Function at 0x14003ef90
Capabilities:
Create directory
Delete registry value
Encode data using xor
Execute command
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x46a8]
mov eax, 0x47a8
call fcn.140049770
sub rsp, rax
movaps xmmword [rsp + 0x4790], xmm6
movaps xmmword [rsp + 0x4780], xmm7
movaps xmmword [rsp + 0x4770], xmm8
movaps xmmword [rsp + 0x4760], xmm9
lea r9, str.Injecting_
mov edx, 4
mov r8d, 0x1388
lea rcx, [rbp + 0x640]
call fcn.14003bc00
mov rax, qword [0x140179050]
cmp rax, qword [0x140179058]
je 0x14003f024
mov r8d, 0x2010
lea rdx, [rbp + 0x640]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140179050], 0x2010
jmp 0x14003f033
lea r8, [rbp + 0x640]
mov rdx, rax
call fcn.1400484f0
lea rcx, [rbp + 0x2e8]
call fcn.14003d0a0
nop
mov edx, 0x14
lea ecx, [rdx - 0x10]
call fcn.14003ee10
mov edx, eax
lea rcx, [rbp + 0x268]
call fcn.14003cfc0
mov rbx, rax
lea r14, [rbp + 0x2e8]
cmp qword [rbp + 0x300], 0x10
cmovae r14, qword [rbp + 0x2e8]
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
mov rdi, qword [rbp + 0x2f8]
cmp rdi, rax
ja 0x14003f0fc
lea rax, [rdi + r8]
mov qword [rbx + 0x10], rax
mov rsi, rbx
cmp rcx, 0x10
jb 0x14003f0a3
mov rsi, qword [rbx]
lea r12, [rdi + r14]
cmp r12, rsi
jbe 0x14003f0c7
lea rax, [rsi + r8]
cmp r14, rax
ja 0x14003f0c7
cmp rsi, r14
ja 0x14003f0bf
xor r15d, r15d
jmp 0x14003f0ca
mov r15, rsi
sub r15, r14
jmp 0x14003f0ca
mov r15, rdi
inc r8
lea rcx, [rdi + rsi]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
mov rdx, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
sub rdi, r15
lea rdx, [r15 + r12]
lea rcx, [rsi + r15]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14003f114
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r14
mov rdx, rdi
mov rcx, rbx
call fcn.140048730
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x40], xmm1
xor edi, edi
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], dil
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x14003f187
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f182
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f182
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x278], xmm0
mov byte [rbp + 0x268], dil
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r8, qword [rbp - 0x50]
add r8, qword [rbp - 0x40]
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
lea rcx, [rbp + 0x2c8]
call fcn.1400471c0
nop
lea rcx, [rbp + 0x2c8]
cmp qword [rbp + 0x2e0], 8
cmovae rcx, qword [rbp + 0x2c8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14003f437
movups xmm0, xmmword [0x140170730]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x140170740]
movups xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [0x140170750]
movups xmmword [rbp + 0x50], xmm0
mov eax, dword [0x140170760]
mov dword [rbp + 0x60], eax
movzx eax, byte [0x140170764]
mov byte [rbp + 0x64], al
mov r8d, edi
cmp dword [0x140179008], 2
jl 0x14003f38f
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
mov esi, 5
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
mov r14d, 0x1f
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp + 0x34]
mov edx, dword [rbp - 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x14003f280
cmp r8d, 0x35
jge 0x14003f3d3
movsxd rax, r8d
lea r9, [rbp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x14003f3a0
lea r9, [rbp + 0x30]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x640]
call fcn.14003bc00
mov rax, qword [0x140179050]
cmp rax, qword [0x140179058]
je 0x14003f423
mov r8d, 0x2010
lea rdx, [rbp + 0x640]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140179050], 0x2010
jmp 0x1400433a6
lea r8, [rbp + 0x640]
mov rdx, rax
call fcn.1400484f0
jmp 0x1400433a6
mov edx, 8
lea ecx, [rdx - 5]
call fcn.14003ee10
mov edx, eax
lea rcx, [rbp + 0x288]
call fcn.14003cfc0
mov rdi, rax
movabs rbx, 0x7fffffffffffffff
mov rcx, rbx
mov rdx, qword [rbp - 0x40]
sub rcx, rdx
cmp rcx, 1
jb 0x1400434cb
lea r9, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r9, qword [rbp - 0x50]
mov qword [rsp + 0x30], 1
lea rsi, [0x14016f998]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x30]
call fcn.140048070
nop
mov r9, rdi
lea r8, [rbp - 0x30]
lea rcx, [rbp + 0x368]
call fcn.140047e70
nop
mov r8d, 4
lea rdx, str..exe
lea rcx, [rbp + 0x368]
call fcn.140046c50
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x380]
cmp rdx, 0x10
jb 0x14003f547
inc rdx
mov rcx, qword [rbp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f542
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f542
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x378], xmm0
mov byte [rbp + 0x368], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14003f59d
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f597
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f597
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 0x10
jb 0x14003f5e1
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f5dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f5dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x298], xmm0
mov byte [rbp + 0x288], 0
mov edx, 0xb
lea ecx, [rdx - 5]
call fcn.14003ee10
mov edx, eax
lea rcx, [rbp + 0x308]
call fcn.14003cfc0
mov rdi, rax
mov rcx, rbx
mov rdx, qword [rbp - 0x40]
sub rcx, rdx
cmp rcx, 1
jb 0x1400434d1
lea r9, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r9, qword [rbp - 0x50]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x30]
call fcn.140048070
nop
mov r9, rdi
