Function at 0x140063df0
Capabilities:
Create thread
Encode data using xor
Enumerate process modules
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
push rbx
push r13
lea rbp, [rsp - 0x310]
sub rsp, 0x410
movaps xmmword [rsp + 0x3f0], xmm6
mov rax, qword [0x140187f80]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
xor edx, edx
lea rcx, str.grcWindow
call qword [sym.imp.USER32.dll_FindWindowA]
movups xmm0, xmmword [str.PLqbyk]
mov ebx, dword [reloc.WS2_32.dll_accept]
xor r13d, r13d
mov qword [0x140261ac0], rax
mov r8d, r13d
mov eax, dword [0x140146bf8]
mov dword [rsp + 0x40], eax
movzx eax, byte [0x140146bfc]
mov byte [rsp + 0x44], al
movups xmmword [rsp + 0x30], xmm0
cmp ebx, 2
jl 0x140063fa7
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x140063ea0
cmp r8d, 0x15
jge 0x140063ff1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x15
jl 0x140063fc0
mov qword [rsp + 0x440], r12
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x408], r14
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x400], r15
call fcn.1400028a0
mov rcx, rax
call fcn.140043c30
mov r8d, r13d
test al, al
je 0x140064216
mov eax, dword [0x140146bf8]
mov r14d, 0x247f840
mov dword [rsp + 0x40], eax
mov r15d, 0x1efd4c8
movzx eax, byte [0x140146bfc]
mov r12d, 0x2087780
mov byte [rsp + 0x44], al
movups xmm0, xmmword [str.PLqbyk]
movups xmmword [rsp + 0x30], xmm0
cmp ebx, 2
jl 0x1400641a7
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x1400640a0
cmp r8d, 0x15
jge 0x1400641f1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x15
jl 0x1400641c0
lea rdx, [rsp + 0x30]
call fcn.1400687e0
mov qword [0x140260a28], 0x10d8
mov qword [0x140261a90], 0x14b8
jmp 0x1400659ba
movzx eax, word [0x140146ca8]
mov word [rsp + 0x48], ax
movzx eax, byte [0x140146caa]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rpwr]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140146ca0]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140064397
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140064290
cmp r8d, 0x1b
jge 0x1400643e1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x1400643b0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400028a0
mov rcx, rax
call fcn.140043c30
mov r8d, r13d
test al, al
je 0x1400645f6
movzx eax, word [0x140146ca8]
mov r14d, 0x24c8858
mov word [rsp + 0x48], ax
mov r15d, 0x1ec3828
movzx eax, byte [0x140146caa]
mov r12d, 0x1f6a7e0
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rpwr]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140146ca0]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140064589
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140064482
cmp r8d, 0x1b
jge 0x1400645d1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x1400645a0
lea rdx, [rsp + 0x30]
call fcn.1400687e0
mov qword [0x140260a28], 0x10d8
mov qword [0x140261a90], 0x14e0
jmp 0x1400659ba
movzx eax, word [0x1401475f8]
mov word [rsp + 0x48], ax
movzx eax, byte [0x1401475fa]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rqy]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x1401475f0]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140064777
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140064670
cmp r8d, 0x1b
jge 0x1400647c1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140064790
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400028a0
mov rcx, rax
call fcn.140043c30
mov r8d, r13d
test al, al
je 0x1400649fc
movzx eax, word [0x1401475f8]
mov r14d, 0x24e6d90
mov word [rsp + 0x48], ax
mov r15d, 0x1ee18a8
movzx eax, byte [0x1401475fa]
mov r12d, 0x1f888c0
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rqy]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x1401475f0]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140064969
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140064862
cmp r8d, 0x1b
jge 0x1400649b1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140064980
lea rdx, [rsp + 0x30]
call fcn.1400687e0
mov rdx, qword [0x140261a98]
lea r8, [rbp + 0x1c0]
mov rcx, qword [0x140261b10]
mov r9d, 8
mov qword [0x140260a28], 0x10d8
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [0x140261a90], 0x14e0
jmp 0x1400659ba
movzx eax, word [0x140146bc8]
mov word [rsp + 0x48], ax
movzx eax, byte [0x140146bca]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rsvp]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140146bc0]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140064b77
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140064a70
cmp r8d, 0x1b
jge 0x140064bc1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140064b90
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400028a0
mov rcx, rax
call fcn.140043c30
mov r8d, r13d
test al, al
je 0x140064ddb
movzx eax, word [0x140146bc8]
mov r14d, 0x252dcd8
mov word [rsp + 0x48], ax
mov r15d, 0x1f05208
movzx eax, byte [0x140146bca]
mov r12d, 0x1f9e9f0
mov qword [0x140260a28], 0x10d8
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rsvp]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140146bc0]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140064d77
