d, 0x20d8c90
mov qword [0x1401d26b8], 0x10d8
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.tZBPhZ_v_f]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013dde0]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x140059fcb
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140059ec0
cmp r8d, 0x1b
jge 0x14005a011
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140059fe0
lea rdx, [rsp + 0x30]
call fcn.14005de60
mov qword [0x1401d3730], 0x1530
jmp 0x14005a47a
movzx eax, word [0x14013d490]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14013d492]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [0x14013d478]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013d488]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x14005a1ab
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14005a0a0
cmp r8d, 0x1b
jge 0x14005a1f1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x14005a1c0
xorps xmm0, xmm0
mov qword [rsp + 0x60], r13
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x30]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], r13b
jne 0x14005a210
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400025c0
lea rcx, [rsp + 0x50]
call fcn.140039c00
test al, al
je 0x14005a46b
mov rdx, qword [0x1401d3f40]
lea r8, [rbp + 0x1c0]
mov rcx, qword [0x1401d3f90]
mov r9d, 8
mov byte [0x1401d24be], 1
mov qword [0x1401d26b8], 0x10b8
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, word [0x14013d490]
mov r14d, 0x254d448
mov word [rsp + 0x48], ax
mov r15d, 0x1f5b820
movzx eax, byte [0x14013d492]
mov r12d, 0x1fbc100
mov byte [rsp + 0x4a], al
mov r8d, r13d
movups xmm0, xmmword [0x14013d478]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x14013d488]
movsd qword [rsp + 0x40], xmm0
cmp edi, 2
jl 0x14005a40b
movdqa xmm0, xmmword [str.2222222222222222]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x14013e3e0]
movdqa xmm4, xmmword [0x14013e6b0]
movdqa xmm6, xmmword [0x14013e430]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14013e500]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14005a300
cmp r8d, 0x1b
jge 0x14005a451
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x14005a420
lea rdx, [rsp + 0x30]
call fcn.14005de60
mov qword [0x1401d3730], 0x150c
jmp 0x14005a47a
mov r14d, dword [rsp + 0x70]
mov r15d, dword [rsp + 0x70]
mov r12d, dword [rsp + 0x70]
mov rcx, qword [0x1401d3f68]
movaps xmm6, xmmword [rsp + 0x3f0]
test rcx, rcx
jne 0x14005a4b3
lea r9d, [rcx + 0x10]
lea r8, str.TD_Cheats
lea rdx, str.Could_not_find_FiveM_process.
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x430], rsi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rsp + 0x70]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
cmp qword [0x1401d4020], 0xf
lea rdi, [0x1401d4008]
mov edx, dword [rsp + 0x70]
mov ecx, Ordinal_26
cmova rdi, qword [0x1401d4008]
mov rsi, r13
mov qword [0x1401d3f90], rax
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14005a558
mov r8, rdi
lea rdx, str.Failed_to_get__s__invalid_handle_value
lea rcx, [rbp + 0x1e0]
call fcn.140060010
xor r9d, r9d
lea r8, str.ERROR
lea rdx, [rbp + 0x1e0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14005a5ce
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x238
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x14005a5c5
nop dword [rax]
nop dword [rax + rax]
mov rdx, rdi
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
je 0x14005a5ab
lea rdx, [rbp - 0x80]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x14005a580
jmp 0x14005a5c5
mov rax, qword [rbp - 0x58]
mov rsi, qword [rbp - 0x68]
mov qword [rsp + 0x38], rax
mov eax, dword [rbp - 0x60]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmm0, xmmword [rsp + 0x30]
lea r8, [rbp + 0x1d0]
mov rcx, qword [0x1401d3f90]
movsd xmm1, qword [rsp + 0x40]
mov r9d, 8
mov edx, r15d
add rdx, rsi
movsd qword [0x1401d3f50], xmm1
movups xmmword [0x1401d3f40], xmm0
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1d0]
lea r8, [rbp + 0x1c0]
mov rcx, qword [0x1401d3f90]
mov r9d, 8
mov edx, r14d
add rdx, qword [0x1401d3f40]
mov qword [0x1401d3f88], rax
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1c0]
lea r8, [rbp + 0x1d0]
mov rcx, qword [0x1401d3f90]
mov r9d, 8
mov edx, r12d
add rdx, qword [0x1401d3f40]
mov qword [0x1401d3f58], rax
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1401d3f58]
lea r8, [rbp + 0x1c0]
mov rax, qword [rbp + 0x1d0]
add rdx, 8
mov rcx, qword [0x1401d3f90]
mov r9d, 8
mov qword [0x1401d2ec0], rax
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1c0]
mov qword [0x1401d2ee0], rax
call fcn.14004a8d0
cmp qword [0x1401d26a0], r13
mov rsi, qword [rsp + 0x430]
jne 0x14005a6e5
mov eax, 1
jmp 0x14005a7b6
mov qword [rsp + 0x28], r13
lea r8, [0x1400582c0]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14004a4a0
mov rcx, qword [0x1401d26a0]
call fcn.14008cec0
test eax, eax
jne 0x14005a7b1
nop dword [rax]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x1401d3f68]
mov rcx, qword [0x1401d2f08]
je 0x14005a750
cmp rax, rcx
je 0x14005a750
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x14005a798
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x1401d373c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14005a798
cmp byte [reloc.WS2_32.dll_accept], r13b
mov edx, 0x2000d
mov rcx, qword [0x1401d26a0]
sete al
movzx r8d, al
xor r8d, 1
mov byte [reloc.WS2_32.dll_accept], al
call fcn.14008e240
call fcn.140055710
mov rcx, qword [0x1401d26a0]
call fcn.14008cec0
test eax, eax
je 0x14005a720
call fcn.14004ac90
mov r15, qword [rsp + 0x400]
mov r14, qword [rsp + 0x440]
mov r12, qword [rsp + 0x438]
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.140102580
add rsp, 0x408
pop r13
pop rdi
pop rbx
pop rbp
ret