lea r8, [rbp - 0x30]
lea rcx, [rbp + 0x388]
call fcn.140047e70
nop
mov r8d, 4
lea rdx, str..sys
lea rcx, [rbp + 0x388]
call fcn.140046c50
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xor edi, edi
mov qword [rbp], rdi
mov qword [rbp + 8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov rdx, qword [rbp + 0x3a0]
cmp rdx, 0x10
jb 0x14003f6f5
inc rdx
mov rcx, qword [rbp + 0x388]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f6f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f6f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x398], xmm0
mov byte [rbp + 0x388], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14003f74b
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f745
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f745
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x320]
cmp rdx, 0x10
jb 0x14003f78f
inc rdx
mov rcx, qword [rbp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f78a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f78a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x318], xmm0
movups xmm0, xmmword [0x14016fce0]
movups xmmword [rbp + 0x30], xmm0
movups xmm0, xmmword [0x14016fd00]
movups xmm1, xmmword [0x14016fcf0]
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x40], xmm1
movzx eax, word [0x14016fd30]
movups xmm0, xmmword [0x14016fd20]
movups xmm1, xmmword [0x14016fd10]
mov word [rbp + 0x80], ax
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x60], xmm1
mov byte [rbp + 0x308], 0
mov r8d, edi
mov esi, 5
lea r14d, [rsi + 0x1a]
mov r15d, dword [0x140179008]
cmp r15d, 2
jl 0x14003f939
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm9, xmmword [0x140170cd0]
lea rcx, [rbp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x28
jl 0x14003f840
cmp r8d, 0x29
jge 0x14003f987
movsxd rax, r8d
lea r9, [rbp + 0x30]
lea r9, [r9 + rax*2]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x37
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x29
jl 0x14003f950
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.14003d280
test al, al
je 0x1400430d2
movups xmm0, xmmword [0x14016fec0]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x14016fed0]
movups xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [0x14016fee0]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [0x14016fef0]
movups xmmword [rbp + 0x60], xmm1
movups xmm0, xmmword [0x14016ff00]
movups xmmword [rbp + 0x70], xmm0
cmp r15d, 2
jl 0x14003fb01
movdqa xmm5, xmmword [0x140170c70]
mov edx, edi
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm9, xmmword [0x140170cd0]
lea rcx, [rbp + 0x30]
nop dword [rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x28
jl 0x14003fa10
jmp 0x14003fb47
lea r9, [rbp + 0x30]
mov r8d, edi
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x37
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x28
jl 0x14003fb10
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x30]
call fcn.14003d280
test al, al
je 0x1400430d2
mov rcx, qword [rbp + 0x20]
sub rbx, rcx
cmp rbx, 1
jb 0x1400434c5
lea rax, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae rax, qword [rbp + 0x10]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea r9, [0x14016fa14]
lea rcx, [rbp + 0x3a8]
call fcn.140048070
nop
mov r8d, 3
lea rdx, [0x14016fa18]
lea rcx, [rbp + 0x3a8]
call fcn.140046c50
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x218], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x208], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x218], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
lea rcx, [rbp + 0x208]
call fcn.140046c50
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x14016fa14]
lea rcx, [rbp - 0x70]
call fcn.140046c50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14003fcb1
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fcac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fcac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0x220]
cmp rdx, 0x10
jb 0x14003fd06
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fd01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fd01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x218], xmm0
mov byte [rbp + 0x208], 0
mov rdx, qword [rbp + 0x3c0]
cmp rdx, 0x10
jb 0x14003fd61
inc rdx
mov rcx, qword [rbp + 0x3a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fd5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fd5c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x3b8], xmm0
mov byte [rbp + 0x3a8], 0
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae r8, qword [rbp + 0x10]
add r8, qword [rbp + 0x20]
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae rdx, qword [rbp + 0x10]
lea rcx, [rbp + 0x468]
call fcn.1400471c0
nop
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r8, qword [rbp - 0x50]
add r8, qword [rbp - 0x40]
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
lea rcx, [rbp + 0x448]
call fcn.1400471c0
nop
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
add r8, rdx
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rdx, qword [rbp - 0x10]
lea rcx, [rbp + 0x428]
call fcn.1400471c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x328], xmm0
movdqa xmm1, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x338], xmm1
mov byte [rbp + 0x328], 0
lea rdx, [rbp + 0x448]
cmp qword [rbp + 0x460], 8
cmovae rdx, qword [rbp + 0x448]
lea rcx, [rbp + 0x268]
call fcn.140046560
nop
lea rdx, [rbp + 0x428]
cmp qword [rbp + 0x440], 8