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140064c70
cmp r8d, 0x1b
jge 0x140064dc1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140064d90
lea rdx, [rsp + 0x30]
call fcn.1400687e0
mov qword [0x140261a90], 0x14e0
jmp 0x1400659ba
movzx eax, word [0x140146d08]
mov word [rsp + 0x48], ax
movzx eax, byte [0x140146d0a]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [0x140146cf0]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140146d00]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140064f57
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140064e50
cmp r8d, 0x1b
jge 0x140064fa1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140064f70
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400028a0
mov rcx, rax
call fcn.140043c30
mov r8d, r13d
test al, al
je 0x1400651b6
movzx eax, word [0x140146d08]
mov r14d, 0x25667e8
mov word [rsp + 0x48], ax
mov r15d, 0x1f2e7a8
movzx eax, byte [0x140146d0a]
mov r12d, 0x1fd6f70
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [0x140146cf0]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140146d00]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140065149
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140065042
cmp r8d, 0x1b
jge 0x140065191
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140065160
lea rdx, [rsp + 0x30]
call fcn.1400687e0
mov qword [0x140260a28], 0x10d8
mov qword [0x140261a90], 0x1530
jmp 0x1400659ba
movzx eax, word [0x140147710]
mov word [rsp + 0x48], ax
movzx eax, byte [0x140147712]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rvpp]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140147708]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140065337
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140065230
cmp r8d, 0x1b
jge 0x140065381
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140065350
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400028a0
mov rcx, rax
call fcn.140043c30
mov r8d, r13d
test al, al
je 0x1400655c8
movzx eax, word [0x140147710]
mov r14d, 0x2567db0
mov word [rsp + 0x48], ax
mov r15d, 0x1f77ef0
movzx eax, byte [0x140147712]
mov r12d, 0x1fd8570
mov qword [0x140260a28], 0x10d8
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rvpp]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140147708]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140065537
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140065430
cmp r8d, 0x1b
jge 0x140065581
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140065550
lea rdx, [rsp + 0x30]
call fcn.1400687e0
mov rdx, qword [0x140261a98]
lea r8, [rbp + 0x1c0]
mov rcx, qword [0x140261b10]
add rdx, 0x20d9868
mov r9d, 8
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [0x140261a90], 0x1530
jmp 0x1400659ba
movzx eax, word [0x140147808]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14014780a]
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rvx]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [str.:_.____4R]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140065747
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140065640
cmp r8d, 0x1b
jge 0x140065791
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140065760
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400028a0
mov rcx, rax
call fcn.140043c30
test al, al
je 0x1400659ab
movzx eax, word [0x140147808]
mov r14d, 0x26684d8
mov word [rsp + 0x48], ax
mov r15d, 0x20304c8
movzx eax, byte [0x14014780a]
mov r12d, 0x20d8c90
mov qword [0x140260a28], 0x10d8
mov r8d, r13d
mov byte [rsp + 0x4a], al
movups xmm0, xmmword [str.PLqb_rvx]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [str.:_.____4R]
movsd qword [rsp + 0x40], xmm0
cmp ebx, 2
jl 0x140065947
movdqa xmm0, xmmword [str.88888888888888888]
lea rcx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov edx, dword [rbp + 0x1c0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140065840
cmp r8d, 0x1b
jge 0x140065991
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x38
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140065960
lea rdx, [rsp + 0x30]
call fcn.1400687e0
mov qword [0x140261a90], 0x1530
jmp 0x1400659ba
mov r14d, dword [rsp + 0x70]
mov r15d, dword [rsp + 0x70]
mov r12d, dword [rsp + 0x70]
cmp qword [0x140261ac0], r13
jne 0x1400659ec
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.TD_Cheats__Error
lea rdx, str.Unable_to_detect_the_FiveM_process._Please_ensure_you_launch_the_menu_while_FiveM_is_active.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov qword [rsp + 0x430], rsi
mov ecx, 0xfffffff5
mov qword [rsp + 0x438], rdi
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 7
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edx, 2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
cmp byte [0x140146b8b], r13b
movups xmm0, xmmword [0x140146b70]
mov eax, dword [0x140146b88]
mov dword [rsp + 0x48], eax
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140146b80]
movsd qword [rsp + 0x40], xmm0
je 0x140065bdd
mov ecx, r13d
cmp ebx, 2
jl 0x140065ba4
movdqa xmm0, xmmword [str.88888888888888888]
lea rdx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov r8d, dword [rbp + 0x1c0]
nop word [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x18
jl 0x140065aa0
cmp ecx, 0x1c
jge 0x140065bdd
movsxd rax, ecx
lea r8, [rsp + 0x30]
add r8, rax
nop
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor byte [r8 - 1], al
cmp ecx, 0x1c
jl 0x140065bb0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
call fcn.140003590
mov edx, 8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movzx eax, word [0x140147598]
mov ecx, r13d
mov word [rsp + 0x40], ax
movzx eax, byte [0x14014759a]
mov byte [rsp + 0x42], al
movups xmm0, xmmword [0x140147588]
movups xmmword [rsp + 0x30], xmm0
cmp ebx, 2
jl 0x140065d64
movdqa xmm0, xmmword [str.88888888888888888]
lea rdx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov r8d, dword [rbp + 0x1c0]
nop
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x140065c60
cmp ecx, 0x13
jge 0x140065d9d
movsxd rax, ecx
lea r8, [rsp + 0x30]
add r8, rax
nop
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor byte [r8 - 1], al
cmp ecx, 0x13
jl 0x140065d70
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
call fcn.140003590
movzx eax, word [0x140147900]
mov ecx, r13d
mov word [rsp + 0x40], ax
movzx eax, byte [0x140147902]
mov byte [rsp + 0x42], al
movups xmm0, xmmword [0x1401478f0]
movups xmmword [rsp + 0x30], xmm0
cmp ebx, 2
jl 0x140065f24
movdqa xmm0, xmmword [str.88888888888888888]
lea rdx, [rsp + 0x34]
movdqa xmm5, xmmword [0x140147cb0]
movdqa xmm4, xmmword [0x140147fb0]
movdqa xmm6, xmmword [0x140147d00]
movdqa xmmword [rbp + 0x1c0], xmm0
mov r8d, dword [rbp + 0x1c0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140147de0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x140065e20
cmp ecx, 0x13
jge 0x140065f5d
movsxd rax, ecx
lea r8, [rsp + 0x30]
add r8, rax
nop
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor byte [r8 - 1], al
cmp ecx, 0x13
jl 0x140065f30
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
call fcn.140003590
mov rcx, qword [0x140261ac0]
lea rdx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rsp + 0x70]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
cmp qword [0x140261bb8], 0xf
lea rdi, [0x140261ba0]
mov edx, dword [rsp + 0x70]
mov ecx, Ordinal_26
cmova rdi, qword [0x140261ba0]
mov rsi, r13
mov qword [0x140261b10], rax
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14006600f
mov r8, rdi
lea rdx, str.Failed_to_get__s__invalid_handle_value
lea rcx, [rbp + 0x1e0]
call fcn.14006d560
xor r9d, r9d
lea r8, str.ERROR
lea rdx, [rbp + 0x1e0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14006607e
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x238
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x140066075
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
je 0x14006605b
lea rdx, [rbp - 0x80]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x140066030
jmp 0x140066075
mov rax, qword [rbp - 0x58]
mov rsi, qword [rbp - 0x68]
mov qword [rsp + 0x38], rax
mov eax, dword [rbp - 0x60]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmm0, xmmword [rsp + 0x30]
lea r8, [rbp + 0x1d0]
mov rcx, qword [0x140261b10]
movsd xmm1, qword [rsp + 0x40]
mov r9d, 8
mov edx, r15d
add rdx, rsi
movsd qword [0x140261aa8], xmm1
movups xmmword [0x140261a98], xmm0
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1d0]
lea r8, [rbp + 0x1c0]
mov rcx, qword [0x140261b10]
mov r9d, 8
mov edx, r14d
add rdx, qword [0x140261a98]
mov qword [0x140261b00], rax
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1c0]
lea r8, [rbp + 0x1d0]
mov rcx, qword [0x140261b10]
mov r9d, 8
mov edx, r12d
add rdx, qword [0x140261a98]
mov qword [0x140261ab8], rax
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140261ab8]
lea r8, [rbp + 0x1c0]
mov rax, qword [rbp + 0x1d0]
add rdx, 8
mov rcx, qword [0x140261b10]
mov r9d, 8
mov qword [0x140261230], rax
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1c0]
mov qword [0x140261250], rax
call fcn.1400548f0
cmp qword [0x140260a10], r13
mov rdi, qword [rsp + 0x438]
mov rsi, qword [rsp + 0x430]
jne 0x14006619d
mov eax, 1
jmp 0x140066267
mov qword [rsp + 0x28], r13
lea r8, [0x140063d90]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.1400544d0
mov rcx, qword [0x140260a10]
call fcn.140096ce0
test eax, eax
jne 0x140066262
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x140261ac0]
mov rcx, qword [0x140261270]
je 0x140066201
cmp rax, rcx
je 0x140066201
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x140066249
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x140261ab0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140066249
cmp byte [0x140261adc], r13b
mov edx, 0x2000d
mov rcx, qword [0x140260a10]
sete al
movzx r8d, al
xor r8d, 1
mov byte [0x140261adc], al
call fcn.140098060
call fcn.14005e3b0
mov rcx, qword [0x140260a10]
call fcn.140096ce0
test eax, eax
je 0x1400661d4
call fcn.1400550a0
mov r15, qword [rsp + 0x400]
mov r14, qword [rsp + 0x408]
mov r12, qword [rsp + 0x440]
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.14010c9a0
movaps xmm6, xmmword [rsp + 0x3f0]
add rsp, 0x410
pop r13
pop rbx
pop rbp
ret