cmovae rdx, qword [rbp + 0x428]
lea rcx, [rbp + 0x288]
call fcn.140046560
nop
lea rdx, [rbp + 0x468]
cmp qword [rbp + 0x480], 8
cmovae rdx, qword [rbp + 0x468]
lea rcx, [rbp - 0x30]
call fcn.140046560
nop
lea r9, [rbp + 0x328]
lea r8, [rbp + 0x268]
lea rdx, [rbp + 0x288]
lea rcx, [rbp - 0x30]
call fcn.14003e3b0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003feef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fee9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fee9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 8
jb 0x14003ff39
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ff33
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 8
jb 0x14003ff82
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ff7d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
lea rcx, [rbp + 0x328]
mov r12, qword [rbp + 0x328]
mov r13, qword [rbp + 0x340]
cmp r13, 0x10
cmovae rcx, r12
lea rdx, str.____Failed_to_load_driver_iqvw64e.sys
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1400401fa
movups xmm0, xmmword [0x140170878]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170888]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170898]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x1401708a8]
mov word [rsp + 0x70], ax
mov r8d, edi
cmp r15d, 2
jl 0x14004013f
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140040030
cmp r8d, 0x32
jge 0x140040183
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x32
jl 0x140040150
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x640]
call fcn.14003bc00
mov rax, qword [0x140179050]
cmp rax, qword [0x140179058]
je 0x1400401dd
mov r8d, 0x2010
lea rdx, [rbp + 0x640]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140179050], 0x2010
lea rcx, [rbp - 0x50]
call fcn.14003d570
jmp 0x140042f71
lea r8, [rbp + 0x640]
mov rdx, rax
call fcn.1400484f0
lea rcx, [rbp - 0x50]
call fcn.14003d570
jmp 0x140042f71
mov edx, 0x1388
mov ecx, 0x64
call fcn.14003ee10
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140046d80
nop
mov edx, 0x1f40
mov ecx, 0x64
call fcn.14003ee10
mov edx, eax
lea rcx, [rbp + 0x3c8]
call fcn.140046d80
nop
mov r8d, 0xf
lea rdx, str._41Z79_03200_S6
lea rcx, [rbp + 0x3c8]
call fcn.140046c50
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rsp + 0x40]
lea r8, [rbp - 0x30]
lea rcx, [rbp + 0x128]
call fcn.140047e70
nop
lea r8, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae r8, qword [rbp + 0x128]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
lea r9d, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x198], xmm1
lea ecx, [rax - 1]
movsxd r8, ecx
lea rcx, [rbp + 0x188]
call fcn.1400476a0
lea rdx, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 8
cmovae rdx, qword [rbp + 0x188]
lea r8, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae r8, qword [rbp + 0x128]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rdx
xor edx, edx
mov ecx, 0xfde9
lea r9d, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x140040368
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040363
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040363
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x138], xmm0
mov byte [rbp + 0x128], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400403be
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400403b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400403b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x3e0]
cmp rdx, 0x10
jb 0x140040402
inc rdx
mov rcx, qword [rbp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400403fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400403fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x3d8], xmm0
mov byte [rbp + 0x3c8], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140040459
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040454
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040454
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
lea rax, [rbp + 0x46f0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20106
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
je 0x1400404b8
lea rdx, str.Error_opening_registry_key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140047330
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x140047500]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140040511
lea rdx, str.ProductId
mov rcx, qword [rbp + 0x46f0]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov ebx, eax
test eax, eax
je 0x140040738
lea rdx, str.Error_deleting_registry_value:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140047330
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x140047500]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x46f0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movups xmm1, xmmword [0x14016fbd0]
movups xmm0, xmmword [0x14016fbc0]
movups xmmword [rsp + 0x50], xmm1
movups xmmword [rsp + 0x40], xmm0
movzx eax, byte [0x14016fbf8]
movsd xmm1, qword [0x14016fbf0]
movups xmm0, xmmword [0x14016fbe0]
mov byte [rsp + 0x78], al
movsd qword [rsp + 0x70], xmm1
movups xmmword [rsp + 0x60], xmm0
mov r8d, edi
cmp r15d, 2
jl 0x1400406a0
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x140040591
cmp r8d, 0x39
jge 0x1400406e3
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x1400406b0
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x640]
call fcn.14003bc00
mov rax, qword [0x140179050]
cmp rax, qword [0x140179058]
je 0x140040963
mov r8d, 0x2010
lea rdx, [rbp + 0x640]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140179050], 0x2010
jmp 0x140042f11
mov rcx, qword [rbp + 0x46f0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, [rbp + 0x188]
call fcn.14003d9f0
test al, al
jne 0x140040977
movups xmm0, xmmword [0x14016fc80]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14016fc90]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x14016fca0]
movups xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [0x14016fcb0]
movsd qword [rsp + 0x70], xmm1
movzx eax, byte [0x14016fcb8]
mov byte [rsp + 0x78], al
mov r8d, edi
cmp r15d, 2
jl 0x1400408ef
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x1400407e0
cmp r8d, 0x39
jge 0x140040933
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x140040900
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x640]
call fcn.14003bc00
mov rax, qword [0x140179050]
cmp rax, qword [0x140179058]
jne 0x140040713
lea r8, [rbp + 0x640]
mov rdx, rax
call fcn.1400484f0
jmp 0x140042f11
lea rcx, [rbp - 0x50]
call fcn.14003d570
lea rax, [rbp + 0x46f8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20219
xor r8d, r8d
lea rdx, str.SOFTWAREWOW6432NodeMulti_Theft_Auto:_San_Andreas_AllCommon
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1400409b6
lea rdx, [0x14016f99c]
jmp 0x140040a2c
mov dword [rbp + 0x46f0], 0x2000
lea rax, [rbp + 0x46f0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x640]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov r9d, 2
lea r8, str.GTA:SA_Path
xor edx, edx
mov rcx, qword [rbp + 0x46f8]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov rcx, qword [rbp + 0x46f8]
test eax, eax
je 0x140040a1f
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, str.wypierdolilem_sie_xdd
call fcn.1400011d0
lea rdx, [0x14016f99c]
jmp 0x140040a2c
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0x1e8]
call fcn.140046560
nop
cmp qword [rbp + 0x1f8], 0
jne 0x140040c78
movups xmm0, xmmword [0x1401708f8]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170908]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140170918]
movups xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [0x140170928]
movsd qword [rsp + 0x70], xmm1
cmp r15d, 2
jl 0x140040bc9
movdqa xmm5, xmmword [0x140170c70]
mov edx, edi
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x44]
mov r8d, dword [rbp - 0x70]
nop dword [rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x38
jl 0x140040ac0
jmp 0x140040c13
lea r9, [rsp + 0x40]
mov r8d, edi
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x38
jl 0x140040be0
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2650]
call fcn.14003bc00
mov rax, qword [0x140179050]
cmp rax, qword [0x140179058]
je 0x140040c64
mov r8d, 0x2010
lea rdx, [rbp + 0x2650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140179050], 0x2010
jmp 0x140042eaf
lea r8, [rbp + 0x2650]
mov rdx, rax
call fcn.1400484f0
jmp 0x140042eaf
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x88]
call fcn.14003ec60
nop
mov r8d, 0x10
lea rdx, str._scriptslua.lua
mov rcx, rax
call fcn.140046c50
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x178], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x168], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x178], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x140040d1e
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040d19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040d19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x98], xmm0
mov byte [rbp + 0x88], 0
lea rdx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0x10
cmovae rdx, qword [rbp + 0x168]
mov r8d, 2
lea rcx, [rbp + 0x530]
call fcn.140046a60
mov rax, qword [rbp + 0x530]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x530], rbx
mov rax, qword [rbp + 0x530]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x52c], edx
mov rax, qword [rbp + 0x530]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x530]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
je 0x140040fe8
movups xmm0, xmmword [0x14016fe48]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14016fe58]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x14016fe68]
movups xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [0x14016fe78]
movsd qword [rsp + 0x70], xmm1
cmp r15d, 2
jl 0x140040f39
movdqa xmm5, xmmword [0x140170c70]
mov edx, edi
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x44]
mov r8d, dword [rbp - 0x70]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x38
jl 0x140040e30
jmp 0x140040f83
lea r9, [rsp + 0x40]
mov r8d, edi
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x38
jl 0x140040f50
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2650]
call fcn.14003bc00
mov rax, qword [0x140179050]
cmp rax, qword [0x140179058]
je 0x140040fd4
mov r8d, 0x2010
lea rdx, [rbp + 0x2650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140179050], 0x2010
jmp 0x140042e02
lea r8, [rbp + 0x2650]
mov rdx, rax
call fcn.1400484f0
jmp 0x140042e02
lea r10, [0x1401793f0]
cmp byte [0x140179bf1], 0
je 0x140041196
mov r8d, edi
cmp r15d, 2
jl 0x140041156
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [0x1401793f4]
mov edx, dword [rbp - 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x800
jl 0x140041041
cmp r8d, 0x802
jge 0x140041196
movsxd r9, r8d
add r9, r10
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x802
jl 0x140041160
mov rdx, r10
lea rcx, [rbp + 0x530]
call fcn.140047330
lea rcx, [rbp + 0x538]
call fcn.1400469b0
test rax, rax
jne 0x1400411d8
mov rax, qword [rbp + 0x530]
movsxd rdx, dword [rax + 4]
lea rcx, [rbp + 0x530]
add rcx, rdx
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rax, [rbp + 0x46f8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20219
xor r8d, r8d
lea rdx, str.SOFTWAREWOW6432NodeMulti_Theft_Auto:_San_Andreas_All1.6
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14004120e
lea rdx, [0x14016f99c]
jmp 0x140041284
mov dword [rbp + 0x46f0], 0x2000
lea rax, [rbp + 0x46f0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x640]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov r9d, 2
lea r8, str.Last_Run_Location
xor edx, edx
mov rcx, qword [rbp + 0x46f8]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov rcx, qword [rbp + 0x46f8]
test eax, eax
je 0x140041277
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, str.wypierdolilem_sie_xdd
call fcn.1400011d0
lea rdx, [0x14016f99c]
jmp 0x140041284
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0xe8]
call fcn.140046560
nop
cmp qword [rbp + 0xf8], 0
jne 0x1400414d8
movups xmm0, xmmword [0x14016fd70]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14016fd80]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x14016fd90]
movups xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [0x14016fda0]
movsd qword [rsp + 0x70], xmm1
movzx eax, byte [0x14016fda8]
mov byte [rsp + 0x78], al
mov r8d, edi
cmp r15d, 2
jl 0x14004142f
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x70]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x140041320
cmp r8d, 0x39
jge 0x140041473
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x140041440
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2650]
call fcn.14003bc00
mov rax, qword [0x140179050]
cmp rax, qword [0x140179058]
je 0x1400414c4
mov r8d, 0x2010
lea rdx, [rbp + 0x2650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140179050], 0x2010
jmp 0x140042da0
lea r8, [rbp + 0x2650]
mov rdx, rax
call fcn.1400484f0
jmp 0x140042da0
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x2a8]
call fcn.14003ec60
nop
mov r8, rsi
lea rdx, str.mods
mov rcx, rax
call fcn.140046c50
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x258], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x248], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x258], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0x10
jb 0x14004157b
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041576
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041576
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x2b8], xmm0
mov byte [rbp + 0x2a8], 0
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x1a8]
call fcn.14003ec60
nop
mov r8d, 4
lea rdx, str.MTA
mov rcx, rax
call fcn.140046c50
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x238], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x228], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x238], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x140041638
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041633
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041633
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x1b8], xmm0
mov byte [rbp + 0x1a8], 0
lea rcx, [rbp + 0x228]
call fcn.14003d570
lea rcx, [rbp + 0x248]
call fcn.14003d570
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14003ee10
mov edx, eax
lea rcx, [rbp + 0x348]
call fcn.14003cfc0
mov rbx, rax
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x108]
call fcn.14003ec60
nop
mov r8d, 1
lea rdx, [0x14016f998]
mov rcx, rax
call fcn.140046c50
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp - 0x30]
lea rcx, [rbp + 0x3e8]
call fcn.140047e70
nop
mov r8d, 4
lea rdx, str..zip
lea rcx, [rbp + 0x3e8]
call fcn.140046c50
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x158], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x148], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x158], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x400]
cmp rdx, 0x10
jb 0x140041776
inc rdx
mov rcx, qword [rbp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041771
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041771
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x3f8], xmm0
mov byte [rbp + 0x3e8], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400417cc
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400417c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400417c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x140041810
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004180b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004180b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x118], xmm0
mov byte [rbp + 0x108], 0
mov rdx, qword [rbp + 0x360]
cmp rdx, 0x10
jb 0x140041843
inc rdx
mov rcx, qword [rbp + 0x348]
call fcn.140047930
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x358], xmm0
movups xmm1, xmmword [0x140170940]
movups xmm0, xmmword [0x140170930]
movups xmmword [rsp + 0x50], xmm1
movups xmmword [rsp + 0x40], xmm0
mov eax, dword [0x140170970]
movups xmm1, xmmword [0x140170960]
movups xmm0, xmmword [0x140170950]
mov dword [rbp - 0x80], eax
movups xmmword [rsp + 0x70], xmm1
movups xmmword [rsp + 0x60], xmm0
mov byte [rbp + 0x348], 0
mov r8d, edi
cmp r15d, 2
jl 0x1400419c9
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm9, xmmword [0x140170cd0]
lea rcx, [rsp + 0x40]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x1400418d0
cmp r8d, 0x22
jge 0x140041a17
movsxd rax, r8d
lea r9, [rsp + 0x40]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x37
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x22
jl 0x1400419e0
lea rdx, [rbp + 0x148]
lea rcx, [rsp + 0x40]
call fcn.14003d280
test al, al
jne 0x140041c20
movups xmm0, xmmword [str.qYPVX]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140170998]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x1401709a8]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [str.VXXj]
mov dword [rsp + 0x70], eax
mov r8d, edi
cmp r15d, 2
jl 0x140041bb0
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140041aa1
cmp r8d, 0x34
jge 0x140041bf3
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x34
jl 0x140041bc0
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2650]
call fcn.14003bc00
lea rcx, [rbp + 0x2650]
call fcn.14003bce0
jmp 0x140042c88
lea rdx, [rbp + 0xe8]
lea rcx, [rbp - 0x30]
call fcn.14003ec60
mov rbx, rax
lea r8, [rbp + 0x148]
lea rdx, str.powershell__command__Expand_Archive__Force_
lea rcx, [rbp + 0x88]
call fcn.140047540
nop
lea r8, [0x14016fb08]
mov rdx, rax
lea rcx, [rbp + 0x2a8]
call fcn.140046fb0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.140047140
nop
lea r8, [0x14016fb04]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140046fb0
mov rcx, rax
call fcn.1400466b0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x40]
call fcn.140046700
nop
lea rcx, [rbp + 0x1a8]
call fcn.140046700
nop
lea rcx, [rbp + 0x2a8]
call fcn.140046700
nop
lea rcx, [rbp + 0x88]
call fcn.140046700
nop
lea rcx, [rbp - 0x30]
call fcn.140046700
lea rcx, [rbp + 0x148]
call fcn.14003d4e0
lea rcx, [rbp + 0x2a8]
call fcn.14003d0a0
nop
mov edx, 0x14
lea ecx, [rdx - 0xa]
call fcn.14003ee10
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.14003cfc0
nop
mov r8, rax
lea rdx, [rbp + 0x2e8]
lea rcx, [rbp + 0x1c8]
call fcn.140047020
nop
lea rcx, [rsp + 0x40]
call fcn.140046700
lea rdx, [rbp + 0x46f0]
lea rcx, [rbp + 0x1c8]
call fcn.1400466c0
mov r8, qword [rax]
lea rdx, [rbp + 0x46f8]
lea rcx, [rbp + 0x1c8]
call fcn.1400466e0
mov rdx, qword [rax]
lea rcx, [rbp + 0x508]
call fcn.1400471c0
nop
lea rcx, [rbp + 0x508]
call fcn.1400464e0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x140041f80
movups xmm0, xmmword [0x1401708b0]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x1401708c0]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x1401708d0]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x1401708e0]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x1401708e4]
mov byte [rsp + 0x74], al
mov r8d, edi
cmp r15d, 2
jl 0x140041f0f
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140041e00
cmp r8d, 0x35
jge 0x140041f53
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x140041f20
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2650]
call fcn.14003bc00
lea rcx, [rbp + 0x2650]
call fcn.14003bce0
jmp 0x140042c61
mov edx, 0xf
mov ecx, esi
call fcn.14003ee10
mov edx, eax
lea rcx, [rbp + 0x1a8]
call fcn.14003cfc0
mov rbx, rax
lea r8, [0x14016f998]
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x108]
call fcn.140046f40
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140047140
nop
lea r8, str..exe
mov rdx, rax
lea rcx, [rbp + 0x408]
call fcn.140046fb0
nop
lea rcx, [rsp + 0x40]
call fcn.140046700
nop
lea rcx, [rbp + 0x108]
call fcn.140046700
nop
lea rcx, [rbp + 0x1a8]
call fcn.140046700
lea r8, str.AstarothAgent.dll
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x488]
call fcn.140046f40
nop
mov edx, 0x17
lea ecx, [rdx - 0xf]
call fcn.14003ee10
mov edx, eax
lea rcx, [rbp + 0x1a8]
call fcn.14003cfc0
mov rbx, rax
lea r8, [0x14016f998]
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x108]
call fcn.140046f40
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140047140
nop
lea r8, str..dll
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.140046fb0
nop
lea rcx, [rsp + 0x40]
call fcn.140046700
nop
lea rcx, [rbp + 0x108]
call fcn.140046700
nop
lea rcx, [rbp + 0x1a8]
call fcn.140046700
movups xmm0, xmmword [0x14016fc00]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [0x14016fc10]
movups xmmword [rbp + 0x98], xmm1
movups xmm0, xmmword [0x14016fc20]
movups xmmword [rbp + 0xa8], xmm0
movups xmm1, xmmword [0x14016fc30]
movups xmmword [rbp + 0xb8], xmm1
movzx eax, word [0x14016fc40]
mov word [rbp + 0xc8], ax
mov r8d, edi
cmp r15d, 2
jl 0x140042229
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm9, xmmword [0x140170cd0]
lea rcx, [rbp + 0x88]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x140042130
cmp r8d, 0x21
jge 0x140042277
movsxd rax, r8d
lea r9, [rbp + 0x88]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x37
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x21
jl 0x140042240
lea rdx, [rbp + 0x408]
lea rcx, [rbp + 0x88]
call fcn.14003d280
test al, al
je 0x140042a1f
movups xmm0, xmmword [0x1401707e0]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [0x1401707f0]
movups xmmword [rbp + 0x98], xmm1
movups xmm0, xmmword [0x140170800]
movups xmmword [rbp + 0xa8], xmm0
movups xmm1, xmmword [0x140170810]
movups xmmword [rbp + 0xb8], xmm1
movups xmm0, xmmword [0x140170820]
movups xmmword [rbp + 0xc8], xmm0
movsd xmm1, qword [0x140170830]
movsd qword [rbp + 0xd8], xmm1
movzx eax, word [0x140170838]
mov word [rbp + 0xe0], ax
mov r8d, edi
cmp r15d, 2
jl 0x140042439
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm9, xmmword [0x140170cd0]
lea rcx, [rbp + 0x88]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x28
jl 0x140042340
cmp r8d, 0x2d
jge 0x140042487
movsxd rax, r8d
lea r9, [rbp + 0x88]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x37
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x2d
jl 0x140042450
lea rdx, [rbp + 0x488]
lea rcx, [rbp + 0x88]
call fcn.14003d280
test al, al
je 0x140042a1f
movups xmm0, xmmword [str._LMJ]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [0x140170a40]
movups xmmword [rbp + 0x98], xmm1
movups xmm0, xmmword [0x140170a50]
movups xmmword [rbp + 0xa8], xmm0
movups xmm1, xmmword [0x140170a60]
movups xmmword [rbp + 0xb8], xmm1
movsd xmm0, qword [0x140170a70]
movsd qword [rbp + 0xc8], xmm0
mov eax, dword [0x140170a78]
mov dword [rbp + 0xd0], eax
mov r8d, edi
cmp r15d, 2
jl 0x140042639
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm9, xmmword [0x140170cd0]
lea rcx, [rbp + 0x88]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x140042540
cmp r8d, 0x26
jge 0x140042687
movsxd rax, r8d
lea r9, [rbp + 0x88]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x37
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x26
jl 0x140042650
lea rdx, [rbp + 0x4e8]
lea rcx, [rbp + 0x88]
call fcn.14003d280
test al, al
je 0x140042a1f
lea rdx, [rbp + 0x46f0]
lea rcx, [rbp + 0x408]
call fcn.1400466c0
mov r8, qword [rax]
lea rdx, [rbp + 0x46f8]
lea rcx, [rbp + 0x408]
call fcn.1400466e0
mov rdx, qword [rax]
lea rcx, [rbp + 0x4c8]
call fcn.1400471c0
nop
lea rdx, [rbp + 0x4700]
lea rcx, [rbp + 0x1c8]
call fcn.1400466c0
mov r8, qword [rax]
lea rdx, [rbp + 0x4708]
lea rcx, [rbp + 0x1c8]
call fcn.1400466e0
mov rdx, qword [rax]
lea rcx, [rbp + 0x4a8]
call fcn.1400471c0
nop
lea rcx, [rbp + 0x4a8]
call fcn.1400464e0
mov rdx, rax
lea rcx, [rbp + 0x108]
call fcn.140046560
nop
lea rcx, [rbp + 0x4c8]
call fcn.1400464e0
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140046560
nop
lea rdx, [rbp + 0x108]
lea rcx, [rsp + 0x40]
call fcn.14003e070
nop
lea rcx, [rsp + 0x40]
call fcn.1400464f0
nop
lea rcx, [rbp + 0x108]
call fcn.1400464f0
lea rdx, str.gta_sa.exe
lea rcx, [rsp + 0x40]
call fcn.140046560
lea rcx, [rsp + 0x40]
call fcn.14003df70
movzx ebx, al
lea rcx, [rsp + 0x40]
call fcn.1400464f0
test bl, bl
jne 0x1400429bd
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xa
jl 0x140042773
movups xmm0, xmmword [str.plxeh]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14016fea0]
movups xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [0x14016feb0]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x14016feb8]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x14016febc]
mov byte [rsp + 0x6c], al
xor edi, edi
mov r8d, edi
cmp r15d, 2
jl 0x14004294f
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp - 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140042840
cmp r8d, 0x2d
jge 0x140042993
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2d
jl 0x140042960
lea r9, [rsp + 0x40]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2650]
call fcn.14003bc00
lea rcx, [rbp + 0x2650]
call fcn.14003bce0
jmp 0x140042a01
lea rcx, [rbp + 0x408]
call fcn.14003d4e0
lea rcx, [rbp + 0x488]
call fcn.14003d4e0
lea r9, str.Injected_
mov edx, 1
mov r8d, 0x1388
lea rcx, [rbp + 0x2650]
call fcn.14003bc00
lea rcx, [rbp + 0x2650]
call fcn.14003bce0
xor edi, edi
lea rcx, [rbp + 0x4a8]
call fcn.1400464f0
nop
lea rcx, [rbp + 0x4c8]
call fcn.1400464f0
jmp 0x140042c3a
movups xmm0, xmmword [0x14016fd38]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [0x14016fd48]
movups xmmword [rbp + 0x98], xmm1
movups xmm0, xmmword [0x14016fd58]
movups xmmword [rbp + 0xa8], xmm0
movzx eax, word [0x14016fd68]
mov word [rbp + 0xb8], ax
movzx eax, byte [0x14016fd6a]
mov byte [rbp + 0xba], al
mov r8d, edi
cmp r15d, 2
jl 0x140042bbf
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp + 0x8c]
mov edx, dword [rbp - 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140042ab0
cmp r8d, 0x33
jge 0x140042c03
movsxd rax, r8d
lea r9, [rbp + 0x88]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x140042bd0
lea r9, [rbp + 0x88]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2650]
call fcn.14003bc00
lea rcx, [rbp + 0x2650]
call fcn.14003bce0
lea rcx, [rbp + 0x1c8]
call fcn.14003d570
nop
lea rcx, [rbp + 0x4e8]
call fcn.140046700
nop
lea rcx, [rbp + 0x488]
call fcn.140046700
nop
lea rcx, [rbp + 0x408]
call fcn.140046700
nop
lea rcx, [rbp + 0x508]
call fcn.1400464f0
nop
lea rcx, [rbp + 0x1c8]
call fcn.140046700
nop
lea rcx, [rbp + 0x2a8]
call fcn.140046700
nop
mov rdx, qword [rbp + 0x160]
cmp rdx, 0x10
jb 0x140042ccc
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042cc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042cc7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x158], xmm0
mov byte [rbp + 0x148], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x140042d27
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042d22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042d22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x238], xmm0
mov byte [rbp + 0x228], 0
mov rdx, qword [rbp + 0x260]
cmp rdx, 0x10
jb 0x140042d82
inc rdx
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042d7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042d7d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x258], xmm0
mov byte [rbp + 0x248], 0
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov rdx, qword [rbp + 0x100]
cmp rdx, 8
jb 0x140042de9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042de4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042de4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
mov qword [rbp + 0xf8], rdi
mov qword [rbp + 0x100], 7
mov word [rbp + 0xe8], di
mov rax, qword [rbp + 0x530]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x530], rbx
mov rax, qword [rbp + 0x530]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x52c], edx
lea rcx, [rbp + 0x538]
call fcn.140046470
lea rcx, [rbp + 0x540]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x5d8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 0x10
jb 0x140042e98
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042e93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042e93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x178], xmm0
mov byte [rbp + 0x168], 0
mov rdx, qword [rbp + 0x200]
cmp rdx, 8
jb 0x140042ef8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042ef3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042ef3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
mov qword [rbp + 0x1f8], rdi
mov qword [rbp + 0x200], 7
mov word [rbp + 0x1e8], di
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 8
jb 0x140042f5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042f55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042f55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c20]
movdqu xmmword [rbp + 0x198], xmm0
mov word [rbp + 0x188], di
cmp r13, 0x10
jb 0x140042fad
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140042fa4
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042fa4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x440]
cmp rdx, 8
jb 0x140042ff7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x428]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042ff1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042ff1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x460]
cmp rdx, 8
jb 0x140043041
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x448]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004303b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004303b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x480]
cmp rdx, 8
jb 0x14004308b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x468]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043085
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043085
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x140043309
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400430c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400430c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
jmp 0x140043309
movups xmm0, xmmword [0x140170770]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x140170780]
movups xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [0x140170790]
movups xmmword [rbp + 0x50], xmm0
movzx eax, word [0x1401707a0]
mov word [rbp + 0x60], ax
movzx eax, byte [0x1401707a2]
mov byte [rbp + 0x62], al
mov r8d, edi
cmp r15d, 2
jl 0x14004325f
movdqa xmm5, xmmword [0x140170c70]
movdqa xmm4, xmmword [0x140171080]
movd xmm6, esi
movdqa xmm7, xmmword [str.::::]
movd xmm8, r14d
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp + 0x34]
mov edx, dword [rbp - 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140170ce0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140043150
cmp r8d, 0x33
jge 0x1400432a3
movsxd rax, r8d
lea r9, [rbp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x140043270
lea r9, [rbp + 0x30]
mov edx, 3
mov r8d, 0xbb8
lea rcx, [rbp + 0x2650]
call fcn.14003bc00
mov rax, qword [0x140179050]
cmp rax, qword [0x140179058]
je 0x1400432f0
mov r8d, 0x2010
lea rdx, [rbp + 0x2650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140179050], 0x2010
jmp 0x1400432ff
lea r8, [rbp + 0x2650]
mov rdx, rax
call fcn.1400484f0
lea rcx, [rbp - 0x50]
call fcn.14003d570
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140043347
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043342
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043342
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
mov qword [rbp], rdi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140043395
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043390
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043390
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 0x2e0]
cmp rdx, 8
jb 0x1400433ef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400433ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400433ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c20]
movdqu xmmword [rbp + 0x2d8], xmm0
mov word [rbp + 0x2c8], di
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140043444
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004343f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004343f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
movdqa xmm0, xmmword [0x140170c40]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 0x300]
cmp rdx, 0x10
jb 0x140043499
inc rdx
mov rcx, qword [rbp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043494
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043494
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048a68
lea r11, [rsp + 0x47a8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14003bb20
nop
call fcn.14003bb20
nop
call fcn.14003bb20
int3